Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8b3cfe0a-dcfb-40f3-ba43-4e838c113010?source=cve - https://plugins.trac.wordpress.org/browser/authors-list/tags/2.0.4/backend/includes/class-authors-list-item.php#L843 - https://wordpress.org/plugins/authors-list/#developers - https://www.wpkube.com/
CVE ID: CVE-2024-10953 State: PUBLISHED Published: 2024-11-09T00:42:55.584Z Last Updated: 2025-10-14T19:03:41.864Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: amazon Products: data.all Problem Types: CWE-863 Description: An authenticated data.all user is able to perform mutating UPDATE operations on persisted Notification records in data.all for group notifications that their user is not a member of. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2024-013 - https://github.com/data-dot-all/dataall/security/advisories/GHSA-x4j5-jm65-vp5j - https://github.com/data-dot-all/dataall/relea
/github.com/data-dot-all/dataall/security/advisories/GHSA-x4j5-jm65-vp5j - https://github.com/data-dot-all/dataall/releases/tag/v2.6.1
CVE ID: CVE-2024-10954 State: PUBLISHED Published: 2025-03-20T10:10:46.950Z Last Updated: 2025-10-15T12:49:27.238Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-94 Description: In the `manim` plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code execution (RCE) on the app backend server by injecting malicious code through the prompt. Additional Analyst Notes: - CISA A
ution (RCE) on the app backend server by injecting malicious code through the prompt. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/72d034e3-6ca2-495d-98a7-ac9565588c09
CVE ID: CVE-2024-10955 State: PUBLISHED Published: 2025-03-20T10:11:01.287Z Last Updated: 2025-10-15T12:50:14.963Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-1333 Description: A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker can exploit this by uploading a malicious JSON payload, causing the server to consume 100% CPU for an extended
attacker can exploit this by uploading a malicious JSON payload, causing the server to consume 100% CPU for an extended period. This can lead to a Denial of Service (DoS) condition, potentially affecting the entire server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/8291f8d0-5060-47e7-9986-1f411310fb7b
CVE ID: CVE-2024-10956 State: PUBLISHED Published: 2025-03-20T10:11:39.829Z Last Updated: 2025-07-15T10:48:56.394Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-346 Description: GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hijacking (CSWSH). This vulnerability allows an attacker to hijack an existing WebSocket connection between the victim's browser and the server, enabling unauthorized actions such as deleting conversation history without the victim's consent. The issue arises due to insufficient WebSocket authentication and lack
onversation history without the victim's consent. The issue arises due to insufficient WebSocket authentication and lack of origin validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/0f8403ad-5f60-4eb9-9f51-8fbd2e41eda4
CVE ID: CVE-2024-10957 State: PUBLISHED Published: 2025-01-04T13:41:07.531Z Last Updated: 2025-01-06T16:37:04.468Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: davidanderson Products: UpdraftPlus: WP Backup & Migration Plugin Problem Types: CWE-502 Description: The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization of untrusted input in the 'recursive_unserialized_replace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has
rs to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. An administrator must perform a search and replace action to trigger the exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4729ed37-96b2-4717-8a72-89b9a21ec058?sourc
ment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4729ed37-96b2-4717-8a72-89b9a21ec058?source=cve - https://plugins.trac.wordpress.org/browser/updraftplus/trunk/includes/class-search-replace.php#L411 - https://plugins.trac.wordpress.org/changeset/3212299/
CVE ID: CVE-2024-10958 State: PUBLISHED Published: 2024-11-10T12:30:34.683Z Last Updated: 2024-11-12T15:28:19.583Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: opajaap Products: WP Photo Album Plus Problem Types: CWE-94 Description: The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst
do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/53bb0871-343a-4299-9902-682c422152d1?source=cve - https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/tags/8.8.08.004/wppa-ajax.php#L1238 - https://wordpress.org/plugins/wp-photo-album-plus/#developers - https://plugins.trac.wordpress.org/changeset/3184852/
CVE ID: CVE-2024-10959 State: PUBLISHED Published: 2024-12-10T11:09:12.310Z Last Updated: 2024-12-10T15:00:50.546Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: realmag777 Products: Active Products Tables for WooCommerce. Use constructor to create tables Problem Types: CWE-94 Description: The The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to arbitrary shortcode execution via woot_get_smth AJAX action in all versions up to, and including, 1.0.6.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it pos
lowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ecf803cf-1b9c-4d2e-863f-d1f51b08f833?source=cve - https://plugins.trac.wordpress.org/browser/profit-products-tables-for-woocommerce/trunk/index.php#L1666 - https://wordpress.org/plugins/profit-products-tables-for-woocommerce/#developers - https://plugins.trac.wordpress.org/changeset/3199368/
CVE ID: CVE-2024-10960 State: PUBLISHED Published: 2025-02-12T11:11:15.504Z Last Updated: 2025-02-12T16:07:24.600Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: themefusecom Products: Brizy – Page Builder Problem Types: CWE-434 Description: The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'storeUploads' function in all versions up to, and including, 2.6.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: -
arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2f0c85f4-07ae-4a2b-bd82-93467e7d9325?source=cve - https://plugins.trac.wordpress.org/changeset/3222672/brizy/tags/2.6.5/editor/zip/archiver.php
CVE ID: CVE-2024-10961 State: PUBLISHED Published: 2024-11-23T03:25:48.434Z Last Updated: 2025-02-19T17:40:29.723Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: claudeschlesser Products: Social Login Problem Types: CWE-288 Description: The Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.9.0. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email and the user does not have an already-existing accoun
e site, such as an administrator, if they have access to the email and the user does not have an already-existing account for the service returning the token. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/43a64074-ca64-4c34-b467-06d1ad8c5aa0?source=cve - https://wordpress.org/plugins/oa-social-login/ - https://plugins.trac.wordpress.org/changeset/3201046/
CVE ID: CVE-2024-10962 State: PUBLISHED Published: 2024-11-14T13:54:09.585Z Last Updated: 2024-11-14T14:22:13.973Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: wpvividplugins Products: Migration, Backup, Staging – WPvivid Backup & Migration Problem Types: CWE-502 Description: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.9.107 via deserialization of untrusted input in the 'replace_row_data' and 'replace_serialize_data' functions. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If
sible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. An administrator must create a staging site to trigger the exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9b4eba78-29f2-4357-ab3c-7bc3c20e0e75?source=cve - https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/trunk/includes/staging/class-wpvivid-staging-copy-db-ex.php#L1104 - https://plugins.tra
rg/browser/wpvivid-backuprestore/trunk/includes/staging/class-wpvivid-staging-copy-db-ex.php#L1104 - https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/trunk/includes/staging/class-wpvivid-staging-copy-db-ex.php#L1120 - https://plugins.trac.wordpress.org/changeset/3186082/
CVE ID: CVE-2024-10963 State: PUBLISHED Published: 2024-11-07T16:02:34.873Z Last Updated: 2025-11-20T07:09:45.507Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift AI 2.16, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-287 Description: A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows att
access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:10232 - https://access.redhat.com/errata/RHSA-2024:10244 - https://access.redhat.com/errata/RHSA-2024:10379 - https://access.redhat.com/errata/RHSA-2024:10518 - https://access.redhat.com/errata/RHSA-2024:10528 - https://access.redhat.com/errata/RHSA-2024:10
rrata/RHSA-2024:10518 - https://access.redhat.com/errata/RHSA-2024:10528 - https://access.redhat.com/errata/RHSA-2024:10852 - https://access.redhat.com/security/cve/CVE-2024-10963 - https://bugzilla.redhat.com/show_bug.cgi?id=2324291
CVE ID: CVE-2024-10964 State: PUBLISHED Published: 2024-11-07T17:00:09.615Z Last Updated: 2024-11-08T16:54:35.833Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: emqx Products: neuron Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in emqx neuron up to 2.10.0. Affected is the function handle_add_plugin in the library cmd.library of the file plugins/restful/plugin_handle.c. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283410 - https://vuldb.com/?c
ue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283410 - https://vuldb.com/?ctiid.283410 - https://vuldb.com/?submit.435372 - https://github.com/emqx/neuron/issues/2280 - https://github.com/emqx/neuron/pull/2286 - https://github.com/emqx/neuron/pull/2286/commits/3e3a583d72548af1740b3e61a5eab3b628cc439e
CVE ID: CVE-2024-10965 State: PUBLISHED Published: 2024-11-07T17:00:12.641Z Last Updated: 2024-11-08T16:43:43.952Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: emqx Products: neuron Problem Types: CWE-200, CWE-284 Description: A vulnerability classified as problematic was found in emqx neuron up to 2.10.0. Affected by this vulnerability is an unknown functionality of the file /api/v2/schema of the component JSON File Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The patch is named c9ce39747e0372aaa2157b2b56174914a12c06d8. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CIS
47e0372aaa2157b2b56174914a12c06d8. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283411 - https://vuldb.com/?ctiid.283411 - https://vuldb.com/?submit.435375 - https://github.com/emqx/neuron/issues/2281 - https://github.com/emqx/neuron/pull/2282 - https://github.com/fengzeroz/neuron/commit/c9ce39747e0372aaa2157b2b56174914a12c06d8
CVE ID: CVE-2024-10966 State: PUBLISHED Published: 2024-11-07T18:00:10.394Z Last Updated: 2024-11-07T18:30:13.444Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: X18 Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected by this issue is some unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283412 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283412 - https://vuldb.com/?ctiid.283412 - https://vuldb.com/?submit.437310 - https://github.com/Dreamy-elfland/240914 - https://www.youtube.com/watch?v=zRNv1OvT55c - https://www.totolink.net/
CVE ID: CVE-2024-10967 State: PUBLISHED Published: 2024-11-07T18:00:12.136Z Last Updated: 2024-11-07T18:28:15.573Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: E-Health Care System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file /Doctor/delete_user_appointment_request.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283416 - https://vuldb.com/?ctiid.283416 - https://vuldb.com/?submit.437312 - https://github.com/1104533685/cve/blob/main/sql.md - https://code-projects.org/
CVE ID: CVE-2024-10968 State: PUBLISHED Published: 2024-11-07T19:31:04.618Z Last Updated: 2024-11-07T20:10:19.678Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Bookstore Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /contact_process.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283417 - https://vuldb.com/?ctiid.283417 - https://vuldb.com/?submit.437322 - https://github.com/NG0324/CVE/issues/1
CVE ID: CVE-2024-10969 State: PUBLISHED Published: 2024-11-07T20:00:06.258Z Last Updated: 2025-05-15T06:29:04.410Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Bookstore Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login_process.php of the component Login. The manipulation of the argument unm/pwd leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
hed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283418 - https://vuldb.com/?ctiid.283418 - https://vuldb.com/?submit.437416 - https://github.com/ppp-src/CVE/issues/31 - https://1000projects.org/
CVE ID: CVE-2024-10970 State: PUBLISHED Published: 2025-01-16T01:49:04.000Z Last Updated: 2025-01-16T15:24:13.722Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: stylemix Products: Motors – Car Dealer, Classifieds & Listing Problem Types: CWE-94 Description: The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.43. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbit
_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fc58c679-3e87-4bcc-b1bc-718ae52c291a?source=cve - https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.42/includes/functions.php#L939
CVE ID: CVE-2024-10971 State: PUBLISHED Published: 2024-11-12T15:52:14.839Z Last Updated: 2024-11-20T22:39:24.048Z Vendors: Devolutions Products: DVLS (Devolutions Server) Problem Types: CWE-200 Description: Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2024-0015/
CVE ID: CVE-2024-10972 State: PUBLISHED Published: 2024-12-16T14:49:07.294Z Last Updated: 2025-09-05T08:40:18.985Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H) Vendors: Velocidex Products: WinPmem Problem Types: CWE-367 Description: Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the control of the user-mode application. This is due to verification only being performed at the beginning of the routine allowing the userspace to change page permissions half way through the routine. A valid workaround is
ing of the routine allowing the userspace to change page permissions half way through the routine. A valid workaround is a rule to detect unauthorized loading of winpmem outside incident response operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Velocidex/WinPmem/releases/tag/v4.1.dev1
CVE ID: CVE-2024-10973 State: PUBLISHED Published: 2024-12-17T22:59:38.518Z Last Updated: 2025-11-20T18:12:13.352Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack Problem Types: CWE-319 Description: A vulnerability was found in Keycloak. The environment option `KC_CACHE_EMBEDDED_MTLS_ENABLED` does not work and the JGroups replication configuration is always used in plain text which can allow an attacker that has access to adjacent networks related to JGroups to read sensitive information. Additional Analys
low an attacker that has access to adjacent networks related to JGroups to read sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-10973 - https://bugzilla.redhat.com/show_bug.cgi?id=2324361
CVE ID: CVE-2024-10975 State: PUBLISHED Published: 2024-11-07T21:04:43.804Z Last Updated: 2024-11-07T21:22:50.668Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: HashiCorp Products: Nomad, Nomad Enterprise Problem Types: CWE-863 Description: Nomad Community and Nomad Enterprise ("Nomad") volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface (CSI) volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad Enterprise 1.9.2, 1.8.7, and 1.7.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicor