deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8794
Published: 2024-09-24
Description: The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the reset_user_password() function not verifying a user's identity prior to setting a password. This makes it possible for unauthenticated attackers to reset any user's passwords, including administrators. It's important to note that the attacker will not have access to the generated password, therefore, privilege escalation is not possible.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-620
References: https://plugins.trac.wordpress.org/browser/ba-book-everything/tags/1.6.20/includes/class-babe-my-account.php#L610; https://plugins.trac.wordpress.org/browser/ba-book-everything/tags/1.6.20/includes/class-babe-users.php#L266; https://plugins.trac.wordpress.org/changeset/3152728/ba-book-everything/trunk/includes/class-babe-users.php
CVE: CVE-2021-38963
Published: 2024-09-25
Description: IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerability. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: https://www.ibm.com/support/pages/node/7169765
CVE: CVE-2022-43845
Published: 2024-09-25
Description: IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie.
CVSS Score: 3.7 (LOW)
CWE: CWE-1004, CWE-732
References: https://www.ibm.com/support/pages/node/7169766
CVE: CVE-2023-26686
Published: 2024-09-25
Description: File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26686%20-%20File%20Upload%20vulnerability%20in%20product%20image%20of%20CS-Cart%20MultiVendor%204.16.1; https://www.cs-cart.com/multivendor.html
CVE: CVE-2023-26687
Published: 2024-09-25
Description: Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the product_data parameter in the PDF Add-on.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26687%20-%20Local%20File%20Inclusion%20vulnerability%20in%20CS-Cart%20MultiVendor
CVE: CVE-2023-26688
Published: 2024-09-25
Description: Cross Site Scripting (XSS) vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the product_data parameter of add/edit product in the administration interface.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26688%20-%20Cross%20Site%20Scripting%20%28XSS%29%20vulnerability%20in%20CS-Cart%20MultiVendor%204.16.1; https://www.cs-cart.com/multivendor.html
CVE: CVE-2023-26689
Published: 2024-09-25
Description: An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-286
References: https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26689%20-%20Insufficient%20Authorization%20for%20API%20key%20creation%20in%20CS-Cart%20MultiVendor%204.16.1
CVE: CVE-2023-26690
Published: 2024-09-25
Description: File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in the vendor or admin menu.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26690%20-%20%20File%20Upload%20vulnerability%20in%20File%20Manager%20of%20CS-Cart%20MultiVendor%204.16.1; https://www.cs-cart.com/multivendor.html
CVE: CVE-2023-26691
Published: 2024-09-25
Description: Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26691%20-%20Zip%20Slip%20in%20CS-Cart%20MultiVendor%204.16.1; https://www.cs-cart.com/multivendor.html
CVE: CVE-2023-5359
Published: 2024-09-25
Description: The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source. This can allow unauthenticated attackers to impersonate W3 Total Cache and gain access to user account information in successful conditions. This would not impact the WordPress users site in any way.
CVSS Score: 3.7 (LOW)
CWE: CWE-200, CWE-312
References: https://plugins.trac.wordpress.org/browser/w3-total-cache/trunk/PageSpeed_Api.php#L39; https://plugins.trac.wordpress.org/changeset/3156426/w3-total-cache/tags/2.7.6/PageSpeed_Api.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/2d89a534-978e-4fd8-be3a-5137bdc22dc9?source=cve
CVE: CVE-2024-21545
Published: 2024-09-25
Description: Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 'Sys.Audit' or 'VM.Monitor' privileges to download arbitrary host files via the API.
When handling the result from a request handler before returning it to the user, the handle_api2_request function will check for the ‘download’ or ‘data’->’download’ objects inside the request handler call response object. If present, handle_api2_request will read a local file defined by this object and return it to the user.
Two endpoints were identified which can control the object returned by a request handler sufficiently that the ’download’ object is defined and user controlled. This results in arbitrary file read.
The privileges of this file read can result in full compromise of the system by various impacts such as disclosing sensitive files allowing for privileged session forgery.
CVSS Score: 8.2 (HIGH)
CWE: CWE-73, CWE-73
References: https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-705345; https://git.proxmox.com/?p=pve-http-server.git;a=blob;f=src/PVE/APIServer/AnyEvent.pm;h=a8d60c18102d2eea[PII_REDACTED]fb60d90f405d0a;hb=HEAD#l988
CVE: CVE-2024-38324
Published: 2024-09-25
Description: IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-297, CWE-295
References: https://www.ibm.com/support/pages/node/7168640
CVE: CVE-2024-39928
Published: 2024-09-25
Description: In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the Token when starting Py4j uses the Commons Lang's RandomStringUtils.
Users are recommended to upgrade to version 1.6.0, which fixes this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326, CWE-326
References: https://lists.apache.org/thread/g664n13nb17rsogcfrn8kjgd8m89p8nw; http://www.openwall.com/lists/oss-security/2024/09/24/2
CVE: CVE-2024-41725
Published: 2024-09-25
Description: ProGauge MAGLINK LX CONSOLE does not have sufficient filtering on input 
fields that are used to render pages which may allow cross site 
scripting.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04
CVE: CVE-2024-42505
Published: 2024-09-25
Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04712en_us&docLocale=en_US
CVE: CVE-2024-42506
Published: 2024-09-25
Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04712en_us&docLocale=en_US
CVE: CVE-2024-42507
Published: 2024-09-25
Description: Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04712en_us&docLocale=en_US
CVE: CVE-2024-42797
Published: 2024-09-25
Description: An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kashipara Music Management System v1.0. This vulnerability allows an unauthenticated attacker to delete the valid music playlist entries.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Music%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Delete%20Playlist.pdf
CVE: CVE-2024-43423
Published: 2024-09-25
Description: The web application for ProGauge MAGLINK LX4 CONSOLE contains an 
administrative-level user account with a password that cannot be 
changed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259, CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04
CVE: CVE-2024-43692
Published: 2024-09-25
Description: An attacker can directly request the ProGauge MAGLINK LX CONSOLE 
resource sub page with full privileges by requesting the URL directly.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04
CVE: CVE-2024-43693
Published: 2024-09-25
Description: A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE 
UTILITY sub-menu can allow a remote attacker to inject arbitrary 
commands.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04
CVE: CVE-2024-45066
Published: 2024-09-25
Description: A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP 
sub-menu can allow a remote attacker to inject arbitrary commands.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04
CVE: CVE-2024-45373
Published: 2024-09-25
Description: Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04
CVE: CVE-2024-45599
Published: 2024-09-25
Description: Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or microphone, any program that is run on the machine is able to access the camera or the microphone without explicitly being granted access, through a DyLib Injection using DYLD_INSERT_LIBRARIES environment variable. The usage of `com.apple.security.cs.allow-dyld-environment-variables` and `com.apple.security.cs.disable-library-validation` allows an external dynamic library to be injected into the application using DYLD_INSERT_LIBRARIES environment variable. 
Moreover, the entitlement `com.apple.security.device.camera` allows the application to use the host camera and `com.apple.security.device.audio-input` allows the application to use the microphone. This means that untrusted code that is executed on the user's machine can access the camera or the microphone, if the user has already given permission for Cursor to do so. In version 0.41.0, the entitlements have been split by process: the main process gets the camera and microphone entitlements, but not the DyLib entitlements, whereas the extension host process gets the DyLib entitlements but not the camera or microphone entitlements. As a workaround, do not explicitly give Cursor the permission to access the camera or microphone if untrusted users can run arbitrary commands on the affected machine.
CVSS Score: 3.8 (LOW)
CWE: CWE-277
References: https://github.com/getcursor/cursor/security/advisories/GHSA-x352-xv29-r74m
CVE: CVE-2024-46607
Published: 2024-09-25
Description: Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password via the loginAdmin method in the UserController.java file.
CVSS Score: 7.6 (HIGH)
CWE: CWE-284
References: http://icecms.com; https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46607.md; https://github.com/Thecosy/iceCMS?tab=readme-ov-file
CVE: CVE-2024-46609
Published: 2024-09-25
Description: An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and returns all user information, including passwords
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46609.md; https://github.com/Thecosy/iceCMS?tab=readme-ov-file
CVE: CVE-2024-46610
Published: 2024-09-25
Description: An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username and password, via a crafted POST request sent to the endpoint /User/ChangeUser/s in the ChangeUser function in UserController.java
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46610.md; https://github.com/Thecosy/iceCMS?tab=readme-ov-file
CVE: CVE-2024-46612
Published: 2024-09-25
Description: IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-321
References: https://github.com/Lunax0/LogLunax/blob/main/icecms/CVE-2024-46612.md; https://github.com/Thecosy/iceCMS?tab=readme-ov-file
CVE: CVE-2024-46934
Published: 2024-09-25
Description: Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to DOM-based Cross-site Scripting (XSS). Attackers may be able to abuse the UpdateOTRAck method to forge a message that contains an XSS payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories; https://github.com/RocketChat/Rocket.Chat/pull/33246
CVE: CVE-2024-46935
Published: 2024-09-25
Description: Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier is vulnerable to denial of service (DoS). Attackers who craft messages with specific characters may crash the workspace due to an issue in the message parser.
CVSS Score: 7.5 (HIGH)
References: https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories; https://github.com/RocketChat/Rocket.Chat/pull/33227
CVE: CVE-2024-46936
Published: 2024-09-25
Description: Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and before is vulnerable to a message forgery / impersonation issue. Attackers can abuse the UpdateOTRAck method to send ephemeral messages as if they were any other user they choose.
CVSS Score: 7.5 (HIGH)
References: https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories; https://github.com/RocketChat/Rocket.Chat/pull/33246
CVE: CVE-2024-46957
Published: 2024-09-25
Description: Mellium mellium.im/xmpp 0.0.1 through 0.21.4 allows response spoofing if the implementation uses predictable IDs because the stanza type is not checked. This is fixed in 0.22.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290
References: https://codeberg.org/mellium/xmpp/releases; https://mellium.im/cve/cve-2024-46957/
CVE: CVE-2024-47048
Published: 2024-09-25
Description: Rocket.Chat 6.12.0, 6.11.2, 6.10.5, 6.9.6, 6.8.6, 6.7.8, and earlier allows stored XSS in the description and release notes of the marketplace and private apps.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://docs.rocket.chat/docs/rocketchat-security-fixes-updates-and-advisories; https://github.com/RocketChat/Rocket.Chat/pull/33246
CVE: CVE-2024-7398
Published: 2024-09-25
Description: Concrete CMS versions 9 through 9.3.3 and versions below 8.5.19 are vulnerable to stored XSS in the calendar event addition feature because the calendar event name was not sanitized on output. Users or groups with permission to create event calendars can embed scripts, and users or groups with permission to modify event calendars can execute scripts. The Concrete CMS Security Team gave this vulnerability a CVSS v4 score of 4.6 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N Thank you, Yusuke Uchida for reporting. CNA updated this risk rank on 20 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.concretecms.org/9-x/developers/introduction/version-history/934-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/8519-release-notes; https://github.com/concretecms/concretecms/commit/7c8ed0d1d9db0d7f6df7fa066e0858ea618451a5
CVE: CVE-2024-8067
Published: 2024-09-25
Description: In versions of Helix Core prior to 2024.1 Patch 2 (2024.1/2655224) a Windows ANSI API Unicode "best fit" argument injection was identified.
CWE: CWE-176
References: https://portal.perforce.com/s/detail/a91PA000001SXEzYAO
CVE: CVE-2024-8103
Published: 2024-09-25
Description: The WP Category Dropdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' parameter in all versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-category-dropdown/tags/1.8/category_dropdown_block.php#L8; https://plugins.trac.wordpress.org/changeset/3166152/wp-category-dropdown/trunk/category_dropdown_block.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/7c959f9c-8ac4-4f59-9d93-8f96e650b02d?source=cve
CVE: CVE-2024-8267
Published: 2024-09-25
Description: The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribute within the 'wp:radio-player' Gutenberg block in all versions up to, and including, 2.0.78 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/radio-player/trunk/block/class-block.php#L26; https://plugins.trac.wordpress.org/changeset/3152379/; https://plugins.trac.wordpress.org/changeset/3152379/radio-player/trunk/block/class-block.php
CVE: CVE-2024-8291
Published: 2024-09-25
Description: Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in Image Editor Background Color.  A rogue admin could add malicious code to the Thumbnails/Add-Type. The Concrete CMS Security Team gave this a CVSS v4 score of 5.1 with vector   https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks,  Alexey Solovyev for reporting. (CNA updated this risk rank on 17 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-22, CWE-79
References: https://documentation.concretecms.org/9-x/developers/introduction/version-history/934-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/8519-release-notes; https://github.com/concretecms/concretecms/commit/dbce253166f6b10ff3e0c09e50fd395370b8b065
CVE: CVE-2024-8436
Published: 2024-09-25
Description: The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'edit_imageId' and 'edit_imageDelete' parameters in all versions up to, and including, 4.8.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/wp-easy-gallery/trunk/wp-easy-gallery.php#L730; https://www.wordfence.com/threat-intel/vulnerabilities/id/d6eb094a-4f5a-418a-ba95-635765abfcff?source=cve
CVE: CVE-2024-8437
Published: 2024-09-25
Description: The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions hooked via AJAX like wpeg_settings and wpeg_add_gallery in all versions up to, and including, 4.8.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify galleries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/wp-easy-gallery/trunk/wp-easy-gallery.php#L42; https://www.wordfence.com/threat-intel/vulnerabilities/id/c8bd5021-4895-4b0e-b517-186959f76095?source=cve
CVE: CVE-2024-8497
Published: 2024-09-25
Description: Franklin Fueling Systems TS-550 EVO versions prior to 2.26.4.8967 possess a file that can be read arbitrarily that could allow an attacker obtain administrator credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-36
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-03
CVE: CVE-2024-8801
Published: 2024-09-25
Description: The Happy Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.12.2 via the Content Switcher widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including private, draft, and pending Elementor templates.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/happy-elementor-addons/trunk/widgets/content-switcher/widget.php; https://plugins.trac.wordpress.org/changeset/3154460/; https://www.wordfence.com/threat-intel/vulnerabilities/id/9f1078b8-f458-46a6-9982-e8d2d1d1b73b?source=cve
CVE: CVE-2024-8877
Published: 2024-09-25
Description: Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://cyberdanube.com/en/en-multiple-vulnerabilities-in-riello-netman-204/index.html; http://seclists.org/fulldisclosure/2024/Sep/50