Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-2187 State: PUBLISHED Published: 2024-04-09T18:58:28.787Z Last Updated: 2024-08-01T19:03:39.027Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpzoom Products: Beaver Builder Addons by WPZOOM Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonials widget in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to injec
d output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/02fceb91-7691-4629-b18b-57959e9f3f62?source=cve - https://plugins.trac.wordpress.org/changeset/3046905/wpzoom-addons-for-beaver-builder
CVE ID: CVE-2024-2188 State: PUBLISHED Published: 2024-03-05T12:15:25.297Z Last Updated: 2024-08-02T19:36:42.551Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: TP-Link Products: Archer AX50 Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScript payload within that rule, which could result in an execution of the JavaScript payload when the rule is loaded. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
on of the JavaScript payload when the rule is loaded. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-tp-link-archer-ax50
CVE ID: CVE-2024-2189 State: PUBLISHED Published: 2024-05-21T06:00:01.749Z Last Updated: 2024-10-27T15:00:31.058Z Vendors: Unknown Products: Social Icons Widget & Block by WPZOOM Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Social Icons Widget & Block by WPZOOM WordPress plugin before 4.2.18 does not sanitise and escape some of its Widget settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/b8661fbe-78b9-4d2
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/b8661fbe-78b9-4d29-90bf-5b68af468eb6/
CVE ID: CVE-2024-2191 State: PUBLISHED Published: 2024-06-26T23:31:45.431Z Last Updated: 2024-09-17T16:01:03.749Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-284 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/444655 - https://hackerone.com/re
: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/444655 - https://hackerone.com/reports/2357370
CVE ID: CVE-2024-2193 State: PUBLISHED Published: 2024-03-15T18:03:32.844Z Last Updated: 2025-04-30T23:03:28.475Z Vendors: AMD, Xen Products: CPU, Xen Problem Types: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Description: A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
eculative executable code paths. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://kb.cert.org/vuls/id/488902 - https://xenbits.xen.org/xsa/advisory-453.html - https://www.vusec.net/projects/ghostrace/ - https://download.vusec.net/papers/ghostrace_sec24.pdf - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=944d5fe50f3f03daacfea16300e656a1691c4a23 - https://ibm.github.io/system-security-research-updates/2024/03/12/ghostrace - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7016.html - https://www.kb.cert.org/vuls/id/488902 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedora
l - https://www.kb.cert.org/vuls/id/488902 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/ - http://www.openwall.com/lists/oss-security/2024/03/12/14
CVE ID: CVE-2024-2194 State: PUBLISHED Published: 2024-03-13T15:27:20.750Z Last Updated: 2024-08-01T19:03:39.096Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: mostafas1990 Products: WP Statistics Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL search parameter in all versions up to, and including, 14.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user acces
possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e44e4bdd-d84e-4315-9232-48a3b240242d?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3047756%40wp-statistics&new=3047756%40wp-statistics&sfp_email=&sfph_mail=
CVE ID: CVE-2024-2195 State: PUBLISHED Published: 2024-04-10T17:08:12.635Z Last Updated: 2024-08-01T19:03:39.092Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: aimhubio Products: aimhubio/aim Problem Types: CWE-94 Description: A critical Remote Code Execution (RCE) vulnerability was identified in the aimhubio/aim project, specifically within the `/api/runs/search/run/` endpoint, affecting versions >= 3.0.0. The vulnerability resides in the `run_search_api` function of the `aim/web/api/runs/views.py` file, where improper restriction of user access to the `RunView` object allows for the execution of arbitrary code via the `query` parameter. This issue enab
ser access to the `RunView` object allows for the execution of arbitrary code via the `query` parameter. This issue enables attackers to execute arbitrary commands on the server, potentially leading to full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/22f2355e-b875-4c01-b454-327e5951c018
CVE ID: CVE-2024-2196 State: PUBLISHED Published: 2024-04-10T17:08:12.021Z Last Updated: 2024-08-01T19:03:39.185Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: aimhubio Products: aimhubio/aim Problem Types: CWE-352 Description: aimhubio/aim is vulnerable to Cross-Site Request Forgery (CSRF), allowing attackers to perform actions such as deleting runs, updating data, and stealing data like log records and notes without the user's consent. The vulnerability stems from the lack of CSRF and CORS protection in the aim dashboard. An attacker can exploit this by tricking a user into executing a malicious script that sends unauthorized requests to the aim server, le
exploit this by tricking a user into executing a malicious script that sends unauthorized requests to the aim server, leading to potential data loss and unauthorized data manipulation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/e141e3f2-afbb-405f-a891-f66628c8b68f
CVE ID: CVE-2024-2197 State: PUBLISHED Published: 2024-03-19T23:46:14.505Z Last Updated: 2024-08-01T19:03:39.092Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Chirp Systems Products: Chirp Access Problem Types: CWE-259 Description: The Chirp Access app contains a hard-coded password, BEACON_PASSWORD. An attacker within Bluetooth range could change configuration settings within the Bluetooth beacon, effectively disabling the application's ability to notify users when they are near a Beacon-enabled access point. This variable cannot be used to change the configuration settings of the door readers or locksets and does not affect the ability for authorized us
d to change the configuration settings of the door readers or locksets and does not affect the ability for authorized users of the mobile application to lock or unlock access points. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-067-01 - https://statement.chirpsystems.com/chirp-systems-icsa-24-067-01-response.html
CVE ID: CVE-2024-2198 State: PUBLISHED Published: 2024-04-09T18:58:50.644Z Last Updated: 2024-08-01T19:03:39.112Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: bestwebsoft Products: Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_address’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthen
to, and including, 4.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5eb66ca3-768e-4d8c-a0fa-74e78250aee3?source=cve - https://plugins.trac.wordpress.org/changeset/3047840/contact-form-plugin
CVE ID: CVE-2024-2199 State: PUBLISHED Published: 2024-05-28T12:04:07.401Z Last Updated: 2025-11-06T21:48:49.923Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Directory Server 11.5 E4S for RHEL 8, Red Hat Directory Server 11.8 for RHEL 8, Red Hat Directory Server 11.9 for RHEL 8, Red Hat Directory Server 12.4 for RHEL 9, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-20 Description: A denial of service vulnerability was found in 389-ds-base l
d Hat Enterprise Linux 6 Problem Types: CWE-20 Description: A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:3591 - https://access.redhat.com/errata/RHSA-2024:3837 - https://access.redhat.com/errata/RHSA-2024:4092 - https://access.redhat.com/errata/RHSA-2024:4209 - https://access.redhat.com/errata/RHSA-2024:4210 - https://access.redhat.com/errata/RHSA-2024:4235 - https://access.redhat.com/errata/RHSA-2024:4633 - https:/
-2024:4210 - https://access.redhat.com/errata/RHSA-2024:4235 - https://access.redhat.com/errata/RHSA-2024:4633 - https://access.redhat.com/errata/RHSA-2024:5690 - https://access.redhat.com/errata/RHSA-2025:1632 - https://access.redhat.com/security/cve/CVE-2024-2199 - https://bugzilla.redhat.com/show_bug.cgi?id=2267976
CVE ID: CVE-2024-2200 State: PUBLISHED Published: 2024-04-09T18:58:39.126Z Last Updated: 2025-08-27T21:02:56.904Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: bestwebsoft Products: Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_subject’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthen
to, and including, 4.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/28524702-3428-4fca-afe8-71b3f2dd983d?source=cve - https://plugins.trac.wordpress.org/changeset/3047840/contact-form-plugin
CVE ID: CVE-2024-2201 State: PUBLISHED Published: 2024-12-19T20:28:31.596Z Last Updated: 2025-01-09T16:40:32.522Z Vendors: Xen Products: Xen Problem Types: CWE-1423 Description: A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/155143 - https://github.com/vusec/inspectre-gadget?tab=readme-ov-file - http://www.openwall.com/lists/oss-security/2024/04/09/15 - http://www.openwall.com/lists/oss-security/2024/05/07/7 - http://xenbits.xen.org/xsa/advisory-456.html - h
24/04/09/15 - http://www.openwall.com/lists/oss-security/2024/05/07/7 - http://xenbits.xen.org/xsa/advisory-456.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QKNCPX7CJUK4I6BRGABAUQK2DMQZUCA/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RYAZ7P6YFJ2E3FHKAGIKHWS46KYMMTZH/ - https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/branch-history-injection.htm
