Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-50393 State: PUBLISHED Published: 2024-12-06T16:36:33.342Z Last Updated: 2024-12-10T04:55:54.258Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-78 Description: A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References:
and later QuTS hero h5.2.2.2952 build 20241116 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-49
CVE ID: CVE-2024-50394 State: PUBLISHED Published: 2025-03-07T16:13:11.034Z Last Updated: 2025-03-07T18:02:58.278Z Vendors: QNAP Systems Inc. Products: Helpdesk Problem Types: CWE-295 Description: An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: Helpdesk 3.3.3 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-05
CVE ID: CVE-2024-50395 State: PUBLISHED Published: 2024-11-22T15:31:47.697Z Last Updated: 2024-11-22T16:48:42.193Z Vendors: QNAP Systems Inc. Products: Media Streaming add-on Problem Types: CWE-639 Description: An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-47
CVE ID: CVE-2024-50396 State: PUBLISHED Published: 2024-11-22T15:31:41.184Z Last Updated: 2024-11-22T16:44:57.056Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-4
ater Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-43
CVE ID: CVE-2024-50397 State: PUBLISHED Published: 2024-11-22T15:31:34.360Z Last Updated: 2024-11-22T16:44:57.191Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/e
.1.2929 build 20241025 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-43
CVE ID: CVE-2024-50398 State: PUBLISHED Published: 2024-11-22T15:31:27.533Z Last Updated: 2024-11-22T16:44:57.341Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.q
hero h5.2.1.2929 build 20241025 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-43
CVE ID: CVE-2024-50399 State: PUBLISHED Published: 2024-11-22T15:31:20.542Z Last Updated: 2024-11-22T16:44:49.629Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.q
CVE ID: CVE-2024-50400 State: PUBLISHED Published: 2024-11-22T15:31:13.326Z Last Updated: 2024-11-22T16:44:57.456Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.q
CVE ID: CVE-2024-50401 State: PUBLISHED Published: 2024-11-22T15:30:59.166Z Last Updated: 2024-11-22T16:45:59.583Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.q
CVE ID: CVE-2024-50402 State: PUBLISHED Published: 2024-12-06T16:36:39.547Z Last Updated: 2024-12-06T19:26:18.132Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 a
.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-49
CVE ID: CVE-2024-50403 State: PUBLISHED Published: 2024-12-06T16:36:45.927Z Last Updated: 2024-12-06T19:25:57.274Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.2.2.2952 build 20241116 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.q
hero h5.2.2.2952 build 20241116 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-49
CVE ID: CVE-2024-50404 State: PUBLISHED Published: 2024-12-06T16:35:52.266Z Last Updated: 2024-12-06T19:28:37.668Z Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-59 Description: A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.16_20240819 ( 2024/08/19 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-48
CVE ID: CVE-2024-50405 State: PUBLISHED Published: 2025-03-07T16:13:17.099Z Last Updated: 2025-03-07T17:14:37.498Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-93, CWE-94 Description: An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify application data. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
nd later QuTS hero h5.2.3.3006 build 20250108 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-54
CVE ID: CVE-2024-50406 State: PUBLISHED Published: 2025-06-06T15:53:24.123Z Last Updated: 2025-06-06T16:35:29.587Z Vendors: QNAP Systems Inc. Products: License Center Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: License Center 1.9.49 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-11
CVE ID: CVE-2024-50407 State: PUBLISHED Published: 2024-10-29T10:56:06.493Z Last Updated: 2024-10-29T14:32:42.064Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Kiboko Labs Products: Namaste! LMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Reflected XSS.This issue affects Namaste! LMS: from n/a through 2.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/namaste-lms/wordpress-namaste-lms-plugin-2-6-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-50408 State: PUBLISHED Published: 2024-10-28T11:32:12.606Z Last Updated: 2025-08-27T21:29:39.590Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kiboko Labs Products: Namaste! LMS Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Kiboko Labs Namaste! LMS allows Object Injection.This issue affects Namaste! LMS: from n/a through 2.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/namaste-lms/wordpress-namaste-lms-plugin-2-6-3-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-50409 State: PUBLISHED Published: 2024-10-29T10:19:18.812Z Last Updated: 2024-10-29T14:38:24.524Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Kiboko Labs Products: Namaste! LMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Stored XSS.This issue affects Namaste! LMS: from n/a through 2.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/namaste-lms/wordpress-namaste-lms-plugin-2-6-2-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-50410 State: PUBLISHED Published: 2024-10-29T10:18:22.842Z Last Updated: 2024-10-29T14:43:24.206Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Kiboko Labs Products: Namaste! LMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Namaste! LMS allows Stored XSS.This issue affects Namaste! LMS: from n/a through 2.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/namaste-lms/wordpress-namaste-lms-plugin-2-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-50411 State: PUBLISHED Published: 2024-10-29T08:49:23.796Z Last Updated: 2024-10-29T14:44:06.936Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Kevon Adonis Products: WP Abstracts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kevon Adonis WP Abstracts allows Stored XSS.This issue affects WP Abstracts: from n/a through 2.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-abstracts-manuscripts-manager/wordpress-wp-abstracts-plugin-2-7-1-cross-site-scripting-xss-vulnerability?_s_
rability/wp-abstracts-manuscripts-manager/wordpress-wp-abstracts-plugin-2-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-50412 State: PUBLISHED Published: 2024-10-29T08:48:38.495Z Last Updated: 2024-10-29T14:44:39.778Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jules Colle Products: Conditional Fields for Contact Form 7 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jules Colle Conditional Fields for Contact Form 7 allows Stored XSS.This issue affects Conditional Fields for Contact Form 7: from n/a through 2.4.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cf7-conditional-fields/wordpress-cond
CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cf7-conditional-fields/wordpress-conditional-fields-for-contact-form-7-plugin-2-4-15-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-50413 State: PUBLISHED Published: 2024-10-29T08:47:50.184Z Last Updated: 2024-10-29T14:45:01.482Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: codection Products: Import and export users and customers Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in codection Import and export users and customers allows Stored XSS.This issue affects Import and export users and customers: from n/a through 1.27.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/import-users-from-csv-with-meta/wordpress
ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/import-users-from-csv-with-meta/wordpress-import-and-export-users-and-customers-plugin-1-27-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-50414 State: PUBLISHED Published: 2024-10-29T08:47:02.800Z Last Updated: 2024-10-29T15:21:52.467Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: VirusTran Products: Button contact VR Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VirusTran Button contact VR allows Stored XSS.This issue affects Button contact VR: from n/a through 4.7.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/button-contact-vr/wordpress-button-contact-vr-plugin-4-7-9-1-cross-site-scripting-xss-vulnerability?
