Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-34727 State: PUBLISHED Published: 2024-08-15T21:56:30.695Z Last Updated: 2025-03-19T15:13:48.417Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6afad4b377b5bc3f38b28296e746b674173f99d8 - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34729 State: PUBLISHED Published: 2024-11-13T17:13:19.713Z Last Updated: 2024-11-15T21:17:09.762Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-11-01
CVE ID: CVE-2024-34730 State: PUBLISHED Published: 2025-01-21T23:04:42.520Z Last Updated: 2025-01-24T04:56:09.371Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-34731 State: PUBLISHED Published: 2024-08-15T21:56:31.049Z Last Updated: 2024-08-16T14:30:36.797Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/hardware/interfaces/+/0ff19d1f89614fce9454fb415bcbfcbcf3caf76e - https://android.googlesource.com/platform/frameworks/av/+/4b68b
/interfaces/+/0ff19d1f89614fce9454fb415bcbfcbcf3caf76e - https://android.googlesource.com/platform/frameworks/av/+/4b68b00993849b6a7f0e6d075bc2c8bb2e184e61 - https://android.googlesource.com/platform/hardware/interfaces/+/d63d09261806f7f1aa01406867f2a9e169356fca - https://android.googlesource.com/platform/system/security/+/d3805312d73433e34ef69a645b553a2969c5dc93 - https://android.googlesource.com/platform/system/nfc/+/1037992b9abcde1e3560bd895f62644a68563b3d - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34732 State: PUBLISHED Published: 2025-01-28T19:13:40.171Z Last Updated: 2025-01-28T21:10:13.134Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-10-01
CVE ID: CVE-2024-34733 State: PUBLISHED Published: 2025-01-28T19:13:40.263Z Last Updated: 2025-01-28T21:08:42.850Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-10-01
CVE ID: CVE-2024-34734 State: PUBLISHED Published: 2024-08-15T21:56:31.399Z Last Updated: 2024-10-24T19:44:21.863Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/207584fb6f820eba14251251d7e9331bfd57adb8 - https://sour
s: - https://android.googlesource.com/platform/frameworks/base/+/207584fb6f820eba14251251d7e9331bfd57adb8 - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34736 State: PUBLISHED Published: 2024-08-15T21:56:31.759Z Last Updated: 2024-11-05T21:18:05.065Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/av/+/6cfd048292b2cc706811a22c9078208cfa8e6d24 - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34737 State: PUBLISHED Published: 2024-08-15T21:56:32.112Z Last Updated: 2025-03-25T15:54:24.798Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/8b473b3f79642f42eeeffbfe572df6c6cbe9d79e - https
ferences: - https://android.googlesource.com/platform/frameworks/base/+/8b473b3f79642f42eeeffbfe572df6c6cbe9d79e - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34738 State: PUBLISHED Published: 2024-08-15T21:56:32.460Z Last Updated: 2025-03-26T21:10:58.257Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/21d764807b3dcd402d63e2b4c9fbae1c9965400a - https://source.a
https://android.googlesource.com/platform/frameworks/base/+/21d764807b3dcd402d63e2b4c9fbae1c9965400a - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34739 State: PUBLISHED Published: 2024-08-15T21:56:32.805Z Last Updated: 2025-09-11T14:11:12.107Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/50e1f8f36e32928d10e72324c05a203a6db9f7fb - https://source.android.com/security/bulletin/
.com/platform/frameworks/base/+/50e1f8f36e32928d10e72324c05a203a6db9f7fb - https://source.android.com/security/bulletin/2025-05-01
CVE ID: CVE-2024-34740 State: PUBLISHED Published: 2024-08-15T21:56:33.151Z Last Updated: 2024-08-16T14:07:11.752Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/libs/modules-utils/+/700c28908051ceb55e1456d2d21229bc17c6895a - https://android.googlesou
source.com/platform/frameworks/libs/modules-utils/+/700c28908051ceb55e1456d2d21229bc17c6895a - https://android.googlesource.com/platform/frameworks/base/+/e8b6505647be558ed3a167a1e13c53dfc227d22b - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34741 State: PUBLISHED Published: 2024-08-15T21:56:33.509Z Last Updated: 2024-08-27T13:48:27.809Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settings are restricted by the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/fram
itation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/abfaf702ef833dc4d374492d45c615c6e6de7f01 - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34742 State: PUBLISHED Published: 2024-08-15T21:56:33.860Z Last Updated: 2024-11-25T18:09:39.555Z Vendors: Google Products: Android Problem Types: Denial of service Description: In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/688e5c3012eb0a4ea88361588cf5026c10e4a42c - https://source.android.com/security/bulletin/2024-
platform/frameworks/base/+/688e5c3012eb0a4ea88361588cf5026c10e4a42c - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34743 State: PUBLISHED Published: 2024-08-15T21:56:34.208Z Last Updated: 2024-08-27T03:55:18.668Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/native/+/3f85323b27d95a57bfa87cbf68dd4a143f9f88ad - https://source.android.com/security/bulletin/2024-08-01
CVE ID: CVE-2024-34747 State: PUBLISHED Published: 2024-11-13T17:13:19.800Z Last Updated: 2024-11-15T21:15:39.442Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-11-01
CVE ID: CVE-2024-34748 State: PUBLISHED Published: 2025-01-28T19:13:40.342Z Last Updated: 2025-01-28T21:07:52.162Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2024-10-01
CVE ID: CVE-2024-34749 State: PUBLISHED Published: 2024-05-13T08:17:14.381Z Last Updated: 2025-03-27T16:29:52.758Z Vendors: Aidin Products: Phormer Problem Types: Cross-site scripting (XSS) Description: Phormer prior to version 3.35 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote unauthenticated attacker may execute an arbitrary script on the web browser of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://p.horm.org/er/ - https://github.com/eyedean/phormer - https://sourceforge.net/projects/rephormer/ - https://jvn.jp/en/jp/JVN61054671/
CVE ID: CVE-2024-34750 State: PUBLISHED Published: 2024-07-03T19:32:34.695Z Last Updated: 2025-11-03T19:29:53.932Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-755, CWE-400 Description: Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0
ain open which should have been closed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l
CVE ID: CVE-2024-34751 State: PUBLISHED Published: 2024-05-16T15:47:13.159Z Last Updated: 2024-08-02T02:59:21.875Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: WebToffee Products: Order Export & Order Import for WooCommerce Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order-import-fo
https://patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order-import-for-woocommerce-plugin-2-4-9-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-34752 State: PUBLISHED Published: 2024-05-17T06:01:38.329Z Last Updated: 2024-08-02T02:59:21.930Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PluginOps Products: Landing Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PluginOps Landing Page Builder allows Reflected XSS.This issue affects Landing Page Builder: from n/a through 1.5.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/page-builder-add/wordpress-landing-page-builder-1-5-1-8-cross-sit
ences: - https://patchstack.com/database/vulnerability/page-builder-add/wordpress-landing-page-builder-1-5-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-34753 State: PUBLISHED Published: 2024-06-11T16:01:42.440Z Last Updated: 2024-08-02T02:59:22.570Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SoftLab Products: Radio Player Problem Types: CWE-862 Description: Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/radio-player/wordpress-radio-player-plugin-2-0-73-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-34754 State: PUBLISHED Published: 2024-06-03T10:23:59.196Z Last Updated: 2024-08-02T02:59:22.617Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: A WP Life Products: Contact Form Widget Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in A WP Life Contact Form Widget.This issue affects Contact Form Widget: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/new-contact-form-widget/wordpress-contact-form-widget-plugin-1-3-9-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-34755 State: PUBLISHED Published: 2024-05-17T09:52:39.756Z Last Updated: 2024-08-02T02:59:22.624Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CRM Perks Products: Integration for Contact Form 7 and Salesforce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Salesforce.This issue affects Integration for Contact Form 7 and Salesforce: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cf7-salesforce/wordpress-integration-for-salesforce-and-contact-form
es: - https://patchstack.com/database/vulnerability/cf7-salesforce/wordpress-integration-for-salesforce-and-contact-form-7-wpforms-elementor-formidable-ninja-forms-plugin-1-3-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-34756 State: PUBLISHED Published: 2024-05-17T09:49:29.815Z Last Updated: 2024-08-02T02:59:22.414Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CRM Perks Products: Integration for Contact Form 7 HubSpot Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 HubSpot.This issue affects Integration for Contact Form 7 HubSpot: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cf7-hubspot/wordpress-integration-for-hubspot-and-contact-form-7-plugin-1-3-1-cross-site-
ack.com/database/vulnerability/cf7-hubspot/wordpress-integration-for-hubspot-and-contact-form-7-plugin-1-3-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-34757 State: PUBLISHED Published: 2024-05-17T05:59:00.934Z Last Updated: 2024-08-02T02:59:22.276Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Visualmodo Products: Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Visualmodo Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg allows Stored XSS.This issue affects Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg: from n/a through 1.5.3. Additional Analyst Notes:
– Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/borderless/wordpress-borderless-widgets-elements-templates-and-toolkit-for-elementor-gutenberg-plugin-1-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-34758 State: PUBLISHED Published: 2024-06-11T16:13:06.171Z Last Updated: 2024-08-02T02:59:21.818Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Wpmet Products: WP Fundraising Donation and Crowdfunding Platform Problem Types: CWE-862 Description: Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-fundraising-donation/wordpress-fundengine-donation-and-crowdfunding-platf
tps://patchstack.com/database/vulnerability/wp-fundraising-donation/wordpress-fundengine-donation-and-crowdfunding-platform-plugin-1-6-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-34759 State: PUBLISHED Published: 2024-06-04T18:49:14.765Z Last Updated: 2024-08-02T02:59:22.210Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: VideoWhisper Products: Picture Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VideoWhisper Picture Gallery allows Stored XSS.This issue affects Picture Gallery: from n/a through 1.5.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/picture-gallery/wordpress-picture-gallery-plugin-1-5-11-cross-site-scripting
tps://patchstack.com/database/vulnerability/picture-gallery/wordpress-picture-gallery-plugin-1-5-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-34760 State: PUBLISHED Published: 2024-05-16T15:54:54.908Z Last Updated: 2024-08-02T02:59:22.151Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WPBlockart Products: Magazine Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPBlockart Magazine Blocks allows Stored XSS.This issue affects Magazine Blocks: from n/a through 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/magazine-blocks/wordpress-magazine-blocks-plugin-1-3-6-cross-site-scripting-xss-v
/patchstack.com/database/vulnerability/magazine-blocks/wordpress-magazine-blocks-plugin-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-34761 State: PUBLISHED Published: 2024-06-10T15:34:32.438Z Last Updated: 2024-08-08T17:40:07.401Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: WPENGINE INC Products: Advanced Custom Fields PRO Problem Types: CWE-94 Description: Vulnerability discovered by executing a planned security audit. Improper Control of Generation of Code ('Code Injection') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows Code Injection.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-cus
CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-custom-fields-pro/wordpress-advanced-custom-fields-pro-plugin-6-2-10-contributor-arbitrary-function-execution-vulnerability?_s_id=cve