Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-47240 State: PUBLISHED Published: 2024-10-18T11:09:18.635Z Last Updated: 2024-10-18T13:33:55.705Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Dell Products: Secure Connect Gateway (SCG) 5.0 Appliance - SRS Problem Types: CWE-276 Description: Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the file system and could potentially exploit this vulnerability to gain write access to unauthorized data and cause a version update failure condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/
re condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2024-47241 State: PUBLISHED Published: 2024-10-18T16:28:43.174Z Last Updated: 2024-10-18T16:48:54.637Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Dell Products: Secure Connect Gateway (SCG) 5.0 Appliance - SRS Problem Types: CWE-295 Description: Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000237
d data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2024-47248 State: PUBLISHED Published: 2024-11-26T11:15:46.394Z Last Updated: 2024-12-06T10:14:24.864Z Vendors: Apache Software Foundation Products: Apache NimBLE Problem Types: CWE-120 Description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. Specially crafted MESH message could result in memory corruption when non-default build configuration is used. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/z8m7jqh54xybf9kz8q2l3tz92zsj7t
Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/z8m7jqh54xybf9kz8q2l3tz92zsj7tmz - https://github.com/apache/mynewt-nimble/commit/4f75c0b3b466186beff40e8489870c6cee076aaa
CVE ID: CVE-2024-47249 State: PUBLISHED Published: 2024-11-26T11:16:35.626Z Last Updated: 2024-12-06T10:15:23.820Z Vendors: Apache Software Foundation Products: Apache NimBLE Problem Types: CWE-129 Description: Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from controller could result in out-of-bound memory corruption and crash. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
.8.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/7ckxw6481dp68ons627pjcb27c75n0mq - https://github.com/apache/mynewt-nimble/commit/f39330866a85fa4de49246e9d21334bc8d14f0a1
CVE ID: CVE-2024-47250 State: PUBLISHED Published: 2024-11-26T11:17:19.568Z Last Updated: 2024-12-06T10:16:02.631Z Vendors: Apache Software Foundation Products: Apache NimBLE Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI advertising report could lead to out-of-bound access when parsing HCI event and thus bogus GAP 'device found' events being sent. This issue requires broken or bogus Bluetooth controller and thus severity is considered low. This issue affects Apache NimBLE: through 1.7.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA A
ommended to upgrade to version 1.8.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/zdb50spojlqbn0yxd866mbzqjt2vpt85 - https://github.com/apache/mynewt-nimble/commit/3b7a32ea09a3bffaab831ee0ab193a2375fc4df6 - https://github.com/apache/mynewt-nimble/commit/23d61150ddae4bc8356356d7ef09d816fb89da45
CVE ID: CVE-2024-47252 State: PUBLISHED Published: 2025-07-10T16:55:20.013Z Last Updated: 2025-11-04T21:08:59.176Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-150 Description: Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%{varname}x" or "%{varname}c" to log variables provided by mod_ssl such as SSL_TLS_SNI, no escaping is performed by either mod_log_config or mod_ssl and unsanitized data provided by the client may appear in log files. Additional
med by either mod_log_config or mod_ssl and unsanitized data provided by the client may appear in log files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html
CVE ID: CVE-2024-47253 State: PUBLISHED Published: 2024-11-05T09:08:56.300Z Last Updated: 2024-11-07T11:54:17.366Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: 2N Products: 2N Access Commander Problem Types: CWE-22 Description: In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbitrary remote code execution. This vulnerability cannot be exploited by users with lower privilege roles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.2n.com/en-GB/download/Access-Commander-Security-Advisory-
lyst Notes: - CISA ADP Vulnrichment: References: - https://www.2n.com/en-GB/download/Access-Commander-Security-Advisory-2024-11
CVE ID: CVE-2024-47254 State: PUBLISHED Published: 2024-11-05T09:13:08.132Z Last Updated: 2025-09-04T08:14:20.535Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: 2N Products: 2N Access Commander Problem Types: CWE-807 Description: In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.2n.com/en-GB/download/Access-Commander-Security-Advisory-2024-11
CVE ID: CVE-2024-47255 State: PUBLISHED Published: 2024-11-05T09:16:48.128Z Last Updated: 2025-09-04T08:15:42.319Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: 2N Products: 2N Access Commander Problem Types: CWE-354 Description: In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.2n.com/en-GB/download/Access-Commander-Security-Advisory-2024-11
CVE ID: CVE-2024-47256 State: PUBLISHED Published: 2025-02-06T19:10:03.820Z Last Updated: 2025-02-21T12:19:43.180Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: 2N Products: 2N Access Commander Problem Types: CWE-321 Description: Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older. 2N has released an updated version 3.3 of 2N Access Commander, where this vulnerability is mitigated. It is recommended that all customers update 2N Access Commander to the
Commander, where this vulnerability is mitigated. It is recommended that all customers update 2N Access Commander to the latest version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.2n.com/en-GB/download/cve_2024_47256_acom_3_3_v1pdf
CVE ID: CVE-2024-47257 State: PUBLISHED Published: 2024-11-26T07:21:41.556Z Last Updated: 2024-11-29T05:33:54.460Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Axis Communications AB Products: AXIS Q6128-E PTZ Network Camera, AXIS P1428-E Network Camera Problem Types: CWE-1284 Description: Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network. Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software support. Please refer to the Axis security advisory for more information and s
cts that are still under AXIS OS software support. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/b7/76/b2/cve-2024-47257pdf-en-US-458044.pdf
CVE ID: CVE-2024-47258 State: PUBLISHED Published: 2025-02-06T19:10:40.660Z Last Updated: 2025-09-04T08:06:39.659Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: 2N Products: 2N Access Commander Problem Types: CWE-295 Description: 2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. 2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2 of 2N Access Commander (released in February 2022) it is also possible to enforce TLS certificate validation.It is recommended that all cu
nder (released in February 2022) it is also possible to enforce TLS certificate validation.It is recommended that all customers update 2N Access Commander to the latest version and use one of two mentioned practices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.2n.com/en-GB/download/cve_2024_47258_acom_3_3_v1pdf
CVE ID: CVE-2024-47259 State: PUBLISHED Published: 2025-03-04T05:15:16.499Z Last Updated: 2025-03-28T07:15:06.622Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-434 Description: Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files to the Axis device with the purpose to exhaust system resources. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information a
sed patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/13/cd/4a/cve-2024-47259pdf-en-US-466882.pdf
CVE ID: CVE-2024-47260 State: PUBLISHED Published: 2025-03-04T05:17:35.063Z Last Updated: 2025-03-28T07:13:48.640Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-641 Description: 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading more audio clips then designed resulting in the Axis device running out of memory. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CISA ADP
flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/1d/d3/ef/cve-2024-47260pdf-en-US-466883.pdf
CVE ID: CVE-2024-47261 State: PUBLISHED Published: 2025-04-08T05:33:58.782Z Last Updated: 2025-04-08T14:50:58.877Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-1287 Description: 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/18/c5/b2/cve-2024-47261pdf-en-US-474505.pdf
CVE ID: CVE-2024-47262 State: PUBLISHED Published: 2025-03-04T05:19:09.007Z Last Updated: 2025-03-28T07:11:08.168Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-1287 Description: Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not affected. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more i
is has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/a3/18/6e/cve-2024-47262pdf-en-US-466884.pdf
CVE ID: CVE-2024-47264 State: PUBLISHED Published: 2025-02-13T06:25:31.750Z Last Updated: 2025-02-18T17:21:29.800Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Synology Products: Active Backup for Business Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in agent-related functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-glob
a unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_25_02
CVE ID: CVE-2024-47265 State: PUBLISHED Published: 2025-02-13T06:25:55.487Z Last Updated: 2025-09-16T13:44:48.738Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Synology Products: Active Backup for Business Problem Types: CWE-73 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in encrypted share umount functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users to write specific files via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Sy
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_25_02
CVE ID: CVE-2024-47266 State: PUBLISHED Published: 2025-02-13T06:26:06.229Z Last Updated: 2025-02-13T15:54:15.268Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: Active Backup for Business Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list functionality in Synology Active Backup for Business before 2.7.1-13234, 2.7.1-23234 and 2.7.1-3234 allows remote authenticated users with administrator privileges to read specific files containing non-sensitive information via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ning non-sensitive information via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_25_02
CVE ID: CVE-2024-47290 State: PUBLISHED Published: 2024-09-27T10:15:05.972Z Last Updated: 2024-09-27T16:07:05.266Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-476 Description: Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE ID: CVE-2024-47291 State: PUBLISHED Published: 2024-09-27T10:16:31.299Z Last Updated: 2024-09-27T15:12:46.209Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-16 Description: Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE ID: CVE-2024-47292 State: PUBLISHED Published: 2024-09-27T10:19:33.920Z Last Updated: 2024-09-27T15:12:13.816Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-22 Description: Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE ID: CVE-2024-47293 State: PUBLISHED Published: 2024-09-27T10:21:46.924Z Last Updated: 2024-09-27T15:11:29.485Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-130 Description: Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE ID: CVE-2024-47294 State: PUBLISHED Published: 2024-09-27T10:23:04.081Z Last Updated: 2024-09-27T15:10:40.364Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-16 Description: Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/10/
CVE ID: CVE-2024-47295 State: PUBLISHED Published: 2024-10-01T03:16:40.052Z Last Updated: 2024-11-11T07:15:21.646Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SEIKO EPSON CORPORATION Products: Web Config Problem Types: CWE-1188 Description: Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under [References]. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://epson.com/Support/wa00958 - https://www.eps
s]. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://epson.com/Support/wa00958 - https://www.epson.jp/support/misc_t/240930_03_oshirase.htm - https://jvn.jp/en/vu/JVNVU95133448/
CVE ID: CVE-2024-47297 State: PUBLISHED Published: 2024-10-06T11:46:08.770Z Last Updated: 2024-10-07T13:09:28.610Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CodePeople Products: CP Polls Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople CP Polls allows Reflected XSS.This issue affects CP Polls: from n/a through 1.0.74. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cp-polls/wordpress-polls-cp-plugin-1-0-74-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-47298 State: PUBLISHED Published: 2024-10-06T11:44:38.584Z Last Updated: 2024-10-07T13:09:06.819Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BoldThemes Products: Bold Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 5.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bold-page-builder/wordpress-bold-page-builder-plugin-5-1-1-cross-site-scripting-xss-vulnerability?_s
abase/vulnerability/bold-page-builder/wordpress-bold-page-builder-plugin-5-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-47299 State: PUBLISHED Published: 2024-10-06T11:42:29.400Z Last Updated: 2024-10-07T13:08:39.716Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: SeedProd Products: Coming Soon Page, Under Construction & Maintenance Mode by SeedProd Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd allows Stored XSS.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through 6.17.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
Maintenance Mode by SeedProd: from n/a through 6.17.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/coming-soon/wordpress-website-builder-by-seedprod-6-17-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-47300 State: PUBLISHED Published: 2024-10-06T11:38:28.833Z Last Updated: 2024-10-07T13:08:19.026Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CubeWP Products: CubeWP Forms – All-in-One Form Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CubeWP CubeWP Forms – All-in-One Form Builder allows Stored XSS.This issue affects CubeWP Forms – All-in-One Form Builder: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cubewp-forms/wordpress-cubewp-forms-plugin-1-1-
ulnrichment: References: - https://patchstack.com/database/vulnerability/cubewp-forms/wordpress-cubewp-forms-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve