Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Win (SL), CODESYS Embedded Target Visu Toolkit, CODESYS HMI (SL), CODESYS Remote Target Visu Toolkit, CODESYS Runtime Toolkit, CODESYS Virtual Control SL Problem Types: CWE-754 Description: An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2024-057 - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=18604&token=d5e1e2820ee63077b875b3bb41014b1f102e88a3&download=
CVE ID: CVE-2024-8176 State: PUBLISHED Published: 2025-03-14T08:19:48.962Z Last Updated: 2025-11-25T10:23:19.024Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Service
ate Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat JBoss Core Services 2.4.62.SP1, DevWorkspace Operator 0.33, Red Hat Discovery 1.14, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4 Problem Types: CWE-674 Description: A stack overflow vulnerability exists in the libexpat library due to the
Platform 4 Problem Types: CWE-674 Description: A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:13681 - https://access.redhat.com/errata/RHSA-2025:22033 - https://access.re
https://access.redhat.com/errata/RHSA-2025:13681 - https://access.redhat.com/errata/RHSA-2025:22033 - https://access.redhat.com/errata/RHSA-2025:22034 - https://access.redhat.com/errata/RHSA-2025:22035 - https://access.redhat.com/errata/RHSA-2025:3531 - https://access.redhat.com/errata/RHSA-2025:3734 - https://access.redhat.com/errata/RHSA-2025:3913 - https://access.redhat.com/errata/RHSA-2025:4048 - https://access.redhat.com/errata/RHSA-2025:4446 - https://access.redhat.com/errata/RHSA-2025:4447 - https://access.redhat.com/errata/RHSA-2025:4448 - https://access.redhat.com/errata/RHSA-2025:4449 - https://access.redhat.com/errata/RHSA-2025:7444 - https://access.redhat.com/errata/RHSA-2025:75
/errata/RHSA-2025:4449 - https://access.redhat.com/errata/RHSA-2025:7444 - https://access.redhat.com/errata/RHSA-2025:7512 - https://access.redhat.com/errata/RHSA-2025:8385 - https://access.redhat.com/security/cve/CVE-2024-8176 - https://bugzilla.redhat.com/show_bug.cgi?id=2310137 - https://github.com/libexpat/libexpat/issues/893
CVE ID: CVE-2024-8177 State: PUBLISHED Published: 2024-11-26T18:31:05.665Z Last Updated: 2024-11-26T18:41:50.602Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-407 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.4.5, starting from 17.5 prior to 17.5.3, starting from 17.6 prior to 17.6.1 which could cause Denial of Service via integrating a malicious harbor registry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/480706 - https://hackerone.com/reports/2637996
CVE ID: CVE-2024-8178 State: PUBLISHED Published: 2024-09-05T04:31:12.231Z Last Updated: 2025-11-04T16:15:56.298Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-908, CWE-909 Description: The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtio_scsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process. A malicious iSCSI initiator could achieve remote code exe
onstrained by the capabilities available to the bhyve process. A malicious iSCSI initiator could achieve remote code execution on the iSCSI target host. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-24:11.ctl.asc
CVE ID: CVE-2024-8179 State: PUBLISHED Published: 2024-12-12T12:03:04.799Z Last Updated: 2024-12-12T15:44:09.211Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/480718 - https://hackerone.com/reports/2665929
CVE ID: CVE-2024-8180 State: PUBLISHED Published: 2024-11-14T11:02:16.331Z Last Updated: 2024-11-14T19:33:35.064Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.3.7, 17.4 before 17.4.4, and 17.5 before 17.5.2. Improper output encoding could lead to XSS if CSP is not enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/480720 - https://hackerone.com/reports/2654010 - https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/
tps://hackerone.com/reports/2654010 - https://about.gitlab.com/releases/2024/11/13/patch-release-gitlab-17-5-2-released/#html-injection-in-vulnerability-code-flow-could-lead-to-xss-on-self-hosted-instances
CVE ID: CVE-2024-8181 State: PUBLISHED Published: 2024-08-27T13:10:40.880Z Last Updated: 2024-09-06T14:27:44.870Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: FlowiseAI Products: Flowise Description: An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://tenable.com/security/research/tra-2024-33
CVE ID: CVE-2024-8182 State: PUBLISHED Published: 2024-08-27T13:09:02.433Z Last Updated: 2024-08-27T13:53:23.463Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: FlowiseAI Products: Flowise Description: An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the “/api/v1/get-upload-file” api endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://tenable.com/security/research/tra-2024-34
