Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-12174 State: PUBLISHED Published: 2024-12-09T21:38:47.542Z Last Updated: 2024-12-10T17:14:03.468Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Tenable Products: Security Center Problem Types: CWE-295 Description: An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2024-19
CVE ID: CVE-2024-12175 State: PUBLISHED Published: 2024-12-19T20:53:22.926Z Last Updated: 2025-03-13T16:14:52.654Z Vendors: Rockwell Automation Products: Arena® Description: Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-cen
tor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1713.html
CVE ID: CVE-2024-12176 State: PUBLISHED Published: 2025-01-07T04:22:19.089Z Last Updated: 2025-01-07T16:19:51.615Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: wordlift Products: WordLift – AI powered SEO – Schema Problem Types: CWE-862 Description: The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'wl_config_plugin' AJAX action in all versions up to, and including, 3.54.0. This makes it possible for unauthenticated attackers to update the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerab
ttings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ca6bdde6-f381-4ccb-8984-519cf9aca0b1?source=cve - https://wordpress.org/plugins/wordlift/
CVE ID: CVE-2024-12177 State: PUBLISHED Published: 2025-01-30T13:42:05.040Z Last Updated: 2025-01-30T14:39:33.322Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: boomdevs Products: Ai Image Alt Text Generator for WP Problem Types: CWE-79 Description: The Ai Image Alt Text Generator for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such a
nject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/902ec583-c072-4c6d-8250-ad08d7ecf239?source=cve - https://plugins.trac.wordpress.org/browser/ai-image-alt-text-generator-for-wp/tags/1.0.2/includes/class-boomdevs-ai-image-alt-text-generator-custom-menu.php#L218
CVE ID: CVE-2024-12178 State: PUBLISHED Published: 2024-12-17T15:16:31.988Z Last Updated: 2025-08-26T16:52:59.771Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-120 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027
CVE ID: CVE-2024-12179 State: PUBLISHED Published: 2024-12-17T15:19:29.587Z Last Updated: 2025-08-26T16:53:27.682Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-122 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-
rrent process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027
CVE ID: CVE-2024-12180 State: PUBLISHED Published: 2024-12-04T22:00:12.689Z Last Updated: 2024-12-05T14:46:10.618Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: DedeCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286902 - https://vuldb.com/?ctiid.286902 - https://
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286902 - https://vuldb.com/?ctiid.286902 - https://vuldb.com/?submit.452969 - https://github.com/Hebing123/cve/issues/76
CVE ID: CVE-2024-12181 State: PUBLISHED Published: 2024-12-04T22:00:14.645Z Last Updated: 2024-12-05T14:52:40.916Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: DedeCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_add.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286903 - https://vuldb.com/?ctiid.286903 - https://vuldb.com/?submit.452983 - https://github.com/Hebing123/cve/issues/77
CVE ID: CVE-2024-12182 State: PUBLISHED Published: 2024-12-04T22:31:05.504Z Last Updated: 2024-12-05T14:55:18.542Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: DedeCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionality of the file /member/soft_add.php. The manipulation of the argument body leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286904 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286904 - https://vuldb.com/?ctiid.286904 - https://vuldb.com/?submit.453003 - https://github.com/Hebing123/cve/issues/78
CVE ID: CVE-2024-12183 State: PUBLISHED Published: 2024-12-04T23:00:13.891Z Last Updated: 2024-12-05T15:04:56.839Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: DedeCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286905 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286905 - https://vuldb.com/?ctiid.286905 - https://vuldb.com/?submit.453374 - https://github.com/Hebing123/cve/issues/79
CVE ID: CVE-2024-12184 State: PUBLISHED Published: 2025-02-01T03:21:12.068Z Last Updated: 2025-02-03T16:38:34.220Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: cimatti Products: WordPress Contact Forms by Cimatti Problem Types: CWE-862 Description: The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download other user submitted forms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfe
download other user submitted forms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/695df547-f068-4ac1-926f-80dbf75632dd?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232168%40contact-forms&new=3232168%40contact-forms&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231363%40contact-forms&new=3231363%40contact-forms&sfp_email=&sfph_mail=
CVE ID: CVE-2024-12185 State: PUBLISHED Published: 2024-12-04T23:31:04.995Z Last Updated: 2024-12-05T15:17:36.617Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Hotel Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Administrator Login Password Handler. The manipulation of the argument Str2 leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CI
s to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286906 - https://vuldb.com/?ctiid.286906 - https://vuldb.com/?submit.454844 - https://github.com/1zzan/cve/blob/main/STACK-OVERFLOW1.md - https://code-projects.org/
CVE ID: CVE-2024-12186 State: PUBLISHED Published: 2024-12-04T23:31:06.740Z Last Updated: 2024-12-05T15:22:39.219Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Hotel Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additi
. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286907 - https://vuldb.com/?ctiid.286907 - https://vuldb.com/?submit.454846 - https://github.com/1zzan/cve/blob/main/STACK-OVERFLOW2.md - https://code-projects.org/
CVE ID: CVE-2024-12187 State: PUBLISHED Published: 2024-12-05T00:00:16.351Z Last Updated: 2024-12-05T15:33:41.534Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Library Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /showbook.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286908 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286908 - https://vuldb.com/?ctiid.286908 - https://vuldb.com/?submit.455058 - https://github.com/PunyHunter/CVE/issues/1 - https://1000projects.org/
CVE ID: CVE-2024-12188 State: PUBLISHED Published: 2024-12-05T00:00:18.278Z Last Updated: 2024-12-05T15:34:24.487Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Library Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Library Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /brains/stu.php. The manipulation of the argument useri leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286909 - https://vuldb.com/?ctiid.286909 - https://vuldb.com/?submit.455061 - https://github.com/SkGoing/CVE-repo_00/issues/4 - https://1000projects.org/
CVE ID: CVE-2024-12189 State: PUBLISHED Published: 2025-04-01T06:52:04.579Z Last Updated: 2025-04-01T14:39:37.152Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: posimyththemes Products: WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder Problem Types: CWE-79 Description: The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with
2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2e936214-ee25-4763-ba7a-b5308cc09a57?source=cve - https://wordpress.org/plugins/wdesignkit/#developers
CVE ID: CVE-2024-12190 State: PUBLISHED Published: 2024-12-25T03:21:32.469Z Last Updated: 2024-12-27T15:15:13.938Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: bitpressadmin Products: Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder Problem Types: CWE-862 Description: The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the bitform-form-entry-edit endpoint in all versions up to, and including, 2.17.3. This makes it
ing capability check on the bitform-form-entry-edit endpoint in all versions up to, and including, 2.17.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view all form submissions from other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ce9dab37-4118-4e13-857c-9aa072d25edf?source=cve - https://plugins.trac.wordpress.org/changeset/3204875/bit-form/trunk/includes/Frontend/FormEntryView.php - https://plugins.trac.wordpress.org/changeset/3209668/bit-form/trunk/includes/Frontend/FormEntryView.php
CVE ID: CVE-2024-12191 State: PUBLISHED Published: 2024-12-17T15:17:15.621Z Last Updated: 2025-08-26T16:53:52.322Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-787 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisori
CVE ID: CVE-2024-12192 State: PUBLISHED Published: 2024-12-17T15:17:56.627Z Last Updated: 2025-08-26T16:54:28.551Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-787 Description: A maliciously crafted DWF file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisorie
cess. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027
CVE ID: CVE-2024-12193 State: PUBLISHED Published: 2024-12-17T15:18:38.961Z Last Updated: 2025-08-26T16:54:55.956Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-787 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisori
CVE ID: CVE-2024-12194 State: PUBLISHED Published: 2024-12-17T15:20:17.674Z Last Updated: 2025-08-26T16:55:20.829Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-120 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027
CVE ID: CVE-2024-12195 State: PUBLISHED Published: 2025-01-04T11:24:20.388Z Last Updated: 2025-01-06T15:16:26.178Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: wedevs Products: WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts Problem Types: CWE-89 Description: The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to SQL Injection via the 'project_id' parameter of the /wp-json/pm/v2/projects/2/task-lists REST API endpoint in all versions up to, and including, 2.6.16 due to insufficient escaping on the user supplied p
lists REST API endpoint in all versions up to, and including, 2.6.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, who have been granted access to a project, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/798d120a-edec-4af9-b574-46f9beabc491?source=cve - https://plugins.trac.wordpress.org/browser/wedevs-project-manager/tags/2.6.14/src/Task_List/Controllers/Task_
urce=cve - https://plugins.trac.wordpress.org/browser/wedevs-project-manager/tags/2.6.14/src/Task_List/Controllers/Task_List_Controller.php#L688 - https://plugins.trac.wordpress.org/changeset/3213295/wedevs-project-manager
CVE ID: CVE-2024-12196 State: PUBLISHED Published: 2024-12-04T17:17:06.238Z Last Updated: 2024-12-04T21:13:37.434Z Vendors: Devolutions Products: Server Problem Types: CWE-863 Description: Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2024-0017
CVE ID: CVE-2024-12197 State: PUBLISHED Published: 2024-12-17T15:21:43.044Z Last Updated: 2025-08-26T16:55:38.680Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-787 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisori
CVE ID: CVE-2024-12198 State: PUBLISHED Published: 2024-12-17T15:22:49.565Z Last Updated: 2025-08-26T16:56:00.736Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-787 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisori
CVE ID: CVE-2024-12199 State: PUBLISHED Published: 2024-12-17T15:24:15.296Z Last Updated: 2025-08-26T16:56:27.244Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-787 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisori
CVE ID: CVE-2024-12200 State: PUBLISHED Published: 2024-12-17T15:26:28.404Z Last Updated: 2025-08-26T16:56:42.734Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Navisworks Freedom, Navisworks Simulate, Navisworks Manage Problem Types: CWE-787 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisori