Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
itization on an imported JSON file. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/643b8b82-c4e1-4b81-a7e0-aee0f9270702?source=cve - https://plugins.trac.wordpress.org/browser/borderless/tags/1.5.7/includes/icon-manager/icon-manager.php#L249 - https://plugins.trac.wordpress.org/browser/borderless/tags/1.5.7/includes/icon-manager/icon-manager.php#L333 - https://plugins.trac.wordpress.org/browser/borderless/tags/1.5.7/includes/icon-manager/icon-manager.php#L388
CVE ID: CVE-2024-11601 State: PUBLISHED Published: 2024-11-22T05:33:41.092Z Last Updated: 2024-11-22T11:34:08.875Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: techfyd Products: Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery) Problem Types: CWE-862 Description: The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.1. This is due to missing or incorrect nonce v
e to Cross-Site Request Forgery in all versions up to, and including, 2.6.1. This is due to missing or incorrect nonce validation on the save_options() function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Please note this is limited to option values that can be saved as arrays. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5b951fd9-0fbf-4576-80a9-dbb053c3da92?source=cve - https://plugins.trac.wordpress.org/browser/sky-elementor-addons/tags/
/5b951fd9-0fbf-4576-80a9-dbb053c3da92?source=cve - https://plugins.trac.wordpress.org/browser/sky-elementor-addons/tags/2.6.1/includes/admin.php#L1267 - https://plugins.trac.wordpress.org/browser/sky-elementor-addons/tags/2.6.1/includes/admin.php#L1290 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3189030%40sky-elementor-addons&new=3189030%40sky-elementor-addons&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11602 State: PUBLISHED Published: 2025-03-20T10:10:54.541Z Last Updated: 2025-03-20T18:15:18.661Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: feast-dev Products: feast-dev/feast Problem Types: CWE-346 Description: A Cross-Origin Resource Sharing (CORS) vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can bypass intended security controls and potentially expose sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/b
ially expose sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7b24ecbe-0af7-4125-ab56-bce09786042e
CVE ID: CVE-2024-11603 State: PUBLISHED Published: 2025-03-20T10:10:02.292Z Last Updated: 2025-03-20T14:41:24.597Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: lm-sys Products: lm-sys/fastchat Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the `/queue/join?` endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal networks or the AWS metadata endpoint, potentially exposing sensitive data and compromising internal servers. Additional Analyst Notes:
AWS metadata endpoint, potentially exposing sensitive data and compromising internal servers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/89f1158d-4a75-4000-a1bd-f82dd1a62bff
CVE ID: CVE-2024-11605 State: PUBLISHED Published: 2024-12-27T06:00:09.008Z Last Updated: 2024-12-27T18:30:39.908Z Vendors: Unknown Products: wp-publications Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/91c5ee70-2ff5-46cd-a0f5-54987fc2e060/
CVE ID: CVE-2024-11606 State: PUBLISHED Published: 2025-01-07T06:00:03.957Z Last Updated: 2025-01-07T16:19:15.589Z Vendors: Unknown Products: Tabs Shortcode Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Tabs Shortcode WordPress plugin through 2.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/76ae8f5b-2d0e-4bf5-9ae3-f76cd52dea8d/
CVE ID: CVE-2024-11607 State: PUBLISHED Published: 2024-12-21T06:00:06.512Z Last Updated: 2024-12-27T14:43:02.561Z Vendors: Unknown Products: GTPayment Donations Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The GTPayment Donations WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/132b5193-156b-40b8-b5c7-08646e1f6866/
CVE ID: CVE-2024-11608 State: PUBLISHED Published: 2024-12-09T17:53:18.804Z Last Updated: 2025-08-28T14:38:16.647Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Revit Problem Types: CWE-122 Description: A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0026
CVE ID: CVE-2024-11609 State: PUBLISHED Published: 2025-01-30T20:18:26.773Z Last Updated: 2025-02-10T22:08:12.119Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: AutomationDirect Products: C-More EA9 Problem Types: CWE-121 Description: AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EAP9 files. Th
rget must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EAP9 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24772. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1673/ - https://certvde.com/en/bulletins/bulletins/2182-automationdirect-c-more-ea9-programming-software/
CVE ID: CVE-2024-11610 State: PUBLISHED Published: 2025-01-30T20:18:47.291Z Last Updated: 2025-02-10T22:08:05.734Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: AutomationDirect Products: C-More EA9 Problem Types: CWE-119 Description: AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EAP9 files. The issue re
visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EAP9 files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24773. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1674/ - https://certvde.com/en/bulletins/bulletins/2182-automationdirect-c-more-ea9-programming-software/
CVE ID: CVE-2024-11611 State: PUBLISHED Published: 2025-01-30T20:18:56.716Z Last Updated: 2025-02-06T21:25:24.680Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: AutomationDirect Products: C-More EA9 Problem Types: CWE-119 Description: AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EAP9 files. The issue re
visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EAP9 files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24774. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1675/ - https://certvde.com/en/bulletins/bulletins/2182-automationdirect-c-more-ea9-programming-software/
CVE ID: CVE-2024-11612 State: PUBLISHED Published: 2024-11-22T20:22:10.629Z Last Updated: 2024-11-26T15:13:29.515Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: 7-Zip Products: 7-Zip Problem Types: CWE-835 Description: 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop.
ic flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1606/
CVE ID: CVE-2024-11613 State: PUBLISHED Published: 2025-01-08T06:41:36.482Z Last Updated: 2025-01-08T15:08:48.560Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: nickboss Products: WordPress File Upload Problem Types: CWE-94 Description: The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to, and including, 4.24.15 via the 'wfu_file_downloader.php' file. This is due to lack of proper sanitization of the 'source' parameter and allowing a user-defined directory path. This makes it possible for unauthenticated attackers to execute code on the server. Additi
user-defined directory path. This makes it possible for unauthenticated attackers to execute code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/31052fe6-a0ae-4502-b2d2-dbc3b3bf672f?source=cve - https://plugins.svn.wordpress.org/wp-file-upload/trunk/wfu_file_downloader.php - https://plugins.trac.wordpress.org/changeset/3217005/
CVE ID: CVE-2024-11614 State: PUBLISHED Published: 2024-12-18T08:30:49.729Z Last Updated: 2025-11-20T00:59:36.216Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Red Hat Products: Fast Datapath for Red Hat Enterprise Linux 8, Fast Datapath for Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Lin
port, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Fast Datapath for RHEL 7, Fast Datapath for RHEL 8, Fast Datapath for RHEL 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-125 Description: An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user sid
out-of-bounds reads. This flaw allows an attacker with a malicious VM using a virtio driver to cause the vhost-user side to crash by sending a packet with a Tx checksum offload request and an invalid csum_start offset. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:0208 - https://access.redhat.com/errata/RHSA-2025:0209 - https://access.redhat.com/errata/RHSA-2025:0210 - https://access.redhat.com/errata/RHSA-2025:0211 - https://access.redhat.com/errata/RHSA-2025:0220 - https://access.redhat.com/errata/RHSA-2025:0221 - https://access.redhat.com/errata/RHSA-2025:0222 - https://access.redhat.com/errata/RHSA-20
t.com/errata/RHSA-2025:0221 - https://access.redhat.com/errata/RHSA-2025:0222 - https://access.redhat.com/errata/RHSA-2025:3963 - https://access.redhat.com/errata/RHSA-2025:3964 - https://access.redhat.com/errata/RHSA-2025:3965 - https://access.redhat.com/errata/RHSA-2025:3970 - https://access.redhat.com/security/cve/CVE-2024-11614 - https://bugzilla.redhat.com/show_bug.cgi?id=2327955
CVE ID: CVE-2024-11615 State: PUBLISHED Published: 2025-05-05T16:21:46.262Z Last Updated: 2025-05-05T16:46:41.176Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: ThemeKalia Products: Envolve Plugin Problem Types: CWE-22 Description: The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.0 via the 'zetra_deleteLanguageFile' and 'zetra_deleteFontsFile' functions. This is due to the plugin not properly validating a file or its path prior to deleting it. This makes it possible for unauthenticated attackers to delete language files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
or unauthenticated attackers to delete language files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/05909e9c-4f57-4556-bae9-b0b63a9a43ba?source=cve - https://themeforest.net/item/envolve-consulting-business-wordpress-theme/28748459
CVE ID: CVE-2024-11616 State: PUBLISHED Published: 2024-12-19T09:46:26.770Z Last Updated: 2025-06-09T17:06:32.754Z Vendors: Netskope Inc. Products: Endpoint DLP Problem Types: CWE-125 Description: Netskope was made aware of a security vulnerability in Netskope Endpoint DLP’s Content Control Driver where a double-fetch issue leads to heap overflow. The vulnerability arises from the fact that the NumberOfBytes argument to ExAllocatePoolWithTag, and the Length argument for RtlCopyMemory, both independently dereference their value from the user supplied input buffer inside the EpdlpSetUsbAction function, known as a double-fetch. If this length value grows to a higher value in between these two c
EpdlpSetUsbAction function, known as a double-fetch. If this length value grows to a higher value in between these two calls, it will result in the RtlCopyMemory call copying user-supplied memory contents outside the range of the allocated buffer, resulting in a heap overflow. A malicious attacker will need admin privileges to exploit the issue. This issue affects Endpoint DLP version below R119. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netskope.com/company/security-compliance-and-assurance/security-advisories-and-disclosures/netskope-security-advisory-nskpsa-2024-003 - https://inbits-sec.com/posts/cve-2024-11616-netskope/
CVE ID: CVE-2024-11617 State: PUBLISHED Published: 2025-05-09T06:42:35.817Z Last Updated: 2025-05-09T16:15:53.245Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeKalia Products: Envolve Plugin Problem Types: CWE-434 Description: The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'zetra_languageUpload' and 'zetra_fontsUpload' functions in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment:
affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d0ad02d9-546f-4bcb-b567-785e3acfb489?source=cve - https://themeforest.net/item/envolve-consulting-business-wordpress-theme/28748459
CVE ID: CVE-2024-11618 State: PUBLISHED Published: 2024-11-22T19:00:14.775Z Last Updated: 2024-11-22T19:23:24.641Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: IPC Products: Unigy Management System Problem Types: CWE-918 Description: A vulnerability classified as critical was found in IPC Unigy Management System 04.03.00.08.0027. Affected by this vulnerability is an unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Anal
ic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285841 - https://vuldb.com/?ctiid.285841 - https://vuldb.com/?submit.441817 - https://github.com/br484/br484.github.io/blob/main/archives/WEB/CVE%20-%20IPC%20Unigy%20-%20ingles.md
CVE ID: CVE-2024-11619 State: PUBLISHED Published: 2024-11-22T21:00:10.761Z Last Updated: 2024-11-23T13:28:21.380Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: macrozheng Products: mall Problem Types: CWE-1394 Description: A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3. Affected by this issue is some unknown functionality of the component JWT Token Handler. The manipulation leads to use of default cryptographic key. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Instead the issue po
be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Instead the issue posted on GitHub got deleted without any explanation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.285842 - https://vuldb.com/?ctiid.285842 - https://vuldb.com/?submit.444666 - https://github.com/macrozheng/mall/issues/880
CVE ID: CVE-2024-11620 State: PUBLISHED Published: 2024-11-28T10:34:46.237Z Last Updated: 2024-11-29T15:25:16.165Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Rank Math SEO Products: Rank Math SEO Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Rank Math SEO allows Code Injection.This issue affects Rank Math SEO: from n/a through 1.0.231. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/seo-by-rank-math/vulnerability/wordpress-rank-math-seo-plugin-1-0-231-arbitrary-htaccess-overwrite-to-remote-code-execution-rce-vulnerability?_s_id
ity/wordpress-rank-math-seo-plugin-1-0-231-arbitrary-htaccess-overwrite-to-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2024-11621 State: PUBLISHED Published: 2025-02-10T13:55:29.155Z Last Updated: 2025-02-12T15:17:11.387Z Vendors: Devolutions Products: Remote Desktop Manager Problem Types: CWE-295 Description: Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack. Versions affected are : Remote Desktop Manager macOS 2024.3.9.0 and earlier Remote Desktop Manager Linux 2024.3.2.5 and earlier Remote Desktop Manager Android 2024.3.3.7 and earlier Remote Desktop Manager iOS 2024.3.3.0 and earlier Remote Desktop Manager Powershell 2024.3.6.0 and earlier Additio
rlier Remote Desktop Manager iOS 2024.3.3.0 and earlier Remote Desktop Manager Powershell 2024.3.6.0 and earlier Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0001/
CVE ID: CVE-2024-11622 State: PUBLISHED Published: 2024-11-26T21:31:11.004Z Last Updated: 2024-11-27T12:01:12.519Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: HPE Insight Remote Support Problem Types: CWE-91 Description: An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us
CVE ID: CVE-2024-11623 State: PUBLISHED Published: 2025-02-04T13:34:11.029Z Last Updated: 2025-02-12T17:10:12.746Z Vendors: goauthentik Products: authentik Problem Types: CWE-79 Description: Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application icons. This action could only be performed by an authenticated admin user. The issue was fixed in 2024.10.4 release. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.goauthentik.io/docs/security/audits-and-certs/2024-11-cobalt#svg-images-for-icons-possible-xss-vulnerability - https://github.com/goauthentik/authentik/pull/12092 - https://cert.pl/en/posts/2025/
-icons-possible-xss-vulnerability - https://github.com/goauthentik/authentik/pull/12092 - https://cert.pl/en/posts/2025/02/CVE-2024-11623/