CVE ID: CVE-2024-8183 State: PUBLISHED Published: 2025-03-20T10:11:10.708Z Last Updated: 2025-03-20T14:22:16.940Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: prefecthq Products: prefecthq/prefect Problem Types: CWE-346 Description: A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/b801de43-ff9f-4db9-b
risks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/b801de43-ff9f-4db9-b583-4797d4f7d3d2 - https://github.com/prefecthq/prefect/commit/a69266e077169b8a32ad76b1dd3ea63b96d011c2
CVE ID: CVE-2024-8184 State: PUBLISHED Published: 2024-10-14T15:09:37.861Z Last Updated: 2025-11-03T19:34:56.811Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Eclipse Foundation Products: Jetty Problem Types: CWE-400 Description: There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jetty/jetty.project/security/advisori
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jetty/jetty.project/security/advisories/GHSA-g8m5-722r-8whq - https://gitlab.eclipse.org/security/cve-assignement/-/issues/30 - https://github.com/jetty/jetty.project/pull/11723
CVE ID: CVE-2024-8185 State: PUBLISHED Published: 2024-10-31T15:14:55.145Z Last Updated: 2024-10-31T17:11:35.647Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-636 Description: Vault Community and Vault Enterprise (“Vault”) clusters using Vault’s Integrated Storage backend are vulnerable to a denial-of-service (DoS) attack through memory exhaustion through a Raft cluster join API endpoint . An attacker may send a large volume of requests to the endpoint which may cause Vault to consume excessive system memory resources, potentially leading to a crash of the underlying system and the Vault process
consume excessive system memory resources, potentially leading to a crash of the underlying system and the Vault process itself. This vulnerability, CVE-2024-8185, is fixed in Vault Community 1.18.1 and Vault Enterprise 1.18.1, 1.17.8, and 1.16.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2024-26-vault-vulnerable-to-denial-of-service-through-memory-exhaustion-when-processing-raft-cluster-join-requests/71047
CVE ID: CVE-2024-8186 State: PUBLISHED Published: 2025-03-03T10:02:44.912Z Last Updated: 2025-03-03T12:32:03.051Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1. An attacker could inject HMTL into the child item search potentially leading to XSS in certain situations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/480751 - https://hackerone.com/reports/2655757
CVE ID: CVE-2024-8187 State: PUBLISHED Published: 2025-05-15T20:07:14.181Z Last Updated: 2025-05-20T19:19:37.996Z Vendors: Unknown Products: Smart Post Show Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Smart Post Show WordPress plugin before 3.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0e51b3b5-f003-4af9-8538-95f266065e36/
CVE ID: CVE-2024-8188 State: REJECTED Published: N/A Last Updated: 2024-08-26T19:24:51.508Z Description: No description available.
CVE ID: CVE-2024-8189 State: PUBLISHED Published: 2024-09-28T12:31:55.348Z Last Updated: 2024-09-30T16:02:09.697Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: thangnv27 Products: WP MultiTasking – WP Utilities Problem Types: CWE-79 Description: The WP MultiTasking – WP Utilities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpmt_menu_name’ parameter in all versions up to, and including, 0.1.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injec
administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0c976e5a-2f6c-4632-99a7-a512b3dd38e6?source=cve - https://plugins.trac.wordpress.org/browser/wp-multitasking/trunk/wp-multitasking.php#L29 - https://plugins.trac.wordpress.org/browser/wp-multitasking/trunk/wp-multitasking.php#L71 - https://plugins.trac.wordpress.org/changeset/3158305/
CVE ID: CVE-2024-8190 State: PUBLISHED Published: 2024-09-10T20:33:44.793Z Last Updated: 2025-10-21T22:55:44.915Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: CSA (Cloud Services Appliance) Problem Types: CWE-78 Description: An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Ap
nt: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190
CVE ID: CVE-2024-8191 State: PUBLISHED Published: 2024-09-10T20:50:24.547Z Last Updated: 2024-09-12T03:55:08.946Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-89 Description: SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022
CVE ID: CVE-2024-8193 State: PUBLISHED Published: 2024-08-28T22:44:43.033Z Last Updated: 2024-09-05T03:55:48.729Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html - https://issues.chromium.org/issues/360265320
CVE ID: CVE-2024-8194 State: PUBLISHED Published: 2024-08-28T22:44:43.768Z Last Updated: 2024-09-05T03:55:49.673Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html - https://issues.chromium.org/issues/360533914
CVE ID: CVE-2024-8195 State: PUBLISHED Published: 2024-08-28T13:54:28.403Z Last Updated: 2024-08-28T14:09:04.535Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: mbis Products: Permalink Manager Lite Problem Types: CWE-862 Description: The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'debug_data', 'debug_query', and 'debug_redirect' functions in all versions up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to extract sensitive data including password, title, and content of password-protected posts. Additional Analyst Notes: - CISA ADP Vulnric
ve data including password, title, and content of password-protected posts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aadf1d59-60ba-4da2-adbb-4e84d587a34d?source=cve - https://plugins.trac.wordpress.org/browser/permalink-manager/tags/2.4.4/includes/core/permalink-manager-debug.php#L70 - https://plugins.trac.wordpress.org/changeset/3142479/
CVE ID: CVE-2024-8196 State: PUBLISHED Published: 2025-03-20T10:11:34.868Z Last Updated: 2025-03-20T13:50:28.828Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-306 Description: In mintplex-labs/anything-llm v1.5.11 desktop version for Windows, the application opens server port 3001 on 0.0.0.0 with no authentication by default. This vulnerability allows an attacker to gain full backend access, enabling them to perform actions such as deleting all data from the workspace. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/dbde1c71-7aa5-46f6-847a-d
e. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/dbde1c71-7aa5-46f6-847a-d89793cf97a9 - https://github.com/mintplex-labs/anything-llm/commit/9bfe477f10b188bfe3508ac29105df80d4522ece
CVE ID: CVE-2024-8197 State: REJECTED Published: 2024-08-27T10:59:48.789Z Last Updated: 2024-10-04T15:42:35.511Z Description: No description available.
CVE ID: CVE-2024-8198 State: PUBLISHED Published: 2024-08-28T22:44:44.115Z Last Updated: 2024-10-15T13:41:35.205Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html - https://issues.chromium.org/issues/360758697
CVE ID: CVE-2024-8199 State: PUBLISHED Published: 2024-08-27T15:32:32.328Z Last Updated: 2024-08-27T15:55:00.784Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: smub Products: Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More Problem Types: CWE-862 Description: The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_api_key' function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with Subs
key' function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update API Key options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dc3e89e5-2e7e-497e-b340-b787ebdf3711?source=cve - https://plugins.trac.wordpress.org/browser/reviews-feed/tags/1.1.2/class/Common/Builder/SBR_Feed_Saver_Manager.php#L699 - https://plugins.trac.wordpress.org/changeset/3125315/
CVE ID: CVE-2024-8200 State: PUBLISHED Published: 2024-08-27T15:32:31.676Z Last Updated: 2024-08-27T15:59:56.963Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: smub Products: Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More Problem Types: CWE-352 Description: The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the 'update_api_key' function. This makes it possible for unauthenticated attac
missing or incorrect nonce validation on the 'update_api_key' function. This makes it possible for unauthenticated attackers to update an API key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5d9e20f7-813c-4691-bce4-d0ff4774ae48?source=cve - https://plugins.trac.wordpress.org/browser/reviews-feed/tags/1.1.2/class/Common/Builder/SBR_Feed_Saver_Manager.php#L699 - https://plugins.trac.wordpress.org/changeset/3125315/
CVE ID: CVE-2024-8201 State: PUBLISHED Published: 2025-05-16T06:32:23.411Z Last Updated: 2025-05-16T15:32:48.874Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Hitachi Products: Hitachi Ops Center Analyzer Problem Types: CWE-1385 Description: Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer (RAID Agent component).This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00; Hitachi Ops Center Analyzer: from 10.9.0-00 before 11.0.4-00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-116/index.html
CVE ID: CVE-2024-8207 State: PUBLISHED Published: 2024-08-27T11:28:06.891Z Last Updated: 2025-05-16T23:02:59.895Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: MongoDB Inc Products: MongoDB Server Problem Types: CWE-114 Description: In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries when the server binary is started, potentially resulting in the unintended actor gaining full control over the MongoDB server process. This issue affe
ted, potentially resulting in the unintended actor gaining full control over the MongoDB server process. This issue affects MongoDB Server v5.0 versions prior to 5.0.14 and MongoDB Server v6.0 versions prior to 6.0.3. Required Configuration: Only environments with Linux as the underlying operating system is affected by this issue Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jira.mongodb.org/browse/SERVER-69507