Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-32051 State: PUBLISHED Published: 2024-04-24T05:45:13.121Z Last Updated: 2024-08-02T02:06:43.229Z Vendors: RoamWiFi Technology Co., Ltd. Products: RoamWiFi R10 Problem Types: Insertion of sensitive information into log file Description: Insertion of sensitive information into log file issue exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.roamwifi.hk/product.jsp - https://jvn.jp/en/jp/JVN62737544/
CVE ID: CVE-2024-32053 State: PUBLISHED Published: 2024-05-15T19:34:30.153Z Last Updated: 2024-08-02T02:06:43.251Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CyberPower Products: PowerPanel business Problem Types: CWE-798 Description: Hard-coded credentials are used by the CyberPower PowerPanel platform to authenticate to the database, other services, and the cloud. This could result in an attacker gaining access to services with the privileges of a Powerpanel business application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 - https://www.cyber
CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-123-01 - https://www.cyberpower.com/global/en/product/sku/powerpanel_business_for_windows#downloads
CVE ID: CVE-2024-32055 State: PUBLISHED Published: 2024-05-14T10:02:28.591Z Last Updated: 2025-08-27T20:42:53.980Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-976324.html - https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE ID: CVE-2024-32056 State: PUBLISHED Published: 2024-07-09T12:04:46.565Z Last Updated: 2025-08-27T20:42:54.119Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS part file. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productc
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE ID: CVE-2024-32057 State: PUBLISHED Published: 2024-05-14T10:02:29.858Z Last Updated: 2025-08-27T20:42:54.247Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-843 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21562) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-976324.html - https://c
ent: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-976324.html - https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE ID: CVE-2024-32058 State: PUBLISHED Published: 2024-05-14T10:02:31.096Z Last Updated: 2024-08-02T02:06:43.439Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-119 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to memory corruption while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21563) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-976324.htm
ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-976324.html - https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE ID: CVE-2024-32059 State: PUBLISHED Published: 2024-05-14T10:02:32.317Z Last Updated: 2024-08-02T02:06:43.256Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21564) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.
) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-976324.html - https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE ID: CVE-2024-32060 State: PUBLISHED Published: 2024-05-14T10:02:33.562Z Last Updated: 2024-08-02T02:06:43.398Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21565) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.
CVE ID: CVE-2024-32061 State: PUBLISHED Published: 2024-05-14T10:02:34.833Z Last Updated: 2024-08-02T02:06:43.465Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21566) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.
CVE ID: CVE-2024-32062 State: PUBLISHED Published: 2024-05-14T10:02:36.102Z Last Updated: 2024-08-02T02:06:43.601Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-843 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21568) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-976324.html - https://c
CVE ID: CVE-2024-32063 State: PUBLISHED Published: 2024-05-14T10:02:37.332Z Last Updated: 2024-08-02T02:06:43.856Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-843 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21573) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-976324.html - https://c
CVE ID: CVE-2024-32064 State: PUBLISHED Published: 2024-05-14T10:02:38.564Z Last Updated: 2024-08-02T02:06:43.386Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21575) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.
CVE ID: CVE-2024-32065 State: PUBLISHED Published: 2024-05-14T10:02:39.804Z Last Updated: 2024-08-02T02:06:43.302Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21577) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.
CVE ID: CVE-2024-32066 State: PUBLISHED Published: 2024-05-14T10:02:41.043Z Last Updated: 2024-08-02T02:06:43.286Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-125 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21578) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.
CVE ID: CVE-2024-32077 State: PUBLISHED Published: 2024-05-14T10:43:20.299Z Last Updated: 2025-03-27T19:28:00.194Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-79 Description: Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/airflow/pull/38882 - https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77 - http://www.openwall.com/lists/oss-security/2024/05/14/1
CVE ID: CVE-2024-32078 State: PUBLISHED Published: 2024-04-24T15:40:22.022Z Last Updated: 2024-08-02T02:06:43.360Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: Foliovision Products: FV Flowplayer Video Player Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Foliovision FV Flowplayer Video Player.This issue affects FV Flowplayer Video Player: from n/a through 7.5.44.7212. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-player-plugin-7-5-44-7212-unvalidated-redirects-and-forwards
database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-player-plugin-7-5-44-7212-unvalidated-redirects-and-forwards-vulnerability?_s_id=cve
CVE ID: CVE-2024-32079 State: PUBLISHED Published: 2024-04-15T07:09:23.080Z Last Updated: 2024-08-02T02:06:43.282Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Michael Dempfle Products: Advanced iFrame Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Advanced iFrame allows Stored XSS.This issue affects Advanced iFrame: from n/a through 2024.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/advanced-iframe/wordpress-advanced-iframe-plugin-2024-2-cross-site-scripting-
ps://patchstack.com/database/vulnerability/advanced-iframe/wordpress-advanced-iframe-plugin-2024-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32080 State: PUBLISHED Published: 2024-04-11T08:41:25.161Z Last Updated: 2024-08-02T02:06:43.570Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Nick Pelton Products: Search Keyword Redirect Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Pelton Search Keyword Redirect allows Stored XSS.This issue affects Search Keyword Redirect: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-search-keyword-redirect/wordpress-search-keyword-redirect-plu
rences: - https://patchstack.com/database/vulnerability/wp-search-keyword-redirect/wordpress-search-keyword-redirect-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32081 State: PUBLISHED Published: 2024-06-09T18:37:05.530Z Last Updated: 2024-08-02T02:06:43.590Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Websupporter Products: Filter Custom Fields & Taxonomies Light Problem Types: CWE-862 Description: Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/filter-custom-fields-taxonomies-light/wordpress-filter-custom-fields-taxonomies-light-plugin-
com/database/vulnerability/filter-custom-fields-taxonomies-light/wordpress-filter-custom-fields-taxonomies-light-plugin-1-05-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32082 State: PUBLISHED Published: 2024-04-15T07:42:34.799Z Last Updated: 2024-08-02T02:06:43.890Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: kp4coder Products: Sync Post With Other Site Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in kp4coder Sync Post With Other Site allows Cross-Site Scripting (XSS).This issue affects Sync Post With Other Site: from n/a through 1.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/sync-post-with-other-site/wordpress-sync-post-with-other-site-plugin-1-4-2-cross-site-request-forg
atabase/vulnerability/sync-post-with-other-site/wordpress-sync-post-with-other-site-plugin-1-4-2-cross-site-request-forgery-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32083 State: PUBLISHED Published: 2024-04-11T12:51:00.331Z Last Updated: 2024-08-02T02:06:44.049Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Varun Kumar Products: Easy Logo Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Varun Kumar Easy Logo allows Stored XSS.This issue affects Easy Logo: from n/a through 1.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easylogo/wordpress-easy-logo-plugin-1-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32084 State: PUBLISHED Published: 2024-04-15T09:10:03.704Z Last Updated: 2024-08-08T16:11:47.067Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Gold Plugins Products: Before And After Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Gold Plugins Before And After.This issue affects Before And After: from n/a through 3.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/before-and-after/wordpress-before-and-after-plugin-3-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-32085 State: PUBLISHED Published: 2024-04-15T09:08:11.987Z Last Updated: 2025-08-27T21:12:59.651Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: AitThemes Products: Citadela Listing Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a before 5.20.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/citadela-directory/wordpress-citadela-listing-plugin-5-18-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-32086 State: PUBLISHED Published: 2024-04-16T17:07:39.701Z Last Updated: 2024-08-08T19:19:40.806Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: AitThemes Products: Citadela Listing Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a through 5.18.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/citadela-directory/wordpress-citadela-listing-plugin-5-18-1-unauthenticated-sensitive-data-users-posts-exposure-vulnerability?_s_id
rectory/wordpress-citadela-listing-plugin-5-18-1-unauthenticated-sensitive-data-users-posts-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-32087 State: PUBLISHED Published: 2024-04-15T07:40:55.205Z Last Updated: 2024-08-02T02:06:44.025Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: ExportFeed.com Products: Product Feed on WooCommerce for Google Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExportFeed.Com Product Feed on WooCommerce for Google.This issue affects Product Feed on WooCommerce for Google: from n/a through 3.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/purple-xmls-google-product-feed
nt: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/purple-xmls-google-product-feed-for-woocommerce/wordpress-product-feed-on-woocommerce-for-google-awin-shareasale-bing-and-more-plugin-3-5-7-auth-sql-injection-sqli-vulnerability?_s_id=cve
CVE ID: CVE-2024-32088 State: PUBLISHED Published: 2024-04-15T09:06:52.696Z Last Updated: 2024-08-02T02:06:43.484Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: SeedProd Products: Coming Soon Page, Under Construction & Maintenance Mode by SeedProd Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through 6.15.20. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/co
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/coming-soon/wordpress-website-builder-plugin-6-15-20-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-32089 State: PUBLISHED Published: 2024-04-15T09:06:00.779Z Last Updated: 2024-08-02T02:06:43.248Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Supsystic Products: Digital Publications by Supsystic Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Digital Publications by Supsystic.This issue affects Digital Publications by Supsystic: from n/a through 1.7.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/digital-publications-by-supsystic/wordpress-digital-publications-by-supsystic-plugin-1-7-7-cross-site-re
e/vulnerability/digital-publications-by-supsystic/wordpress-digital-publications-by-supsystic-plugin-1-7-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-32090 State: PUBLISHED Published: 2024-04-15T09:02:58.333Z Last Updated: 2024-08-21T17:33:24.486Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Andy Moyle Products: Church Admin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 4.0.27. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/church-admin/wordpress-church-admin-plugin-4-0-27-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-32091 State: PUBLISHED Published: 2024-04-15T09:02:08.810Z Last Updated: 2024-08-02T02:06:43.534Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Tonjoo Products: Sangar Slider Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tonjoo Sangar Slider.This issue affects Sangar Slider: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/sangar-slider-lite/wordpress-sangar-slider-plugin-1-3-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-32092 State: PUBLISHED Published: 2024-04-15T09:00:03.344Z Last Updated: 2024-08-02T02:06:43.575Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Michael Bester Products: Kimili Flash Embed Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Michael Bester Kimili Flash Embed.This issue affects Kimili Flash Embed: from n/a through 2.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/kimili-flash-embed/wordpress-kimili-flash-embed-plugin-2-5-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-32093 State: PUBLISHED Published: 2024-04-15T08:59:08.874Z Last Updated: 2024-08-02T02:06:44.096Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Nose Graze Products: Novelist Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Nose Graze Novelist.This issue affects Novelist: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/novelist/wordpress-novelist-plugin-1-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve