Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
hed and may be used. Upgrading to version 1.49.16 is sufficient to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.258299 - https://vuldb.com/?ctiid.258299 - https://vuldb.com/?submit.301588 - https://h0e4a0r1t.github.io/2024/vulns/FLIR-AX8%20Fixed%20Thermal%20Cameras%20Register%20any%20user%20in%20the%20background--test_login.php.pdf
CVE ID: CVE-2024-3014 State: PUBLISHED Published: 2024-03-28T01:00:04.426Z Last Updated: 2024-08-01T19:32:42.578Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Subscription Website Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of the file Actions.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258300. Additional Analyst Notes: - CISA ADP Vulnrichment: -
nd may be used. The identifier of this vulnerability is VDB-258300. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.258300 - https://vuldb.com/?ctiid.258300 - https://vuldb.com/?submit.305648 - https://github.com/Viciglu/cvehub/blob/main/Simple%20Subscription%20Website%20with%20Admin%20System%20Actions.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2024-3015 State: PUBLISHED Published: 2024-03-28T01:31:03.792Z Last Updated: 2024-08-01T19:32:42.558Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Subscription Website Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Simple Subscription Website 1.0. Affected by this vulnerability is an unknown functionality of the file manage_plan.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258301 was assigned to this vulnerability. Additional Analyst Notes: -
o the public and may be used. The identifier VDB-258301 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.258301 - https://vuldb.com/?ctiid.258301 - https://vuldb.com/?submit.305649 - https://github.com/Viciglu/cvehub/blob/main/Simple%20Subscription%20Website%20with%20Admin%20System%20manage_plan.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2024-3016 State: PUBLISHED Published: 2024-05-09T06:32:39.145Z Last Updated: 2024-08-22T15:09:05.064Z Vendors: NEC Platforms, Ltd Products: ITK-6DGS-1(BK) TEL, ITK-32LCGS-1(BK) TEL, ITK-32TCGS-1(BK) TEL, ITK-6D-1(BK)TEL, ITK-12D-1(BK)TEL, ITK-8LCX-1(BK)TEL, ITK-8TCGX-1(BK)TEL, ITK-6DGS-1A(BK) TEL, ITK-32LCGS-1A(BK) TEL, ITK-32TCGS-1A(BK) TEL, ITK-6DGS-1P(BK) TEL, ITK-32LCGS-1P(BK) TEL, ITK-32TCGS-1P(BK) TEL, ITK-6D-1P(BK)TEL, ITK-12D-1P(BK)TEL, ITK-6DG-1P(BK)TEL, ITK-12DG-1P(BK)TEL, ITK-8LCX-1P(BK)TEL, ITK-8LCG-1P(BK)TEL, ITK-32LCG-1P(BK)TEL, ITK-8TCGX-1P(BK)TEL, ITK-32TCG-1P(BK)TEL Problem Types: CWE-912 Description: NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4
, ITK-32TCG-1P(BK)TEL Problem Types: CWE-912 Description: NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jpn.nec.com/security-info/secinfo/nv24-002_en.html
CVE ID: CVE-2024-3017 State: PUBLISHED Published: 2024-06-27T18:35:26.344Z Last Updated: 2025-09-16T15:58:31.143Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: silabs.com Products: SiSDK Problem Types: CWE-125 Description: In a Silicon Labs multi-protocol gateway, a corrupt pointer to buffered data on a multi-protocol radio co-processor (RCP) causes the OpenThread Border Router(OTBR) application task running on the host platform to crash, allowing an attacker to cause a temporary denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SiliconLabs/simplicity_sdk - https://community.sila
nrichment: - CVE Program Container: References: - https://github.com/SiliconLabs/simplicity_sdk - https://community.silabs.com/069Vm000007UEhZIAW
CVE ID: CVE-2024-3018 State: PUBLISHED Published: 2024-03-30T11:17:25.675Z Last Updated: 2024-08-22T20:43:00.272Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wpdevteam Products: Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Essential Addons for Elementor plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.13 via deserialization of untrusted input from the 'error_resetpassword' attribute of the "Login | Register Form" widget (disabled by default). This makes it possible for authenticated
assword' attribute of the "Login | Register Form" widget (disabled by default). This makes it possible for authenticated attackers, with author-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/342049e5-834e-4867-8174-01ca7bb0caa2?source=cve - https://plugins.trac.wordpress.org/changeset/3060417/essential-addons-for-elementor-lite
CVE ID: CVE-2024-3019 State: PUBLISHED Published: 2024-03-28T18:32:43.298Z Last Updated: 2025-11-20T07:17:37.901Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterpris
nded Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-668 Description: A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This fl
manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2566 - https://access.redhat.com/errata/RHSA-2024:3264 - https://access.redhat.com/errata/RHSA-2024:3321 - https://access.redhat.com/errata/RHSA-2024:3322 - https://access.redhat.com/errata/RHSA-2024:3323 - https://access.redhat.com/errata/RHSA-2024:3324 - https://access.redhat.com/errata/RHSA-2024:3325 - https://access.redhat.com/errata/RHSA-2024:3392 - https://access.redhat.com/security/cve/CVE-2024-3
ata/RHSA-2024:3325 - https://access.redhat.com/errata/RHSA-2024:3392 - https://access.redhat.com/security/cve/CVE-2024-3019 - https://bugzilla.redhat.com/show_bug.cgi?id=2271898
CVE ID: CVE-2024-3020 State: PUBLISHED Published: 2024-04-10T04:30:21.588Z Last Updated: 2024-08-01T19:32:42.551Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: shapedplugin Products: Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce Problem Types: CWE-502 Deserialization of Untrusted Data Description: The plugin is vulnerable to PHP Object Injection in versions up to and including, 2.6.3 via deserialization of untrusted input in the import function via the 'shortcode' parameter. This allows authenticated attackers, with administrator-level access to inject a P
nction via the 'shortcode' parameter. This allows authenticated attackers, with administrator-level access to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d66df15e-1a0a-49e9-bcf9-67091499b24e?source=cve - https://plugins.trac.wordpress.org/changeset/3065296/wp-carousel-free/trunk/includes/class-wp-carousel-free-import-export.php
CVE ID: CVE-2024-3021 State: PUBLISHED Published: 2024-05-02T16:51:55.954Z Last Updated: 2024-08-01T19:32:42.542Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: mdhadid Products: Mhr Post Ticker Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Mhr Post Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Header Title value in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will
ossible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2f89bb45-2872-4081-a3b8-a1f11bbdbc55?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3074516%40mhr-post-ticker&new=3074516%40mhr-post-ticker&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&
ew=3074516%40mhr-post-ticker&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3077808%40mhr-post-ticker&new=3077808%40mhr-post-ticker&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3022 State: PUBLISHED Published: 2024-04-04T01:56:44.555Z Last Updated: 2024-08-01T19:32:42.511Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: reputeinfosystems Products: BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions up to, and including 1.0.87. This allows an authenticated attacker with administrator-level capabilities or higher to upload arbitrary
luding 1.0.87. This allows an authenticated attacker with administrator-level capabilities or higher to upload arbitrary files on the affected site's server, enabling remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/049ec264-3ed1-4741-937d-8a633ef0a627?source=cve - https://r0ot.notion.site/BookingPress-1-0-84-Authenticated-Administrator-Arbitrary-File-Upload-lead-to-RCE-e2603371c0c14d828144e26f2fdc1d01?pvs=4 - https://plugins.trac.wordpress.org/changeset/3061435/bookingpress-appointment-booking/trunk/core/classes/class.bookingpress_fileupload_class.php
CVE ID: CVE-2024-3023 State: PUBLISHED Published: 2024-05-02T16:51:42.176Z Last Updated: 2024-08-01T19:32:42.583Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: restpack Products: AnnounceKit Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The AnnounceKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that wi
uthenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0417e2d7-0c0a-48e1-bf18-3f5e16b1b8a0?source=cve - https://wordpress.org/plugins/announcekit/
CVE ID: CVE-2024-3024 State: PUBLISHED Published: 2024-03-28T02:00:05.886Z Last Updated: 2024-08-01T19:32:42.556Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: appneta Products: tcpreplay Problem Types: CWE-122 Description: A vulnerability was found in appneta tcpreplay up to 4.4.4. It has been classified as problematic. This affects the function get_layer4_v6 of the file /tcpreplay/src/common/get.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about thi
ay be used. The identifier VDB-258333 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.258333 - https://vuldb.com/?ctiid.258333 - https://vuldb.com/?submit.297866 - https://docs.google.com/document/d/1wCIrViAJwGsO5afPBLLjRhO5RClsoUo3J9q1psLs84s/edit?usp=sharing - https://drive.google.com/file/d/1zV9MSkfYLIrdtK3yczy1qbsJr_yN2fwH/view
CVE ID: CVE-2024-3025 State: PUBLISHED Published: 2024-04-10T17:07:52.626Z Last Updated: 2024-08-01T19:32:42.584Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-23 Description: mintplex-labs/anything-llm is vulnerable to path traversal attacks due to insufficient validation of user-supplied input in the logo filename functionality. Attackers can exploit this vulnerability by manipulating the logo filename to reference files outside of the restricted directory. This can lead to unauthorized reading or deletion of files by utilizing the `/api/system/upload-logo` and `/api/system/logo` end
lead to unauthorized reading or deletion of files by utilizing the `/api/system/upload-logo` and `/api/system/logo` endpoints. The issue stems from the lack of filtering or validation on the logo filename, allowing attackers to target sensitive files such as the application's database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/fb09a352-1016-4481-ae88-7460e2b6062b - https://github.com/mintplex-labs/anything-llm/commit/7de23dbb2da932fbfb39f56d981784d3702cf5ce
