Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-55957 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-03-14T15:35:57.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software (ICSW) before 3.1 SP10, the driver packages have a local privilege escalation vulnerability due to improper access control permissions on Windows systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thermofisher.com - https://assets.thermofisher.com/TFS-Assets/CORP/Product-Guides/Thermo_Scientific_Xcalibur_and_Foundation.pdf
CVE ID: CVE-2024-55958 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-22T21:56:59.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Northern.tech CFEngine Enterprise Mission Portal 3.24.0, 3.21.5, and below allows XSS. The fixed versions are 3.24.1 and 3.21.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://Northern.tech - https://cfengine.com/blog/2025/cve-2024-55958/
CVE ID: CVE-2024-55959 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-18T14:16:08.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://Northern.tech - https://mender.io/blog/cve-2024-55959
CVE ID: CVE-2024-55963 State: PUBLISHED Published: 2025-03-26T00:00:00.000Z Last Updated: 2025-03-27T13:36:32.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
d check for super user permissions on the incoming request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/appsmithorg/appsmith/security/advisories/GHSA-6mc8-hw5c-7qqr
CVE ID: CVE-2024-55964 State: PUBLISHED Published: 2025-03-26T00:00:00.000Z Last Updated: 2025-03-27T13:33:44.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/appsmithorg/appsmith/security/advisories/GHSA-m95x-4w54-gc83
CVE ID: CVE-2024-55965 State: PUBLISHED Published: 2025-03-26T00:00:00.000Z Last Updated: 2025-03-27T13:28:11.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development information of a workspace (specifically, a list of datasources in a workspace they're a member of). This information disclosure does not expose sensitive data in the datasources, such as database passwords and API Keys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/appsmithorg/appsmith/security/advisories/GHSA-794x-gm8v-2wj6
CVE ID: CVE-2024-55968 State: PUBLISHED Published: 2025-01-28T00:00:00.000Z Last Updated: 2025-03-24T16:20:21.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the macOS DTEX Event Forwarder agent, fails to implement critical client validation during XPC interprocess communication (IPC). Specifically, the service does not verify the code requirements, entitlements, security flags, or version of any client attempting to establish a connection. This lack of proper logic validation allows malicious actors to exploit the service's m
pting to establish a connection. This lack of proper logic validation allows malicious actors to exploit the service's methods via unauthorized client connections, and escalate privileges to root by abusing the DTConnectionHelperProtocol protocol's submitQuery method over an unauthorized XPC connection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Wi1DN00B/CVE-2024-55968 - https://github.com/null-event/CVE-2024-55968
CVE ID: CVE-2024-55969 State: PUBLISHED Published: 2024-12-15T00:00:00 Last Updated: 2024-12-16T16:41:33.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: DocIO in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 throws XMLException during the resaving of a DOCX document with an external reference XML, aka I640714. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ej2.syncfusion.com/aspnetmvc/documentation/release-notes/27.1.55?type=all
CVE ID: CVE-2024-55970 State: PUBLISHED Published: 2024-12-15T00:00:00 Last Updated: 2024-12-16T17:01:23.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Manager in Syncfusion Essential Studio for ASP.NET MVC before 27.1.55 has a traversal issue that is related to the request parameter, aka I644734. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ej2.syncfusion.com/aspnetmvc/documentation/release-notes/27.1.55?type=all
CVE ID: CVE-2024-55971 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-02-06T21:27:28.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in the default configuration of the Logitime WebClock application <= 5.43.0 allows an unauthenticated user to run arbitrary code on the backend database server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nl.logitime.com/ - https://en.logitime.com/time-attendance/ - https://tulling.dev/disclosures/cve-2024-55971/ - https://nl.logitime.com/download/webclock-v5-43-0-13-12-2024/
CVE ID: CVE-2024-55972 State: PUBLISHED Published: 2024-12-16T14:31:23.646Z Last Updated: 2024-12-16T16:37:49.851Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Chris Carvache Products: eTemplates Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Chris Carvache eTemplates allows SQL Injection.This issue affects eTemplates: from n/a through 0.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/etemplates/vulnerability/wordpress-etemplates-plugin-0-2-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55973 State: PUBLISHED Published: 2024-12-16T14:31:23.043Z Last Updated: 2024-12-16T19:43:42.649Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Ryan Nystrom Products: TSB Occasion Editor Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ryan Nystrom TSB Occasion Editor allows SQL Injection.This issue affects TSB Occasion Editor: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tsb-occasion-editor/vulnerability/wordpress-tsb-occasion-editor-plugin-1-2-1-sql-injection-vu
/database/wordpress/plugin/tsb-occasion-editor/vulnerability/wordpress-tsb-occasion-editor-plugin-1-2-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55974 State: PUBLISHED Published: 2024-12-16T14:31:22.436Z Last Updated: 2024-12-16T19:43:49.514Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: AMS Nexe Iberica Products: Mimoos Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AMS Nexe Iberica Mimoos allows SQL Injection.This issue affects Mimoos: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/devoluciones-packback/vulnerability/wordpress-mimoos-plugin-1-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55975 State: PUBLISHED Published: 2024-12-18T11:38:24.589Z Last Updated: 2024-12-18T16:28:35.670Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Rohit Urane Products: Dr Affiliate Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rohit Urane Dr Affiliate allows SQL Injection.This issue affects Dr Affiliate: from n/a through 1.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dr-affiliate/vulnerability/wordpress-dr-affiliate-plugin-1-2-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55976 State: PUBLISHED Published: 2024-12-16T14:31:21.840Z Last Updated: 2024-12-16T16:37:58.978Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Mike Leembruggen Products: Critical Site Intel Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mike Leembruggen Critical Site Intel allows SQL Injection.This issue affects Critical Site Intel: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/critical-site-intel-stats/vulnerability/wordpress-critical-site-intel-plugin-1-0-sq
hstack.com/database/wordpress/plugin/critical-site-intel-stats/vulnerability/wordpress-critical-site-intel-plugin-1-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55977 State: PUBLISHED Published: 2024-12-16T14:31:21.236Z Last Updated: 2024-12-16T16:38:09.727Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: launch-page-importer Products: LaunchPage.app Importer Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in launch-page-importer LaunchPage.app Importer allows SQL Injection.This issue affects LaunchPage.app Importer: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/launchpage-app-importer/vulnerability/wordpress-launchpage-app-
nces: - https://patchstack.com/database/wordpress/plugin/launchpage-app-importer/vulnerability/wordpress-launchpage-app-importer-plugin-1-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55978 State: PUBLISHED Published: 2024-12-16T14:31:20.594Z Last Updated: 2024-12-16T16:38:18.048Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: WalletStation.com Products: Code Generator Pro Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WalletStation.com Code Generator Pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/code-generator-pro/vulnerability/wordpress-code-generator-pro-plugin-1-2-sql-injecti
stack.com/database/wordpress/plugin/code-generator-pro/vulnerability/wordpress-code-generator-pro-plugin-1-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55979 State: PUBLISHED Published: 2024-12-16T14:31:19.979Z Last Updated: 2024-12-16T19:43:56.067Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Webriderz Products: Wr Age Verification Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webriderz Wr Age Verification allows SQL Injection.This issue affects Wr Age Verification: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wr-age-verification/vulnerability/wordpress-wr-age-verification-plugin-2-0-0-sql-injection-vulnerab
ase/wordpress/plugin/wr-age-verification/vulnerability/wordpress-wr-age-verification-plugin-2-0-0-sql-injection-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-55980 State: PUBLISHED Published: 2024-12-16T14:31:19.343Z Last Updated: 2024-12-16T16:38:25.902Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Webriderz Products: Wr Age Verification Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webriderz Wr Age Verification allows SQL Injection.This issue affects Wr Age Verification: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wr-age-verification/vulnerability/wordpress-wr-age-verification-plugin-2-0-0-sql-injection-vuln
atabase/wordpress/plugin/wr-age-verification/vulnerability/wordpress-wr-age-verification-plugin-2-0-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55981 State: PUBLISHED Published: 2024-12-16T14:31:18.738Z Last Updated: 2024-12-16T16:38:35.109Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Nabajit Roy Products: Nabz Image Gallery Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nabajit Roy Nabz Image Gallery allows SQL Injection.This issue affects Nabz Image Gallery: from n/a through v1.00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nabz-image-gallery/vulnerability/wordpress-nabz-image-gallery-plugin-v1-00-sql-injection-vulne
database/wordpress/plugin/nabz-image-gallery/vulnerability/wordpress-nabz-image-gallery-plugin-v1-00-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55982 State: PUBLISHED Published: 2024-12-16T14:31:18.129Z Last Updated: 2024-12-16T16:38:43.923Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: richteam Products: Share Buttons – Social Media Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in richteam Share Buttons – Social Media allows Blind SQL Injection.This issue affects Share Buttons – Social Media: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rich-web-share-button/vulnerability/wordpress-share-buttons-soci
ces: - https://patchstack.com/database/wordpress/plugin/rich-web-share-button/vulnerability/wordpress-share-buttons-social-media-plugin-1-0-2-sql-injection-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-55983 State: PUBLISHED Published: 2024-12-18T11:38:23.932Z Last Updated: 2024-12-18T16:28:51.029Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Derek Hamilton Products: PowerFormBuilder Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Derek Hamilton PowerFormBuilder allows SQL Injection.This issue affects PowerFormBuilder: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/power-forms-builder/vulnerability/wordpress-powerformbuilder-plugin-1-0-6-sql-injection-vulnerabil
base/wordpress/plugin/power-forms-builder/vulnerability/wordpress-powerformbuilder-plugin-1-0-6-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55984 State: PUBLISHED Published: 2024-12-18T11:38:23.254Z Last Updated: 2024-12-18T16:28:57.156Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: susheelhbti Products: Saksh Escrow System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in susheelhbti Saksh Escrow System allows SQL Injection.This issue affects Saksh Escrow System: from n/a through 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/saksh-escrow-system/vulnerability/wordpress-saksh-escrow-system-plugin-2-4-sql-injection-vulnerab
abase/wordpress/plugin/saksh-escrow-system/vulnerability/wordpress-saksh-escrow-system-plugin-2-4-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55985 State: PUBLISHED Published: 2024-12-18T11:38:22.533Z Last Updated: 2024-12-18T16:29:05.115Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: ydesignservices Products: YDS Support Ticket System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ydesignservices YDS Support Ticket System allows SQL Injection.This issue affects YDS Support Ticket System: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yds-support-ticket-system/vulnerability/wordpress-yds-support-ticket-sy
https://patchstack.com/database/wordpress/plugin/yds-support-ticket-system/vulnerability/wordpress-yds-support-ticket-system-plugin-1-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55986 State: PUBLISHED Published: 2024-12-16T14:31:17.495Z Last Updated: 2024-12-16T19:44:04.354Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: serviceonline Products: Service Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in serviceonline Service allows Blind SQL Injection.This issue affects Service: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/service/vulnerability/wordpress-service-plugin-1-0-4-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55987 State: PUBLISHED Published: 2024-12-16T14:31:16.899Z Last Updated: 2024-12-16T19:44:10.728Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Ritesh Sanap Products: Advanced What should we write next about Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ritesh Sanap Advanced What should we write next about allows SQL Injection.This issue affects Advanced What should we write next about: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-what-should-we-write-
: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-what-should-we-write-about-next/vulnerability/wordpress-advanced-what-should-we-write-next-about-plugin-1-0-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55988 State: PUBLISHED Published: 2024-12-16T14:31:16.318Z Last Updated: 2024-12-16T16:38:51.711Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Amol Nirmala Waman Products: Navayan CSV Export Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amol Nirmala Waman Navayan CSV Export allows Blind SQL Injection.This issue affects Navayan CSV Export: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/navayan-csv-export/vulnerability/wordpress-navayan-csv-export-plugin-1-0-9
ps://patchstack.com/database/wordpress/plugin/navayan-csv-export/vulnerability/wordpress-navayan-csv-export-plugin-1-0-9-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55989 State: PUBLISHED Published: 2024-12-16T14:13:39.096Z Last Updated: 2024-12-16T20:04:40.912Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Kyle M. Brown Products: WP Simple Pay Lite Manager Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kyle M. Brown WP Simple Pay Lite Manager allows SQL Injection.This issue affects WP Simple Pay Lite Manager: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stripe-manager/vulnerability/wordpress-wp-simple-pay-lite-manager-plugin
ttps://patchstack.com/database/wordpress/plugin/stripe-manager/vulnerability/wordpress-wp-simple-pay-lite-manager-plugin-1-4-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55990 State: PUBLISHED Published: 2024-12-16T14:13:38.490Z Last Updated: 2024-12-16T20:04:52.579Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Ewald Harmsen Products: Mollie for Contact Form 7 Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ewald Harmsen Mollie for Contact Form 7 allows Blind SQL Injection.This issue affects Mollie for Contact Form 7: from n/a through 5.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cf7-mollie/vulnerability/wordpress-mollie-for-contact-form-7-plugin
: - https://patchstack.com/database/wordpress/plugin/cf7-mollie/vulnerability/wordpress-mollie-for-contact-form-7-plugin-5-0-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-55991 State: PUBLISHED Published: 2024-12-31T12:51:02.138Z Last Updated: 2024-12-31T17:58:33.084Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: WP-CRM Products: WP-CRM System Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP-CRM WP-CRM System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through 3.2.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-crm-system/vulnerability/wordpress-crm-plugin-wp-crm-system-plugin-3-2-9-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-55992 State: PUBLISHED Published: 2024-12-16T14:14:21.022Z Last Updated: 2024-12-16T19:44:32.320Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Open Tools Products: WooCommerce Basic Ordernumbers Problem Types: CWE-862 Description: Missing Authorization vulnerability in Open Tools WooCommerce Basic Ordernumbers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Basic Ordernumbers: from n/a through 1.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-basic-ordernumbers/vulnerability/wordpress-woocommerce-basic-
tps://patchstack.com/database/wordpress/plugin/woocommerce-basic-ordernumbers/vulnerability/wordpress-woocommerce-basic-ordernumbers-plugin-1-4-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-55993 State: PUBLISHED Published: 2024-12-16T14:14:20.420Z Last Updated: 2024-12-16T16:39:19.643Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: PickPlugins Products: Job Board Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in PickPlugins Job Board Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through 2.1.60. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/job-board-manager/vulnerability/wordpress-job-board-manager-plugin-2-1-60-broken-access-control-vulnerability
ess/plugin/job-board-manager/vulnerability/wordpress-job-board-manager-plugin-2-1-60-broken-access-control-vulnerability?_s_id=cve