Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, when the "Two-Factor Authentication" setting is enabled (disabled by default). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7d5d05ad-1a7a-43d2-bbbf-597e975446be?source=cve - https://plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php#L67 - https://plugins.trac.wordpress.org/browser/
.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php#L67 - https://plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php#L277 - https://plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php#L278 - https://plugins.trac.wordpress.org/changeset/3188431/really-simple-ssl - https://www.wordfence.com/blog/2024/11/really-simple-security-vulnerability/
CVE ID: CVE-2024-10925 State: PUBLISHED Published: 2025-03-03T11:02:24.017Z Last Updated: 2025-08-26T19:58:07.582Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-639 Description: A vulnerability in GitLab-EE affecting all versions from 16.2 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows a Guest user to read Security policy YAML Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/502857 - https://hackerone.com/reports/2818270
CVE ID: CVE-2024-10926 State: PUBLISHED Published: 2024-11-06T21:00:10.399Z Last Updated: 2024-11-07T15:25:15.306Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: IBPhoenix Products: ibWebAdmin Problem Types: CWE-79, CWE-74 Description: A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /toggle_fold_panel.php of the component Tabelas Section. The manipulation of the argument p leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any w
sclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283325 - https://vuldb.com/?ctiid.283325 - https://vuldb.com/?submit.429635 - https://docs.google.com/document/d/1h9LlTV1FVvOSDBWc7qwU_5qcboCKd6H99Oqg3rZdBRQ/edit?usp=sharing
CVE ID: CVE-2024-10927 State: PUBLISHED Published: 2024-11-06T22:31:04.270Z Last Updated: 2024-11-07T15:32:30.287Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: MonoCMS Problem Types: CWE-79, CWE-74 Description: A vulnerability was found in MonoCMS up to 20240528. It has been classified as problematic. Affected is an unknown function of the file /monofiles/account.php of the component Account Information Page. The manipulation of the argument userid leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any
isclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283326 - https://vuldb.com/?ctiid.283326 - https://vuldb.com/?submit.434188 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20MonoCMS%2023-20240528%20-%20(account.php).md
CVE ID: CVE-2024-10928 State: PUBLISHED Published: 2024-11-06T22:31:05.848Z Last Updated: 2024-11-07T15:33:37.206Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: MonoCMS Problem Types: CWE-79, CWE-74 Description: A vulnerability was found in MonoCMS up to 20240528. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /monofiles/opensaved.php of the component Posts Page. The manipulation of the argument filtcategory/filtstatus leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but di
he exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283327 - https://vuldb.com/?ctiid.283327 - https://vuldb.com/?submit.434189 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20MonoCMS%2023-20240528%20-%20(opensaved.php).md
CVE ID: CVE-2024-10929 State: PUBLISHED Published: 2025-01-22T16:05:35.528Z Last Updated: 2025-07-22T10:52:46.725Z Vendors: Arm Products: Cortex-A72, Cortex-A73, Cortex-A75, Cortex-A57 Problem Types: CWE-1423 Description: In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Spectre-BSE
CVE ID: CVE-2024-10930 State: PUBLISHED Published: 2025-03-04T17:21:39.313Z Last Updated: 2025-03-04T18:32:38.413Z Vendors: Carrier Products: Block Load Problem Types: CWE-427 Description: An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.corporate.carrier.com/product-security/advisories-resources/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-01
CVE ID: CVE-2024-10932 State: PUBLISHED Published: 2025-01-04T07:24:24.347Z Last Updated: 2025-01-06T16:29:20.276Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: inisev Products: Backup Migration Problem Types: CWE-502 Description: The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.6 via deserialization of untrusted input in the 'recursive_unserialize_replace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files, retrieve sensitive data, or execute code. An administrator must
a POP chain allows attackers to delete arbitrary files, retrieve sensitive data, or execute code. An administrator must create a staging site in order to trigger the exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d5a0c514-5200-47f4-9d2e-684d68946b9a?source=cve - https://plugins.trac.wordpress.org/browser//backup-backup/tags/1.4.6/includes/database/search-replace.php#L46 - https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.4.6.1/includes/database/search-replace.php#L46
CVE ID: CVE-2024-10933 State: PUBLISHED Published: 2024-12-05T20:06:23.001Z Last Updated: 2024-12-05T20:40:58.356Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: OpenBSD Products: OpenBSD Problem Types: CWE-22 Description: In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/022_readdir.patch.sig - https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/009_readdir.patch.sig
CVE ID: CVE-2024-10934 State: PUBLISHED Published: 2024-11-15T19:20:02.231Z Last Updated: 2025-10-02T14:09:00.828Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenBSD Products: OpenBSD Problem Types: CWE-415, CWE-457 Description: In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/008_nfs.patch.sig - https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/021_nfs.patch.sig
CVE ID: CVE-2024-10935 State: PUBLISHED Published: 2025-03-20T10:09:51.519Z Last Updated: 2025-10-15T12:49:26.636Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: automatic1111 Products: automatic1111/stable-diffusion-webui Problem Types: CWE-770 Description: automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary, leading to excessive resource consumption and a complete denial of service (DoS) for all users. The vulnerabili
oundary, leading to excessive resource consumption and a complete denial of service (DoS) for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e6fdc6ed-f38d-4798-b60a-0e47893a81a6
CVE ID: CVE-2024-10936 State: PUBLISHED Published: 2025-01-21T08:21:51.041Z Last Updated: 2025-01-21T16:38:00.501Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: instawp Products: String locator Problem Types: CWE-502 Description: The String locator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.6 via deserialization of untrusted input in the 'recursive_unserialize_replace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system,
in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. An administrator must perform a search and replace action to trigger the exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1404f034-2d1d-44b2-87e5-61f72f215417?source=cve - https://plugins.trac.wordpress.org/browser/string-locator/trunk/includes/Extension/SearchReplace/Replace/class-sql.php#L170 - https://plugins.trac.wordpress.org/changeset/3222952/
CVE ID: CVE-2024-10937 State: PUBLISHED Published: 2024-12-05T08:23:59.347Z Last Updated: 2024-12-05T11:26:42.636Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: pickplugins Products: Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins Problem Types: CWE-284 Description: The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.58 via the wp_ajax_nopriv_related_post_ajax_get_post_ids AJAX action. This makes it possible for unauthenticated attackers to extract sensitiv
riv_related_post_ajax_get_post_ids AJAX action. This makes it possible for unauthenticated attackers to extract sensitive data including titles of posts in draft status. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/85f7c69d-0b48-47af-9451-3cfd4326ffe5?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3199720%40related-post%2Ftrunk&old=3126666%40related-post%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10939 State: PUBLISHED Published: 2024-12-13T06:00:03.573Z Last Updated: 2024-12-16T18:59:35.986Z Vendors: Unknown Products: Image Widget Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Image Widget WordPress plugin before 4.4.11 does not sanitise and escape some of its Image Widget settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fcf50077-b360-4b63-bece-9806b4bc8bea/
CVE ID: CVE-2024-10940 State: PUBLISHED Published: 2025-03-20T10:08:48.628Z Last Updated: 2025-03-20T19:02:58.871Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: langchain-ai Products: langchain-ai/langchain Problem Types: CWE-497 Description: A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchain_core.prompts.ImagePromptTemplate's (and by extension langchain_core.prompts.ChatPromptTemplate's) with input variables that can read any user-specified path from the server file system. If the
pts.ChatPromptTemplate's) with input variables that can read any user-specified path from the server file system. If the outputs of these prompt templates are exposed to the user, either directly or through downstream model outputs, it can lead to the exposure of sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/be1ee1cb-2147-4ff4-a57b-b6045271cf27 - https://github.com/langchain-ai/langchain/commit/c1e742347f9701aadba8920e4d1f79a636e50b68
CVE ID: CVE-2024-10941 State: PUBLISHED Published: 2024-11-06T20:05:46.237Z Last Updated: 2025-02-10T22:34:55.204Z Vendors: Mozilla Products: Firefox Problem Types: Browser crash from invalid URI Description: A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1880879 - https://bugzilla.mozilla.org/show_bug.cgi?id=1887614 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-10942 State: PUBLISHED Published: 2025-03-13T12:42:25.774Z Last Updated: 2025-03-13T19:31:16.758Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: yaniiliev Products: All-in-One WP Migration and Backup Problem Types: CWE-502 Description: The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.89 via deserialization of untrusted input in the 'replace_serialized_values' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or
Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. An administrator must export and restore a backup in order to trigger the exploit. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0823d1d9-4f3b-4ac0-8cd1-ad208ebc325f?source=cve - https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/trunk/lib/vendor/servmask/database/class-ai1wm-database-utility.php#L97 - https://plugins.trac.wordpress.org/changeset/325
unk/lib/vendor/servmask/database/class-ai1wm-database-utility.php#L97 - https://plugins.trac.wordpress.org/changeset/3253940/
