Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-4754 State: PUBLISHED Published: 2024-06-24T09:01:13.375Z Last Updated: 2024-08-01T20:47:41.682Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Next4Biz CRM & BPM Software Products: Business Process Manangement (BPM) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Stored XSS.This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-24-
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-24-0739
CVE ID: CVE-2024-4755 State: PUBLISHED Published: 2024-06-21T06:00:05.395Z Last Updated: 2024-08-01T20:47:41.777Z Vendors: Unknown Products: Google CSE Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Google CSE WordPress plugin through 1.0.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/adc6ea6d-29d8-4ad0-b0db-2540e8b3f9a9/
CVE ID: CVE-2024-4756 State: PUBLISHED Published: 2024-06-07T06:00:02.839Z Last Updated: 2024-08-01T20:47:41.910Z Vendors: Unknown Products: WP Backpack Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Backpack WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/ce4688b6-6713-43b5-aa63-8a3b036bd332/
CVE ID: CVE-2024-4757 State: PUBLISHED Published: 2024-06-25T06:00:02.291Z Last Updated: 2024-08-01T20:47:41.785Z Vendors: Unknown Products: Logo Manager For Enamad Problem Types: CWE-352 Cross-Site Request Forgery (CSRF), CWE-79 Cross-Site Scripting (XSS) Description: The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/b54b55e0-b184-4c90-ba94-feda0997bf2a/
CVE ID: CVE-2024-4758 State: PUBLISHED Published: 2024-06-26T06:00:02.801Z Last Updated: 2024-08-01T20:47:41.788Z Vendors: Unknown Products: Muslim Prayer Time BD Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/64ec57a5-35d8-4c69-bdba-096c2245a0db/
CVE ID: CVE-2024-4759 State: PUBLISHED Published: 2024-06-25T06:00:03.188Z Last Updated: 2024-08-01T20:47:41.891Z Vendors: Unknown Products: Mime Types Extended Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Mime Types Extended WordPress plugin through 0.11 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/1c7547fa-539a-4890-a94d-c57b3d025507/
CVE ID: CVE-2024-4760 State: PUBLISHED Published: 2024-05-16T13:07:57.462Z Last Updated: 2025-06-06T15:08:03.023Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Microchip Products: SAME70, SAMS70, SAMV70, SAMV71, SAMG55, SAM4C, SAM4S, SAM4N, SAM4E, SAM3S, SAM3N, SAM3U Problem Types: CWE-1247 Description: A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.0x01team.com/h
et. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.0x01team.com/hw_security/bypassing-microchip-atmel-sam-e70-s70-v70-v71-security/ - https://ww1.microchip.com/downloads/aemDocuments/documents/MCU32/ProductDocuments/SupportingCollateral/Security-Advisory-CVE-2024-4760.pdf
CVE ID: CVE-2024-4761 State: PUBLISHED Published: 2024-05-14T02:09:53.698Z Last Updated: 2025-10-21T23:05:18.486Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html - https://issues.chromium.org/issues/339458194 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.o
ues.chromium.org/issues/339458194 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2024-4762 State: PUBLISHED Published: 2024-12-16T17:04:00.964Z Last Updated: 2024-12-16T17:19:06.238Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Accessories and Display Manager, Display Control Center Problem Types: CWE-295 Description: An improper validation vulnerability was reported in the firmware update mechanism of LADM and LDCC that could allow a local attacker to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.co/us/en/product_security/LEN-174319
CVE ID: CVE-2024-4763 State: PUBLISHED Published: 2024-08-16T14:17:13.323Z Last Updated: 2024-08-16T15:08:37.647Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Display Control Center, Accessories and Display Manager Problem Types: CWE-276 Description: An insecure driver vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM) that could allow a local attacker to escalate privileges to kernel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-155486
CVE ID: CVE-2024-4764 State: PUBLISHED Published: 2024-05-14T17:21:25.110Z Last Updated: 2024-08-01T20:47:41.789Z Vendors: Mozilla Products: Firefox Problem Types: Use-after-free when audio input connected with multiple consumers Description: Multiple WebRTC threads could have claimed a newly connected audio input leading to use-after-free. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1879093 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4765 State: PUBLISHED Published: 2024-05-14T17:21:25.339Z Last Updated: 2024-08-29T20:28:35.825Z Vendors: Mozilla Products: Firefox Problem Types: Web application manifests could have been overwritten via hash collision Description: Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
ulnerability affects Firefox < 126. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1871109 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4766 State: PUBLISHED Published: 2024-05-14T17:21:25.583Z Last Updated: 2024-11-26T13:34:08.972Z Vendors: Mozilla Products: Firefox Problem Types: Fullscreen notification could have been obscured on Firefox for Android Description: Different techniques existed to obscure the fullscreen notification in Firefox for Android. These could have led to potential user confusion and spoofing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1871214 - https://bugzil
lnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1871214 - https://bugzilla.mozilla.org/show_bug.cgi?id=1871217 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4767 State: PUBLISHED Published: 2024-05-14T17:21:23.746Z Last Updated: 2025-03-28T19:24:10.616Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: IndexedDB files retained in private browsing mode Description: If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed. This preference is disabled by default in Firefox. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1878577 - https://www.mozilla.org/s
- CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1878577 - https://www.mozilla.org/security/advisories/mfsa2024-21/ - https://www.mozilla.org/security/advisories/mfsa2024-22/ - https://www.mozilla.org/security/advisories/mfsa2024-23/ - https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html - https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html
CVE ID: CVE-2024-4768 State: PUBLISHED Published: 2024-05-14T17:21:24.047Z Last Updated: 2025-02-13T17:53:39.586Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Potential permissions request bypass via clickjacking Description: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1886082 - https://www.mozilla.org/security/advisories/mfsa2024-21/ - https://www.mozilla
lla.mozilla.org/show_bug.cgi?id=1886082 - https://www.mozilla.org/security/advisories/mfsa2024-21/ - https://www.mozilla.org/security/advisories/mfsa2024-22/ - https://www.mozilla.org/security/advisories/mfsa2024-23/ - https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html - https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html
CVE ID: CVE-2024-4769 State: PUBLISHED Published: 2024-05-14T17:21:24.318Z Last Updated: 2025-02-13T17:53:40.168Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Cross-origin responses could be distinguished between script and non-script content-types Description: When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses. This could have been abused to learn information cross-origin. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - htt
and Thunderbird < 115.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1886108 - https://www.mozilla.org/security/advisories/mfsa2024-21/ - https://www.mozilla.org/security/advisories/mfsa2024-22/ - https://www.mozilla.org/security/advisories/mfsa2024-23/ - https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html - https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html
CVE ID: CVE-2024-4770 State: PUBLISHED Published: 2024-05-14T17:21:24.594Z Last Updated: 2025-02-13T17:53:40.744Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free could occur when printing to PDF Description: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1893270 - https://www.mozilla.org/security/advisories/mfsa2024-21/ - https://www.mozilla.org/security/advisories/mfsa2024-22/
70 - https://www.mozilla.org/security/advisories/mfsa2024-21/ - https://www.mozilla.org/security/advisories/mfsa2024-22/ - https://www.mozilla.org/security/advisories/mfsa2024-23/ - https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html - https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html
CVE ID: CVE-2024-4771 State: PUBLISHED Published: 2024-05-14T17:21:25.853Z Last Updated: 2024-08-01T20:47:41.788Z Vendors: Mozilla Products: Firefox Problem Types: Failed allocation could lead to use-after-free Description: A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1893891 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4772 State: PUBLISHED Published: 2024-05-14T17:21:26.111Z Last Updated: 2024-11-20T15:25:54.388Z Vendors: Mozilla Products: Firefox Problem Types: Use of insecure rand() function to generate nonce Description: An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1870579 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4773 State: PUBLISHED Published: 2024-05-14T17:21:26.363Z Last Updated: 2024-08-01T20:47:41.768Z Vendors: Mozilla Products: Firefox Problem Types: URL bar could be cleared after network error Description: When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This could have been used to obfuscate a spoofed web site. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1875248 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4774 State: PUBLISHED Published: 2024-05-14T17:21:26.609Z Last Updated: 2025-03-28T18:47:41.860Z Vendors: Mozilla Products: Firefox Problem Types: Undefined behavior in ShmemCharMapHashEntry() Description: The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1886598 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4775 State: PUBLISHED Published: 2024-05-14T17:21:26.862Z Last Updated: 2024-08-01T20:47:41.779Z Vendors: Mozilla Products: Firefox Problem Types: Invalid memory access in the built-in profiler Description: An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1887332 - https://www.mozilla.org/security/advisories/mfsa2024-
ferences: - https://bugzilla.mozilla.org/show_bug.cgi?id=1887332 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4776 State: PUBLISHED Published: 2024-05-14T17:21:27.154Z Last Updated: 2024-08-01T20:47:41.780Z Vendors: Mozilla Products: Firefox Problem Types: Window may remain disabled after file dialog is shown in full-screen Description: A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1887343 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4777 State: PUBLISHED Published: 2024-05-14T17:21:24.864Z Last Updated: 2025-03-13T16:28:20.230Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 Description: Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Re
x ESR < 115.11, and Thunderbird < 115.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1878199%2C1893340 - https://www.mozilla.org/security/advisories/mfsa2024-21/ - https://www.mozilla.org/security/advisories/mfsa2024-22/ - https://www.mozilla.org/security/advisories/mfsa2024-23/ - https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html - https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html
CVE ID: CVE-2024-4778 State: PUBLISHED Published: 2024-05-14T17:21:27.420Z Last Updated: 2024-08-01T20:55:08.737Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 126 Description: Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1838834%2C1889291%2C1889595%2C1890204%2C1891545 - https://www.mozilla.org/security/advisories/mfsa2024
uglist.cgi?bug_id=1838834%2C1889291%2C1889595%2C1890204%2C1891545 - https://www.mozilla.org/security/advisories/mfsa2024-21/
CVE ID: CVE-2024-4779 State: PUBLISHED Published: 2024-05-23T09:32:33.463Z Last Updated: 2024-08-01T20:55:08.759Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: unitecms Products: Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up to, and including, 1.5.107 due to insufficient escaping on the user supplied parameter and lack of sufficient preparatio
to, and including, 1.5.107 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b155f8ca-9d09-47d7-a7c2-7744df029c19?source=cve - https://plugins.trac.wordpress.org/changeset/3090199/unlimited-elements-for-elementor/trunk/provider/functions_wordpress.class.p
plugins.trac.wordpress.org/changeset/3090199/unlimited-elements-for-elementor/trunk/provider/functions_wordpress.class.php
CVE ID: CVE-2024-4780 State: PUBLISHED Published: 2024-07-16T06:43:33.227Z Last Updated: 2024-08-01T20:55:08.717Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: blocksera Products: Image Hover Effects – Elementor Addon Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eihe_link’ parameter in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an
t sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/637972a3-1936-4add-88a2-3fbafba4b5c8?source=cve - https://plugins.trac.wordpress.org/browser/image-hover-effects-addon-for-elementor/tags/1.4.3/includes/widgets.php#L529 - https://plugins.trac.wordpress.org/changeset/3117113/ - https://wordpress.org/plugins/image-hover-effects-addon-for-elementor/#developers
CVE ID: CVE-2024-4781 State: PUBLISHED Published: 2024-08-16T14:17:18.955Z Last Updated: 2025-08-21T15:25:36.366Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Printers Problem Types: CWE-770 Description: A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to crash printer communications until the system is rebooted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/422688
CVE ID: CVE-2024-4782 State: PUBLISHED Published: 2024-08-16T14:17:24.013Z Last Updated: 2025-08-21T15:26:59.308Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Printers Problem Types: CWE-770 Description: A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to disrupt the printer's functionality until a manual system reboot occurs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/422688