CVE ID: CVE-2024-3026 State: PUBLISHED Published: 2024-07-13T06:00:03.859Z Last Updated: 2024-08-01T19:32:42.611Z Vendors: Unknown Products: WordPress Button Plugin MaxButtons Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/aba9d8a5-20a7-49e5-841c-9cfcb9bc6144/
CVE ID: CVE-2024-3027 State: PUBLISHED Published: 2024-04-13T01:57:49.676Z Last Updated: 2024-08-01T19:32:42.546Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: nextendweb Products: Smart Slider 3 Problem Types: CWE-285 Improper Authorization Description: The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the upload function in all versions up to, and including, 3.5.1.22. This makes it possible for authenticated attackers, with contributor-level access and above, to upload files, including SVG files, which can be used to conduct stored cross-site scripting attacks. Additional Analy
to upload files, including SVG files, which can be used to conduct stored cross-site scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/915f464f-449d-4ad2-9f43-6ce5d93ccb05?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3069057%40smart-slider-3&old=2996377%40smart-slider-3&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3028 State: PUBLISHED Published: 2024-04-16T00:00:14.083Z Last Updated: 2024-09-06T17:55:53.545Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-20 Description: mintplex-labs/anything-llm is vulnerable to improper input validation, allowing attackers to read and delete arbitrary files on the server. By manipulating the 'logo_filename' parameter in the 'system-preferences' API endpoint, an attacker can construct requests to read sensitive files or the application's '.env' file, and even delete files by setting the 'logo_filename' to the path of the target file and invoking th
ation's '.env' file, and even delete files by setting the 'logo_filename' to the path of the target file and invoking the 'remove-logo' API endpoint. This vulnerability is due to the lack of proper sanitization of user-supplied input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/41016b86-eabb-4161-ac81-40a1ca8e82ac - https://github.com/mintplex-labs/anything-llm/commit/7de23dbb2da932fbfb39f56d981784d3702cf5ce
CVE ID: CVE-2024-3029 State: PUBLISHED Published: 2024-04-16T00:00:14.631Z Last Updated: 2024-08-09T18:56:41.106Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-20 Description: In mintplex-labs/anything-llm, an attacker can exploit improper input validation by sending a malformed JSON payload to the '/system/enable-multi-user' endpoint. This triggers an error that is caught by a catch block, which in turn deletes all users and disables the 'multi_user_mode'. The vulnerability allows an attacker to remove all existing users and potentially create a new admin user without requiring a passwo
ility allows an attacker to remove all existing users and potentially create a new admin user without requiring a password, leading to unauthorized access and control over the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7189a7a0-9830-459d-b853-bdc2559999a0 - https://github.com/mintplex-labs/anything-llm/commit/99cfee1e7025fe9a0919a4d506ba1e1b819f6073
CVE ID: CVE-2024-3030 State: PUBLISHED Published: 2024-04-04T01:56:57.064Z Last Updated: 2024-08-01T19:32:42.556Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: gqevu6bsiz Products: Announce from the Dashboard Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Announce from the Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbi
ping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b0d1cf3b-5631-49bd-a7aa-86de2ee4b5b9?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3061409%40announce-from-the-dashboard&new=3061409%40announce-from-the-dashboard&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3031 State: PUBLISHED Published: 2024-06-04T05:32:14.320Z Last Updated: 2024-08-01T19:32:42.595Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: shrinitech Products: Fluid Notification Bar Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Fluid Notification Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web
makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/451ca8a1-9354-462a-a110-c0c813cf0725?source=cve - https://wordpress.org/plugins/fluid-notification-bar/
CVE ID: CVE-2024-3032 State: PUBLISHED Published: 2024-06-13T06:00:02.512Z Last Updated: 2025-03-17T17:47:58.559Z Vendors: Unknown Products: Themify Builder Problem Types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') Description: Themify Builder WordPress plugin before 7.5.8 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/d130a60c-c36b-4994-9b0e-e52cd7f99387/
CVE ID: CVE-2024-3033 State: PUBLISHED Published: 2024-06-06T17:32:35.718Z Last Updated: 2024-11-03T18:27:21.567Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-863 Description: An improper authorization vulnerability exists in the mintplex-labs/anything-llm application, specifically within the '/api/v/' endpoint and its sub-routes. This flaw allows unauthenticated users to perform destructive actions on the VectorDB, including resetting the database and deleting specific namespaces, without requiring any authorization or permissions. The issue affects all versions up to and including t