Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
code generation of the range `stmt.parse_For_range()`. The issue arises when `start` is signed, instead of using `sle`, `le` is used and `start` is interpreted as an unsigned integer for the comparison. If it is a negative number, its 255th bit is set to `1` and is hence interpreted as a very large unsigned integer making the assertion always fail. Any contract having a `range(start, start + N)` where `start` is a signed integer with the possibility for `start` to be negative is affected. If a call goes through the loop while supplying a negative `start` the execution will revert. Version 0.4.0b1 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Re
revert. Version 0.4.0b1 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vyperlang/vyper/security/advisories/GHSA-ppx5-q359-pvwj - https://github.com/vyperlang/vyper/commit/3de1415ee77a9244eb04bdb695e249d3ec9ed868 - https://github.com/vyperlang/vyper/commit/5319cfbe14951e007ccdb323257e5ada869b35d5 - https://github.com/vyperlang/vyper/blob/9136169468f317a53b4e7448389aa315f90b95ba/vyper/codegen/stmt.py#L286-L287
CVE ID: CVE-2024-32482 State: PUBLISHED Published: 2024-04-23T17:38:09.614Z Last Updated: 2024-08-02T02:13:39.266Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: tillitis Products: tkey-device-signer Problem Types: CWE-125, CWE-367 Description: The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application and to touch the TKey. No secret is disclosed. All client applications integrating tkey-device-signer should upgrade to version 1.0.0 to receive
o secret is disclosed. All client applications integrating tkey-device-signer should upgrade to version 1.0.0 to receive a fix. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tillitis/tkey-device-signer/security/advisories/GHSA-frqc-62hv-379p - https://bugbounty.tillitis.se/security-bulletins/tillitis-security-bulletin-240115-1
CVE ID: CVE-2024-32483 State: PUBLISHED Published: 2024-11-13T21:12:00.500Z Last Updated: 2024-11-14T19:37:18.350Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) EMA software Problem Types: escalation of privilege, CWE-284 Description: Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01201.html
CVE ID: CVE-2024-32484 State: PUBLISHED Published: 2024-07-22T14:20:25.571Z Last Updated: 2025-11-04T17:20:19.020Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Ankitects Products: Anki Problem Types: CWE-80 Description: An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A specially crafted flashcard can lead to JavaScript code execution and result in an arbitrary file read. An attacker can share a malicious flashcard to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-
CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1995
CVE ID: CVE-2024-32485 State: PUBLISHED Published: 2024-11-13T21:08:55.605Z Last Updated: 2024-11-14T19:44:42.661Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) VROC software Problem Types: denial of service, CWE-20 Description: Improper Input Validation in some Intel(R) VROC software before version 8.6.0.2003 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01154.html
CVE ID: CVE-2024-32487 State: PUBLISHED Published: 2024-04-13T00:00:00 Last Updated: 2024-08-02T02:13:39.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2024/04/13/2 - https:
P Vulnrichment: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2024/04/13/2 - https://www.openwall.com/lists/oss-security/2024/04/12/5 - https://github.com/gwsw/less/commit/007521ac3c95bc76e3d59c6dbfe75d06c8075c33 - http://www.openwall.com/lists/oss-security/2024/04/15/1 - https://security.netapp.com/advisory/ntap-20240605-0009/ - https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html
CVE ID: CVE-2024-32488 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-09T15:38:30.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.foxit.com/support/security-bulletins.html
CVE ID: CVE-2024-32489 State: PUBLISHED Published: 2024-04-15T00:00:00.000Z Last Updated: 2025-11-03T19:29:45.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCPDF before 6.7.4 mishandles calls that use HTML syntax. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tecnickcom/TCPDF/commit/51cd1b39de5643836e62661d162c472d63167df7 - https://github.com/tecnickcom/TCPDF/commit/82fc97bf1c74c8dbe62b1d3cc6d10fa4b87e0262 - https://github.com/tecnickcom/TCPDF/compare/6.6.2...6.7.4
CVE ID: CVE-2024-32491 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:13:39.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in user can upload a file (via a manipulated AJAX Request) to an arbitrary writable location by traversing paths. Arbitrary code can be executed if this location is publicly available through the web server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://znuny.com - https://www.znuny.org/en/advisories/zsa-2024-01
CVE ID: CVE-2024-32492 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:13:39.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external JavaScript. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://znuny.com - https://www.znuny.org/en/advisories/zsa-2024-02
CVE ID: CVE-2024-32493 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T02:13:39.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the draft form ID parameter of an AJAX request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://znuny.com - https://www.znuny.org/en/advisories/zsa-2024-03
CVE ID: CVE-2024-32498 State: PUBLISHED Published: 2024-07-05T00:00:00.000Z Last Updated: 2025-11-04T16:12:13.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenStack Cinder through 24.0.0, Glance before 28.0.2, and Nova before 29.0.3. Arbitrary file access can occur via custom QCOW2 external data. By supplying a crafted QCOW2 image that references a specific data file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected.
data. All Cinder and Nova deployments are affected; only Glance deployments with image conversion enabled are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://launchpad.net/bugs/2059809 - http://www.openwall.com/lists/oss-security/2024/07/02/2 - https://www.openwall.com/lists/oss-security/2024/07/02/2 - https://security.openstack.org/ossa/OSSA-2024-001.html
CVE ID: CVE-2024-32499 State: PUBLISHED Published: 2025-04-28T00:00:00.000Z Last Updated: 2025-04-28T17:50:02.978Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Newforma Products: Project Center Server Problem Types: CWE-94 Description: Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com/public-vulnerability-list/ - https://www.newforma.com/newforma-project-center/
CVE ID: CVE-2024-32501 State: PUBLISHED Published: 2024-08-23T00:00:00 Last Updated: 2024-08-27T14:57:21.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the updateServiceHost functionality in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://centreon.com - https://thewatch.centreon.com/latest-security-bulletins-64/security-bulletin-for-centreon-web-3744
CVE ID: CVE-2024-32502 State: PUBLISHED Published: 2024-06-07T00:00:00.000Z Last Updated: 2025-08-27T21:05:49.366Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper reference count checking, which can result in a UAF (Use-After-Free) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-sec
Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-32503 State: PUBLISHED Published: 2024-06-07T15:51:56.176Z Last Updated: 2025-02-13T15:48:06.716Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper memory deallocation checking, which can result in a UAF (Use-After-Free) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product
gram Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-32504 State: PUBLISHED Published: 2024-06-13T00:00:00.000Z Last Updated: 2025-03-13T17:57:10.199Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos 1380, Exynos 1330, Exynos W920, Exynos W930. The mobile processor lacks proper length checking, which can result in an OOB (Out-of-Bounds) Write vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-securi
ichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-32505 State: PUBLISHED Published: 2024-04-17T09:54:17.574Z Last Updated: 2024-08-02T02:13:39.121Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Wpmet Products: Elements kit Elementor addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet Elements kit Elementor addons allows Stored XSS.This issue affects Elements kit Elementor addons: from n/a through 3.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/elementskit-lite/wordpress-elementskit-elementor-addons-
er: References: - https://patchstack.com/database/vulnerability/elementskit-lite/wordpress-elementskit-elementor-addons-plugin-3-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32506 State: PUBLISHED Published: 2024-04-17T08:05:01.695Z Last Updated: 2024-09-03T15:37:24.258Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SoftLab Products: Radio Player Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/radio-player/wordpress-radio-player-plugin-2-0-73-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-32507 State: PUBLISHED Published: 2024-05-17T08:55:21.488Z Last Updated: 2024-08-02T02:13:39.335Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Hamid Alinia – idehweb Products: Login with phone number Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in Hamid Alinia – idehweb Login with phone number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.7.16. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/login-with-phone-number/wordpress-login-with-phone-number-plugin-1-7-16-privilege-esc
chstack.com/database/vulnerability/login-with-phone-number/wordpress-login-with-phone-number-plugin-1-7-16-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2024-32508 State: PUBLISHED Published: 2024-04-17T09:53:06.098Z Last Updated: 2024-08-28T20:58:33.705Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: deTheme Products: DethemeKit For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in deTheme DethemeKit For Elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through 2.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dethemekit-for-elementor/wordpress-dethemekit-for-elementor-plugin-
ces: - https://patchstack.com/database/vulnerability/dethemekit-for-elementor/wordpress-dethemekit-for-elementor-plugin-2-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32509 State: PUBLISHED Published: 2024-04-17T07:43:17.984Z Last Updated: 2024-08-02T02:13:39.100Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Loopus Products: WP Cost Estimation & Payment Forms Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in Loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.76. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-estimation-form/wordpress-wp-cost-estimation-payment-forms-builder-plugin-10-1-76-broken-a
com/database/vulnerability/wp-estimation-form/wordpress-wp-cost-estimation-payment-forms-builder-plugin-10-1-76-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32510 State: PUBLISHED Published: 2024-04-17T09:50:18.986Z Last Updated: 2024-08-02T02:13:40.103Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Loopus Products: WP Cost Estimation & Payment Forms Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Loopus WP Cost Estimation & Payment Forms Builder allows Reflected XSS.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-estimatio
CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-estimation-form/wordpress-wp-cost-estimation-payment-forms-builder-plugin-10-1-75-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32511 State: PUBLISHED Published: 2024-05-17T08:55:57.514Z Last Updated: 2024-08-02T02:13:39.114Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Astoundify Products: Simple Registration for WooCommerce Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in Astoundify Simple Registration for WooCommerce allows Privilege Escalation.This issue affects Simple Registration for WooCommerce: from n/a through 1.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-simple-registration/wordpress-simple-registration-for-wooc
: - https://patchstack.com/database/vulnerability/woocommerce-simple-registration/wordpress-simple-registration-for-woocommerce-plugin-1-5-6-unauthenticated-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2024-32512 State: PUBLISHED Published: 2024-05-17T08:56:41.369Z Last Updated: 2024-08-02T02:13:39.108Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: weForms Products: weForms Problem Types: CWE-602 Description: Client-Side Enforcement of Server-Side Security vulnerability in weForms allows Removing Important Client Functionality.This issue affects weForms: from n/a through 1.6.20. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/weforms/wordpress-weforms-plugin-1-6-20-form-submission-restriction-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2024-32513 State: PUBLISHED Published: 2024-04-17T08:03:24.412Z Last Updated: 2024-08-02T02:13:39.289Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: AdTribes.io Products: Product Feed PRO for WooCommerce Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in AdTribes.Io Product Feed PRO for WooCommerce.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woo-product-feed-pro/wordpress-product-feed-pro-for-woocommerce-plugin-13-3-1-sensitive
stack.com/database/vulnerability/woo-product-feed-pro/wordpress-product-feed-pro-for-woocommerce-plugin-13-3-1-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-32514 State: PUBLISHED Published: 2024-04-17T07:58:32.513Z Last Updated: 2024-08-02T02:13:39.160Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Poll Maker & Voting Plugin Team (InfoTheme) Products: WP Poll Maker Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Poll Maker & Voting Plugin Team (InfoTheme) WP Poll Maker.This issue affects WP Poll Maker: from n/a through 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/epoll-wp-voting/wordpress-wp-poll-maker-plugin-3-4-authenticated-arbitrary-file-up
patchstack.com/database/vulnerability/epoll-wp-voting/wordpress-wp-poll-maker-plugin-3-4-authenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-32515 State: PUBLISHED Published: 2024-04-17T07:41:51.273Z Last Updated: 2024-08-02T02:13:39.097Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Qamar Sheeraz, Nasir Ahmad Products: Mega Addons For Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in Qamar Sheeraz, Nasir Ahmad Mega Addons For Elementor.This issue affects Mega Addons For Elementor: from n/a through 1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate-addons-for-elementor/wordpress-mega-addons-for-elementor-plugin-1-8-broken-access-control-vulnerabi
lnerability/ultimate-addons-for-elementor/wordpress-mega-addons-for-elementor-plugin-1-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32516 State: PUBLISHED Published: 2024-04-17T07:40:21.208Z Last Updated: 2024-08-02T02:13:39.170Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Palscode Products: Multi Currency For WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Currency For WooCommerce: from n/a through 1.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wc-multi-currency/wordpress-multi-currency-for-woocommerce-plugin-1-5-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32517 State: PUBLISHED Published: 2024-04-17T07:38:38.171Z Last Updated: 2024-08-02T02:13:39.110Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WooCommerce & WordPress Tutorials Products: Custom Thank You Page Customize For WooCommerce by Binary Carpenter Problem Types: CWE-862 Description: Missing Authorization vulnerability in WooCommerce & WordPress Tutorials Custom Thank You Page Customize For WooCommerce by Binary Carpenter.This issue affects Custom Thank You Page Customize For WooCommerce by Binary Carpenter: from n/a through 1.4.12. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://pat
/a through 1.4.12. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bc-woo-custom-thank-you-pages/wordpress-custom-thank-you-page-customize-for-woocommerce-by-binary-carpenter-plugin-1-4-12-broken-access-control-vulnerability?_s_id=cve