deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-3497
Published: 2024-06-14
Description: Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add new ones to the printer. As for the affected products/models/versions, see the reference URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-23
References: https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html; https://www.toshibatec.com/information/pdf/information20240531_01.pdf
CVE: CVE-2024-3498
Published: 2024-06-14
Description: Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page and elevate its privileges to root. As for the affected products/models/versions, see the reference URL.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://jvn.jp/en/vu/JVNVU97136265/index.html; https://www.toshibatec.com/information/20240531_01.html; https://www.toshibatec.com/information/pdf/information20240531_01.pdf
CVE: CVE-2024-4936
Published: 2024-06-14
Description: The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required allow_url_include to be enabled on the target site in order to exploit.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-98
References: https://plugins.trac.wordpress.org/browser/canto/trunk/includes/lib/sizes.php#L15; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3105443%40canto&new=3104074%40canto&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/95a68ae0-36da-499b-a09d-4c91db8aa338?source=cve
CVE: CVE-2023-51377
Published: 2024-06-14
Description: Missing Authorization vulnerability in WPEverest Everest Forms.This issue affects Everest Forms: from n/a through 2.0.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/everest-forms/wordpress-everest-forms-plugin-2-0-3-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/everest-forms/wordpress-everest-forms-plugin-2-0-3-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-51495
Published: 2024-06-14
Description: Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/woocommerce-warranty/wordpress-woocommerce-warranty-requests-plugin-2-2-7-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce-warranty/wordpress-woocommerce-warranty-requests-plugin-2-2-7-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-51496
Published: 2024-06-14
Description: Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.2.7.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/woocommerce-warranty/wordpress-woocommerce-warranty-requests-plugin-2-2-7-broken-access-control-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce-warranty/wordpress-woocommerce-warranty-requests-plugin-2-2-7-broken-access-control-vulnerability-2?_s_id=cve
CVE: CVE-2023-51497
Published: 2024-06-14
Description: Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-9-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-9-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2024-1295
Published: 2024-06-14
Description: The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contributor role from leaking details about events they shouldn't have access to. (e.g. password-protected events, drafts, etc.)
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/3cffbeb0-545a-4002-b02c-0fa38cada1db/; https://wpscan.com/vulnerability/3cffbeb0-545a-4002-b02c-0fa38cada1db/
CVE: CVE-2024-23504
Published: 2024-06-14
Description: Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.5.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-plugin-5-0-5-broken-access-control-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-plugin-5-0-5-broken-access-control-vulnerability-2?_s_id=cve
CVE: CVE-2024-2122
Published: 2024-06-14
Description: The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via album gallery custom URLs in all versions up to, and including, 2.4.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3100157%40foogallery&new=3100157%40foogallery&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/a69e9802-9087-4cd9-86eb-b64a82bc7c0b?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3100157%40foogallery&new=3100157%40foogallery&sfp_email=&sfph_mail=
CVE: CVE-2024-2218
Published: 2024-06-14
Description: The LuckyWP Table of Contents WordPress plugin through 2.1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ecd615f7-946e-45af-a610-0654a243b1dc/; https://wpscan.com/vulnerability/ecd615f7-946e-45af-a610-0654a243b1dc/
CVE: CVE-2024-3754
Published: 2024-06-14
Description: The Alemha watermarker WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8c6f3e3e-3047-4446-a190-750a60c29fa3/; https://wpscan.com/vulnerability/8c6f3e3e-3047-4446-a190-750a60c29fa3/
CVE: CVE-2024-3965
Published: 2024-06-14
Description: The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/0e1ba2b3-5849-42f6-b503-8b3b520e4a79/; https://wpscan.com/vulnerability/0e1ba2b3-5849-42f6-b503-8b3b520e4a79/
CVE: CVE-2024-3966
Published: 2024-06-14
Description: The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/9f0a575f-862d-4f2e-8d25-82c6f58dd11a/; https://wpscan.com/vulnerability/9f0a575f-862d-4f2e-8d25-82c6f58dd11a/
CVE: CVE-2024-3971
Published: 2024-06-14
Description: The Similarity WordPress plugin through 3.0 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/5dec5719-105d-4989-a97f-bda04d223322/; https://wpscan.com/vulnerability/5dec5719-105d-4989-a97f-bda04d223322/
CVE: CVE-2024-3972
Published: 2024-06-14
Description: The Similarity WordPress plugin through 3.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/55dfb9b5-d590-478b-bd1f-d420b79037fa/; https://wpscan.com/vulnerability/55dfb9b5-d590-478b-bd1f-d420b79037fa/
CVE: CVE-2024-3977
Published: 2024-06-14
Description: The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/25851386-eccf-49cb-afbf-c25286c9b19e/; https://wpscan.com/vulnerability/25851386-eccf-49cb-afbf-c25286c9b19e/
CVE: CVE-2024-3978
Published: 2024-06-14
Description: The WordPress Jitsi Shortcode WordPress plugin through 0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a9f47d11-47ac-4998-a82a-dc2f3b0decdf/; https://wpscan.com/vulnerability/a9f47d11-47ac-4998-a82a-dc2f3b0decdf/
CVE: CVE-2024-3992
Published: 2024-06-14
Description: The Amen WordPress plugin through 3.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e9fe3101-8033-4eee-8b37-06856872e9ef/; https://wpscan.com/vulnerability/e9fe3101-8033-4eee-8b37-06856872e9ef/
CVE: CVE-2024-3993
Published: 2024-06-14
Description: The AZAN Plugin WordPress plugin through 0.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/19cd60dd-8599-4af3-99db-c42de504606c/; https://wpscan.com/vulnerability/19cd60dd-8599-4af3-99db-c42de504606c/
CVE: CVE-2024-4005
Published: 2024-06-14
Description: The Social Pixel WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/02ca09f8-4080-4969-992d-0e6afb29bc62/; https://wpscan.com/vulnerability/02ca09f8-4080-4969-992d-0e6afb29bc62/
CVE: CVE-2024-4270
Published: 2024-06-14
Description: The SVGMagic WordPress plugin through 1.1 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7a3b89cc-7a81-448a-94fc-36a7033609d5/; https://wpscan.com/vulnerability/7a3b89cc-7a81-448a-94fc-36a7033609d5/
CVE: CVE-2024-4271
Published: 2024-06-14
Description: The SVGator  WordPress plugin through 1.2.6 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c1fe0bc7-a340-428e-a549-1e37291bea1c/; https://wpscan.com/vulnerability/c1fe0bc7-a340-428e-a549-1e37291bea1c/
CVE: CVE-2024-4404
Published: 2024-06-14
Description: The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function. This can allow authenticated attackers, with contributor-level permissions and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
CVSS Score: 8.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://wpmet.com/plugin/elementskit/roadmaps/; https://www.wordfence.com/threat-intel/vulnerabilities/id/6417269d-3d49-4f33-b92a-5aacb052bab0?source=cve; https://wpmet.com/plugin/elementskit/roadmaps/
CVE: CVE-2024-4480
Published: 2024-06-14
Description: The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/c1e5dee9-c540-4cc1-8b94-c6d1650b52d3/; https://wpscan.com/vulnerability/c1e5dee9-c540-4cc1-8b94-c6d1650b52d3/
CVE: CVE-2024-4751
Published: 2024-06-14
Description: The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/94f4cc45-4c55-43d4-8ad2-a20c118b589f/; https://wpscan.com/vulnerability/94f4cc45-4c55-43d4-8ad2-a20c118b589f/
CVE: CVE-2024-5155
Published: 2024-06-14
Description: The Inquiry cart WordPress plugin through 3.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/f1e90a8a-d959-4316-a5d4-e183854944bd/; https://wpscan.com/vulnerability/f1e90a8a-d959-4316-a5d4-e183854944bd/
CVE: CVE-2024-5551
Published: 2024-06-14
Description: The WP STAGING Pro WordPress Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. This is due to missing or incorrect nonce validation on the 'sub' parameter called from the WP STAGING WordPress Backup Plugin - Backup Duplicator & Migration plugin. This makes it possible for unauthenticated attackers to include any local files that end in '-settings.php' via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/wp-staging/trunk/Backend/views/settings/tabs/remote-storages.php#L14; https://wp-staging.com/; https://www.wordfence.com/threat-intel/vulnerabilities/id/2a99a21c-d4f1-4cdb-b1f1-31b3cf666b80?source=cve
CVE: CVE-2024-31162
Published: 2024-06-14
Description: The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/en/cp-139-7868-8a760-2.html; https://www.twcert.org.tw/tw/cp-132-7867-8fad9-1.html; https://www.twcert.org.tw/en/cp-139-7868-8a760-2.html
CVE: CVE-2024-31163
Published: 2024-06-14
Description: ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device.
CVSS Score: 7.2 (HIGH)
CWE: CWE-121
References: https://www.twcert.org.tw/en/cp-139-7870-befb5-2.html; https://www.twcert.org.tw/tw/cp-132-7869-3db1d-1.html; https://www.twcert.org.tw/en/cp-139-7870-befb5-2.html
CVE: CVE-2024-5994
Published: 2024-06-14
Description: The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom JS option in versions up to, and including, 9.0.38. This makes it possible for authenticated attackers that have been explicitly granted permissions by an administrator, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Version 9.0.39 adds a caution to make administrators aware of the possibility for abuse if permissions are granted to lower-level users.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-google-maps/trunk/html/atlas-novus/settings-page.html.php#L442; https://plugins.trac.wordpress.org/browser/wp-google-maps/trunk/html/settings-page.html.php#L538; https://www.wordfence.com/threat-intel/vulnerabilities/id/dd0597d2-07ba-4fb4-bf73-95770f8c3d6b?source=cve
CVE: CVE-2024-36499
Published: 2024-06-14
Description: Vulnerability of unauthorized screenshot capturing in the WMS module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-269
References: https://consumer.huawei.com/en/support/bulletin/2024/6/; https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE: CVE-2024-36500
Published: 2024-06-14
Description: Privilege escalation vulnerability in the AMS module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://consumer.huawei.com/en/support/bulletin/2024/6/; https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE: CVE-2024-36501
Published: 2024-06-14
Description: Memory management vulnerability in the boottime module
Impact: Successful exploitation of this vulnerability can affect integrity.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2024/6/; https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE: CVE-2024-36502
Published: 2024-06-14
Description: Out-of-bounds read vulnerability in the audio module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.9 (HIGH)
CWE: CWE-125, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2024/6/; https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE: CVE-2024-36503
Published: 2024-06-14
Description: Memory management vulnerability in the Gralloc module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-908, CWE-908
References: https://consumer.huawei.com/en/support/bulletin/2024/6/; https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE: CVE-2024-5464
Published: 2024-06-14
Description: Vulnerability of insufficient permission verification in the NearLink module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2024/6/; https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE: CVE-2024-5465
Published: 2024-06-14
Description: Function vulnerabilities in the Calendar module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-264
References: https://consumer.huawei.com/en/support/bulletin/2024/6/; https://consumer.huawei.com/en/support/bulletin/2024/6/
CVE: CVE-2024-5577
Published: 2024-06-14
Description: The Where I Was, Where I Will Be plugin for WordPress is vulnerable to Remote File Inclusion in version <= 1.1.1 via the WIW_HEADER parameter of the /system/include/include_user.php file. This makes it possible for unauthenticated attackers to include and execute arbitrary files hosted on external servers, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution. This requires allow_url_include to be set to true in order to exploit, which is not commonly enabled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-98
References: https://plugins.trac.wordpress.org/browser/where-i-was-where-i-will-be/trunk/system/include/include_user.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/68e0f54d-08ec-4e41-ac9b-d72cdde5a724?source=cve; https://plugins.trac.wordpress.org/browser/where-i-was-where-i-will-be/trunk/system/include/include_user.php
CVE: CVE-2024-5961
Published: 2024-06-14
Description: Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. This issue affects 2ClickPortal software versions from 7.2.31 through 7.6.4.
CWE: CWE-79
References: https://2clickportal.pl/; https://cert.pl/en/posts/2024/06/CVE-2024-5961/; https://cert.pl/posts/2024/06/CVE-2024-5961/
CVE: CVE-2024-5995
Published: 2024-06-14
Description: The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can be reused.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613
References: https://www.twcert.org.tw/en/cp-139-7872-1c8b4-2.html; https://www.twcert.org.tw/tw/cp-132-7871-fecf1-1.html; https://www.twcert.org.tw/en/cp-139-7872-1c8b4-2.html
CVE: CVE-2024-25142
Published: 2024-06-14
Description: Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. 

Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser.

This issue affects Apache Airflow: before 2.9.2.

Users are recommended to upgrade to version 2.9.2, which fixes the issue.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-525
References: https://github.com/apache/airflow/pull/39550; https://lists.apache.org/thread/cg1j28lk0fhzthk0of1g7vy7p2n1j7nr; http://www.openwall.com/lists/oss-security/2024/06/13/1
CVE: CVE-2024-36287
Published: 2024-06-14
Description: Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.
CVSS Score: 3.8 (LOW)
CWE: CWE-693
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2024-37182
Published: 2024-06-14
Description: Mattermost Desktop App versions <=5.7.0 fail to correctly prompt for permission when opening external URLs which allows a remote attacker to force a victim over the Internet to run arbitrary programs on the victim's system via custom URI schemes.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-693
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2024-4863
Published: 2024-06-14
Description: The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘titleFont’ parameter in all versions up to, and including, 3.2.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/kadence-blocks/trunk/includes/blocks/class-kadence-blocks-testimonial-block.php#L276; https://plugins.trac.wordpress.org/changeset/3091170/kadence-blocks/trunk/includes/blocks/class-kadence-blocks-testimonial-block.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/2e0cde65-f75c-4602-bffe-97b391a428b4?source=cve