CVE ID: CVE-2024-10943 State: PUBLISHED Published: 2024-11-12T16:57:31.906Z Last Updated: 2024-11-13T17:33:27.816Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Rockwell Automation Products: FactoryTalk Updater Problem Types: CWE-922 Description: An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impersonate a user if the threat actor is able to enumerate additional information required during authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advi
nalyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1710.html
CVE ID: CVE-2024-10944 State: PUBLISHED Published: 2024-11-12T17:03:26.983Z Last Updated: 2024-11-13T17:39:55.232Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Rockwell Automation Products: FactoryTalk Updater Problem Types: CWE-20 Description: A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1710.html
CVE ID: CVE-2024-10945 State: PUBLISHED Published: 2024-11-12T17:06:44.105Z Last Updated: 2024-11-13T17:39:55.391Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation Products: FactoryTalk Updater Problem Types: CWE-754 Description: A Local Privilege Escalation vulnerability exists in the affected product. The vulnerability requires a local, low privileged threat actor to replace certain files during update and exists due to a failure to perform proper security checks before installation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1710.htm
ulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1710.html
CVE ID: CVE-2024-10946 State: PUBLISHED Published: 2024-11-07T03:31:07.119Z Last Updated: 2024-11-07T16:53:26.559Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Guangzhou Tuchuang Computer Software Development Products: Interlib Library Cluster Automation Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This affects an unknown part of the file /interlib/admin/SysLib?cmdACT=inputLIBCODE&mod=batchXSL&xsl=editLIBCODE.xsl&libcodes=&ROWID=. The manipulation of the argument sql leads to sql injection.
tLIBCODE&mod=batchXSL&xsl=editLIBCODE.xsl&libcodes=&ROWID=. The manipulation of the argument sql leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283365 - https://vuldb.com/?ctiid.283365 - https://vuldb.com/?submit.434449 - https://wiki.shikangsi.com/post/share/cfb12573-ca11-433d-b9a0-fce47837a1f5
CVE ID: CVE-2024-10947 State: PUBLISHED Published: 2024-11-07T03:31:11.204Z Last Updated: 2024-11-07T16:50:40.884Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Guangzhou Tuchuang Computer Software Development Products: Interlib Library Cluster Automation Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This vulnerability affects unknown code of the file /interlib/order/BatchOrder?cmdACT=admin_order&xsl=adminOrder_OrderList.xsl. The manipulation of the argument bookrecno leads to sql injection. The a
mdACT=admin_order&xsl=adminOrder_OrderList.xsl. The manipulation of the argument bookrecno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.283366 - https://vuldb.com/?ctiid.283366 - https://vuldb.com/?submit.434450 - https://wiki.shikangsi.com/post/share/9dbc9639-ee9d-4328-9ed2-bc1bfbb2e741
CVE ID: CVE-2024-10948 State: PUBLISHED Published: 2025-03-20T10:11:08.455Z Last Updated: 2025-03-20T13:33:45.575Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-22 Description: A vulnerability in the upload function of binary-husky/gpt_academic allows any user to read arbitrary files on the system, including sensitive files such as `config.py`. This issue affects the latest version of the product. An attacker can exploit this vulnerability by intercepting the websocket request during file upload and replacing the file path with the path of the file they wish to read. The server then copies
quest during file upload and replacing the file path with the path of the file they wish to read. The server then copies the file to the `private_upload` folder and provides the path to the copied file, which can be accessed via a GET request. This vulnerability can lead to the exposure of sensitive system files, potentially including credentials, configuration files, or sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/290a379d-8441-4292-a553-3587e8c5c729
CVE ID: CVE-2024-10950 State: PUBLISHED Published: 2025-03-20T10:10:36.553Z Last Updated: 2025-10-15T12:50:14.590Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: binary-husky Products: binary-husky/gpt_academic Problem Types: CWE-94 Description: In binary-husky/gpt_academic version <= 3.83, the plugin `CodeInterpreter` is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. This vulnerability can be exploited by an attacker to achieve remote code execution (RCE) on the application backend serve
is vulnerability can be exploited by an attacker to achieve remote code execution (RCE) on the application backend server, potentially gaining full control of the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/9abb1617-0c1d-42c7-a647-d9d2b39c6866
CVE ID: CVE-2024-10952 State: PUBLISHED Published: 2024-12-04T02:40:25.972Z Last Updated: 2024-12-04T14:43:05.531Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: wpkube Products: Authors List Problem Types: CWE-94 Description: The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution via update_authors_list_ajax AJAX action in all versions up to, and including, 2.0.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichm