Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-8524 State: PUBLISHED Published: 2025-03-20T10:11:18.458Z Last Updated: 2025-10-15T12:50:40.766Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: modelscope Products: modelscope/agentscope Problem Types: CWE-22 Description: A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/cc4acf33-700d-4220-8a8a-db28f5c4cc8f
CVE ID: CVE-2024-8525 State: PUBLISHED Published: 2024-11-21T15:32:55.593Z Last Updated: 2024-11-21T17:37:57.529Z Vendors: Automated Logic, a Carrier company, Carrier Products: WebCTRL, i-Vu Problem Types: CWE-434 Description: An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.corporate.carrier.com/product-security/advisories-resources/ - https://www.cisa.gov/news-events/ics-advisories/
CVE ID: CVE-2024-8526 State: PUBLISHED Published: 2024-11-21T15:29:55.681Z Last Updated: 2024-11-21T17:38:33.315Z Vendors: Automated Logic, a Carrier company, Carrier Products: WebCTRL, i-Vu Problem Types: CWE-601 Description: A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously crafted URL, which when visited by an authenticated WebCTRL user, could result in the redirection of the user to a malicious webpage via "index.jsp" Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.corporate.carrier.com/product-security/advisories-resources/ - https://www.cisa.gov/news-events/ics-advisories/
CVE ID: CVE-2024-8527 State: PUBLISHED Published: 2025-11-19T13:17:01.911Z Last Updated: 2025-11-19T16:05:46.478Z Vendors: Automated Logic, Carrier Products: WebCtrl, i-Vu Problem Types: CWE-601 Description: Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2024-8528 State: PUBLISHED Published: 2025-11-19T13:18:35.293Z Last Updated: 2025-11-19T15:15:57.698Z Vendors: Automated Logic, Carrier Products: WebCtrl, i-Vu Problem Types: CWE-79 Description: Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.corporate.carrier.com/product-security/advisories-resources/
CVE ID: CVE-2024-8529 State: PUBLISHED Published: 2024-09-12T08:30:46.090Z Last Updated: 2024-09-12T13:08:29.798Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: thimpress Products: LearnPress – WordPress LMS Plugin Problem Types: CWE-89 Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_fields' parameter of the /wp-json/lp/v1/courses/archive-course REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append add
of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c2b2671e-0db7-4ba9-b574-a0122959e8fc?source=cve - https://plugins.trac.wordpress.org/changeset?old_path=/learnpress/tags/4.2.7&new_path=/learnpress/tags/4.2.7.1&sfp_email=&sfph_mail=
CVE ID: CVE-2024-8530 State: PUBLISHED Published: 2024-10-11T13:55:30.353Z Last Updated: 2024-10-17T19:54:14.904Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Schneider Electric Products: Data Center Expert Problem Types: CWE-306 Description: CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcaptures” archive is accessed directly by HTTPS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-01.pdf
CVE ID: CVE-2024-8531 State: PUBLISHED Published: 2024-10-11T13:50:31.474Z Last Updated: 2024-10-15T14:46:55.509Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: Data Center Expert Problem Types: CWE-347 Description: CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=S
://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-01.pdf
CVE ID: CVE-2024-8533 State: PUBLISHED Published: 2024-09-12T20:06:20.913Z Last Updated: 2024-09-12T20:58:17.171Z Vendors: Rockwell Automation Products: 2800C OptixPanel™ Compact, 2800S OptixPanel™ Standard, Embedded Edge Compute Module Problem Types: CWE-269 Description: A privilege escalation vulnerability exists in the Rockwell Automation affected products. The vulnerability occurs due to improper default file permissions allowing users to exfiltrate credentials and escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1964.html
CVE ID: CVE-2024-8534 State: PUBLISHED Published: 2024-11-12T18:15:44.673Z Last Updated: 2024-11-21T16:19:44.438Z Vendors: NetSclaer, NetScaler Products: NetScaler ADC, NetScaler Gateway Problem Types: CWE-119 Description: Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled Additional Analyst Notes: - CISA ADP Vulnrichment: Re
configured as a Auth Server (AAA Vserver) with RDP Feature enabled Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US
CVE ID: CVE-2024-8535 State: PUBLISHED Published: 2024-11-12T18:28:51.398Z Last Updated: 2024-11-21T16:18:12.855Z Vendors: NetScaler Products: NetScaler ADC, NetScaler Gateway Description: Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/s/article/CTX691
d resources Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US
CVE ID: CVE-2024-8536 State: PUBLISHED Published: 2024-09-30T06:00:07.324Z Last Updated: 2024-10-01T14:28:16.521Z Vendors: Unknown Products: Ultimate Blocks Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ultimate Blocks WordPress plugin before 3.2.2 does not validate and escape some of its block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/abd5b6c6-f541-4739-882d-2011436f7a8b/
