Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ither only "named curves" are supported, or, if explicit curve parameters are supported, they specify an X9.62 encoding of binary (GF(2^m)) curves that can't represent problematic input values. Thus the likelihood of existence of a vulnerable application is low. In particular, the X9.62 encoding is used for ECC keys in X.509 certificates, so problematic inputs cannot occur in the context of processing X.509 certificates. Any problematic use-cases would have to be using an "exotic" curve encoding. The affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(), and various supporting BN_GF2m_*() functions. Applications working with "exotic" explicit binary (GF(2^m)) curve par
(), and various supporting BN_GF2m_*() functions. Applications working with "exotic" explicit binary (GF(2^m)) curve parameters, that make it possible to represent invalid field polynomials with a zero constant term, via the above or similar APIs, may terminate abruptly as a result of reading or writing outside of array bounds. Remote code execution cannot easily be ruled out. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://openssl-library.org/news/secadv/20241016.txt - https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4 - https://github.c
adv/20241016.txt - https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4 - https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700 - https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154 - https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712 - https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a - https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41
CVE ID: CVE-2024-9145 State: PUBLISHED Published: 2024-10-01T07:23:03.891Z Last Updated: 2024-11-21T16:56:55.798Z Vendors: Wiz Products: Wiz Code Visual Studio Code extension Problem Types: CWE-77 Description: Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in a path that has been marked as a "trusted folder" within Visual Studio Code, and initiates a manual scan of the file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wiz.io/security-advisories - https://marketpl
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wiz.io/security-advisories - https://marketplace.visualstudio.com/items/WizCloud.wizcli-vscode/changelog - https://marketplace.visualstudio.com/items/WizCloud.wiz-vscode/changelog
CVE ID: CVE-2024-9146 State: PUBLISHED Published: 2024-10-05T10:31:11.387Z Last Updated: 2024-10-07T14:17:23.523Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: James Low Products: CSS JS Files Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in James Low CSS JS Files allows Path Traversal.This issue affects CSS JS Files: from n/a through 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/css-js-files/wordpress-css-js-files-plugin-1-5-0-directory-traversal-to-file-read-vulnerability?_s_id=cve
CVE ID: CVE-2024-9147 State: PUBLISHED Published: 2024-11-04T12:37:09.146Z Last Updated: 2024-11-04T14:17:16.491Z Vendors: Bna Informatics Products: PosPratik Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings.This issue affects PosPratik: before v3.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1815
CVE ID: CVE-2024-9148 State: PUBLISHED Published: 2024-09-24T13:13:13.565Z Last Updated: 2024-09-24T13:47:35.323Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: FlowiseAI Products: FlowiseChatEmbed Problem Types: CWE-79 Description: Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2024-40
CVE ID: CVE-2024-9149 State: PUBLISHED Published: 2025-03-04T14:16:27.539Z Last Updated: 2025-03-04T15:16:14.817Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Wind Media Products: E-Commerce Website Template Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wind Media E-Commerce Website Template allows SQL Injection.This issue affects E-Commerce Website Template: before v1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0051
CVE ID: CVE-2024-9150 State: PUBLISHED Published: 2025-02-21T11:40:00.281Z Last Updated: 2025-02-21T13:14:07.800Z Vendors: Wyn Enterprise Products: Wyn Enterprise Problem Types: CWE-1336 Description: Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a host system with applications high privileges. This issue has been fixed in version 8.0.00204.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wynenterprise.com/ - https://
n 8.0.00204.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wynenterprise.com/ - https://cert.pl/en/posts/2025/02/CVE-2024-9150 - https://efigo.pl/blog/cve-2024-9150/
CVE ID: CVE-2024-9154 State: PUBLISHED Published: 2024-12-19T15:59:53.367Z Last Updated: 2024-12-22T07:02:34.459Z Vendors: HMS Networks Products: Ewon Flexy 205 Problem Types: CWE-94 Description: A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cyberdanube.com/security-research/authenticated-remote-code-execution-in-ewon-flexy-205/
CVE ID: CVE-2024-9155 State: PUBLISHED Published: 2024-09-26T14:57:43.987Z Last Updated: 2024-09-26T15:17:25.819Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 9.10.x <= 9.10.1, 9.9.x <= 9.9.2, 9.5.x <= 9.5.8 fail to limit access to channels files that have not been linked to a post which allows an attacker to view them in channels that they are a member of. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-9156 State: PUBLISHED Published: 2024-10-10T06:00:03.691Z Last Updated: 2024-10-10T15:06:35.948Z Vendors: Unknown Products: TI WooCommerce Wishlist Problem Types: CWE-89 SQL Injection Description: The TI WooCommerce Wishlist WordPress plugin through 2.8.2 is vulnerable to SQL Injection due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulne
information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e95974f9-1f68-4181-89b0-3559d61cfa93/
CVE ID: CVE-2024-9157 State: PUBLISHED Published: 2025-03-11T16:28:06.178Z Last Updated: 2025-03-11T19:20:21.578Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Synaptics Products: Synaptics Audio Driver Problem Types: CWE-284 Description: ** UNSUPPORTED WHEN ASSIGNED ** A privilege escalation vulnerability in CxUIUSvc64.exe and CxUIUSvc32.exe of Synaptics audio drivers allows a local authorized attacker to load a DLL in a privileged process. Out of an abundance of caution, this CVE ID is being assigned to better serve our customers and ensure all who are still running this product understand that the product is End-of-Life and should be removed. For more inf
re all who are still running this product understand that the product is End-of-Life and should be removed. For more information on this, refer to the CVE Record’s reference information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.synaptics.com/sites/default/files/2025-03/audio-driver-security-brief-2025-03-11.pdf
CVE ID: CVE-2024-9158 State: PUBLISHED Published: 2024-09-30T16:24:55.635Z Last Updated: 2024-09-30T17:22:16.903Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Tenable Products: Nessus Network Monitor Problem Types: CWE-79 Description: A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2024-17
CVE ID: CVE-2024-9159 State: PUBLISHED Published: 2025-03-20T10:10:13.099Z Last Updated: 2025-03-20T18:24:27.927Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-863 Description: An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/
guarded by an admin check. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ab0f8fbb-c17a-45a7-8dab-7d4c8b90490a
CVE ID: CVE-2024-9160 State: PUBLISHED Published: 2024-09-27T18:58:43.352Z Last Updated: 2024-09-27T19:25:45.709Z Vendors: Puppet Products: PEADM Forge Module Problem Types: CWE-295 Description: In versions of the PEADM Forge Module prior to 3.24.0 a security misconfiguration was discovered. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.perforce.com/s/detail/a91PA000001SXN3YAO
CVE ID: CVE-2024-9161 State: PUBLISHED Published: 2024-10-05T11:21:19.388Z Last Updated: 2024-10-07T16:14:57.624Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: rankmath Products: Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Problem Types: CWE-862 Description: The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'update_metadata' function in all versions up to, and including, 1.0.228. This makes it possible for unauthenticated attackers to insert new and update existing metadata beginning with 'rank_math', and delete arbitr
e for unauthenticated attackers to insert new and update existing metadata beginning with 'rank_math', and delete arbitrary existing user metadata and term metadata. Deleting existing usermeta can cause a loss of access to the administrator dashboard for any registered users, including Administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7df39a64-76c5-4ebe-a271-44bd147a3a86?source=cve - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L120 - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L161 - https://plugins.
https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L161 - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L162 - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L64 - https://plugins.trac.wordpress.org/changeset/3161896/
CVE ID: CVE-2024-9162 State: PUBLISHED Published: 2024-10-28T05:32:24.968Z Last Updated: 2024-10-28T12:42:02.445Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: yaniiliev Products: All-in-One WP Migration and Backup Problem Types: CWE-94 Description: The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export in all versions up to, and including, 7.86. This makes it possible for authenticated attackers, with Administrator-level access and above, to create an export file with the .php extension on the affected site's server, adding an arbitrary PHP code to it, w
e, to create an export file with the .php extension on the affected site's server, adding an arbitrary PHP code to it, which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d97c3379-56c9-4261-9a70-3119ec121a40?source=cve - https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/trunk/lib/controller/class-ai1wm-backups-controller.php#L60 - https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/trunk/lib/controller/class-ai1wm-export-controller.php#L36 - https://github.com/d0n601/CVE-2024-9162 - https://ryankozak.com/posts/CVE-2024-9162
CVE ID: CVE-2024-9163 State: PUBLISHED Published: 2025-05-23T12:31:11.192Z Last Updated: 2025-05-27T14:40:36.623Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-451 Description: A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/493942 - https://hackerone.com/reports/2705566
CVE ID: CVE-2024-9164 State: PUBLISHED Published: 2024-10-11T11:30:42.233Z Last Updated: 2024-10-11T13:42:39.983Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-306 Description: An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/493946 - https://hackerone.com/reports/2711204
CVE ID: CVE-2024-9165 State: PUBLISHED Published: 2024-10-31T06:48:53.992Z Last Updated: 2024-10-31T13:01:17.854Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codemenschen Products: Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) Problem Types: CWE-79 Description: The Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in
s makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0dfbee4c-b720-4d10-bfe0-fe9dc12e6268?source=cve - https://wordpress.org/plugins/gift-voucher/#developers - https://plugins.trac.wordpress.org/browser/gift-voucher/trunk/giftcard.php#L515
CVE ID: CVE-2024-9166 State: PUBLISHED Published: 2024-09-26T16:55:51.242Z Last Updated: 2024-09-26T18:23:52.328Z Vendors: Atelmo Products: Atemio AM 520 HD Full HD Satellite Receiver Problem Types: CWE-78 Description: The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-03
CVE ID: CVE-2024-9167 State: PUBLISHED Published: 2024-10-08T16:26:33.002Z Last Updated: 2024-11-04T14:25:55.828Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Velocity License Server Problem Types: CWE-276 Description: Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Velocity-License-Server-CVE-2024-9167
CVE ID: CVE-2024-9169 State: PUBLISHED Published: 2024-09-25T08:31:05.854Z Last Updated: 2024-09-25T13:21:38.198Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: litespeedtech Products: LiteSpeed Cache Problem Types: CWE-79 Description: The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin debug settings in all versions up to, and including, 6.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only a
above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/051a987a-944a-4898-872b-0456f0f59b27?source=cve - https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration
CVE ID: CVE-2024-9170 State: PUBLISHED Published: 2024-11-26T08:31:53.217Z Last Updated: 2024-11-26T14:09:23.984Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: pluggabl Products: Booster for WooCommerce Problem Types: CWE-79 Description: The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcj_product_meta shortcode in all versions up to, and including, 7.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with ShopManager-level access and above, to inject arbitrary web scripts in pages that will execute when
ated attackers, with ShopManager-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0abf9705-2716-403f-9348-e43a8d8fb1d2?source=cve - https://wordpress.org/plugins/woocommerce-jetpack/#developers - https://booster.io/shortcodes/wcj_product_meta/ - https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-shortcodes.php#L963 - https://booster.io/changelog/ - https://plugins.trac.wordpress.org/changeset/3187178/
CVE ID: CVE-2024-9171 State: REJECTED Published: N/A Last Updated: 2024-09-27T16:50:56.506Z Description: No description available.
CVE ID: CVE-2024-9172 State: PUBLISHED Published: 2024-10-02T07:35:26.640Z Last Updated: 2024-10-02T19:14:36.479Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: kraftplugins Products: Demo Importer Plus Problem Types: CWE-79 Description: The Demo Importer Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: -
ject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/476c4eb3-db28-4f6a-9502-969e7f1c5ec1?source=cve - https://plugins.trac.wordpress.org/browser/demo-importer-plus/trunk/inc/importers/wxr-importer/class-demo-importer-plus-wxr-importer.php#L331 - https://wordpress.org/plugins/demo-importer-plus/#description - https://plugins.trac.wordpress.org/changeset/3160715/
CVE ID: CVE-2024-9173 State: PUBLISHED Published: 2024-09-26T09:29:41.726Z Last Updated: 2024-09-26T13:30:47.282Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: alefypf Products: GF Custom Style Problem Types: CWE-79 Description: The GF Custom Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vul
y web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8500ac5b-44e6-47b9-ab16-e7636c3fea66?source=cve - https://wordpress.org/plugins/gf-custom-style/#developers
CVE ID: CVE-2024-9174 State: PUBLISHED Published: 2024-10-02T05:56:28.208Z Last Updated: 2024-10-02T13:37:54.551Z Vendors: M-Files Corporation Products: M-Files Hubshare Problem Types: CWE-79 Description: Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/cve-2024-9174/
CVE ID: CVE-2024-9177 State: PUBLISHED Published: 2024-09-26T13:54:58.008Z Last Updated: 2024-09-26T14:31:17.228Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mahodder Products: Themedy Toolbox Problem Types: CWE-79 Description: The Themedy Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themedy_col, themedy_social_link, themedy_alertbox, and themedy_pullleft shortcodes in all versions up to, and including, 1.0.14, and up to, and including 1.0.15 for the plugin's themedy_button shortcode due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate
insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/755e0998-0f0d-4259-881d-ed07aecb0b10?source=cve - https://wordpress.org/plugins/themedy-toolbox/#developers - https://plugins.trac.wordpress.org/changeset/3157836/