stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2024-4350 (severity: MEDIUM, weakness: CWE-20)
Concrete CMS versions 9.0.0 to 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer when user input is stored and later embedded into responses. A rogue administrator could inject malicious code into fields due to insufficient input validation. The Concrete CMS security team gave this vulnerability a CVSS v4 score of 5.1 with vector https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Thanks, m3dium for reporting. (CNA updated this risk rank on 17 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC)
CVE-2024-43500 (severity: MEDIUM, weakness: CWE-126)
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
CVE-2024-43501 (severity: HIGH, weakness: CWE-59)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-43502 (severity: HIGH, weakness: CWE-908)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43503 (severity: HIGH, weakness: CWE-284)
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2024-43504 (severity: HIGH, weakness: CWE-416)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-43505 (severity: HIGH, weakness: CWE-357)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-43506 (severity: HIGH, weakness: CWE-400)
BranchCache Denial of Service Vulnerability
CVE-2024-43508 (severity: MEDIUM, weakness: CWE-125)
Windows Graphics Component Information Disclosure Vulnerability
CVE-2024-43509 (severity: HIGH, weakness: CWE-416)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-4351 (severity: HIGH, weakness: CWE-862)
The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'authenticate' function in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to gain control of an existing administrator account.
CVE-2024-43511 (severity: HIGH, weakness: CWE-367)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43512 (severity: HIGH, weakness: CWE-835)
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
CVE-2024-43513 (severity: MEDIUM, weakness: CWE-693)
BitLocker Security Feature Bypass Vulnerability
CVE-2024-43514 (severity: HIGH, weakness: CWE-415)
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2024-43515 (severity: HIGH, weakness: CWE-400)
Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
CVE-2024-43516 (severity: HIGH, weakness: CWE-822)
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-43517 (severity: HIGH, weakness: CWE-122)
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
CVE-2024-43518 (severity: HIGH, weakness: CWE-122)
Windows Telephony Server Remote Code Execution Vulnerability
CVE-2024-43519 (severity: HIGH, weakness: CWE-197)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-4352 (severity: HIGH, weakness: CWE-862)
The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capability check on the 'get_calendar_materials' function. The plugin is also vulnerable to SQL Injection via the ‘year’ parameter of that function due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVE-2024-43520 (severity: MEDIUM, weakness: CWE-476)
Windows Kernel Denial of Service Vulnerability
CVE-2024-43521 (severity: HIGH, weakness: CWE-253)
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-43522 (severity: HIGH, weakness: CWE-122)
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
CVE-2024-43523 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-43524 (severity: MEDIUM, weakness: CWE-118)
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-43525 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-43526 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-43527 (severity: HIGH, weakness: CWE-122)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43528 (severity: HIGH, weakness: CWE-122)
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-43529 (severity: HIGH, weakness: CWE-822)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2024-4353 (severity: MEDIUM, weakness: CWE-20)
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality. The Name input field does not check the input sufficiently letting a rogue administrator have the capability to inject malicious JavaScript code. The Concrete CMS security team gave this vulnerability a CVSS v4 score of 4.6 with a vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N. Concrete versions below 9 are not affected by this vulnerability.Thanks fhAnso for reporting. (CNA updated this risk rank on 17 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC).
CVE-2024-43530 (severity: HIGH, weakness: CWE-284)
Windows Update Stack Elevation of Privilege Vulnerability
CVE-2024-43532 (severity: HIGH, weakness: CWE-636)
Remote Registry Service Elevation of Privilege Vulnerability
CVE-2024-43533 (severity: HIGH, weakness: CWE-416)
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2024-43534 (severity: MEDIUM, weakness: CWE-125)
Windows Graphics Component Information Disclosure Vulnerability
CVE-2024-43535 (severity: HIGH, weakness: CWE-416)
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-43536 (severity: MEDIUM, weakness: CWE-601)
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-43537 (severity: MEDIUM, weakness: CWE-125)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-43538 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-4354 (severity: MEDIUM, weakness: CWE-918)
The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3 via the get_files_to_import() function. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Due to the complex nature of protecting against DNS rebind attacks in WordPress software, we settled on the developer simply restricting the usage of the URL import functionality to just administrators. While this is not optimal, we feel this poses a minimal risk to most site owners and ideally WordPress core would correct this issue in wp_safe_remote_get() and other functions.
CVE-2024-43540 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-43541 (severity: HIGH, weakness: CWE-400)
Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
CVE-2024-43542 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-43543 (severity: MEDIUM, weakness: CWE-601)
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVE-2024-43544 (severity: HIGH, weakness: CWE-400)
Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
CVE-2024-43545 (severity: HIGH, weakness: CWE-400)
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVE-2024-43546 (severity: MEDIUM, weakness: CWE-203)
Windows Cryptographic Information Disclosure Vulnerability
CVE-2024-43547 (severity: MEDIUM, weakness: CWE-325)
Windows Kerberos Information Disclosure Vulnerability
CVE-2024-43549 (severity: HIGH, weakness: CWE-121)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-4355 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the stopbadbots_get_ajax_data() function in all versions up to, and including, 10.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to expose visitor data.
CVE-2024-43550 (severity: HIGH, weakness: CWE-295)
Windows Secure Channel Spoofing Vulnerability
CVE-2024-43551 (severity: HIGH, weakness: CWE-59)
Windows Storage Elevation of Privilege Vulnerability
CVE-2024-43552 (severity: HIGH, weakness: CWE-416)
Windows Shell Remote Code Execution Vulnerability
CVE-2024-43553 (severity: HIGH, weakness: CWE-822)
NT OS Kernel Elevation of Privilege Vulnerability
CVE-2024-43554 (severity: MEDIUM, weakness: CWE-212)
Windows Kernel-Mode Driver Information Disclosure Vulnerability
CVE-2024-43555 (severity: MEDIUM, weakness: CWE-125)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-43556 (severity: HIGH, weakness: CWE-416)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-43557 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-43558 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-43559 (severity: MEDIUM, weakness: CWE-476)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-4356 (severity: MEDIUM, weakness: NVD-CWE-Other)
The List categories plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'categories' shortcode in all versions up to, and including, 0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-43560 (severity: HIGH, weakness: CWE-122)
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
CVE-2024-43561 (severity: MEDIUM, weakness: CWE-20)
Windows Mobile Broadband Driver Denial of Service Vulnerability
CVE-2024-43562 (severity: HIGH, weakness: CWE-125)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2024-43563 (severity: HIGH, weakness: CWE-591)
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-43564 (severity: HIGH, weakness: CWE-122)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43565 (severity: HIGH, weakness: CWE-125)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2024-43566 (severity: CRITICAL, weakness: CWE-190)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43567 (severity: HIGH, weakness: CWE-770)
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-4357 (severity: MEDIUM, weakness: CWE-611)
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing.
CVE-2024-43570 (severity: HIGH, weakness: CWE-416)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43571 (severity: HIGH, weakness: CWE-923)
Sudo for Windows Spoofing Vulnerability
CVE-2024-43572 (severity: HIGH, weakness: CWE-707)
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43573 (severity: HIGH, weakness: CWE-79)
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43574 (severity: HIGH, weakness: CWE-416)
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
CVE-2024-43575 (severity: HIGH, weakness: CWE-400)
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-43576 (severity: HIGH, weakness: CWE-426)
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-43577 (severity: MEDIUM, weakness: CWE-449)
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2024-43578 (severity: HIGH, weakness: CWE-122)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43579 (severity: HIGH, weakness: CWE-122)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-4358 (severity: CRITICAL, weakness: CWE-290)
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.
CVE-2024-43580 (severity: MEDIUM, weakness: CWE-357)
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2024-43581 (severity: HIGH, weakness: CWE-73)
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
CVE-2024-43582 (severity: HIGH, weakness: CWE-416)
Remote Desktop Protocol Server Remote Code Execution Vulnerability
CVE-2024-43583 (severity: HIGH, weakness: CWE-250)
Winlogon Elevation of Privilege Vulnerability
CVE-2024-43584 (severity: HIGH, weakness: CWE-693)
Windows Scripting Engine Security Feature Bypass Vulnerability
CVE-2024-43585 (severity: MEDIUM, weakness: CWE-693)
Code Integrity Guard Security Feature Bypass Vulnerability
CVE-2024-43587 (severity: HIGH, weakness: CWE-122)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43589 (severity: HIGH, weakness: CWE-122)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-4359 (severity: MEDIUM, weakness: CWE-98)
The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to arbitrary file reads in all versions up to, and including, 5.7.2 via the SVG widget and a lack of sufficient file validation in the render_svg function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVE-2024-43590 (severity: HIGH, weakness: CWE-284)
Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
CVE-2024-43591 (severity: CRITICAL, weakness: CWE-77)
Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
CVE-2024-43592 (severity: HIGH, weakness: CWE-20)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43593 (severity: HIGH, weakness: CWE-20)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43594 (severity: HIGH, weakness: CWE-284)
Microsoft System Center Elevation of Privilege Vulnerability
CVE-2024-43595 (severity: HIGH, weakness: CWE-126)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43596 (severity: HIGH, weakness: CWE-843)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43598 (severity: HIGH, weakness: CWE-122)
LightGBM Remote Code Execution Vulnerability
CVE-2024-43599 (severity: HIGH, weakness: CWE-416)
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2024-4360 (severity: MEDIUM, weakness: CWE-79)
The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 5.7.2 due to insufficient input sanitization and output escaping on user supplied attributes like 'title_tag'. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-43600 (severity: HIGH, weakness: CWE-284)
Microsoft Office Elevation of Privilege Vulnerability
CVE-2024-43601 (severity: HIGH, weakness: CWE-77)
Visual Studio Code for Linux Remote Code Execution Vulnerability
CVE-2024-43602 (severity: CRITICAL, weakness: CWE-285)
Azure CycleCloud Remote Code Execution Vulnerability
CVE-2024-43603 (severity: MEDIUM, weakness: CWE-59)
Visual Studio Collector Service Denial of Service Vulnerability
CVE-2024-43604 (severity: HIGH, weakness: CWE-1220)
Outlook for Android Elevation of Privilege Vulnerability
CVE-2024-43607 (severity: HIGH, weakness: CWE-122)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43608 (severity: HIGH, weakness: CWE-122)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43609 (severity: MEDIUM, weakness: CWE-200)
Microsoft Office Spoofing Vulnerability
CVE-2024-4361 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget' shortcode in all versions up to, and including, 2.29.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-43610 (severity: HIGH, weakness: CWE-200)
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector
CVE-2024-43611 (severity: HIGH, weakness: CWE-20)
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-43612 (severity: MEDIUM, weakness: CWE-79)
Power BI Report Server Spoofing Vulnerability
CVE-2024-43613 (severity: HIGH, weakness: CWE-77)
Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability
CVE-2024-43614 (severity: MEDIUM, weakness: CWE-23)
Microsoft Defender for Endpoint for Linux Spoofing Vulnerability
CVE-2024-43615 (severity: HIGH, weakness: CWE-73)
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
CVE-2024-43616 (severity: HIGH, weakness: CWE-426)
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-4362 (severity: MEDIUM, weakness: CWE-79)
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'siteorigin_widget' shortcode in all versions up to, and including, 1.60.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-43620 (severity: HIGH, weakness: CWE-122)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43621 (severity: HIGH, weakness: CWE-122)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43622 (severity: HIGH, weakness: CWE-122)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43623 (severity: HIGH, weakness: CWE-190)
Windows NT OS Kernel Elevation of Privilege Vulnerability
CVE-2024-43624 (severity: HIGH, weakness: CWE-822)
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
CVE-2024-43625 (severity: HIGH, weakness: CWE-416)
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
CVE-2024-43626 (severity: HIGH, weakness: CWE-122)
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2024-43627 (severity: HIGH, weakness: CWE-122)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43628 (severity: HIGH, weakness: CWE-190)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43629 (severity: HIGH, weakness: CWE-822)
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-4363 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Visual Portfolio, Photo Gallery & Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_tag’ parameter in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-43630 (severity: HIGH, weakness: CWE-121)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-43631 (severity: HIGH, weakness: CWE-822)
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-43633 (severity: MEDIUM, weakness: CWE-591)
Windows Hyper-V Denial of Service Vulnerability
CVE-2024-43634 (severity: MEDIUM, weakness: CWE-125)
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43635 (severity: HIGH, weakness: CWE-190)
Windows Telephony Service Remote Code Execution Vulnerability
CVE-2024-43636 (severity: HIGH, weakness: CWE-822)
Win32k Elevation of Privilege Vulnerability
CVE-2024-43637 (severity: MEDIUM, weakness: CWE-125)
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43638 (severity: MEDIUM, weakness: CWE-125)
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43639 (severity: CRITICAL, weakness: CWE-197)
Windows KDC Proxy Remote Code Execution Vulnerability
CVE-2024-4364 (severity: MEDIUM, weakness: CWE-79)
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button widgets in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2024-43640 (severity: HIGH, weakness: CWE-415)
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-43641 (severity: HIGH, weakness: CWE-190)
Windows Registry Elevation of Privilege Vulnerability
CVE-2024-43642 (severity: HIGH, weakness: CWE-416)
Windows SMB Denial of Service Vulnerability
CVE-2024-43643 (severity: MEDIUM, weakness: CWE-125)
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
CVE-2024-43644 (severity: HIGH, weakness: CWE-125)
Windows Client-Side Caching Elevation of Privilege Vulnerability
CVE-2024-43645 (severity: HIGH, weakness: CWE-693)
Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability
CVE-2024-43646 (severity: HIGH, weakness: CWE-822)
Windows Secure Kernel Mode Elevation of Privilege Vulnerability