Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-3454 State: PUBLISHED Published: 2024-07-24T07:58:40.219Z Last Updated: 2024-08-01T20:12:06.908Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Connectivity Standards Alliance Products: connectedhomeip Problem Types: CWE-209 Description: An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.bitdefender.com/su
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/in-fabric-matter-cluster-attribute-disclosure/
CVE ID: CVE-2024-3455 State: PUBLISHED Published: 2024-04-08T15:31:06.158Z Last Updated: 2024-08-12T13:30:59.394Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Netentsec Products: NS-ASG Application Security Gateway Problem Types: CWE-89 Description: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add_postlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VD
ely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259711. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.259711 - https://vuldb.com/?ctiid.259711 - https://vuldb.com/?submit.312182 - https://github.com/flyyue2001/cve/blob/main/NS-ASG-sql-add_postlogin.md
CVE ID: CVE-2024-3456 State: PUBLISHED Published: 2024-04-08T16:31:04.316Z Last Updated: 2024-08-01T20:12:07.335Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Netentsec Products: NS-ASG Application Security Gateway Problem Types: CWE-89 Description: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/config_Anticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259712. Additional An
loit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259712. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259712 - https://vuldb.com/?ctiid.259712 - https://vuldb.com/?submit.312183 - https://github.com/flyyue2001/cve/blob/main/NS-ASG-sql-config_Anticrack.md
CVE ID: CVE-2024-3457 State: PUBLISHED Published: 2024-04-08T17:31:04.561Z Last Updated: 2024-08-12T13:10:23.525Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Netentsec Products: NS-ASG Application Security Gateway Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/config_ISCGroupNoCache.php. The manipulation of the argument GroupId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259713 was assigned to this vulnerability. Additional An
een disclosed to the public and may be used. The identifier VDB-259713 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.259713 - https://vuldb.com/?ctiid.259713 - https://vuldb.com/?submit.312184 - https://github.com/flyyue2001/cve/blob/main/NS-ASG-sql-nconfig_ISCGroupNoCache.md
CVE ID: CVE-2024-3458 State: PUBLISHED Published: 2024-04-08T18:00:04.979Z Last Updated: 2024-08-01T20:12:07.704Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Netentsec Products: NS-ASG Application Security Gateway Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/add_ikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-259714 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CI
the public and may be used. VDB-259714 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259714 - https://vuldb.com/?ctiid.259714 - https://vuldb.com/?submit.312186 - https://github.com/hundanchen69/cve/blob/main/NS-ASG-sql-add_ikev2.md
CVE ID: CVE-2024-3459 State: PUBLISHED Published: 2024-05-09T10:13:03.813Z Last Updated: 2024-08-01T20:12:07.655Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kioware Products: Kioware Problem Types: CWE-424 Description: KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF viewer. By using built-in functions of that viewer it is possible to launch a web browser, search through local files and, subsequently, launch any program with user privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/p
privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/posts/2024/04/CVE-2024-3459 - https://cert.pl/en/posts/2024/04/CVE-2024-3459 - https://www.kioware.com/
CVE ID: CVE-2024-3460 State: PUBLISHED Published: 2024-05-09T10:13:37.634Z Last Updated: 2024-08-01T20:12:06.924Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kioware Products: Kioware Problem Types: CWE-424 Description: In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened applications utilizing a short time window before the forced automatic logout occurs. Then, by using some built-in function of these applications, one may launch any other programs. In order to exploit this vulnerability external applications must be left running when the KioWare software is launched. Additionally, an attacke
vulnerability external applications must be left running when the KioWare software is launched. Additionally, an attacker must know the PIN set for this Kioware instance and also slow down the application with some specific task which extends the usable time window. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/posts/2024/04/CVE-2024-3459 - https://cert.pl/en/posts/2024/04/CVE-2024-3459 - https://www.kioware.com/
CVE ID: CVE-2024-3461 State: PUBLISHED Published: 2024-05-09T10:14:11.615Z Last Updated: 2024-08-01T20:12:07.165Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Kioware Products: Kioware Problem Types: CWE-307 Description: KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as there are no mechanisms preventing a user from excessively guessing the number. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/posts/2024/04/CVE-2024-3459 - https://cert.pl/en/posts/2024/04/CVE-2024-3459 - https://www.kioware.com/
