Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-45451 State: PUBLISHED Published: 2024-09-17T22:16:40.402Z Last Updated: 2024-09-18T13:37:06.015Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CryoutCreations Products: Roseta Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Roseta allows Stored XSS.This issue affects Roseta: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/roseta/wordpress-roseta-theme-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-45452 State: PUBLISHED Published: 2024-09-17T22:15:19.939Z Last Updated: 2024-09-18T13:37:49.467Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CryoutCreations Products: Septera Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Septera septera allows Stored XSS.This issue affects Septera: from n/a through 1.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/septera/wordpress-septera-theme-1-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-45453 State: PUBLISHED Published: 2024-09-23T00:06:00.204Z Last Updated: 2024-09-23T14:22:37.883Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Peter Hardy-vanDoorn Products: Maintenance Redirect Problem Types: CWE-290 Description: Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maintenance Redirect: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/jf3-maintenance-mode/wordpress-maintenance-redirect-plugin-2-0-1-ip-bypass-vulnerabil
chstack.com/database/vulnerability/jf3-maintenance-mode/wordpress-maintenance-redirect-plugin-2-0-1-ip-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2024-45454 State: PUBLISHED Published: 2024-10-06T11:47:24.917Z Last Updated: 2024-10-07T13:09:32.272Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Unlimited Elements Products: Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.121. Additional Analyst Notes: - CISA ADP Vulnrich
For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.121. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-121-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-45455 State: PUBLISHED Published: 2024-09-15T07:52:41.232Z Last Updated: 2024-09-15T19:49:14.375Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: JoomUnited Products: WP Meta SEO Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JoomUnited WP Meta SEO allows Stored XSS.This issue affects WP Meta SEO: from n/a through 4.5.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-meta-seo/wordpress-wp-meta-seo-plugin-4-5-13-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-45456 State: PUBLISHED Published: 2024-09-15T07:47:02.241Z Last Updated: 2024-09-15T19:49:18.335Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: JoomUnited Products: WP Meta SEO Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JoomUnited WP Meta SEO allows Stored XSS.This issue affects WP Meta SEO: from n/a through 4.5.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-meta-seo/wordpress-wp-meta-seo-plugin-4-5-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-45457 State: PUBLISHED Published: 2024-09-15T07:43:47.626Z Last Updated: 2024-09-15T19:49:22.725Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Spiffy Plugins Products: Spiffy Calendar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows Stored XSS.This issue affects Spiffy Calendar: from n/a through 4.9.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-13-cross-site-scripting-xss-vulnerability?_s
database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-45458 State: PUBLISHED Published: 2024-09-15T07:42:42.297Z Last Updated: 2024-09-15T19:49:27.389Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Spiffy Plugins Products: Spiffy Calendar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows Reflected XSS.This issue affects Spiffy Calendar: from n/a through 4.9.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-13-reflected-cross-site-scripting-xss-vulne
/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-13-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-45459 State: PUBLISHED Published: 2024-09-15T07:41:38.095Z Last Updated: 2024-09-15T19:49:31.852Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PickPlugins Products: Product Slider for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins Product Slider for WooCommerce allows Reflected XSS.This issue affects Product Slider for WooCommerce: from n/a through 1.13.50. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-products-slider/wordpress-product-slider-for
nt: References: - https://patchstack.com/database/vulnerability/woocommerce-products-slider/wordpress-product-slider-for-woocommerce-by-pickplugins-plugin-1-13-50-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-45460 State: PUBLISHED Published: 2024-09-15T07:40:05.440Z Last Updated: 2024-09-15T19:49:38.665Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Manu225 Products: Flipping Cards Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Manu225 Flipping Cards allows Stored XSS.This issue affects Flipping Cards: from n/a through 1.30. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/flipping-cards/wordpress-flipping-cards-plugin-1-30-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-45461 State: PUBLISHED Published: 2024-10-16T07:54:15.484Z Last Updated: 2025-02-21T16:53:10.585Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L) Vendors: Apache Software Foundation Products: Apache CloudStack Quota plugin Problem Types: CWE-862 Description: The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to access and modify quota-related configurations and data. This issue affects Apache CloudStack from 4.7.0 t
s are able to access and modify quota-related configurations and data. This issue affects Apache CloudStack from 4.7.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1, where the Quota feature is enabled. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Alternatively, users that do not use the Quota feature are advised to disabled the plugin by setting the global setting "quota.enable.service" to "false". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2 - https://lists.apache.org/thread/ktsfjcnj22x4kg49cto
dstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2 - https://lists.apache.org/thread/ktsfjcnj22x4kg49ctock3d9tq7jnvlo - https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-18-2-4-and-4-19-1-2/
CVE ID: CVE-2024-45462 State: PUBLISHED Published: 2024-10-16T07:53:40.129Z Last Updated: 2024-10-16T14:54:34.977Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Apache Software Foundation Products: Apache CloudStack Problem Types: CWE-613 Description: The logout operation in the CloudStack web interface does not expire the user session completely which is valid until expiry by time or restart of the backend service. An attacker that has access to a user's browser can use an unexpired session to gain access to resources owned by the logged out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1
out user account. This issue affects Apache CloudStack from 4.15.1.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2 - https://lists.apache.org/thread/ktsfjcnj22x4kg49ctock3d9tq7jnvlo - https://cloudstack.apache.org/blog/security-release-advisory-4.18.2.4-4.19.1.2
CVE ID: CVE-2024-45463 State: PUBLISHED Published: 2024-10-08T08:40:20.648Z Last Updated: 2024-12-10T13:53:32.457Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-125 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
ter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-583523.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-45464 State: PUBLISHED Published: 2024-10-08T08:40:22.016Z Last Updated: 2024-12-10T13:53:33.725Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-125 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45465 State: PUBLISHED Published: 2024-10-08T08:40:23.411Z Last Updated: 2024-12-10T13:53:34.990Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-125 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45466 State: PUBLISHED Published: 2024-10-08T08:40:24.789Z Last Updated: 2024-12-10T13:53:36.281Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-125 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45467 State: PUBLISHED Published: 2024-10-08T08:40:26.225Z Last Updated: 2024-12-10T13:53:37.546Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-119 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
ter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-583523.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-45468 State: PUBLISHED Published: 2024-10-08T08:40:27.584Z Last Updated: 2024-12-10T13:53:38.837Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-119 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45469 State: PUBLISHED Published: 2024-10-08T08:40:28.955Z Last Updated: 2024-12-10T13:53:40.143Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
ter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted WRL file. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-583523.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-45470 State: PUBLISHED Published: 2024-10-08T08:40:30.348Z Last Updated: 2024-12-10T13:53:41.482Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45471 State: PUBLISHED Published: 2024-10-08T08:40:31.722Z Last Updated: 2024-12-10T13:53:42.763Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-787 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45472 State: PUBLISHED Published: 2024-10-08T08:40:33.124Z Last Updated: 2024-12-10T13:53:44.084Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-119 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
ter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. An attacker could leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-583523.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-45473 State: PUBLISHED Published: 2024-10-08T08:40:34.496Z Last Updated: 2024-12-10T13:53:45.407Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-119 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45474 State: PUBLISHED Published: 2024-10-08T08:40:35.938Z Last Updated: 2024-12-10T13:53:46.678Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-119 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45475 State: PUBLISHED Published: 2024-10-08T08:40:37.369Z Last Updated: 2024-12-10T13:53:47.953Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-119 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecn
CVE ID: CVE-2024-45476 State: PUBLISHED Published: 2024-10-08T08:40:38.819Z Last Updated: 2024-12-10T13:53:49.212Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Siemens Products: Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312, Tecnomatix Plant Simulation V2302, Tecnomatix Plant Simulation V2404 Problem Types: CWE-476 Description: A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14.3.0.12), Teamcenter Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecno
er Visualization V2312 (All versions < V2312.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0016), Tecnomatix Plant Simulation V2404 (All versions < V2404.0005). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted WRL files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-583523.html - https://cert-portal.siemens.com/productcert/html/ssa-645131.html
CVE ID: CVE-2024-45477 State: PUBLISHED Published: 2024-10-29T09:00:08.387Z Last Updated: 2024-10-29T14:51:54.639Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: CWE-79 Description: Apache NiFi 1.10.0 through 1.27.0 and 2.0.0-M1 through 2.0.0-M3 support a description field for Parameters in a Parameter Context configuration that is vulnerable to cross-site scripting. An authenticated user, authorized to configure a Parameter Context, can enter arbitrary JavaScript code, which the client browser will execute within the session context of the authenticated user. Upgrading to Apache NiFi 1.28.0 or