xamxte/cve-to-cwe huggingface dataset:
CVE-2025-21165: Substance3D - Designer versions 14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2024-39720: An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file, the attacker can crash the application through the CreateModel route, leading to a segmentation fault (signal SIGSEGV: segmentation violation).
CVE-2025-12481: The WP Duplicate Page plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action in the 'saveSettings' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to modify plugin settings that control role capabilities, and subsequently exploit the misconfigured capabilities to duplicate and view password-protected posts containing sensitive information.
CVE-2018-4878: A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.
CVE-2025-65046: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2013-7188: Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2024-23807: The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs.  Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.  This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4.
CVE-2025-48295: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hashthemes Easy Elementor Addons allows Stored XSS. This issue affects Easy Elementor Addons: from n/a through 2.2.5.
CVE-2018-6010: In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the error handler page in non-debug mode. Related to base/ErrorHandler.php, log/Dispatcher.php, and views/errorHandler/exception.php.
CVE-2022-27279: InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub_177E0.
CVE-2024-13432: The Webcamconsult plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVE-2017-12445: The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file.
CVE-2017-11802: ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11792, CVE-2017-11793, CVE-2017-11796, CVE-2017-11797, CVE-2017-11798, CVE-2017-11799, CVE-2017-11800, CVE-2017-11801, CVE-2017-11804, CVE-2017-11805, CVE-2017-11806, CVE-2017-11807, CVE-2017-11808, CVE-2017-11809, CVE-2017-11810, CVE-2017-11811, CVE-2017-11812, and CVE-2017-11821.
CVE-2019-10374: A stored cross-site scripting vulnerability in Jenkins PegDown Formatter Plugin 1.3 and earlier allows attackers able to edit descriptions and other fields rendered using the configured markup formatter to insert links with the javascript scheme into the Jenkins UI.
CVE-2024-28786: IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be obtained by an unauthorized actor using man in the middle techniques.
CVE-2026-2337: A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1.
CVE-2017-9155: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the input_pnm_reader function in input-pnm.c:243:3.
CVE-2025-31599: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Product Sync allows SQL Injection. This issue affects Bulk Product Sync: from n/a through 8.6.
CVE-2025-53857: Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the GET autocomplete/GetChannelSubscriptions endpoint.
CVE-2017-1757: IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 135858.
CVE-2021-21642: Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVE-2020-35496: There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
CVE-2017-6964: dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. This affects eject through 2.1.5+deb1+cvs20081104-13.1 on Debian, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.10.1 on Ubuntu 16.10, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.04.1 on Ubuntu 16.04 LTS, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.1 on Ubuntu 14.04 LTS, and eject before 2.1.5+deb1+cvs20081104-9ubuntu0.1 on Ubuntu 12.04 LTS.
CVE-2023-27344: PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19302.
CVE-2023-53204: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Fix data-races around user->unix_inflight.  user->unix_inflight is changed under spin_lock(unix_gc_lock), but too_many_unix_fds() reads it locklessly.  Let's annotate the write/read accesses to user->unix_inflight.  BUG: KCSAN: data-race in unix_attach_fds / unix_inflight  write to 0xffffffff8546f2d0 of 8 bytes by task 44798 on cpu 1:  unix_inflight+0x157/0x180 net/unix/scm.c:66  unix_attach_fds+0x147/0x1e0 net/unix/scm.c:123  unix_scm_to_skb net/unix/af_unix.c:1827 [inline]  unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950  unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline]  unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292  sock_sendmsg_nosec net/socket.c:725 [inline]  sock_sendmsg+0x148/0x160 net/socket.c:748  ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494  ___sys_sendmsg+0xc6/0x140 net/socket.c:2548  __sys_sendmsg+0x94/0x140 net/socket.c:2577  __do_sys_sendmsg net/socket.c:2586 [inline]  __se_sys_sendmsg net/socket.c:2584 [inline]  __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584  do_syscall_x64 arch/x86/entry/common.c:50 [inline]  do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80  entry_SYSCALL_64_after_hwframe+0x6e/0xd8  read to 0xffffffff8546f2d0 of 8 bytes by task 44814 on cpu 0:  too_many_unix_fds net/unix/scm.c:101 [inline]  unix_attach_fds+0x54/0x1e0 net/unix/scm.c:110  unix_scm_to_skb net/unix/af_unix.c:1827 [inline]  unix_dgram_sendmsg+0x46a/0x14f0 net/unix/af_unix.c:1950  unix_seqpacket_sendmsg net/unix/af_unix.c:2308 [inline]  unix_seqpacket_sendmsg+0xba/0x130 net/unix/af_unix.c:2292  sock_sendmsg_nosec net/socket.c:725 [inline]  sock_sendmsg+0x148/0x160 net/socket.c:748  ____sys_sendmsg+0x4e4/0x610 net/socket.c:2494  ___sys_sendmsg+0xc6/0x140 net/socket.c:2548  __sys_sendmsg+0x94/0x140 net/socket.c:2577  __do_sys_sendmsg net/socket.c:2586 [inline]  __se_sys_sendmsg net/socket.c:2584 [inline]  __x64_sys_sendmsg+0x45/0x50 net/socket.c:2584  do_syscall_x64 arch/x86/entry/common.c:50 [inline]  do_syscall_64+0x3b/0x90 arch/x86/entry/common.c:80  entry_SYSCALL_64_after_hwframe+0x6e/0xd8  value changed: 0x000000000000000c -> 0x000000000000000d  Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 44814 Comm: systemd-coredum Not tainted 6.4.0-11989-g6843306689af #6 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014
CVE-2025-62365: LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in `report_this` function in `librenms/includes/functions.php`. The `report_this` function had improper filtering (`htmlentities` function was incorrectly use in a href environment), which caused the `project_issues` parameter to trigger an XSS vulnerability. This vulnerability is fixed in 25.7.0.
CVE-2019-17612: An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the _list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter.
CVE-2023-35677: In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to local denial of service (factory reset or continuous locking) with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2019-7774: Adobe Acrobat and Reader versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVE-2017-8058: Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call.
CVE-2024-39340: The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification (when OTP is enabled) in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has been fixed in UTM 12.6.5 and 12.7.1.
CVE-2017-16762: Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
CVE-2022-33270: Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.
CVE-2024-10628: The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 8.8.0 (Business), up to, and including, 21.8.0 (Developer), and up to, and including, 31.8.0 (Agency) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. NOTE: The three variations of this software (Business, Developer, and Agency) share the same plugin slug, so you may get an alert even if you are running the latest version of any of the pieces of software. In these cases it is safe to dismiss the notice once you've confirmed your site is on a patched version of the applicable software.
CVE-2019-18414: Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page.
CVE-2019-16153: A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials.
CVE-2013-6643: The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one_click_signin_bubble_view.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.
CVE-2014-8083: SQL injection vulnerability in the Search::setJsonAlert method in OSClass before 3.4.3 allows remote attackers to execute arbitrary SQL commands via the alert parameter in a search alert subscription action.
CVE-2024-26958: In the Linux kernel, the following vulnerability has been resolved:  nfs: fix UAF in direct writes  In production we have been hitting the following warning consistently  ------------[ cut here ]------------ refcount_t: underflow; use-after-free. WARNING: CPU: 17 PID: 1800359 at lib/refcount.c:28 refcount_warn_saturate+0x9c/0xe0 Workqueue: nfsiod nfs_direct_write_schedule_work [nfs] RIP: 0010:refcount_warn_saturate+0x9c/0xe0 PKRU: 55555554 Call Trace:  <TASK>  ? __warn+0x9f/0x130  ? refcount_warn_saturate+0x9c/0xe0  ? report_bug+0xcc/0x150  ? handle_bug+0x3d/0x70  ? exc_invalid_op+0x16/0x40  ? asm_exc_invalid_op+0x16/0x20  ? refcount_warn_saturate+0x9c/0xe0  nfs_direct_write_schedule_work+0x237/0x250 [nfs]  process_one_work+0x12f/0x4a0  worker_thread+0x14e/0x3b0  ? ZSTD_getCParams_internal+0x220/0x220  kthread+0xdc/0x120  ? __btf_name_valid+0xa0/0xa0  ret_from_fork+0x1f/0x30  This is because we're completing the nfs_direct_request twice in a row.  The source of this is when we have our commit requests to submit, we process them and send them off, and then in the completion path for the commit requests we have  if (nfs_commit_end(cinfo.mds))  nfs_direct_write_complete(dreq);  However since we're submitting asynchronous requests we sometimes have one that completes before we submit the next one, so we end up calling complete on the nfs_direct_request twice.  The only other place we use nfs_generic_commit_list() is in __nfs_commit_inode, which wraps this call in a  nfs_commit_begin(); nfs_commit_end();  Which is a common pattern for this style of completion handling, one that is also repeated in the direct code with get_dreq()/put_dreq() calls around where we process events as well as in the completion paths.  Fix this by using the same pattern for the commit requests.  Before with my 200 node rocksdb stress running this warning would pop every 10ish minutes.  With my patch the stress test has been running for several hours without popping.
CVE-2017-11153: Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a crafted serialized payload.
CVE-2017-0461: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32073794. References: QC-CR#1100132.
CVE-2020-14056: Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows attackers to read arbitrary local files and interact with arbitrary third-party services.
CVE-2022-36581: Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the user_email parameter at /admin/login.php.
CVE-2021-46629: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15459.
CVE-2009-3082: SQL injection vulnerability in wcategory.php in Snow Hall Silurus System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2014-3903: Cross-site scripting (XSS) vulnerability in the Cakifo theme 1.x before 1.6.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via crafted Exif data.
CVE-2025-32537: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rachel Cherry Lock Your Updates allows Reflected XSS. This issue affects Lock Your Updates: from n/a through 1.1.
CVE-2013-5983: Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the (1) "an" parameter to agenda.php or (2) cat parameter to mobile/thread.php.
CVE-2025-2787: KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower.    Besides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub:       *  1.13.3 or above          *  1.12.4 or above          *  1.11.4 or above          *  1.10.4 or above           *
CVE-2023-41750: Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 32047.
CVE-2018-13544: The mintToken function of a smart contract implementation for Numisma, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2008-4995: redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default.
CVE-2021-46981: In the Linux kernel, the following vulnerability has been resolved:  nbd: Fix NULL pointer in flush_workqueue  Open /dev/nbdX first, the config_refs will be 1 and the pointers in nbd_device are still null. Disconnect /dev/nbdX, then reference a null recv_workq. The protection by config_refs in nbd_genl_disconnect is useless.  [  656.366194] BUG: kernel NULL pointer dereference, address: 0000000000000020 [  656.368943] #PF: supervisor write access in kernel mode [  656.369844] #PF: error_code(0x0002) - not-present page [  656.370717] PGD 10cc87067 P4D 10cc87067 PUD 1074b4067 PMD 0 [  656.371693] Oops: 0002 [#1] SMP [  656.372242] CPU: 5 PID: 7977 Comm: nbd-client Not tainted 5.11.0-rc5-00040-g76c057c84d28 #1 [  656.373661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ?-20190727_073836-buildvm-ppc64le-16.ppc.fedoraproject.org-3.fc31 04/01/2014 [  656.375904] RIP: 0010:mutex_lock+0x29/0x60 [  656.376627] Code: 00 0f 1f 44 00 00 55 48 89 fd 48 83 05 6f d7 fe 08 01 e8 7a c3 ff ff 48 83 05 6a d7 fe 08 01 31 c0 65 48 8b 14 25 00 6d 01 00 <f0> 48 0f b1 55 d [  656.378934] RSP: 0018:ffffc900005eb9b0 EFLAGS: 00010246 [  656.379350] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [  656.379915] RDX: ffff888104cf2600 RSI: ffffffffaae8f452 RDI: 0000000000000020 [  656.380473] RBP: 0000000000000020 R08: 0000000000000000 R09: ffff88813bd6b318 [  656.381039] R10: 00000000000000c7 R11: fefefefefefefeff R12: ffff888102710b40 [  656.381599] R13: ffffc900005eb9e0 R14: ffffffffb2930680 R15: ffff88810770ef00 [  656.382166] FS:  00007fdf117ebb40(0000) GS:ffff88813bd40000(0000) knlGS:0000000000000000 [  656.382806] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [  656.383261] CR2: 0000000000000020 CR3: 0000000100c84000 CR4: 00000000000006e0 [  656.383819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [  656.384370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [  656.384927] Call Trace: [  656.385111]  flush_workqueue+0x92/0x6c0 [  656.385395]  nbd_disconnect_and_put+0x81/0xd0 [  656.385716]  nbd_genl_disconnect+0x125/0x2a0 [  656.386034]  genl_family_rcv_msg_doit.isra.0+0x102/0x1b0 [  656.386422]  genl_rcv_msg+0xfc/0x2b0 [  656.386685]  ? nbd_ioctl+0x490/0x490 [  656.386954]  ? genl_family_rcv_msg_doit.isra.0+0x1b0/0x1b0 [  656.387354]  netlink_rcv_skb+0x62/0x180 [  656.387638]  genl_rcv+0x34/0x60 [  656.387874]  netlink_unicast+0x26d/0x590 [  656.388162]  netlink_sendmsg+0x398/0x6c0 [  656.388451]  ? netlink_rcv_skb+0x180/0x180 [  656.388750]  ____sys_sendmsg+0x1da/0x320 [  656.389038]  ? ____sys_recvmsg+0x130/0x220 [  656.389334]  ___sys_sendmsg+0x8e/0xf0 [  656.389605]  ? ___sys_recvmsg+0xa2/0xf0 [  656.389889]  ? handle_mm_fault+0x1671/0x21d0 [  656.390201]  __sys_sendmsg+0x6d/0xe0 [  656.390464]  __x64_sys_sendmsg+0x23/0x30 [  656.390751]  do_syscall_64+0x45/0x70 [  656.391017]  entry_SYSCALL_64_after_hwframe+0x44/0xa9  To fix it, just add if (nbd->recv_workq) to nbd_disconnect_and_put().
CVE-2025-58601: Missing Authorization vulnerability in RadiusTheme Classified Listing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Classified Listing: from n/a through 5.0.6.
CVE-2023-45630: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions.
CVE-2023-7329: Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.
CVE-2024-38322: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 agent username and password error response discrepancy exposes product to brute force enumeration.  IBM X-Force ID:  294869.