CVE ID: CVE-2024-3462 State: PUBLISHED Published: 2024-05-13T08:19:13.882Z Last Updated: 2024-11-07T15:16:53.084Z Vendors: Ant Media Products: Ant Media Server Community Edition Problem Types: CWE-302 Description: Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a possible use of non-administrative API calls reserved only for authorized users. All versions up to 2.9.0 (tested) and possibly newer ones are believed to be vulnerable as the vendor has not confirmed releasing a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://antmedia.io/ - https://cert.pl/
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://antmedia.io/ - https://cert.pl/en/posts/2024/05/CVE-2024-3462 - https://cert.pl/posts/2024/05/CVE-2024-3462
CVE ID: CVE-2024-3463 State: PUBLISHED Published: 2024-04-08T19:31:04.361Z Last Updated: 2024-08-01T20:12:07.056Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Laundry Management System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Laundry Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /karyawan/edit. The manipulation of the argument karyawan leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259744. Additional Analyst Notes: - CISA ADP V
o the public and may be used. The identifier of this vulnerability is VDB-259744. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259744 - https://vuldb.com/?ctiid.259744 - https://vuldb.com/?submit.312302 - https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemXSS.md
CVE ID: CVE-2024-3464 State: PUBLISHED Published: 2024-04-08T20:00:05.612Z Last Updated: 2024-08-01T20:12:07.865Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Laundry Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Laundry Management System 1.0 and classified as critical. This issue affects the function laporan_filter of the file /application/controller/Pelanggan.php. The manipulation of the argument jeniskelamin leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259745 was assigned to this vulnerability. Additio
has been disclosed to the public and may be used. The identifier VDB-259745 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259745 - https://vuldb.com/?ctiid.259745 - https://vuldb.com/?submit.312304 - https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL2.md
CVE ID: CVE-2024-3465 State: PUBLISHED Published: 2024-04-08T20:31:04.757Z Last Updated: 2024-08-01T20:12:07.259Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Laundry Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been classified as critical. Affected is the function laporan_filter of the file /application/controller/Transaki.php. The manipulation of the argument dari/sampai leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-259746 is the identifier assigned to this vulnerability.
exploit has been disclosed to the public and may be used. VDB-259746 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259746 - https://vuldb.com/?ctiid.259746 - https://vuldb.com/?submit.312313 - https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL3.md
CVE ID: CVE-2024-3466 State: PUBLISHED Published: 2024-04-08T21:00:05.590Z Last Updated: 2024-08-01T20:12:07.662Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Laundry Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function laporan_filter of the file /application/controller/Pengeluaran.php. The manipulation of the argument dari/sampai leads to sql injection. The associated identifier of this vulnerability is VDB-259747. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
ssociated identifier of this vulnerability is VDB-259747. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.259747 - https://vuldb.com/?ctiid.259747 - https://vuldb.com/?submit.312314 - https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL4.md
CVE ID: CVE-2024-3467 State: PUBLISHED Published: 2024-06-12T21:04:26.635Z Last Updated: 2024-08-01T20:12:07.612Z Vendors: AVEVA Products: PI Asset Framework Client Problem Types: CWE-502 Description: There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-163-03
CVE ID: CVE-2024-3468 State: PUBLISHED Published: 2024-06-12T21:04:28.259Z Last Updated: 2024-08-01T20:12:07.636Z Vendors: AVEVA Products: PI Web API Problem Types: CWE-502 Description: There is a vulnerability in AVEVA PI Web API that could allow malicious code to execute on the PI Web API environment under the privileges of an interactive user that was socially engineered to use API XML import functionality with content supplied by an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-163-02
CVE ID: CVE-2024-3469 State: PUBLISHED Published: 2024-06-05T12:45:44.712Z Last Updated: 2024-08-01T20:12:07.855Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: GeneratePress Products: GP Premium Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully tri
ossible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1a697391-f30d-403f-9046-8fa219a49302?source=cve - https://generatepress.com/category/changelog/
CVE ID: CVE-2024-3470 State: PUBLISHED Published: 2024-04-19T14:17:47.071Z Last Updated: 2024-08-01T20:12:07.311Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-269 Description: An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use a deploy key pertaining to an organization to bypass an organization ruleset. An attacker would require access to a valid deploy key for a repository in the organization as well as repository administrator access. This vulnerability affected versions of GitHub Enterprise Server 3.11 to 3.12 and was fixed in ve
administrator access. This vulnerability affected versions of GitHub Enterprise Server 3.11 to 3.12 and was fixed in versions 3.11.8 and 3.12.2. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.8 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.2
CVE ID: CVE-2024-3471 State: PUBLISHED Published: 2024-05-02T06:00:02.401Z Last Updated: 2024-11-20T17:30:51.987Z Vendors: Unknown Products: Button Generator Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Button Generator WordPress plugin before 3.0 does not have CSRF check in place when bulk deleting, which could allow attackers to make a logged in admin delete buttons via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/a3c282fb-81b8-48bf-8c18-8366ea8ad9af/
CVE ID: CVE-2024-3472 State: PUBLISHED Published: 2024-05-02T06:00:02.585Z Last Updated: 2024-08-01T20:12:06.941Z Vendors: Unknown Products: Modal Window Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers to make a logged in admin delete them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/d42f74dd-520f-40aa-9cf0-3544db9562c7/
CVE ID: CVE-2024-3473 State: PUBLISHED Published: 2024-05-02T16:57:16.837Z Last Updated: 2024-08-01T20:12:06.928Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: 99robots Products: Header Footer Code Manager Pro Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Header Footer Code Manager Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 1.0.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that
and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/83a35d16-526d-4e45-b2cf-a6858b2b2f21?source=cve - https://app.loopedin.io/header-footer-code-manager-pro#/updates
CVE ID: CVE-2024-3474 State: PUBLISHED Published: 2024-05-02T06:00:02.762Z Last Updated: 2025-03-25T13:21:57.506Z Vendors: Unknown Products: Wow Skype Buttons Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Wow Skype Buttons WordPress plugin before 4.0.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/e5c3e145-6738-4d85-8507-43ca1b1d5877/
CVE ID: CVE-2024-3475 State: PUBLISHED Published: 2024-05-02T06:00:02.938Z Last Updated: 2025-03-14T00:36:16.875Z Vendors: Unknown Products: Sticky Buttons Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Sticky Buttons WordPress plugin before 3.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/bf540242-5306-4c94-ad50-782d0d5b127f/
CVE ID: CVE-2024-3476 State: PUBLISHED Published: 2024-05-02T06:00:03.114Z Last Updated: 2024-08-02T13:39:35.587Z Vendors: Unknown Products: Side Menu Lite Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Side Menu Lite WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/46f74493-9082-48b2-90bc-2c1d1db64ccd/
CVE ID: CVE-2024-3477 State: PUBLISHED Published: 2024-05-02T06:00:03.299Z Last Updated: 2025-03-25T15:41:36.311Z Vendors: Unknown Products: Popup Box Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Popup Box WordPress plugin before 2.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting popups via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/ca5e59e6-c500-4129-997b-391cdf9aa9c7/
CVE ID: CVE-2024-3478 State: PUBLISHED Published: 2024-05-02T06:00:03.481Z Last Updated: 2025-03-25T18:22:51.484Z Vendors: Unknown Products: Herd Effects Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Herd Effects WordPress plugin before 5.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting effects via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/09f1a696-86ee-47cc-99de-57cfd2a3219d/
CVE ID: CVE-2024-3479 State: PUBLISHED Published: 2024-05-03T14:10:07.470Z Last Updated: 2024-08-01T20:12:07.467Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-926 Description: An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider) that could allow a local attacker to read local data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178947
CVE ID: CVE-2024-3480 State: PUBLISHED Published: 2024-05-03T14:10:15.549Z Last Updated: 2024-08-01T20:12:07.300Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-927 Description: An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178948
CVE ID: CVE-2024-3481 State: PUBLISHED Published: 2024-05-02T06:00:03.662Z Last Updated: 2024-08-01T20:12:07.376Z Vendors: Unknown Products: Counter Box Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such deleting counters via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/0c441293-e7f9-4634-8f3a-09925cd2b696/
CVE ID: CVE-2024-3482 State: PUBLISHED Published: 2024-05-20T13:09:55.369Z Last Updated: 2024-08-01T20:12:07.694Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: OpenText Products: ArcSight Enterprise Security Manager, ArcSight Platform Problem Types: CWE-79 Description: A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. The vulnerability could be remotely exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000029773