abase/vulnerability/button-contact-vr/wordpress-button-contact-vr-plugin-4-7-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-50415 State: PUBLISHED Published: 2024-10-29T08:46:13.087Z Last Updated: 2024-10-29T17:58:09.444Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Pagup Products: Ads.txt & App-ads.txt Manager for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pagup Ads.Txt & App-ads.Txt Manager for WordPress allows Stored XSS.This issue affects Ads.Txt & App-ads.Txt Manager for WordPress: from n/a through 1.1.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/app-ads-txt/wordpress-ads-txt-
tes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/app-ads-txt/wordpress-ads-txt-app-ads-txt-manager-for-wordpress-plugin-1-1-7-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-50416 State: PUBLISHED Published: 2024-10-28T11:30:58.130Z Last Updated: 2024-10-28T12:04:17.208Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WPClever Products: WPC Shop as a Customer for WooCommerce Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in WPClever WPC Shop as a Customer for WooCommerce allows Object Injection.This issue affects WPC Shop as a Customer for WooCommerce: from n/a through 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpc-shop-as-customer/wordpress-wpc-shop-as-a-customer-for-woocommerce-plugin-1-2-6-php-object-
om/database/vulnerability/wpc-shop-as-customer/wordpress-wpc-shop-as-a-customer-for-woocommerce-plugin-1-2-6-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-50417 State: PUBLISHED Published: 2024-11-19T16:30:38.925Z Last Updated: 2024-11-20T14:36:18.995Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: BoldThemes Products: Bold Page Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in BoldThemes Bold Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Page Builder: from n/a through 5.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bold-page-builder/wordpress-bold-page-builder-plugin-5-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-50418 State: PUBLISHED Published: 2024-10-29T08:44:44.185Z Last Updated: 2024-10-29T17:58:37.850Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Time Slot Booking Products: Time Slot Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Time Slot Booking Time Slot allows Stored XSS.This issue affects Time Slot: from n/a through 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/timeslot/wordpress-time-slot-plugin-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-50419 State: PUBLISHED Published: 2024-10-30T15:01:55.909Z Last Updated: 2024-10-30T15:07:59.594Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Wpsoul Products: Greenshift – animation and page builder blocks Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in Wpsoul Greenshift – animation and page builder blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift – animation and page builder blocks: from n/a through 9.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/greenshift-animation-and-page-builde
CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/greenshift-animation-and-page-builder-blocks/wordpress-greenshift-animation-and-page-builder-blocks-plugin-9-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-50420 State: PUBLISHED Published: 2024-10-29T08:32:19.479Z Last Updated: 2024-10-29T15:13:55.666Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: adirectory Products: aDirectory Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in adirectory aDirectory allows Upload a Web Shell to a Web Server.This issue affects aDirectory: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/adirectory/wordpress-adirectory-plugin-1-3-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-50421 State: PUBLISHED Published: 2024-10-29T21:34:52.959Z Last Updated: 2024-10-30T13:19:47.685Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WP Overnight Products: WooCommerce PDF Invoices & Packing Slips Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through 3.8.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-pdf-invoices-packing-slips/wor
ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-pdf-invoices-packing-slips/wordpress-pdf-invoices-packing-slips-for-woocommerce-plugin-3-8-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-50422 State: PUBLISHED Published: 2024-10-29T21:33:01.862Z Last Updated: 2024-10-30T13:21:05.236Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Cloudways Products: Breeze Problem Types: CWE-862 Description: Missing Authorization vulnerability in Cloudways Breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through 2.1.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/breeze/wordpress-breeze-plugin-2-1-14-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-50423 State: PUBLISHED Published: 2024-10-29T21:26:19.813Z Last Updated: 2024-10-30T13:21:55.512Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Templately Products: Templately Problem Types: CWE-862 Description: Missing Authorization vulnerability in Templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through 3.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/templately/wordpress-templately-plugin-3-1-5-broken-access-control-vulnerability?_s_id=cve