Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-23466 State: PUBLISHED Published: 2024-07-17T14:28:17.041Z Last Updated: 2024-08-01T23:06:24.579Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.
References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23467 State: PUBLISHED Published: 2024-07-17T14:28:57.869Z Last Updated: 2024-08-01T23:06:24.783Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23468 State: PUBLISHED Published: 2024-07-17T14:23:05.079Z Last Updated: 2024-08-01T23:06:24.667Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_
iner: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23469 State: PUBLISHED Published: 2024-07-17T14:26:47.787Z Last Updated: 2024-08-01T23:06:24.579Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-20 Description: SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23470 State: PUBLISHED Published: 2024-07-17T14:30:37.081Z Last Updated: 2024-08-01T23:06:24.673Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-287 Description: The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23471 State: PUBLISHED Published: 2024-07-17T14:31:28.669Z Last Updated: 2024-08-01T23:06:24.643Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-287 Description: The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_relea
ntainer: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23472 State: PUBLISHED Published: 2024-07-17T14:25:20.607Z Last Updated: 2024-08-01T23:06:24.628Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23473 State: PUBLISHED Published: 2024-05-09T12:43:51.111Z Last Updated: 2024-08-01T23:06:24.896Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-798 Description: The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability allows access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichm
ds on responsible disclosure of this and other potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23473 - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-4_release_notes.htm
CVE ID: CVE-2024-23474 State: PUBLISHED Published: 2024-07-17T14:22:19.833Z Last Updated: 2024-08-01T23:06:24.699Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23475 State: PUBLISHED Published: 2024-07-17T14:26:02.809Z Last Updated: 2024-08-01T23:06:24.672Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_rele
ontainer: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
CVE ID: CVE-2024-23476 State: PUBLISHED Published: 2024-02-15T20:35:52.612Z Last Updated: 2024-08-27T18:57:23.187Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23476
CVE ID: CVE-2024-23477 State: PUBLISHED Published: 2024-02-15T20:35:56.952Z Last Updated: 2024-08-01T23:06:24.637Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23477
CVE ID: CVE-2024-23478 State: PUBLISHED Published: 2024-02-15T20:35:46.029Z Last Updated: 2024-08-12T20:38:34.859Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-502 Description: SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23478
CVE ID: CVE-2024-23479 State: PUBLISHED Published: 2024-02-15T20:34:39.088Z Last Updated: 2024-08-06T15:38:13.693Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-22 Description: SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23479
CVE ID: CVE-2024-23480 State: PUBLISHED Published: 2024-05-01T16:27:35.730Z Last Updated: 2024-08-01T23:06:24.712Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Zscaler Products: Client Connector Problem Types: CWE-347 Description: A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2
CVE ID: CVE-2024-23482 State: PUBLISHED Published: 2024-03-26T14:23:20.100Z Last Updated: 2024-08-05T14:40:13.211Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-20 Description: The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2024
CVE ID: CVE-2024-23483 State: PUBLISHED Published: 2024-08-06T15:30:51.851Z Last Updated: 2024-08-06T18:08:53.764Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-20 Description: An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2
CVE ID: CVE-2024-23485 State: PUBLISHED Published: 2024-07-11T02:38:14.876Z Last Updated: 2024-08-01T23:06:24.727Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Gallagher Products: Controller 6000 and Controller 7000 Problem Types: CWE-1304 Description: Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7000 can lead to secured door locks connected via Aperio Communication Hubs to momentarily allow free access. This issue affects: Gallagher Controller 6000 and 7000 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed
6000 and 7000 9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)), 8.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2024-23485
CVE ID: CVE-2024-23486 State: PUBLISHED Published: 2024-04-15T10:50:01.778Z Last Updated: 2025-03-18T20:05:21.115Z Vendors: BUFFALO INC. Products: WSR-2533DHP, WSR-2533DHPL, WSR-2533DHP2, WSR-A2533DHP2 Problem Types: Plaintext Storage of a Password Description: Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.buffalo.jp/news/detail/20240410-01.html - https://jvn.jp/en/jp/JVN58236836/
CVE ID: CVE-2024-23487 State: PUBLISHED Published: 2024-05-16T20:46:58.874Z Last Updated: 2024-08-20T15:02:53.197Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: UEFI firmware for some Intel(R) Server D50DNP Family products Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some Intel(R) Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01
ent: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01080.html
CVE ID: CVE-2024-23488 State: PUBLISHED Published: 2024-02-29T08:03:20.744Z Last Updated: 2024-08-01T23:06:24.721Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost fails to properly restrict the access of files attached to posts in an archived channel, resulting in members being able to access files of archived channels even if the “Allow users to view archived channels” option is disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-23489 State: PUBLISHED Published: 2024-08-14T13:45:17.748Z Last Updated: 2024-08-14T14:54:29.837Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) VROC software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01128.html
CVE ID: CVE-2024-23491 State: PUBLISHED Published: 2024-08-14T13:45:33.806Z Last Updated: 2024-08-16T18:31:31.535Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Distribution for GDB software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01075.html
CVE ID: CVE-2024-23492 State: PUBLISHED Published: 2024-03-01T20:56:33.687Z Last Updated: 2024-08-01T23:06:24.711Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Commend Products: WS203VICM Problem Types: CWE-261 Description: A weak encoding is used to transmit credentials for WS203VICM. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-051-01 - https://clibrary-online.commend.com/en/cyber-security/security-advisories.html
CVE ID: CVE-2024-23493 State: PUBLISHED Published: 2024-02-29T08:02:32.128Z Last Updated: 2024-08-01T23:06:24.717Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-23494 State: PUBLISHED Published: 2024-03-21T22:16:52.975Z Last Updated: 2024-08-12T20:08:11.574Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: SQL injection vulnerability exists in GetDIAE_unListParameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12
CVE ID: CVE-2024-23495 State: PUBLISHED Published: 2024-08-14T13:45:34.981Z Last Updated: 2024-08-14T19:00:58.340Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Distribution for GDB software Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01075.html
CVE ID: CVE-2024-23496 State: PUBLISHED Published: 2024-02-26T16:07:52.478Z Last Updated: 2025-11-04T18:28:47.603Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: llama.cpp Products: llama.cpp Problem Types: CWE-190 Description: A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1913
CVE ID: CVE-2024-23497 State: PUBLISHED Published: 2024-08-14T13:45:44.653Z Last Updated: 2024-08-16T04:01:27.066Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Network Controllers and Adapters Problem Types: escalation of privilege, CWE-787 Description: Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE ID: CVE-2024-23499 State: PUBLISHED Published: 2024-08-14T13:45:46.816Z Last Updated: 2024-08-29T17:42:51.221Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) Ethernet Network Controllers and Adapters E810 Series Problem Types: denial of service, CWE-693 Description: Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisor
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE ID: CVE-2024-23500 State: PUBLISHED Published: 2024-03-28T05:54:44.759Z Last Updated: 2024-08-01T23:06:24.948Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Kadence WP Products: Gutenberg Blocks by Kadence Blocks Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Kadence WP Gutenberg Blocks by Kadence Blocks.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through 3.2.19. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/kadence-blocks/wordpress-kadence-blocks-plugin-3-2-19-server-side-request-forgery-ssrf-vulnerabilit
tabase/vulnerability/kadence-blocks/wordpress-kadence-blocks-plugin-3-2-19-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-23501 State: PUBLISHED Published: 2024-02-29T05:39:34.357Z Last Updated: 2024-08-01T23:06:24.666Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Shopfiles Ltd Products: Ebook Store Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ebook-store/wordpress-ebook-store-plugin-5-788-cross-site-scripting-xss-vulnerability?_s_id=cv
om/database/vulnerability/ebook-store/wordpress-ebook-store-plugin-5-788-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-23502 State: PUBLISHED Published: 2024-01-31T15:26:34.022Z Last Updated: 2025-06-17T21:29:21.585Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: InfornWeb Products: Posts List Designer by Category – List Category Posts Or Recent Posts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in InfornWeb Posts List Designer by Category – List Category Posts Or Recent Posts allows Stored XSS.This issue affects Posts List Designer by Category – List Category Posts Or Recent Posts: from n/a through 3.3.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
Category Posts Or Recent Posts: from n/a through 3.3.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/post-list-designer/wordpress-posts-list-designer-by-category-plugin-3-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve