Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-35550 State: PUBLISHED Published: 2024-05-22T13:38:46.600Z Last Updated: 2025-03-25T15:58:09.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=rev. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/17/csrf.md
CVE ID: CVE-2024-35551 State: PUBLISHED Published: 2024-05-22T13:38:47.219Z Last Updated: 2025-03-25T15:32:07.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=add. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/16/csrf.md
CVE ID: CVE-2024-35552 State: PUBLISHED Published: 2024-05-22T13:38:47.959Z Last Updated: 2025-02-13T15:58:55.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataTypeCN. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/20/csrf.md
CVE ID: CVE-2024-35553 State: PUBLISHED Published: 2024-05-22T13:38:48.665Z Last Updated: 2025-02-13T15:58:55.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/21/csrf.md
CVE ID: CVE-2024-35554 State: PUBLISHED Published: 2024-05-22T13:38:49.270Z Last Updated: 2025-03-26T16:08:39.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=del&dataType=newsWeb&dataTypeCN. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/19/csrf.md
CVE ID: CVE-2024-35555 State: PUBLISHED Published: 2024-05-22T13:38:51.933Z Last Updated: 2025-02-13T15:58:56.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/18/csrf.md
CVE ID: CVE-2024-35556 State: PUBLISHED Published: 2024-05-22T13:38:50.603Z Last Updated: 2025-02-13T15:58:57.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bearman113/1.md/blob/main/26/csrf.md
CVE ID: CVE-2024-35557 State: PUBLISHED Published: 2024-05-22T13:38:52.607Z Last Updated: 2025-02-13T15:58:57.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/27/csrf.md
CVE ID: CVE-2024-35558 State: PUBLISHED Published: 2024-05-22T13:38:53.268Z Last Updated: 2025-03-25T13:41:36.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/24/csrf.md
CVE ID: CVE-2024-35559 State: PUBLISHED Published: 2024-05-22T13:38:54.163Z Last Updated: 2025-02-13T15:58:58.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/22/csrf.md
CVE ID: CVE-2024-35560 State: PUBLISHED Published: 2024-05-22T13:38:55.636Z Last Updated: 2025-03-25T15:36:48.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=del&dataType=&dataTypeCN. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/bearman113/1.md/blob/main/25/csrf.md
CVE ID: CVE-2024-35561 State: PUBLISHED Published: 2024-05-22T13:38:57.449Z Last Updated: 2025-02-13T15:59:00.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bearman113/1.md/blob/main/23/csrf.md
CVE ID: CVE-2024-35563 State: PUBLISHED Published: 2024-05-28T16:37:29.791Z Last Updated: 2025-02-13T15:59:00.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId parameter in CDGTempPermissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.esafenet.com/dzwdaqglxt - http://cdg.com - https://github.com/helloBegin/blog/tree/main
CVE ID: CVE-2024-35570 State: PUBLISHED Published: 2024-05-23T18:29:28.395Z Last Updated: 2025-02-13T15:59:01.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KakeruJ/CVE/
CVE ID: CVE-2024-35571 State: PUBLISHED Published: 2024-05-20T17:20:18.515Z Last Updated: 2025-02-13T15:59:01.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE ID: CVE-2024-35576 State: PUBLISHED Published: 2024-05-20T17:28:46.578Z Last Updated: 2025-02-13T15:59:02.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE ID: CVE-2024-35578 State: PUBLISHED Published: 2024-05-20T17:30:12.354Z Last Updated: 2025-02-13T15:59:02.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE ID: CVE-2024-35579 State: PUBLISHED Published: 2024-05-20T17:27:18.379Z Last Updated: 2025-02-13T15:59:03.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE ID: CVE-2024-35580 State: PUBLISHED Published: 2024-05-20T17:25:23.490Z Last Updated: 2025-02-13T15:59:03.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://detailed-stetson-767.notion.site/Tenda-AX1806-Buffer-Overflow-in-formSetIptv-cebf9202122a4582ae86c5253b3f6da3?pvs=4
CVE ID: CVE-2024-35581 State: PUBLISHED Published: 2024-05-28T19:47:43.465Z Last Updated: 2025-02-13T15:59:04.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://owasp.org/www-community/attacks/xss/ - https://github.com/r04i7/CVE/blob/main/CVE-2024-35581.md
CVE ID: CVE-2024-35582 State: PUBLISHED Published: 2024-05-28T19:40:26.807Z Last Updated: 2025-02-13T15:59:05.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Department input field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://owasp.org/www-community/attacks/xss/ - https://github.com/r04i7/CVE/blob/main/CVE-2024-35582.md
CVE ID: CVE-2024-35583 State: PUBLISHED Published: 2024-05-28T19:52:53.696Z Last Updated: 2025-02-13T15:59:05.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Remarks input field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portswigger.net/web-security/cross-site-scripting/stored - https://owasp.org/www-community/attacks/xss/ - https://github.com/r04i7/CVE/blob/main/CVE-2024-35583.md
CVE ID: CVE-2024-35584 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T19:59:12.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php in OpenSis Community Edition 9.1 to 8.0, and possibly earlier versions. It is possible for an authenticated user to perform SQL Injection due to the lack to sanitisation. The application takes arbitrary value from "X-Forwarded-For" header and appends it to a SQL INSERT statement directly, leading to SQL Injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://opensis.com -
irectly, leading to SQL Injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://opensis.com - http://os4ed.com - https://github.com/whwhwh96/CVE-2024-35584
CVE ID: CVE-2024-35591 State: PUBLISHED Published: 2024-05-24T13:50:27.504Z Last Updated: 2025-02-13T15:59:06.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/o2oa/o2oa/issues/156
CVE ID: CVE-2024-35592 State: PUBLISHED Published: 2024-05-24T14:06:03.524Z Last Updated: 2025-02-13T15:59:06.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Upload function of Box-IM v2.0 allows attackers to execute arbitrary code via uploading a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Joying-C/Cross-site-scripting-vulnerability/blob/main/BOX-IM_Cross_site%20_scripting%20_vulnerability/BOX-IM_Cross_site%20_scripting%20_vulnerability.pdf
CVE ID: CVE-2024-35593 State: PUBLISHED Published: 2024-05-24T13:35:06.859Z Last Updated: 2025-02-13T15:59:07.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the File preview function of Raingad IM v4.1.4 allows attackers to execute arbitrary code via uploading a crafted PDF file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Joying-C/Cross-site-scripting-vulnerability/tree/main/Raingad-IM_Cross_site%20_scripting%20_vulnerability
CVE ID: CVE-2024-35595 State: PUBLISHED Published: 2024-05-24T13:33:00.490Z Last Updated: 2025-02-13T15:59:07.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Joying-C/Cross-site-scripting-vulnerability/tree/main/Xintongda-OA_Cross_site%20_scripting%20_vulnerability - https://github.com/Joying-C/Cross-site-scripting-vulnerability/blob/main/Xintongda-OA_Cross_site%20_scripting%20_vulnerability/Xinto
ub.com/Joying-C/Cross-site-scripting-vulnerability/blob/main/Xintongda-OA_Cross_site%20_scripting%20_vulnerability/Xintongda-OA_Cross_site%20_scripting%20_vulnerability.pdf
CVE ID: CVE-2024-35618 State: PUBLISHED Published: 2024-05-24T14:50:43.899Z Last Updated: 2025-02-13T15:59:08.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pingcap/tidb/issues/52768 - https://gist.github.com/GaranR/0b75c6f2c0215db39c910022daf6522c
CVE ID: CVE-2024-35621 State: PUBLISHED Published: 2024-05-28T15:40:26.625Z Last Updated: 2025-03-28T19:29:27.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Edit function of Formwork before 1.13.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/getformwork/formwork/security/advisories/GHSA-gx8m-f3mp-fg99
CVE ID: CVE-2024-35627 State: PUBLISHED Published: 2024-05-22T19:10:43.016Z Last Updated: 2025-02-13T15:59:09.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /data/v3/?key. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/SaleSlave/e23d49e7f8eb937784d15c2c2fc34fca
CVE ID: CVE-2024-35628 State: PUBLISHED Published: 2024-06-11T14:29:55.643Z Last Updated: 2024-08-02T03:14:53.492Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Photo Gallery Team Products: Photo Gallery by 10Web Problem Types: CWE-862 Description: Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/photo-gallery/wordpress-photo-gallery-by-10web-plugin-1-8-23-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-35629 State: PUBLISHED Published: 2024-06-04T13:34:26.928Z Last Updated: 2024-08-02T03:14:53.535Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Wow-Company Products: Easy Digital Downloads – Recent Purchases Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Wow-Company Easy Digital Downloads – Recent Purchases allows PHP Remote File Inclusion.This issue affects Easy Digital Downloads – Recent Purchases: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack
ough 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/edd-recent-purchases/wordpress-easy-digital-downloads-recent-purchases-plugin-1-0-2-remote-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-35630 State: PUBLISHED Published: 2024-06-03T10:27:07.336Z Last Updated: 2024-08-02T03:14:53.463Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: LJ Apps Products: WP TripAdvisor Review Slider Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LJ Apps WP TripAdvisor Review Slider allows Blind SQL Injection.This issue affects WP TripAdvisor Review Slider: from n/a through 12.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-tripadvisor-review-slider/wordpress-wp-tripadv
Container: References: - https://patchstack.com/database/vulnerability/wp-tripadvisor-review-slider/wordpress-wp-tripadvisor-review-slider-plugin-12-6-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-35631 State: PUBLISHED Published: 2024-06-03T10:30:46.320Z Last Updated: 2024-08-02T03:14:53.520Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Foliovision Products: FV Flowplayer Video Player Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Foliovision FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.45.7212. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-fl
E Program Container: References: - https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-45-7212-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-35632 State: PUBLISHED Published: 2024-06-03T11:49:26.419Z Last Updated: 2024-08-02T03:14:53.450Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CRM Perks. Products: Integration for Contact Form 7 and Constant Contact Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks. Integration for Contact Form 7 and Constant Contact.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through 1.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cf7-constant-contact/wordpress-integration-for-c
Container: References: - https://patchstack.com/database/vulnerability/cf7-constant-contact/wordpress-integration-for-constant-contact-and-contact-form-7-wpforms-elementor-ninja-forms-plugin-1-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-35633 State: PUBLISHED Published: 2024-06-03T10:04:57.329Z Last Updated: 2024-08-02T03:14:53.607Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: CreativeThemes Products: Blocksy Companion Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in CreativeThemes Blocksy Companion.This issue affects Blocksy Companion: from n/a through 2.0.42. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/blocksy-companion/wordpress-blocksy-companion-plugin-2-0-42-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-35634 State: PUBLISHED Published: 2024-06-04T13:36:40.403Z Last Updated: 2024-08-08T16:06:33.190Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Wow-Company Products: Woocommerce – Recent Purchases Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wow-Company Woocommerce – Recent Purchases allows PHP Local File Inclusion.This issue affects Woocommerce – Recent Purchases: from n/a through 1.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-recent-purchases/woocommerce-
: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-recent-purchases/woocommerce-recent-purchases-plugin-1-0-1-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-35635 State: PUBLISHED Published: 2024-06-03T10:03:20.844Z Last Updated: 2024-08-02T03:14:53.431Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: WPManageNinja LLC Products: Ninja Tables Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-plugin-5-0-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-35636 State: PUBLISHED Published: 2024-06-01T09:07:30.367Z Last Updated: 2024-08-02T03:14:53.911Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Uploadcare Products: Uploadcare File Uploader and Adaptive Delivery (beta) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Uploadcare Uploadcare File Uploader and Adaptive Delivery (beta) uploadcare.This issue affects Uploadcare File Uploader and Adaptive Delivery (beta): from n/a through 3.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/uploadcare/wordpress-uploadcar
ent: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/uploadcare/wordpress-uploadcare-file-uploader-and-adaptive-delivery-plugin-3-0-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-35637 State: PUBLISHED Published: 2024-06-03T08:59:28.926Z Last Updated: 2024-08-02T03:14:53.461Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Products: Church Admin Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Church Admin.This issue affects Church Admin: from n/a through 4.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/church-admin/wordpress-church-admin-plugin-4-3-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve