Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t including 5.1.0. The issue arises from the application's method of validating shell commands against an allowlist or denylist, where it only checks the first word of the command. This allows an attacker to bypass the intended restrictions by crafting commands that are executed despite not being on the allowlist or by including malicious commands not present in the denylist. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary shell commands. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/416c4a8b-36ba-4bbc-850a-a2f978b0fac8 - https://github.com/significant-gravitas/autogpt/commit/263
s://huntr.com/bounties/416c4a8b-36ba-4bbc-850a-a2f978b0fac8 - https://github.com/significant-gravitas/autogpt/commit/26324f29849967fa72c207da929af612f1740669
CVE ID: CVE-2024-1882 State: PUBLISHED Published: 2024-03-14T03:08:17.914Z Last Updated: 2024-09-26T03:52:57.154Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: PaperCut Products: PaperCut NG, PaperCut MF Problem Types: CWE-76 Description: This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the server hosting the PaperCut NG/MF application server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.papercut.com/kb/Main/Security-Bulletin-March-2024
CVE ID: CVE-2024-1883 State: PUBLISHED Published: 2024-03-14T03:09:43.195Z Last Updated: 2024-09-26T03:43:04.535Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: PaperCut Products: PaperCut NG, PaperCut MF Problem Types: CWE-76 Description: This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - ht
integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.papercut.com/kb/Main/Security-Bulletin-March-2024
CVE ID: CVE-2024-1884 State: PUBLISHED Published: 2024-03-14T03:11:48.197Z Last Updated: 2024-08-28T15:12:02.085Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: PaperCut Products: PaperCut NG, PaperCut MF Problem Types: CWE-918 Description: This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.papercut.com/kb/Main/Security-Bulletin-March-2024
CVE ID: CVE-2024-1885 State: PUBLISHED Published: 2024-02-26T07:39:43.766Z Last Updated: 2024-08-16T17:43:10.189Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: LG Electronics Products: LG Signage Problem Types: CWE-94 Description: This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE ID: CVE-2024-1886 State: PUBLISHED Published: 2024-02-26T07:53:53.642Z Last Updated: 2024-08-08T20:23:56.459Z Severity: LOW (CVSS 3 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: LG Electronics Products: LG Signage Problem Types: CWE-35 Description: This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails
CVE ID: CVE-2024-1887 State: PUBLISHED Published: 2024-02-29T08:05:29.776Z Last Updated: 2024-08-07T17:38:09.687Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost fails to check if compliance export is enabled when fetching posts of public channels allowing a user that is not a member of the public channel to fetch the posts, which will not be audited in the compliance export. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-1888 State: PUBLISHED Published: 2024-02-29T08:08:08.272Z Last Updated: 2024-08-01T18:56:22.307Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost fails to check the "invite_guest" permission when inviting guests of other teams to a team, allowing a member with permissions to add other members but not to add guests to add a guest to a team as long as the guest was already a guest in another team of the server Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-1889 State: PUBLISHED Published: 2024-02-26T13:38:46.500Z Last Updated: 2024-08-01T18:56:22.438Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SMA Products: SMA Cluster Controller Problem Types: CWE-352 Description: Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker to send a malicious link to an authenticated user to perform actions with these user permissions on the affected device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-s
- CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products
CVE ID: CVE-2024-1890 State: PUBLISHED Published: 2024-02-26T13:40:27.338Z Last Updated: 2024-08-01T18:56:22.676Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: SMA Products: Sunny Webbox Problem Types: CWE-1021 Description: Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a clickjacking attack on Sunny WebBox firmware version 1.6.1 and earlier. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-sma-products
CVE ID: CVE-2024-1891 State: PUBLISHED Published: 2024-06-12T15:56:41.242Z Last Updated: 2024-08-01T18:56:22.481Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: Tenable Products: Security Center Problem Types: CWE-79 Description: A stored cross site scripting vulnerability exists in Tenable Security Center where an authenticated, remote attacker could inject HTML code into a web application scan result page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/tns-2024-10
CVE ID: CVE-2024-1892 State: PUBLISHED Published: 2024-02-28T00:00:14.092Z Last Updated: 2024-08-11T14:28:49.917Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: scrapy Products: scrapy/scrapy Problem Types: CWE-1333 Description: A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker can cause a denial-of-service (DoS) condition. This vulnerability allows for the system to hang and consume significant resources, potenti
-of-service (DoS) condition. This vulnerability allows for the system to hang and consume significant resources, potentially rendering services that utilize Scrapy for XML processing unresponsive. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b - https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5
CVE ID: CVE-2024-1893 State: PUBLISHED Published: 2024-04-09T18:59:11.826Z Last Updated: 2024-08-01T18:56:22.632Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mervb1 Products: Easy Property Listings Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Easy Property Listings plugin for WordPress is vulnerable to time-based SQL Injection via the ‘property_status’ shortcode attribute in all versions up to, and including, 3.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated att
ied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a7ac96db-2d9a-4eaf-8916-a02e3e64ca4a?source=cve - https://plugins.trac.wordpress.org/browser/easy-property-listings/tags/3.5.2/lib/includes/functions.php#L1846 - https://plugins.trac.wordpress.org/changeset?old_path=/easy-property-listings/tags/3.5.2&old=30
es/functions.php#L1846 - https://plugins.trac.wordpress.org/changeset?old_path=/easy-property-listings/tags/3.5.2&old=3056209&new_path=/easy-property-listings/tags/3.5.3&new=3056209&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1894 State: PUBLISHED Published: 2024-03-13T15:27:26.563Z Last Updated: 2024-08-01T18:56:22.716Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rogierlankhorst Products: Burst Statistics – Privacy-Friendly Analytics for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'burst_total_pageviews_count' custom meta field in all versions up to, and including, 1.5.6.1 due to insufficient input sanitization and output escaping on user
a field in all versions up to, and including, 1.5.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note that this exploit only functions if the victim has the 'Show Toolbar when viewing site' option enabled in their profile. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fa587df5-9d96-4cac-ae5d-2a0485a3a789?source=cve - https://plugins.trac.wordpress.org/b
m/threat-intel/vulnerabilities/id/fa587df5-9d96-4cac-ae5d-2a0485a3a789?source=cve - https://plugins.trac.wordpress.org/browser/burst-statistics/trunk/class-frontend.php#L67 - https://plugins.trac.wordpress.org/browser/burst-statistics/trunk/class-frontend.php#L74 - https://plugins.trac.wordpress.org/changeset?old_path=/burst-statistics/tags/1.5.6.1&old=3049793&new_path=/burst-statistics/tags/1.5.7&new=3049793&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1895 State: PUBLISHED Published: 2024-04-30T08:32:22.449Z Last Updated: 2024-08-08T18:16:01.402Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: awordpresslife Products: Event Monster – Event Management, Tickets Booking, Upcoming Event Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.4 via deserialization via shortcode of untrusted input from a custom meta value. This makes it possible for authenticated attackers, with contributor access and above, to inj
from a custom meta value. This makes it possible for authenticated attackers, with contributor access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/41d7b3f1-a133-4678-b2d9-3f9951cbc005?source=cve - https://plugins.trac.wordpress.org/browser/event-monster/tags/1.3.3/shortcode.php
CVE ID: CVE-2024-1896 State: PUBLISHED Published: 2024-05-02T16:51:47.353Z Last Updated: 2024-08-01T18:56:22.572Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: awordpresslife Products: Photo Gallery – Responsive Photo Gallery, Image Gallery, Portfolio Gallery, Logo Gallery And Team Gallery Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Photo Gallery – Responsive Photo Gallery, Image Gallery, Portfolio Gallery, Logo Gallery And Team Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.1 via deserialization via shortcode of untrusted input from the 'awl_lg_settings_' attribute.
up to, and including, 1.4.1 via deserialization via shortcode of untrusted input from the 'awl_lg_settings_' attribute. This makes it possible for authenticated attackers, with contributor access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/14894c36-f657-4368-bc7f-60121ec08c13?source=cve - https://plugins.trac.wordpress.o
e.com/threat-intel/vulnerabilities/id/14894c36-f657-4368-bc7f-60121ec08c13?source=cve - https://plugins.trac.wordpress.org/browser/new-photo-gallery/tags/1.4.0/shortcode.php
CVE ID: CVE-2024-1897 State: PUBLISHED Published: 2024-05-02T16:51:59.201Z Last Updated: 2024-08-01T18:56:22.282Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: awordpresslife Products: Grid Gallery – Photo Image Grid Gallery Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Grid Gallery – Photo Image Grid Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserialization via shortcode of untrusted input from the awl_gg_settings_ meta value. This makes it possible for authenticated attackers, with contributor access and above, to inject a PHP Object. No POP chain is presen
possible for authenticated attackers, with contributor access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/39f5777b-38b0-4fc6-909d-61eaa1de6173?source=cve - https://plugins.trac.wordpress.org/browser/new-grid-gallery/tags/1.4.0/grid-gallery-shortcode.php
CVE ID: CVE-2024-1898 State: PUBLISHED Published: 2024-03-05T21:35:04.786Z Last Updated: 2025-03-14T00:30:07.216Z Vendors: Devolutions Products: Server Description: Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileged user to change notifications settings configured by an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://devolutions.net/security/advisories/DEVO-2024-0002
CVE ID: CVE-2024-1899 State: PUBLISHED Published: 2024-02-26T18:45:23.289Z Last Updated: 2024-08-01T18:56:22.277Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Showdownjs Products: Showdown Description: An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of service conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2024-05
CVE ID: CVE-2024-1900 State: PUBLISHED Published: 2024-03-05T21:34:13.992Z Last Updated: 2024-11-01T17:03:37.256Z Vendors: Devolutions Products: Server Description: Improper session management in the identity provider authentication flow in Devolutions Server 2023.3.14.0 and earlier allows an authenticated user via an identity provider to stay authenticated after his user is disabled or deleted in the identity provider such as Okta or Microsoft O365. The user will stay authenticated until the Devolutions Server token expiration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://devolutions.net/security/advisories/DEVO-2024-0002
CVE ID: CVE-2024-1901 State: PUBLISHED Published: 2024-03-05T21:33:18.547Z Last Updated: 2024-11-06T14:24:05.805Z Vendors: Devolutions Products: Server Description: Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an authenticated user with specific PAM permissions to make PAM credentials unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://devolutions.net/security/advisories/DEVO-2024-0002
CVE ID: CVE-2024-1902 State: PUBLISHED Published: 2024-04-10T17:08:05.267Z Last Updated: 2024-08-01T18:56:22.480Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-821 Description: lunary-ai/lunary is vulnerable to a session reuse attack, allowing a removed user to change the organization name without proper authorization. The vulnerability stems from the lack of validation to check if a user is still part of an organization before allowing them to make changes. An attacker can exploit this by using an old authorization token to send a PATCH request, modifying the organization's name even after being remove
s by using an old authorization token to send a PATCH request, modifying the organization's name even after being removed from the organization. This issue is due to incorrect synchronization and affects the orgs.patch route. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/e536310e-abe7-4585-9cf6-21f77390a5e8 - https://github.com/lunary-ai/lunary/commit/d8e2e73efd53ab4e92cf47bbf4b639a9f08853d2
CVE ID: CVE-2024-1904 State: PUBLISHED Published: 2024-04-09T18:58:37.248Z Last Updated: 2025-02-26T18:37:13.468Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: stylemix Products: MasterStudy LMS WordPress Plugin – for Online Courses and Education Problem Types: CWE-862 Missing Authorization Description: The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the search_posts function in all versions up to, and including, 3.2.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to expose draft post titles and excerpts. Additional Analyst Notes: - CI
ackers, with subscriber-level access and above, to expose draft post titles and excerpts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1be686d3-16b1-4ec7-b304-848ca4d7162c?source=cve - https://plugins.trac.wordpress.org/changeset/3050967/masterstudy-lms-learning-management-system
CVE ID: CVE-2024-1905 State: PUBLISHED Published: 2024-04-29T06:00:01.340Z Last Updated: 2025-03-26T20:55:41.470Z Vendors: Unknown Products: Smart Forms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/b9a448d2-4bc2-4933-8743-58c8768a619f/
CVE ID: CVE-2024-1906 State: PUBLISHED Published: 2024-02-27T11:05:08.424Z Last Updated: 2024-08-01T18:56:22.484Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: frenify Products: Categorify – WordPress Media Library Category & File Manager Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxAddCategory function. This makes it possible for unauthenticated attackers to add categories via a forged request granted they can trick a site administra
t possible for unauthenticated attackers to add categories via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/78422a30-bdc6-4e7c-a018-c3dc4b4be6a0?source=cve - https://plugins.trac.wordpress.org/changeset/3034410/categorify
CVE ID: CVE-2024-1907 State: PUBLISHED Published: 2024-02-27T11:05:06.027Z Last Updated: 2024-08-01T18:56:22.467Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: frenify Products: Categorify – WordPress Media Library Category & File Manager Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxDeleteCategory function. This makes it possible for unauthenticated attackers to delete categories via a forged request granted they can trick a site admi
s it possible for unauthenticated attackers to delete categories via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/08c79118-9dad-44fd-b683-7950276d3808?source=cve - https://plugins.trac.wordpress.org/changeset/3034410/categorify
CVE ID: CVE-2024-1908 State: PUBLISHED Published: 2024-02-29T18:23:21.156Z Last Updated: 2024-08-05T15:06:12.570Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-269 Description: An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an attacker to use the Enterprise Actions GitHub Connect download token to fetch private repository data. An attacker would require an account on the server instance with non-default settings for GitHub Connect. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.8.16, 3