deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-39279
Published: 2025-02-12
Description: Insufficient granularity of access control in UEFI firmware in some Intel(R) processors may allow a authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1220
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html; https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html
CVE: CVE-2024-39284
Published: 2025-02-12
Description: Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01208.html
CVE: CVE-2024-39286
Published: 2025-02-12
Description: Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-279
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01236.html
CVE: CVE-2024-39355
Published: 2025-02-12
Description: Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1384
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html; https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html
CVE: CVE-2024-39356
Published: 2025-02-12
Description: NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 7.4 (HIGH)
CWE: CWE-476
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01224.html
CVE: CVE-2024-39365
Published: 2025-02-12
Description: Uncontrolled search path for the FPGA Support Package for the Intel(R) oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01218.html
CVE: CVE-2024-39372
Published: 2025-02-12
Description: Uncontrolled search path for the Intel(R) XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01215.html
CVE: CVE-2024-39606
Published: 2025-02-12
Description: Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01224.html
CVE: CVE-2024-39779
Published: 2025-02-12
Description: Stack-based buffer overflow in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-121
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00590.html
CVE: CVE-2024-39797
Published: 2025-02-12
Description: Improper access control in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00590.html
CVE: CVE-2024-39805
Published: 2025-02-12
Description: Insufficient verification of data authenticity in some Intel(R) DSA software before version 23.4.39 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-345
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01030.html
CVE: CVE-2024-39813
Published: 2025-02-12
Description: Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01227.html
CVE: CVE-2024-40887
Published: 2025-02-12
Description: Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-362
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01224.html
CVE: CVE-2024-41166
Published: 2025-02-12
Description: Stack-based buffer overflow in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-121
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01224.html
CVE: CVE-2024-41168
Published: 2025-02-12
Description: Use after free in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 7.4 (HIGH)
CWE: CWE-416
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01224.html
CVE: CVE-2024-41917
Published: 2025-02-12
Description: Time-of-check time-of-use race condition for some Intel(R) Battery Life Diagnostic Tool software before version 2.4.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01230.html
CVE: CVE-2024-41934
Published: 2025-02-12
Description: Improper access control in some Intel(R) GPA software before version 2024.3 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01233.html
CVE: CVE-2024-42405
Published: 2025-02-12
Description: Uncontrolled search path for some Intel(R) Quartus(R) Prime Software before version 23.1.1 Patch 1.01std may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01231.html
CVE: CVE-2024-42410
Published: 2025-02-12
Description: Improper input validation in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01235.html
CVE: CVE-2024-42419
Published: 2025-02-12
Description: Incorrect default permissions for some Intel(R) GPA and Intel(R) GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01233.html
CVE: CVE-2024-42492
Published: 2025-02-12
Description: Uncontrolled search path element in some BIOS and System Firmware Update Package for Intel(R) Server M50FCP family before version R01.02.0002 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01237.html
CVE: CVE-2024-46922
Published: 2025-02-12
Description: An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in the Xclipse Driver.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-46923
Published: 2025-02-12
Description: An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_ib_fill in the Xclipse Driver.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE: CVE-2024-47006
Published: 2025-02-12
Description: Uncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows(R) 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01240.html
CVE: CVE-2024-51122
Published: 2025-02-12
Description: Cross Site Scripting vulnerability in Zertificon Z1 SecureMail Z1 CertServer v.3.16.4-2516-debian12 alllows a remote attacker to execute arbitrary code via the ST, L, O, OU, CN parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MVRC-ITSEC/CVEs/blob/main/CVE-2024-51122
CVE: CVE-2024-51123
Published: 2025-02-12
Description: An issue in Zertificon Z1 SecureMail Z1 SecureMail Gateway 4.44.2-7240-debian12 allows a remote attacker to obtain sensitive information via the /compose-pdf.xhtml?convid=[id] component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/MVRC-ITSEC/CVEs/blob/main/CVE-2024-51123
CVE: CVE-2024-51440
Published: 2025-02-12
Description: An issue in Nothing Tech Nothing OS v.2.6 allows a local attacker to escalate privileges via the NtBpfService component.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://sharedobject.blog/posts/nothing-bpf/
CVE: CVE-2024-56938
Published: 2025-02-12
Description: LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the materials-content class.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nikolas-ch/CVEs/tree/main/LearnDash_v6.7.1; https://github.com/nikolas-ch/CVEs/blob/main/LearnDash_v6.7.1/CVE-2024-56938/StoredXSS_MaterialsContent_LearnDash_v6.7.1.PNG
CVE: CVE-2024-56939
Published: 2025-02-12
Description: LearnDash v6.7.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the ld-comment-body class.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nikolas-ch/CVEs/tree/main/LearnDash_v6.7.1; https://github.com/nikolas-ch/CVEs/blob/main/LearnDash_v6.7.1/CVE-2024-56939/StoredXSS_LDCommentBody_LearnDash_v6.7.1.PNG
CVE: CVE-2024-56940
Published: 2025-02-12
Description: An issue in the profile image upload function of LearnDash v6.7.1 allows attackers to cause a Denial of Service (DoS) via excessive file uploads.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/nikolas-ch/CVEs/tree/main/LearnDash_v6.7.1
CVE: CVE-2024-57601
Published: 2025-02-12
Description: Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://hkohi.ca/vulnerability/13
CVE: CVE-2024-57602
Published: 2025-02-12
Description: An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://hkohi.ca/vulnerability/12
CVE: CVE-2024-57603
Published: 2025-02-12
Description: An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-799
References: https://github.com/mayswind/ezbookkeeping/issues/33; https://hkohi.ca/vulnerability/1
CVE: CVE-2024-57604
Published: 2025-02-12
Description: An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://github.com/mayswind/ezbookkeeping/issues/33; https://hkohi.ca/vulnerability/2
CVE: CVE-2024-57605
Published: 2025-02-12
Description: Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://hkohi.ca/vulnerability/3
CVE: CVE-2025-1228
Published: 2025-02-12
Description: A vulnerability classified as problematic has been found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected is an unknown function of the file /read/?page=1&logfile=LOG_Monitor of the component Logfile Update Handler. The manipulation of the argument path leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://gitee.com/olajowon/loggrove/issues/IBJSXS; https://vuldb.com/?ctiid.295218; https://vuldb.com/?id.295218
CVE: CVE-2025-1229
Published: 2025-02-12
Description: A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability is an unknown functionality of the file /read/?page=1&logfile=eee&match=. The manipulation of the argument path leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://gitee.com/olajowon/loggrove/issues/IBJT1K; https://vuldb.com/?ctiid.295219; https://vuldb.com/?id.295219
CVE: CVE-2025-20097
Published: 2025-02-12
Description: Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-248
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00990.html
CVE: CVE-2024-34520
Published: 2025-02-12
Description: An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2024-34520
CVE: CVE-2024-34521
Published: 2025-02-12
Description: A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an administrative user to access system files with the file permissions of the privileged system user running the application.
CVSS Score: 3.5 (LOW)
CWE: CWE-22
References: https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2024-34521
CVE: CVE-2024-51376
Published: 2025-02-12
Description: Directory Traversal vulnerability in yeqifu carRental v.1.0 allows a remote attacker to obtain sensitive information via the file/downloadFile.action?path= component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/echo0d/vulnerability/blob/main/yeqifu_carRental/DirectoryTraversal.md; https://github.com/yeqifu/carRental/issues/43
CVE: CVE-2024-7102
Published: 2025-02-13
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.0 which allows an attacker to trigger a pipeline as another user under certain circumstances.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-250
References: https://gitlab.com/gitlab-org/gitlab/-/issues/474414; https://hackerone.com/reports/2623063
CVE: CVE-2024-8266
Published: 2025-02-13
Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to trigger a pipeline as project owner under certain circumstances.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-250
References: https://gitlab.com/gitlab-org/gitlab/-/issues/481531; https://hackerone.com/reports/2649798
CVE: CVE-2025-25286
Published: 2025-02-13
Description: Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The issue has been patched in `islandora/crayfish:4.1.0`. Some workarounds are available. The exploit requires making a request against the Homarus's `/convert` endpoint; therefore, the ability to exploit is much reduced if the microservice is not directly accessible from the Internet, so: Prevent general access from the Internet from hitting Homarus. Alternatively or additionally, configure auth in Crayfish to be more strongly required, such that requests with `Authorization` headers that do not validate are rejected before the problematic CLI interpolation occurs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-150, CWE-157
References: https://github.com/Islandora/Crayfish/commit/64cb4cec688928798cc40e6f0a0e863d7f69fd89; https://github.com/Islandora/Crayfish/security/advisories/GHSA-mm6v-68qp-f9fw
CVE: CVE-2024-13644
Published: 2025-02-13
Description: The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's De Gallery widget in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3236114/dethemekit-for-elementor/trunk/widgets/dethemekit-grid.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/56ac720a-db1e-4aca-b12c-5289fa7b8b9e?source=cve
CVE: CVE-2025-0896
Published: 2025-02-13
Description: Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-037-02
CVE: CVE-2025-1198
Published: 2025-02-13
Description: An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-613
References: https://gitlab.com/gitlab-org/gitlab/-/issues/511477
CVE: CVE-2024-10763
Published: 2025-02-13
Description: The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the 'campress_woocommerce_get_ajax_products' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://themeforest.net/item/campress-responsive-education-courses-and-events-wordpress-theme/19355619; https://www.wordfence.com/threat-intel/vulnerabilities/id/d818b467-a893-4f4f-b623-abff99ef37b4?source=cve
CVE: CVE-2024-13227
Published: 2025-02-13
Description: The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to, and including, 1.0.235 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L257; https://plugins.trac.wordpress.org/changeset/3222905/; https://rankmath.com/changelog/free/page/2/
CVE: CVE-2024-13229
Published: 2025-02-13
Description: The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the update_metadata() function in all versions up to, and including, 1.0.235. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete any schema metadata assigned to any post.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L169; https://plugins.trac.wordpress.org/changeset/3222905/; https://rankmath.com/changelog/free/page/2/
CVE: CVE-2024-13770
Published: 2025-02-13
Description: The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of untrusted input 'view_more_posts' AJAX action. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. The developer opted to remove the software from the repository, so an update is not available and it is recommended to find a replacement software.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://themeforest.net/item/puzzles-wordpress-magazinereview-with-wooc/5690583; https://www.wordfence.com/threat-intel/vulnerabilities/id/950d1c8f-6715-4b0d-bf3d-af978a146838?source=cve
CVE: CVE-2025-0837
Published: 2025-02-13
Description: The Puzzles theme for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themeforest.net/item/puzzles-wordpress-magazinereview-with-wooc/5690583; https://www.wordfence.com/threat-intel/vulnerabilities/id/669e3015-b64c-440d-bc06-db4828c07196?source=cve
CVE: CVE-2024-10083
Published: 2025-02-13
Description: CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering
workstation when specific driver interface is invoked locally by an authenticated user with crafted input.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-02.pdf