generated content from 2024-12-14

objects/vulnerability/vulnerability--005d1e9c-1b12-4e8b-80b7-a3aceebca2e2.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--cf9db076-ef70-402b-8a04-302058bedccd",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--005d1e9c-1b12-4e8b-80b7-a3aceebca2e2",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:05.700982Z",
+            "modified": "2024-12-14T00:39:05.700982Z",
+            "name": "CVE-2024-55889",
+            "description": "phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element without user interaction or explicit consent. Version 3.2.10 fixes the issue.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-55889"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--00fb5d03-02a3-4609-81cf-c8a0bf3eb54c.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--724aff04-5a38-48ee-af21-cea739bc1827",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--00fb5d03-02a3-4609-81cf-c8a0bf3eb54c",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:03.857949Z",
+            "modified": "2024-12-14T00:39:03.857949Z",
+            "name": "CVE-2024-52064",
+            "description": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-52064"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--010bb865-5a9d-4fb0-a23b-8f1a217cbdc1.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--f6b2ebc0-a4ab-47e7-a067-e3b76a303c77",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--010bb865-5a9d-4fb0-a23b-8f1a217cbdc1",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:05.627754Z",
+            "modified": "2024-12-14T00:39:05.627754Z",
+            "name": "CVE-2024-54325",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DealerTrend CarDealerPress allows Reflected XSS.This issue affects CarDealerPress: from n/a through 6.6.2410.02.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54325"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0148f19e-4a5a-4d71-9069-e0d85e8d84e6.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--0b58828b-419e-4f5f-b5fe-47f2aafe6e1e",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0148f19e-4a5a-4d71-9069-e0d85e8d84e6",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:05.602862Z",
+            "modified": "2024-12-14T00:39:05.602862Z",
+            "name": "CVE-2024-54267",
+            "description": "Missing Authorization vulnerability in CreativeMindsSolutions CM Answers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM Answers: from n/a through 3.2.6.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54267"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--01a456f1-b36c-4560-83c1-303da31bbe95.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6b9a0d7f-0210-4ca8-a618-0b499bc510a9",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--01a456f1-b36c-4560-83c1-303da31bbe95",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:15.698043Z",
+            "modified": "2024-12-14T00:39:15.698043Z",
+            "name": "CVE-2023-36681",
+            "description": "Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a through 2.6.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-36681"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--026f425a-08d1-44fd-8ac6-f36e1d6a47c6.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--8b2c4628-1ec2-4690-b02b-8ebcf7404af4",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--026f425a-08d1-44fd-8ac6-f36e1d6a47c6",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:04.51406Z",
+            "modified": "2024-12-14T00:39:04.51406Z",
+            "name": "CVE-2024-11012",
+            "description": "The The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via njt_nofi_text AJAX action in all versions up to, and including, 2.1.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-11012"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--02d8e483-747d-4ade-8065-8e8358a599a1.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--905f6244-beb2-4141-9f92-b40b3871a06f",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--02d8e483-747d-4ade-8065-8e8358a599a1",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:05.465687Z",
+            "modified": "2024-12-14T00:39:05.465687Z",
+            "name": "CVE-2024-54297",
+            "description": "Authentication Bypass Using an Alternate Path or Channel vulnerability in www.vbsso.com vBSSO-lite allows Authentication Bypass.This issue affects vBSSO-lite: from n/a through 1.4.3.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54297"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--035c6d45-c96b-420e-8c7f-a254275241dd.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--55821c7b-3420-42a3-b7c0-420705905e16",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--035c6d45-c96b-420e-8c7f-a254275241dd",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:14.21235Z",
+            "modified": "2024-12-14T00:39:14.21235Z",
+            "name": "CVE-2023-39920",
+            "description": "Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Redirection for Contact Form 7: from n/a through 2.9.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-39920"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--04033af3-702d-4ee7-aaab-43b49ec31548.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--90938f90-09ef-4e09-8e73-695d8b39d155",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--04033af3-702d-4ee7-aaab-43b49ec31548",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:05.585169Z",
+            "modified": "2024-12-14T00:39:05.585169Z",
+            "name": "CVE-2024-54344",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Quick Shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through 1.3.1.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54344"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--04273934-c66a-4378-abcf-cdf84e7bb688.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--dcf11cb7-e8fc-453a-8cfc-b1cdaf7eabed",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--04273934-c66a-4378-abcf-cdf84e7bb688",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:15.437199Z",
+            "modified": "2024-12-14T00:39:15.437199Z",
+            "name": "CVE-2023-35046",
+            "description": "Missing Authorization vulnerability in Dynamic.ooo Dynamic Visibility for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Visibility for Elementor: from n/a through 5.0.5.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-35046"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--04f1e6c9-a4e0-45f6-85ac-f2505665e702.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--13d2c062-4458-4c0c-85fd-6fa66b2cf6cc",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--04f1e6c9-a4e0-45f6-85ac-f2505665e702",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:14.868901Z",
+            "modified": "2024-12-14T00:39:14.868901Z",
+            "name": "CVE-2023-40011",
+            "description": "Missing Authorization vulnerability in StylemixThemes Cost Calculator Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator Builder: from n/a through 3.1.42.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-40011"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0525e36a-a16d-4fc2-a57f-99f34c9f9508.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--a6eb394c-581a-4f9a-9f50-785bbf8dfe76",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0525e36a-a16d-4fc2-a57f-99f34c9f9508",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:15.860898Z",
+            "modified": "2024-12-14T00:39:15.860898Z",
+            "name": "CVE-2023-32798",
+            "description": "Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-32798"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--061e695e-08e1-4a73-ac5d-054905b20b3a.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--b6bdbbf8-79c6-425b-8576-290e026be550",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--061e695e-08e1-4a73-ac5d-054905b20b3a",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:14.488297Z",
+            "modified": "2024-12-14T00:39:14.488297Z",
+            "name": "CVE-2023-34019",
+            "description": "Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-34019"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--085a2857-3faa-4c23-9584-85e3acf9bdb3.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--a15735db-35bc-4fd5-8bad-f53eb8e74f0e",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--085a2857-3faa-4c23-9584-85e3acf9bdb3",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:14.902934Z",
+            "modified": "2024-12-14T00:39:14.902934Z",
+            "name": "CVE-2023-40005",
+            "description": "Missing Authorization vulnerability in Easy Digital Downloads Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.1.5.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-40005"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0930bad8-a2b8-4844-ba40-81f55c1e9ff5.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--8a03948c-e7cb-4eaa-8860-76c9a02e86c5",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0930bad8-a2b8-4844-ba40-81f55c1e9ff5",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:05.464503Z",
+            "modified": "2024-12-14T00:39:05.464503Z",
+            "name": "CVE-2024-54337",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in DevriX DX Dark Site allows Stored XSS.This issue affects DX Dark Site: from n/a through 1.0.1.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54337"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--09e90a63-d0a1-49d4-8a78-4ad45f720b5d.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--f59e2d54-d40b-4b6f-8e22-3d4a918163c0",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--09e90a63-d0a1-49d4-8a78-4ad45f720b5d",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:39:04.10213Z",
+            "modified": "2024-12-14T00:39:04.10213Z",
+            "name": "CVE-2024-9290",
+            "description": "The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibk_restore_migrate_check() function in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-9290"
+                }
+            ]
+        }
+    ]
+}