CVE ID: CVE-2024-2202 State: PUBLISHED Published: 2024-03-23T02:32:55.338Z Last Updated: 2024-08-01T19:03:39.099Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gpriday Products: Page Builder by SiteOrigin Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the legacy Image widget in all versions up to, and including, 2.29.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitr
escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/52116a6f-506f-4eeb-9bcc-19900ef38101?source=cve - https://plugins.trac.wordpress.org/browser/siteorigin-panels/trunk/widgets/widgets.php#L911 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3053935%40siteorigin-panels&new=3053935%40siteorigin-panels&sfp_email=&sfph_mail=#file31
CVE ID: CVE-2024-2203 State: PUBLISHED Published: 2024-03-27T01:56:47.378Z Last Updated: 2024-08-01T19:18:57.015Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: posimyththemes Products: The Plus Addons for Elementor Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Clients widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of a
th contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dc7ff863-3a8e-41cd-ae20-78bb4577c16a?source=cve - https://plugins.trac.wordpress.org/changeset/3056776/the-plus-addons-for-elementor-page-builder
CVE ID: CVE-2024-2204 State: PUBLISHED Published: 2024-03-15T04:20:23.809Z Last Updated: 2024-08-01T19:03:39.287Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Zemana Products: AntiLogger Problem Types: CWE-476 Description: Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service (DoS) vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fluidattacks.com/advisories/hassan/ - https://zemana.com/us/antilogger.html
CVE ID: CVE-2024-2206 State: PUBLISHED Published: 2024-03-27T00:00:32.469Z Last Updated: 2024-08-01T19:03:39.317Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: gradio-app Products: gradio-app/gradio Problem Types: CWE-918 Description: An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls` set through the `X-Direct-Url` header in requests to the `/` and `/config` routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to interna
tion of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the `build_proxy_request` function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e - https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6
CVE ID: CVE-2024-2207 State: PUBLISHED Published: 2024-11-12T19:24:46.327Z Last Updated: 2024-11-13T18:26:16.314Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H) Vendors: Sound Research Products: SECOMN64 Driver Problem Types: CWE-427 Description: Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_11567250-11567490-16/hpsbhf03987
CVE ID: CVE-2024-2208 State: PUBLISHED Published: 2024-11-12T19:40:01.280Z Last Updated: 2024-11-12T20:28:14.677Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Sound Research Products: SECOMN64 Driver Problem Types: CWE-427 Description: Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_11567250-11567490-16/hpsbhf03987
CVE ID: CVE-2024-2209 State: PUBLISHED Published: 2024-03-26T23:49:12.512Z Last Updated: 2024-08-06T18:48:35.083Z Vendors: HP, Inc. Products: HP Printer Firmware Update Utility Description: A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility (FUU) bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_10354903-10354932-16
CVE ID: CVE-2024-2210 State: PUBLISHED Published: 2024-03-27T01:56:45.775Z Last Updated: 2024-08-01T19:29:53.591Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: posimyththemes Products: The Plus Addons for Elementor Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The The Plus Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.4.1 via the Team Member Listing widget. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the ex
ttackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/30579058-54f4-4496-9275-078faf99823f?source=cve - https://plugins.trac.wordpress.org/changeset/3056776/the-plus-addons-for-elementor-page-builder
CVE ID: CVE-2024-2211 State: PUBLISHED Published: 2024-03-06T10:47:03.845Z Last Updated: 2024-08-01T19:03:39.398Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Gophish Products: Admin Panel Problem Types: CWE-79 Description: Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicious JavaScript payload in the campaign menu and trigger the payload when the campaign is removed from the menu. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-gophish-admi
tainer: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-gophish-admin-panel