Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-6595 State: PUBLISHED Published: 2024-07-17T01:30:43.332Z Last Updated: 2024-09-17T15:32:29.174Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-451 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 where it was possible to upload an NPM package with conflicting package data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/417975 - https://blog.vlt.sh/blog/the-massive-hole-in-the-np
References: - https://gitlab.com/gitlab-org/gitlab/-/issues/417975 - https://blog.vlt.sh/blog/the-massive-hole-in-the-npm-ecosystem
CVE ID: CVE-2024-6596 State: PUBLISHED Published: 2024-09-10T08:01:26.429Z Last Updated: 2024-09-10T18:46:17.099Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Endress+Hauser Products: Echo Curve Viewer, FieldCare SFE500 Package USB, FieldCare SFE500 Package Web-Package, Field Xpert SMT50, Field Xpert SMT70, Field Xpert SMT77, Field Xpert SMT79 Problem Types: CWE-94 Description: An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2024-041
CVE ID: CVE-2024-6598 State: PUBLISHED Published: 2024-07-09T13:41:15.786Z Last Updated: 2024-08-01T21:41:03.941Z Vendors: KNIME Products: KNIME Business Hub Problem Types: CWE-770 Description: A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processing new messages. This leads to an outage of most functionality of KNIME Business Hub. Recovery from the situation is only possible by manual administrator interaction. Please contact our support for instruction
very from the situation is only possible by manual administrator interaction. Please contact our support for instructions in case you have run into this situation. Updating to KNIME Business Hub 1.10.2 or later solves the problem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.knime.com/security/advisories#CVE-2024-6598
CVE ID: CVE-2024-6599 State: PUBLISHED Published: 2024-07-18T02:03:58.808Z Last Updated: 2024-08-01T21:41:03.722Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: mekshq Products: Meks Video Importer Problem Types: CWE-862 Missing Authorization Description: The Meks Video Importer plugin for WordPress is vulnerable to unauthorized API key modification due to a missing capability check on the ajax_save_settings function in all versions up to, and including, 1.0.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's API keys Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
ss and above, to modify the plugin's API keys Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eaf9cc48-1ba6-4e9b-9f49-54f7747c26e0?source=cve - https://plugins.trac.wordpress.org/browser/meks-video-importer/trunk/includes/class.meks-video-importer-vimeo.php#L74 - https://plugins.trac.wordpress.org/browser/meks-video-importer/trunk/includes/class.meks-video-importer-youtube.php#L98
CVE ID: CVE-2024-6600 State: PUBLISHED Published: 2024-07-09T14:25:56.437Z Last Updated: 2025-10-30T16:14:47.510Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1888340 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozil
zilla.mozilla.org/show_bug.cgi?id=1888340 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-30/ - https://www.mozilla.org/security/advisories/mfsa2024-31/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6601 State: PUBLISHED Published: 2024-07-09T14:25:56.733Z Last Updated: 2025-10-30T16:14:52.710Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1890748 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-30/ - https://www.mozilla.org/security/advi
visories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-30/ - https://www.mozilla.org/security/advisories/mfsa2024-31/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6602 State: PUBLISHED Published: 2024-07-09T14:25:57.026Z Last Updated: 2025-11-03T22:32:44.098Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1895032 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-30/ - https://www.mozilla.org/security/advisories/mfsa2024-31/ -
- https://www.mozilla.org/security/advisories/mfsa2024-30/ - https://www.mozilla.org/security/advisories/mfsa2024-31/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6603 State: PUBLISHED Published: 2024-07-09T14:25:57.402Z Last Updated: 2025-10-30T16:14:59.829Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1895081 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-30/
1 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-30/ - https://www.mozilla.org/security/advisories/mfsa2024-31/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6604 State: PUBLISHED Published: 2024-07-09T14:25:57.691Z Last Updated: 2025-10-30T16:16:17.696Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1748105%2C1837550%2C
ulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1748105%2C1837550%2C1884266 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-30/ - https://www.mozilla.org/security/advisories/mfsa2024-31/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6605 State: PUBLISHED Published: 2024-07-09T14:25:57.930Z Last Updated: 2025-10-30T16:16:23.259Z Vendors: Mozilla Products: Firefox Description: Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1836786 - https://www.mozilla.org/security/advisories/mfsa2024-29/
CVE ID: CVE-2024-6606 State: PUBLISHED Published: 2024-07-09T14:25:58.357Z Last Updated: 2025-11-04T16:02:31.567Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1902305 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6607 State: PUBLISHED Published: 2024-07-09T14:25:58.566Z Last Updated: 2025-10-30T16:14:34.437Z Vendors: Mozilla Products: Firefox, Thunderbird Description: It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1694513 - https://www.mozilla.org/security/advisories/mfs
er: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1694513 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6608 State: PUBLISHED Published: 2024-07-09T14:25:58.862Z Last Updated: 2025-10-30T16:14:36.591Z Vendors: Mozilla Products: Firefox, Thunderbird Description: It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1743329 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6609 State: PUBLISHED Published: 2024-07-09T14:25:59.075Z Last Updated: 2025-11-03T22:32:45.562Z Vendors: Mozilla Products: Firefox, Thunderbird Description: When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1839258 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6610 State: PUBLISHED Published: 2024-07-09T14:25:59.460Z Last Updated: 2025-10-30T16:14:44.122Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1883396 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6611 State: PUBLISHED Published: 2024-07-09T14:25:59.748Z Last Updated: 2025-10-30T16:15:03.312Z Vendors: Mozilla Products: Firefox, Thunderbird Description: A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1844827 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6612 State: PUBLISHED Published: 2024-07-09T14:26:00.305Z Last Updated: 2025-10-30T16:15:05.905Z Vendors: Mozilla Products: Firefox, Thunderbird Description: CSP violations generated links in the console tab of the developer tools, pointing to the violating resource. This caused a DNS prefetch which leaked that a CSP violation happened. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1880374 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6613 State: PUBLISHED Published: 2024-07-09T14:26:00.593Z Last Updated: 2025-10-30T16:15:08.177Z Vendors: Mozilla Products: Firefox, Thunderbird Description: The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1900523 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6614 State: PUBLISHED Published: 2024-07-09T14:26:00.836Z Last Updated: 2025-10-30T16:15:10.780Z Vendors: Mozilla Products: Firefox, Thunderbird Description: The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1902983 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6615 State: PUBLISHED Published: 2024-07-09T14:26:01.065Z Last Updated: 2025-10-30T16:16:20.528Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Thunderbird < 128. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1892875%2C1894428%2C1898364 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.m
uglist.cgi?bug_id=1892875%2C1894428%2C1898364 - https://www.mozilla.org/security/advisories/mfsa2024-29/ - https://www.mozilla.org/security/advisories/mfsa2024-32/
CVE ID: CVE-2024-6616 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:34.451Z Description: No description available.
CVE ID: CVE-2024-6617 State: PUBLISHED Published: 2024-09-13T06:00:02.561Z Last Updated: 2024-09-13T15:34:22.264Z Vendors: Unknown Products: NinjaTeam Header Footer Custom Code Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9c5efe3c-95a8-4647-86c0-20aa7dd92b66/
CVE ID: CVE-2024-6618 State: PUBLISHED Published: 2024-08-13T16:37:41.654Z Last Updated: 2024-08-20T16:31:02.999Z Vendors: Ocean Data Systems, AVEVA Products: Dream Report 2023, Reports for Operations Problem Types: CWE-22 Description: In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library (DLL). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-08
CVE ID: CVE-2024-6619 State: PUBLISHED Published: 2024-08-13T16:41:03.858Z Last Updated: 2024-08-14T14:37:29.108Z Vendors: Ocean Data Systems, AVEVA Products: Dream Report 2023, Reports for Operations 2023 Problem Types: CWE-732 Description: In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to escalate their privileges and could cause a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-08
CVE ID: CVE-2024-6620 State: PUBLISHED Published: 2024-07-29T20:14:27.666Z Last Updated: 2024-08-01T21:41:03.974Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Honeywell Products: PC42t, PC42tp, and PC42d (Common Firmware) Problem Types: CWE-602, CWE-79 Description: Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to the most recent version of this firmware, PC42 Printer Firmware Version 20.6 T10.20.060398. Additiona
mmends updating to the most recent version of this firmware, PC42 Printer Firmware Version 20.6 T10.20.060398. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sps.honeywell.com/us/en/support/productivity/cyber-security-notifications
CVE ID: CVE-2024-6621 State: PUBLISHED Published: 2024-07-16T11:00:58.101Z Last Updated: 2024-08-01T21:41:04.059Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: jeangalea Products: RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging Problem Types: CWE-862 Missing Authorization Description: The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wprss_activate_feed_source' and 'wprss_pause_feed_source' functions in all versions up to, and including, 4.23.11. This makes it possible for authenticated attacker
_feed_source' functions in all versions up to, and including, 4.23.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate or pause existing RSS feeds. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8e37331b-0b75-41ee-b390-532efd674cc1?source=cve - https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/trunk/includes/feed-states.php#L12 - https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/trunk/includes/feed-states.php#L28 - https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/trunk/includes/feed-states.php?rev=311823
-states.php#L28 - https://plugins.trac.wordpress.org/browser/wp-rss-aggregator/trunk/includes/feed-states.php?rev=3118231
CVE ID: CVE-2024-6624 State: PUBLISHED Published: 2024-07-11T06:43:13.276Z Last Updated: 2024-08-01T21:41:04.397Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: parorrey Products: JSON API User Problem Types: CWE-269 Improper Privilege Management Description: The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
plugin requires the JSON API plugin to also be installed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a4a26f60-5912-4d4a-8ef8-e4357c1fb1ff?source=cve - https://plugins.trac.wordpress.org/browser/json-api-user/trunk/controllers/User.php#L51 - https://plugins.trac.wordpress.org/browser/json-api-user/trunk/controllers/User.php#L187 - https://plugins.trac.wordpress.org/changeset/3115185/
CVE ID: CVE-2024-6625 State: PUBLISHED Published: 2024-07-12T07:35:10.446Z Last Updated: 2024-08-01T21:41:04.311Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: m_uysl Products: WP Total Branding – Complete branding solution for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Total Branding – Complete branding solution for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi
, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3b6ac92f-2ad1-4528-b157-5e49d6f224a5?source=cve - https://plugins.trac.wordpress.org/browser/wp-total-branding/trunk/includes/modules/login.php#L87 - https://plugins.trac.wordpress.o
ins.trac.wordpress.org/browser/wp-total-branding/trunk/includes/modules/login.php#L87 - https://plugins.trac.wordpress.org/changeset/3115880/wp-total-branding/trunk/includes/options/login.php - https://plugins.trac.wordpress.org/changeset/3115880/wp-total-branding/trunk/includes/modules/login.php - https://wordpress.org/plugins/wp-total-branding/#developers
CVE ID: CVE-2024-6626 State: PUBLISHED Published: 2024-11-06T06:43:32.465Z Last Updated: 2024-11-06T14:58:12.258Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: cscode Products: EleForms – All In One Form Integration including DB for Elementor Problem Types: CWE-862 Description: The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all versions up to, and including, 2.9.9.9. This makes it possible for unauthenticated attackers to view form submissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt