Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
evel permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aa464547-0380-4b91-a5ea-0cd9a66da7a7?source=cve - https://github.com/ibericode/mailchimp-for-wordpress/blob/main/includes/views/parts/lists-overview-details.php - https://plugins.trac.wordpress.org/browser/mailchimp-for-wp/trunk/includes/views/parts/lists-overview-details.php - https://github.com/ibericode/mailchimp-for-wordpress/commit/60c6bf
unk/includes/views/parts/lists-overview-details.php - https://github.com/ibericode/mailchimp-for-wordpress/commit/60c6bfc260a7974f791af1d4ad4a032a3e0bdd3c - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3153075%40mailchimp-for-wp%2Ftrunk&old=3149806%40mailchimp-for-wp%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-8681 State: PUBLISHED Published: 2024-09-27T06:53:59.289Z Last Updated: 2024-09-30T14:56:41.788Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: leap13 Products: Premium Addons for Elementor Problem Types: CWE-79 Description: The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Grid widget in all versions up to, and including, 4.10.52 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whe
cated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/de207181-0163-4222-ac16-d7b74179ff9b?source=cve - https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/trunk/includes/compatibility/widgets/grid.php#L72 - https://wordpress.org/plugins/premium-addons-for-elementor/#developers - https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/trunk/widgets/premium-grid.php#L3033 - https://plugins.trac.wordpress.org/changeset/3158331/premiu
-addons-for-elementor/trunk/widgets/premium-grid.php#L3033 - https://plugins.trac.wordpress.org/changeset/3158331/premium-addons-for-elementor/trunk/assets/frontend/js/premium-addons.js - https://plugins.trac.wordpress.org/changeset/3158331/ - https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/trunk/widgets/premium-grid.php#L3149
CVE ID: CVE-2024-8682 State: PUBLISHED Published: 2025-03-05T08:21:55.244Z Last Updated: 2025-03-05T16:09:07.799Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: https://themeforest.net/item/jnews-one-stop-solution-for-web-publishing/20566392 Products: JNews - WordPress Newspaper Magazine Blog AMP Theme Problem Types: CWE-862 Description: The JNews - WordPress Newspaper Magazine Blog AMP Theme theme for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 11.6.6. This is due to the plugin not properly validate if the user can register option is enabled prior to creating a user though the register_handler() function.
rly validate if the user can register option is enabled prior to creating a user though the register_handler() function. This makes it possible for unauthenticated attackers to register as a user even when user registration is disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4b0d7ee7-a358-4487-a0cc-31ed810ae8bc?source=cve - https://themeforest.net/item/jnews-one-stop-solution-for-web-publishing/20566392
CVE ID: CVE-2024-8684 State: PUBLISHED Published: 2025-02-10T12:45:35.339Z Last Updated: 2025-02-12T15:43:30.941Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: KUNBUS GmbH Products: Revolution Pi Problem Types: CWE-78 Description: OS Command Injection vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to execute OS commands on the device via the ‘php/dal.php’ endpoint, in the ‘arrSaveConfig’ parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-kunbus-gmbhs-revolution-pi
CVE ID: CVE-2024-8685 State: PUBLISHED Published: 2025-02-10T12:46:27.511Z Last Updated: 2025-02-12T15:44:16.709Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: KUNBUS GmbH Products: Revolution Pi Problem Types: CWE-22 Description: Path-Traversal vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could allow an authenticated attacker to list device directories via the ‘/pictory/php/getFileList.php’ endpoint in the ‘dir’ parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-kunbus-gmbhs-revolution-pi
CVE ID: CVE-2024-8686 State: PUBLISHED Published: 2024-09-11T16:34:21.618Z Last Updated: 2024-09-12T03:55:28.915Z Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-78 Description: A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-8686
CVE ID: CVE-2024-8687 State: PUBLISHED Published: 2024-09-11T16:40:21.066Z Last Updated: 2024-09-11T18:25:14.604Z Vendors: Palo Alto Networks Products: PAN-OS, GlobalProtect App, Cloud NGFW, Prisma Access Problem Types: CWE-497 Description: An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so. Additional Analyst Notes: - CISA ADP
en if the GlobalProtect app configuration would not normally permit them to do so. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-8687
CVE ID: CVE-2024-8688 State: PUBLISHED Published: 2024-09-11T16:40:50.806Z Last Updated: 2024-09-11T18:24:45.419Z Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-155 Description: An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables authenticated administrators (including read-only administrators) with access to the CLI to to read arbitrary files on the firewall. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-8688
CVE ID: CVE-2024-8689 State: PUBLISHED Published: 2024-09-11T16:42:16.113Z Last Updated: 2024-09-11T18:24:17.891Z Vendors: Palo Alto Networks Products: ActiveMQ Content Pack Problem Types: CWE-312 Description: A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of the configured ActiveMQ credentials in log bundles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-8689
CVE ID: CVE-2024-8690 State: PUBLISHED Published: 2024-09-11T16:42:39.974Z Last Updated: 2024-09-11T18:24:05.107Z Vendors: Palo Alto Networks Products: Cortex XDR Agent Problem Types: CWE-440 Description: A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-8690
CVE ID: CVE-2024-8691 State: PUBLISHED Published: 2024-09-11T16:43:30.608Z Last Updated: 2024-09-11T18:19:46.897Z Vendors: Palo Alto Networks Products: PAN-OS, Cloud NGFW, Prisma Access Problem Types: CWE-863 Description: A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from GlobalProtect. Upon exploitation, PAN-OS logs indicate that the impersonated user authenticated to GlobalProtect, which hides the identity of the attacker. Additional Analyst Notes: - CI
personated user authenticated to GlobalProtect, which hides the identity of the attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2024-8691
CVE ID: CVE-2024-8692 State: PUBLISHED Published: 2024-09-11T18:31:08.638Z Last Updated: 2024-09-11T19:38:50.902Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: TDuckCloud Products: TDuckPro Problem Types: CWE-640 Description: A vulnerability classified as critical was found in TDuckCloud TDuckPro up to 6.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to weak password recovery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References
arly about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.277165 - https://vuldb.com/?ctiid.277165 - https://vuldb.com/?submit.401715 - https://www.shawroot.cc/2794.html
CVE ID: CVE-2024-8693 State: PUBLISHED Published: 2024-09-11T19:31:04.890Z Last Updated: 2024-09-11T20:01:31.141Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Kaon Products: CG3000 Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is some unknown functionality of the component dhcpcd Command Handler. The manipulation of the argument -h with the input <script>alert('XSS')</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respo
has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.277166 - https://vuldb.com/?ctiid.277166 - https://vuldb.com/?submit.402043 - https://github.com/peritocibernetico/ClaroDHCPXSS/
CVE ID: CVE-2024-8694 State: PUBLISHED Published: 2024-09-11T21:00:08.197Z Last Updated: 2024-09-12T16:08:32.325Z Severity: N/A (CVSS 4.7 AV:N/AC:L/Au:M/C:N/I:P/A:P) Vendors: n/a Products: JFinalCMS Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function update of the file /admin/template/update of the component com.cms.controller.admin.TemplateController. The manipulation of the argument fileName leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.277167 - https://vuldb.com/?ctiid.277167 - https://vuldb.com/?submit.401858 - https://gitee.com/heyewei/JFinalcms/issues/IAOKSQ - https://github.com/wave-to/SomeCms/blob/main/JFinalCMS.md
CVE ID: CVE-2024-8695 State: PUBLISHED Published: 2024-09-12T17:52:55.491Z Last Updated: 2024-09-12T19:14:03.622Z Vendors: Docker Products: Docker Desktop Problem Types: CWE-79, CWE-94 Description: A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4342
CVE ID: CVE-2024-8696 State: PUBLISHED Published: 2024-09-12T17:54:34.968Z Last Updated: 2024-09-12T19:27:18.773Z Vendors: Docker Products: Docker Desktop Problem Types: CWE-79, CWE-94 Description: A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop before 4.34.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4342
CVE ID: CVE-2024-8698 State: PUBLISHED Published: 2024-09-19T15:48:18.464Z Last Updated: 2025-11-20T07:34:21.669Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: Red Hat Products: Red Hat Build of Keycloak, Red Hat build of Keycloak 22, Red Hat build of Keycloak 24, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, RHEL-8 based Middleware Containers Problem Types: CWE-347 Description: A flaw exists
Hat Single Sign-On 7.6 for RHEL 9, RHEL-8 based Middleware Containers Problem Types: CWE-347 Description: A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/er
or impersonation attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:6878 - https://access.redhat.com/errata/RHSA-2024:6879 - https://access.redhat.com/errata/RHSA-2024:6880 - https://access.redhat.com/errata/RHSA-2024:6882 - https://access.redhat.com/errata/RHSA-2024:6886 - https://access.redhat.com/errata/RHSA-2024:6887 - https://access.redhat.com/errata/RHSA-2024:6888 - https://access.redhat.com/errata/RHSA-2024:6889 - https://access.redhat.com/errata/RHSA-2024:6890 - https://access.redhat.com/errata/RHSA-2024:8823 - https://access.redhat.com/errata/RHSA-2024:8824 - https://access.redhat.com/errata/RHSA-2024:8826 - https://
2024:8823 - https://access.redhat.com/errata/RHSA-2024:8824 - https://access.redhat.com/errata/RHSA-2024:8826 - https://access.redhat.com/security/cve/CVE-2024-8698 - https://bugzilla.redhat.com/show_bug.cgi?id=2311641
CVE ID: CVE-2024-8699 State: PUBLISHED Published: 2025-05-15T20:07:17.630Z Last Updated: 2025-05-20T19:13:07.894Z Vendors: Unknown Products: Z-Downloads Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9013351e-224f-4696-970f-eb843dc8dace/
CVE ID: CVE-2024-8700 State: PUBLISHED Published: 2025-05-15T20:07:17.831Z Last Updated: 2025-08-27T12:00:57.959Z Vendors: Unknown Products: Event Calendar Problem Types: CWE-862 Missing Authorization Description: The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to delete arbitrary calendars. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8c48b657-afa1-45e6-ada6-27ee58185143/
CVE ID: CVE-2024-8701 State: PUBLISHED Published: 2025-05-15T20:07:18.054Z Last Updated: 2025-05-20T19:12:33.939Z Vendors: Unknown Products: events-calendar Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The events-calendar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/707d4b5b-8efe-4010-ba7d-80538545a2d5/
CVE ID: CVE-2024-8702 State: PUBLISHED Published: 2025-05-15T20:07:18.307Z Last Updated: 2025-05-17T03:07:09.506Z Vendors: Unknown Products: Backup Database Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Backup Database WordPress plugin through 4.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2199ef66-25bd-4eb4-a675-d8b30f047847/
CVE ID: CVE-2024-8703 State: PUBLISHED Published: 2025-05-15T20:07:18.536Z Last Updated: 2025-05-17T03:05:42.795Z Vendors: Unknown Products: Z-Downloads Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/604e990e-9bec-469e-8630-605eea74e12c/
CVE ID: CVE-2024-8704 State: PUBLISHED Published: 2024-09-26T10:59:33.100Z Last Updated: 2024-09-26T13:06:58.427Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: modalweb Products: Advanced File Manager Problem Types: CWE-22 Description: The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 5.2.8 via the 'fma_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sen
he server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5b783cc6-d79d-43ef-948a-a1953d383ca3?source=cve - https://plugins.trac.wordpress.org/browser/file-manager-advanced/trunk/application/class_fma_main.php#L152 - https://plugins.trac.wordpress.org/changeset/3157713/
CVE ID: CVE-2024-8705 State: PUBLISHED Published: 2024-09-11T22:31:24.919Z Last Updated: 2024-09-12T16:21:44.386Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Shandong Star Measurement and Control Equipment Products: Heating Network Wireless Monitoring System Problem Types: CWE-89 Description: A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System 5.6.2 and classified as critical. Affected by this issue is the function GetDataKindByType of the file /DataSrvs/UCCGSrv.asmx. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Ad
to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.277214 - https://vuldb.com/?ctiid.277214 - https://vuldb.com/?submit.402236 - https://wiki.shikangsi.com/post/share/3cd1d639-7b5d-47cf-a69d-552c314b5168
CVE ID: CVE-2024-8706 State: PUBLISHED Published: 2024-09-11T23:31:06.227Z Last Updated: 2024-09-12T16:40:49.801Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: JFinalCMS Problem Types: CWE-22 Description: A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function update of the file /admin/template/update of the component com.cms.util.TemplateUtils. The manipulation of the argument fileName leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.277215 - https://vuldb.com/?ctiid.277215 - https://vuldb.com/?submit.402346 - https://gitee.com/heyewei/JFinalcms/issues/IAOSJG - https://github.com/xingjiuW/cve/blob/main/wh.md
CVE ID: CVE-2024-8707 State: PUBLISHED Published: 2024-09-12T00:31:27.276Z Last Updated: 2024-09-12T14:34:37.102Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: 云课网络科技有限公司 Products: Yunke Online School System Problem Types: CWE-22 Description: A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. This vulnerability affects the function downfile of the file application/admin/controller/Appadmin.php. The manipulation of the argument url leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP V
initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.277216 - https://vuldb.com/?ctiid.277216 - https://vuldb.com/?submit.402917 - https://wiki.shikangsi.com/post/share/1200e7c6-4514-44e3-980c-298e0b9ccade
CVE ID: CVE-2024-8708 State: PUBLISHED Published: 2024-09-12T02:00:04.543Z Last Updated: 2024-09-12T13:17:54.289Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Best House Rental Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file categories.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.277217 - https://vuldb.com/?ctiid.277217 - https://vuldb.com/?submit
P Vulnrichment: References: - https://vuldb.com/?id.277217 - https://vuldb.com/?ctiid.277217 - https://vuldb.com/?submit.404864 - https://www.sourcecodester.com/