deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-13849
Published: 2025-02-20
Description: The Cookie Notice Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/cookie-notice-bar/tags/1.3.0/admin/partials/dc-cookie-notice-bar-admin-display.php; https://wordpress.org/plugins/cookie-notice-bar/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/24bdffdc-1a4d-4a1c-8393-cf89f0a63bf9?source=cve
CVE: CVE-2024-13855
Published: 2025-02-20
Description: The Prime Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.1 via the pae_global_block shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract information from posts that are not public, including drafts, private, password protected, and restricted posts. This applies to posts created with Elementor only.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-639
References: https://plugins.trac.wordpress.org/changeset/3244276/prime-addons-for-elementor/trunk/includes/global-blocks/class-global-blocks.php; https://wordpress.org/plugins/prime-addons-for-elementor/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/ac5012f2-3518-41c0-befe-597008f22152?source=cve
CVE: CVE-2024-6432
Published: 2025-02-20
Description: The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter within the plugin's shortcode Content Block in all versions up to, and including, 3.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/custom-post-widget/trunk/shortcode.php#L73; https://plugins.trac.wordpress.org/changeset/3146407/#file6; https://plugins.trac.wordpress.org/changeset/3147521/
CVE: CVE-2025-0866
Published: 2025-02-20
Description: The Legoeso PDF Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘checkedVals’ parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/legoeso-pdf-manager/trunk/inc/admin/class-pdf-doc-list-table.php#L543; https://plugins.trac.wordpress.org/browser/legoeso-pdf-manager/trunk/inc/admin/class-pdf-doc-list-table.php#L567; https://wordpress.org/plugins/legoeso-pdf-manager/#developers
CVE: CVE-2025-1328
Published: 2025-02-20
Description: The Typed JS: A typewriter style animation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘typespeed’ parameter in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/mrlegend-typedjs/trunk/public/class-typed-js-public.php#L128; https://wordpress.org/plugins/mrlegend-typedjs/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/fdb15198-68dc-4612-abcc-6b02843f1629?source=cve
CVE: CVE-2025-1483
Published: 2025-02-20
Description: The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtz_wd_save_dropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to update the drop shipping settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3243002/; https://www.wordfence.com/threat-intel/vulnerabilities/id/0906e9b0-5093-4ddd-8868-8fcaad8e3a5b?source=cve
CVE: CVE-2024-49337
Published: 2025-02-20
Description: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages 





is vulnerable to HTML injection, caused by improper validation of user-supplied input of text fields used to construct workflow email notifications. A remote authenticated attacker could exploit this vulnerability using HTML tags in a text field of an object to inject malicious script into an email which would be executed in a victim's mail client within the security context of the OpenPages mail message. An attacker could use this for phishing or identity theft attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://www.ibm.com/support/pages/node/7183541
CVE: CVE-2024-49344
Published: 2025-02-20
Description: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages 



with Watson Assistant chat feature enabled the application establishes a session when a user logs in and uses chat, but the chat session is still left active after logout.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-384
References: https://www.ibm.com/support/pages/node/7183541
CVE: CVE-2024-49779
Published: 2025-02-20
Description: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages 

could allow a remote attacker to bypass security restrictions, caused by improper validation and management of authentication cookies. By modifying the CSRF token and Session Id cookie parameters using the cookies of another user, a remote attacker could exploit this vulnerability to bypass security restrictions and gain unauthorized access to the vulnerable application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://www.ibm.com/support/pages/node/7183541
CVE: CVE-2024-49781
Published: 2025-02-20
Description: IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://www.ibm.com/support/pages/node/7183541
CVE: CVE-2025-0868
Published: 2025-02-20
Description: A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint..

This issue affects DocsGPT: from 0.8.1 through 0.12.0.
CWE: CWE-95
References: https://cert.pl/en/posts/2025/02/CVE-2025-0868/; https://cert.pl/posts/2025/02/CVE-2025-0868/; https://github.com/arc53/DocsGPT
CVE: CVE-2025-1043
Published: 2025-02-20
Description: The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.5 via the 'embeddoc' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-918
References: https://plugins.trac.wordpress.org/changeset/3242370/embed-any-document; https://www.wordfence.com/threat-intel/vulnerabilities/id/b9f8c600-d62d-4f27-ba73-1a77a63859bc?source=cve
CVE: CVE-2025-21105
Published: 2025-02-20
Description: Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down the server, modifying the configuration leading to gain access to unauthorized data.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-284
References: https://www.dell.com/support/kbdoc/en-us/000287503/dsa-2025-101-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-component-vulnerabilities
CVE: CVE-2025-21106
Published: 2025-02-20
Description: Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://www.dell.com/support/kbdoc/en-us/000287503/dsa-2025-101-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-component-vulnerabilities
CVE: CVE-2025-1039
Published: 2025-02-20
Description: The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3237538/lenix-elementor-leads-addon; https://www.wordfence.com/threat-intel/vulnerabilities/id/29f835c8-769a-47c0-832f-622860b1c59c?source=cve; https://wpscan.com/vulnerability/0d1abaf9-4044-4dcc-95df-73f23a8a5a9f/
CVE: CVE-2023-51306
Published: 2025-02-20
Description: PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, title" parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176516; https://www.phpjabbers.com/event-ticketing-system/#sectionDemo; http://packetstormsecurity.com/files/176516/PHPJabbers-Event-Ticketing-System-1.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2023-51308
Published: 2025-02-20
Description: PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80
References: https://packetstorm.news/files/id/176491; https://www.phpjabbers.com/car-park-booking/#sectionDemo; http://packetstormsecurity.com/files/176491/PHPJabbers-Car-Park-Booking-System-3.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2023-51309
Published: 2025-02-20
Description: A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://packetstorm.news/files/id/176492; https://www.phpjabbers.com/car-park-booking/#sectionDemo; http://packetstormsecurity.com/files/176492/PHPJabbers-Car-Park-Booking-System-3.0-Missing-Rate-Limiting.html
CVE: CVE-2023-51310
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://packetstorm.news/files/id/176492; https://www.phpjabbers.com/car-park-booking/#sectionDemo; http://packetstormsecurity.com/files/176492/PHPJabbers-Car-Park-Booking-System-3.0-Missing-Rate-Limiting.html
CVE: CVE-2023-51311
Published: 2025-02-20
Description: PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://packetstorm.news/files/id/176494; https://www.phpjabbers.com/car-park-booking/#sectionDemo; http://packetstormsecurity.com/files/176494/PHPJabbers-Car-Park-Booking-System-3.0-CSV-Injection.html
CVE: CVE-2023-51312
Published: 2025-02-20
Description: PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Reservations menu, Schedule section date parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176493; https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176493/PHPJabbers-Restaurant-Booking-System-3.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2023-51313
Published: 2025-02-20
Description: PHPJabbers Restaurant Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/176498/PHPJabbers-Restaurant-Booking-System-3.0-CSV-Injection.html; https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo
CVE: CVE-2023-51314
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://packetstorm.news/files/id/176496; https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176496/PHPJabbers-Restaurant-Booking-System-3.0-Missing-Rate-Limiting.html
CVE: CVE-2023-51315
Published: 2025-02-20
Description: PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "seat_name, plugin_sms_api_key, plugin_sms_country_code, title, name" parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176493; https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176493/PHPJabbers-Restaurant-Booking-System-3.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2023-51316
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://packetstorm.news/files/id/176497; https://www.phpjabbers.com/bus-reservation-system/#sectionDemo; http://packetstormsecurity.com/files/176497/PHPJabbers-Bus-Reservation-System-1.1-Missing-Rate-Limiting.html
CVE: CVE-2024-57401
Published: 2025-02-20
Description: SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/aksingh82/CVE-2024-57401; https://studentportal.universitysolutions.in/
CVE: CVE-2025-20059
Published: 2025-02-20
Description: Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-23, CWE-23
References: https://backstage.forgerock.com/knowledge/advisories/article/a61848355
CVE: CVE-2023-51317
Published: 2025-02-20
Description: PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title" parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://packetstorm.news/files/id/176493; https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176493/PHPJabbers-Restaurant-Booking-System-3.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2023-51318
Published: 2025-02-20
Description: PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176499; https://www.phpjabbers.com/bus-reservation-system/#sectionDemo; http://packetstormsecurity.com/files/176499/PHPJabbers-Bus-Reservation-System-1.1-Cross-Site-Scripting.html
CVE: CVE-2023-51319
Published: 2025-02-20
Description: PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://packetstorm.news/files/id/176500; https://www.phpjabbers.com/bus-reservation-system/#sectionDemo; http://packetstormsecurity.com/files/176500/PHPJabbers-Bus-Reservation-System-1.1-CSV-Injection.html
CVE: CVE-2023-51320
Published: 2025-02-20
Description: PHPJabbers Night Club Booking Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-94
References: https://packetstorm.news/files/id/176501; https://www.phpjabbers.com/night-club-booking-software/#sectionDemo; http://packetstormsecurity.com/files/176501/PHPJabbers-Night-Club-Booking-Software-1.0-CSV-Injection.html
CVE: CVE-2023-51321
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Night Club Booking Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://packetstorm.news/files/id/176502; https://www.phpjabbers.com/night-club-booking-software/#sectionDemo; http://packetstormsecurity.com/files/176502/PHPJabbers-Night-Club-Booking-Software-1.0-Missing-Rate-Limiting.html
CVE: CVE-2023-51323
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://packetstorm.news/files/id/176503; https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176503/PHPJabbers-Shared-Asset-Booking-System-1.0-Missing-Rate-Limit.html
CVE: CVE-2023-51324
Published: 2025-02-20
Description: PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://packetstorm.news/files/id/176504; https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176504/PHPJabbers-Shared-Asset-Booking-System-1.0-CSV-Injection.html
CVE: CVE-2023-51325
Published: 2025-02-20
Description: PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176505; https://www.phpjabbers.com/shared-asset-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176505/PHPJabbers-Shared-Asset-Booking-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2023-51326
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://packetstorm.news/files/id/176506; https://www.phpjabbers.com/cleaning-business-software/#sectionDemo; http://packetstormsecurity.com/files/176506/PHPJabbers-Cleaning-Business-Software-1.0-Missing-Rate-Limiting.html
CVE: CVE-2023-51327
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cleaning Business Software v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://packetstorm.news/files/id/176506; https://www.phpjabbers.com/cleaning-business-software/#sectionDemo; http://packetstormsecurity.com/files/176506/PHPJabbers-Cleaning-Business-Software-1.0-Missing-Rate-Limiting.html
CVE: CVE-2023-51330
Published: 2025-02-20
Description: PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Now Showing menu "date" parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176508; https://www.phpjabbers.com/cinema-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176508/PHPJabbers-Cinema-Booking-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2023-51331
Published: 2025-02-20
Description: PHPJabbers Cleaning Business Software v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://packetstorm.news/files/id/176509; https://www.phpjabbers.com/cleaning-business-software/#sectionDemo; http://packetstormsecurity.com/files/176509/PHPJabbers-Cleaning-Business-Software-1.0-CSV-Injection.html
CVE: CVE-2023-51332
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://packetstorm.news/files/id/176510; https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176510/PHPJabbers-Meeting-Room-Booking-System-1.0-Missing-Rate-Limiting.html
CVE: CVE-2025-0161
Published: 2025-02-20
Description: IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://www.ibm.com/support/pages/node/7183788
CVE: CVE-2024-57716
Published: 2025-02-20
Description: An issue in trenoncourt AutoQueryable v.1.7.0 allows a remote attacker to obtain sensitive information via the Unselectable function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/pentesttoolscom/vulnerability-research/tree/master/CVE-2024-57716; https://github.com/trenoncourt/AutoQueryable