Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
the page being accesses is an admin area. This makes it possible for unauthenticated attackers to bypass maintenance mode and access the site which may be considered confidential when in maintenance mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc144cd-7119-477f-9fa1-b00cab215077?source=cve - https://plugins.trac.wordpress.org/browser/coming-soon-wp/trunk/coming-soon-wp.php#L45
CVE ID: CVE-2024-1182 State: PUBLISHED Published: 2024-07-04T08:53:41.217Z Last Updated: 2024-08-19T15:25:49.496Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ICONICS, Mitsubishi Electric Corporation Products: GENESIS64, MC Works64 Problem Types: CWE-427 Description: Uncontrolled Search Path Element vulnerability in ICONICS GENESIS64 all versions, Mitsubishi Electric GENESIS64 all versions and Mitsubishi Electric MC Works64 all versions allows a local attacker to execute a malicious code by storing a specially crafted DLL in a specific folder when GENESIS64 and MC Works64 are installed with the Pager agent in the alarm multi-agent notification feature. Additi
r when GENESIS64 and MC Works64 are installed with the Pager agent in the alarm multi-agent notification feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf - https://jvn.jp/vu/JVNVU98894016/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-03
CVE ID: CVE-2024-1183 State: PUBLISHED Published: 2024-04-16T00:00:14.458Z Last Updated: 2024-08-01T18:33:24.939Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: gradio-app Products: gradio-app/gradio Problem Types: CWE-601 Description: An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the presence of a 'Location' header or a 'File not allowed' error in the response. Additional Analyst Notes: - CISA ADP Vulnrichment: - C
'Location' header or a 'File not allowed' error in the response. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/103434f9-87d2-42ea-9907-194a3c25007c - https://github.com/gradio-app/gradio/commit/2ad3d9e7ec6c8eeea59774265b44f11df7394bb4
CVE ID: CVE-2024-1184 State: PUBLISHED Published: 2024-02-02T13:00:06.720Z Last Updated: 2024-08-29T18:50:03.685Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Nsasoft Products: Network Sleuth Problem Types: CWE-404 Description: A vulnerability was found in Nsasoft Network Sleuth 3.0.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-252674 is the identifier assigned to this vulnerability. NOTE: The vendor was contact
to the public and may be used. VDB-252674 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252674 - https://vuldb.com/?ctiid.252674 - https://fitoxs.com/vuldb/10-exploit-perl.txt
CVE ID: CVE-2024-1185 State: PUBLISHED Published: 2024-02-02T15:31:03.441Z Last Updated: 2024-08-01T18:33:25.098Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Nsasoft Products: NBMonitor Network Bandwidth Monitor Problem Types: CWE-404 Description: A vulnerability classified as problematic has been found in Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0. This affects an unknown part of the component Registration Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252675. NOTE: The vendor was co
ed to the public and may be used. The associated identifier of this vulnerability is VDB-252675. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252675 - https://vuldb.com/?ctiid.252675 - https://fitoxs.com/vuldb/11-exploit-perl.txt
CVE ID: CVE-2024-1186 State: PUBLISHED Published: 2024-02-02T17:00:07.334Z Last Updated: 2025-06-10T16:16:39.890Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Munsoft Products: Easy Archive Recovery Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in Munsoft Easy Archive Recovery 2.0. This vulnerability affects unknown code of the component Registration Key Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252676. NOTE: The vendor was contacted early about this disclosure
be used. The identifier of this vulnerability is VDB-252676. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252676 - https://vuldb.com/?ctiid.252676 - https://fitoxs.com/vuldb/12-exploit-perl.txt - https://www.exploit-db.com/exploits/45884
CVE ID: CVE-2024-1187 State: PUBLISHED Published: 2024-02-02T17:31:04.171Z Last Updated: 2025-05-15T19:49:11.748Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Munsoft Products: Easy Outlook Express Recovery Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in Munsoft Easy Outlook Express Recovery 2.0. This issue affects some unknown processing of the component Registration Key Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-252677 was assigned to this vulnerability. NOT
loit has been disclosed to the public and may be used. The identifier VDB-252677 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252677 - https://vuldb.com/?ctiid.252677 - https://fitoxs.com/vuldb/13-exploit-perl.txt
CVE ID: CVE-2024-1188 State: PUBLISHED Published: 2024-02-02T18:00:05.336Z Last Updated: 2024-08-26T18:41:17.224Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Rizone Soft Products: Notepad3 Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in Rizone Soft Notepad3 1.0.2.350. Affected is an unknown function of the component Encryption Passphrase Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-252678 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosur
. VDB-252678 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252678 - https://vuldb.com/?ctiid.252678 - https://fitoxs.com/vuldb/14-exploit-perl.txt
CVE ID: CVE-2024-1189 State: PUBLISHED Published: 2024-02-02T18:31:04.087Z Last Updated: 2025-05-09T17:38:47.634Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: AMPPS Problem Types: CWE-404 Description: A vulnerability has been found in AMPPS 2.7 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Encryption Passphrase Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0 is able to address this issue. It is recommended to upgrade the affected component. The associate
grading to version 4.0 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-252679. NOTE: The vendor explains that AMPPS 4.0 is a complete overhaul and the code was re-written. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252679 - https://vuldb.com/?ctiid.252679 - https://fitoxs.com/vuldb/15-exploit-perl.txt
CVE ID: CVE-2024-1190 State: PUBLISHED Published: 2024-02-02T19:00:06.031Z Last Updated: 2025-06-17T21:29:24.427Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Global Scape Products: CuteFTP Problem Types: CWE-404 Description: A vulnerability was found in Global Scape CuteFTP 9.3.0.3 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument Host/Username/Password leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252680. NOTE: The vendor was contacted early about this disclosu
ay be used. The identifier of this vulnerability is VDB-252680. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252680 - https://vuldb.com/?ctiid.252680 - https://fitoxs.com/vuldb/16-exploit-perl.txt
CVE ID: CVE-2024-1191 State: PUBLISHED Published: 2024-02-02T19:31:03.362Z Last Updated: 2024-08-01T18:33:25.070Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Hyper Products: CdCatalog Problem Types: CWE-404 Description: A vulnerability was found in Hyper CdCatalog 2.3.1. It has been classified as problematic. This affects an unknown part of the component HCF File Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-252681 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in
81 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252681 - https://vuldb.com/?ctiid.252681 - https://fitoxs.com/vuldb/19-exploit-perl.txt
CVE ID: CVE-2024-1192 State: PUBLISHED Published: 2024-02-02T20:00:05.846Z Last Updated: 2024-08-14T20:07:54.439Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: South River Products: WebDrive Problem Types: CWE-404 Description: A vulnerability was found in South River WebDrive 18.00.5057. It has been declared as problematic. This vulnerability affects unknown code of the component New Secure WebDAV. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-252682 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this
ay be used. VDB-252682 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252682 - https://vuldb.com/?ctiid.252682 - https://fitoxs.com/vuldb/22-exploit-perl.txt
CVE ID: CVE-2024-1193 State: PUBLISHED Published: 2024-02-02T20:31:03.603Z Last Updated: 2024-08-01T18:33:25.211Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Navicat Problem Types: CWE-404 Description: A vulnerability was found in Navicat 12.0.29. It has been rated as problematic. This issue affects some unknown processing of the component MySQL Conecction Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252683. NOTE: The vendor was contacted early about this disclosure but did not respon
ifier of this vulnerability is VDB-252683. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252683 - https://vuldb.com/?ctiid.252683 - https://fitoxs.com/vuldb/24-exploit-perl.txt
CVE ID: CVE-2024-1194 State: PUBLISHED Published: 2024-02-02T21:00:05.949Z Last Updated: 2024-08-01T18:33:24.713Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Armcode Products: AlienIP Problem Types: CWE-404 Description: A vulnerability classified as problematic has been found in Armcode AlienIP 2.41. Affected is an unknown function of the component Locate Host Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252684. NOTE: The vendor was contacted early about this disclosure but did not respond
ier of this vulnerability is VDB-252684. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252684 - https://vuldb.com/?ctiid.252684 - https://fitoxs.com/vuldb/25-exploit-perl.txt
CVE ID: CVE-2024-1195 State: PUBLISHED Published: 2024-02-02T21:31:04.043Z Last Updated: 2024-08-21T15:36:30.204Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: iTop Products: VPN Problem Types: CWE-404 Description: A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The identifier VDB-252685 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
signed to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252685 - https://vuldb.com/?ctiid.252685 - https://www.youtube.com/watch?v=JdQMINPVJd8
CVE ID: CVE-2024-1196 State: PUBLISHED Published: 2024-02-02T22:00:05.995Z Last Updated: 2024-08-01T18:33:25.084Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Testimonial Page Manager Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site scripting. The attack can be initiated remotely. VDB-252694 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP
be initiated remotely. VDB-252694 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252694 - https://vuldb.com/?ctiid.252694
CVE ID: CVE-2024-1197 State: PUBLISHED Published: 2024-02-02T22:31:03.760Z Last Updated: 2025-05-15T19:48:57.104Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Testimonial Page Manager Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Testimonial Page Manager 1.0. This issue affects some unknown processing of the file delete-testimonial.php of the component HTTP GET Request Handler. The manipulation of the argument testimony leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-252695. Additional Analyst Notes: - CVE Progr
initiated remotely. The associated identifier of this vulnerability is VDB-252695. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252695 - https://vuldb.com/?ctiid.252695
CVE ID: CVE-2024-1198 State: PUBLISHED Published: 2024-02-02T23:31:04.113Z Last Updated: 2025-05-07T20:07:25.662Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: openBI Problem Types: CWE-502 Description: A vulnerability, which was classified as critical, was found in openBI up to 6.0.3. Affected is the function addxinzhi of the file application/controllers/User.php of the component Phar Handler. The manipulation of the argument outimgurl leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252696. Additional Analyst Notes: - CISA ADP Vulnric
public and may be used. The identifier of this vulnerability is VDB-252696. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252696 - https://vuldb.com/?ctiid.252696 - https://note.zhaoj.in/share/qFXZZfp1NLa3
CVE ID: CVE-2024-1199 State: PUBLISHED Published: 2024-02-03T00:00:06.998Z Last Updated: 2024-08-01T18:33:24.942Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: CodeAstro Products: Employee Task Management System Problem Types: CWE-404 Description: A vulnerability has been found in CodeAstro Employee Task Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file \employee-tasks-php\attendance-info.php. The manipulation of the argument aten_id leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252697 was assigned to this
d remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-252697 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.252697 - https://vuldb.com/?ctiid.252697 - https://docs.qq.com/doc/DYnhIWEdkZXViTXdD
CVE ID: CVE-2024-1200 State: PUBLISHED Published: 2024-02-03T02:00:06.276Z Last Updated: 2024-08-26T18:34:36.686Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Jspxcms Problem Types: CWE-200 Description: A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /template/1/default/. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252698 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
he identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.252698 - https://vuldb.com/?ctiid.252698 - https://github.com/sweatxi/BugHub/blob/main/Nanchang%20Lanzhi%20Technology%20Co.pdf
CVE ID: CVE-2024-1201 State: PUBLISHED Published: 2024-02-02T12:00:51.824Z Last Updated: 2025-06-13T19:01:22.377Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PanteraSoft Products: HDD Health Problem Types: CWE-428 Description: Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability could allow a local attacker to store a malicious executable file within the unquoted search path, resulting in privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/panterasoft-hdd-health-search-path-or-unquot
nrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/panterasoft-hdd-health-search-path-or-unquoted-item-vulnerability
CVE ID: CVE-2024-1202 State: PUBLISHED Published: 2024-03-05T14:41:40.624Z Last Updated: 2024-08-01T18:33:24.697Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: XPodas Products: Octopod Problem Types: CWE-305 Description: Authentication Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass.This issue affects Octopod: before v1. NOTE: The vendor was contacted and it was learned that the product is not supported. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-24-0174
CVE ID: CVE-2024-1203 State: PUBLISHED Published: 2024-03-13T15:26:59.289Z Last Updated: 2024-08-22T19:45:27.043Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: tatvic Products: Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'valueData' parameter in all versions up to, and including, 6.9.1 due to insufficient escaping on the user suppli
ia the 'valueData' parameter in all versions up to, and including, 6.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7eb7d499-28ba-48ef-9798-b7c8cbb7aa3e?source=cve - https://plugins.trac.wordpress.org/browser/enhanced-e-commerce-for-woocommerce-stor
-48ef-9798-b7c8cbb7aa3e?source=cve - https://plugins.trac.wordpress.org/browser/enhanced-e-commerce-for-woocommerce-store/trunk/includes/data/class-tvc-ajax-file.php#L1850
CVE ID: CVE-2024-1204 State: PUBLISHED Published: 2024-04-15T05:00:02.873Z Last Updated: 2024-08-01T18:33:25.079Z Vendors: Unknown Products: Meta Box Problem Types: CWE-284 Improper Access Control Description: The Meta Box WordPress plugin before 5.9.4 does not prevent users with at least the contributor role from access arbitrary custom fields assigned to other user's posts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/03191b00-0b05-42db-9ce2-fc525981b6c9/