CVE ID: CVE-2024-8537 State: PUBLISHED Published: 2025-03-20T10:11:00.318Z Last Updated: 2025-03-20T18:14:22.708Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: modelscope Products: modelscope/agentscope Problem Types: CWE-29 Description: A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Additional Analyst Notes: -
cker to manipulate file paths and delete sensitive files outside of the intended directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/eeb8aa4b-e6e5-465c-b0dd-aa97e3b7dc09
CVE ID: CVE-2024-8538 State: PUBLISHED Published: 2024-09-07T08:37:01.673Z Last Updated: 2024-09-09T13:56:15.542Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: uglyrobot Products: Big File Uploads – Increase Maximum File Upload Size Problem Types: CWE-200 Description: The Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.1.2. This is due the plugin not sanitizing a file path in an error message. This makes it possible for authenticated attackers, with author-level access and above, to retrieve the full path of the web application, which can be used to aid
tackers, with author-level access and above, to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1bd308a4-7157-4bc6-a55b-c6a4a62510a9?source=cve - https://github.com/uglyrobot/big-file-uploads/blob/master/tuxedo_big_file_uploads.php#L601 - https://plugins.trac.wordpress.org/changeset/3147755/tuxedo-big-file-uploads/trunk/tuxedo_big_file_uploads.php
CVE ID: CVE-2024-8539 State: PUBLISHED Published: 2024-11-12T16:11:07.141Z Last Updated: 2024-11-12T18:26:45.187Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Ivanti Products: Secure Access Client Problem Types: CWE-267 Description: Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-8540 State: PUBLISHED Published: 2024-12-10T18:52:17.010Z Last Updated: 2024-12-14T04:55:18.267Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Sentry Problem Types: CWE-732 Description: Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2024-8540
CVE ID: CVE-2024-8541 State: PUBLISHED Published: 2024-10-16T02:05:01.072Z Last Updated: 2024-10-16T14:09:37.495Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: flycart Products: Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons Problem Types: CWE-79 Description: The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.6.5. This makes it possible for unauthenticated atta
opriate escaping on the URL in all versions up to, and including, 2.6.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a site administrator into performing an action such as clicking on a link. Please note that this is only exploitable when the 'Leave a Review' notice is present, which occurs after 100 orders are made and disappears after a user dismisses the notice. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3529044f-c3d8-4370-8ba5-9df0fb71ab3c?source=cve - https://plugins.trac.wordpress.org/changeset/3149013/ - https://p
s/id/3529044f-c3d8-4370-8ba5-9df0fb71ab3c?source=cve - https://plugins.trac.wordpress.org/changeset/3149013/ - https://plugins.trac.wordpress.org/browser/woo-discount-rules/tags/2.6.5/v2/App/Views/Admin/review-notice.php
CVE ID: CVE-2024-8542 State: PUBLISHED Published: 2025-05-15T20:07:16.228Z Last Updated: 2025-05-17T03:09:57.258Z Vendors: Unknown Products: Everest Forms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Everest Forms WordPress plugin before 3.0.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e5f94dcf-a6dc-4c4c-acb6-1a7ead701053/
CVE ID: CVE-2024-8543 State: PUBLISHED Published: 2024-09-10T09:30:18.048Z Last Updated: 2024-09-10T13:28:50.376Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: hardwaremaster Products: Slider comparison image before and after Problem Types: CWE-79 Description: The Slider comparison image before and after plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [sciba] shortcode in all versions up to, and including, 0.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts
makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/14ab5d7c-ab46-4a53-b0d2-8b331e204cf3?source=cve - https://plugins.trac.wordpress.org/browser/slider-comparison-image-before-and-after/trunk/sciba.php#L39
CVE ID: CVE-2024-8544 State: PUBLISHED Published: 2024-09-24T01:56:48.603Z Last Updated: 2024-09-24T13:40:32.676Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: fatcatapps Products: Pixel Cat – Conversion Pixel Manager Problem Types: CWE-79 Description: The Pixel Cat – Conversion Pixel Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.0.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as click
rbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fc4f4a78-7224-4f58-a103-7ad4df0eb36e?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3151635%40facebook-conversion-pixel&new=3151635%40facebook-conversion-pixel&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/browser/facebook-conversion-pixel/trunk/includes/notices/notices.php?rev=2918763#L81
CVE ID: CVE-2024-8545 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:39.057Z Description: No description available.
CVE ID: CVE-2024-8546 State: PUBLISHED Published: 2024-09-25T12:44:12.761Z Last Updated: 2024-09-25T13:37:59.514Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: xpeedstudio Products: ElementsKit Elementor addons Problem Types: CWE-79 Description: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video widget in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whene
ted attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d21aeeb6-2e7d-426e-82c5-ff65e33bc5cb?source=cve - https://wordpress.org/plugins/elementskit-lite/#developers - https://plugins.trac.wordpress.org/browser/elementskit-lite/trunk/widgets/video/parts/video-button.php#L10 - https://plugins.trac.wordpress.org/changeset/3155880/elementskit-lite/trunk/widgets/video/video.php - https://plugins.trac.wordpress.org/changeset/3155880/
CVE ID: CVE-2024-8547 State: PUBLISHED Published: 2024-09-28T02:04:20.011Z Last Updated: 2024-09-30T15:26:07.105Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: grimmdude Products: Simple Popup Plugin Problem Types: CWE-79 Description: The Simple Popup Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [popup] shortcode in all versions up to, and including, 4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user access
th contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/217da4de-38df-41ff-b138-f12d4f8999cd?source=cve - https://plugins.trac.wordpress.org/browser/simple-popup-plugin/trunk/simple_popup_plugin.php#L87
CVE ID: CVE-2024-8548 State: PUBLISHED Published: 2024-10-01T07:30:12.789Z Last Updated: 2024-10-01T15:40:28.011Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: cagdasdag Products: KB Support – WordPress Help Desk and Knowledge Base Problem Types: CWE-862 Description: The KB Support – WordPress Help Desk and Knowledge Base plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in all versions up to, and including, 1.6.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform multiple administrative actions, such as replying to arbit
attackers, with Subscriber-level access and above, to perform multiple administrative actions, such as replying to arbitrary tickets, updating the status of any post, deleting any post, adding notes to tickets, flagging or unflagging tickets, and adding or removing ticket participants. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5fb90b3b-08bd-4887-a6bf-054b42d3e403?source=cve - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L138 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L172 - https://plugins.trac.wordpress.org/browser/kb-supp
press.org/browser/kb-support/trunk/includes/ajax-functions.php#L172 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L211 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L240 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L458 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L531 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L580 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L605 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/
browser/kb-support/trunk/includes/ajax-functions.php#L605 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L630 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L649 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L801 - https://plugins.trac.wordpress.org/browser/kb-support/trunk/includes/ajax-functions.php#L869
CVE ID: CVE-2024-8549 State: PUBLISHED Published: 2024-09-25T02:05:02.412Z Last Updated: 2024-09-25T13:32:15.791Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: simplecalendar Products: Simple Calendar – Google Calendar Plugin Problem Types: CWE-79 Description: The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.4.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action s
to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/17ae3f22-6426-48f7-93e6-c0ad515b329a?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3156894%40google-calendar-events&new=3156894%40google-calendar-events&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/changeset/3156894/google-calendar-events/trunk/includes/admin/notices.php
CVE ID: CVE-2024-8550 State: PUBLISHED Published: 2025-02-10T18:50:01.038Z Last Updated: 2025-02-10T23:20:32.284Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: modelscope Products: modelscope/agentscope Problem Types: CWE-497 Description: A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parameter. The issue arises due to improper sanitization of user input passed to the os.path.join function, which can be exploited to access files outsid