generated content from 2024-12-14

objects/vulnerability/vulnerability--004346da-618b-4b97-ab4c-c59d304be961.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--abc2b0d8-73d9-46a1-be2d-21dc5b853085",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--004346da-618b-4b97-ab4c-c59d304be961",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:03.458801Z",
+            "modified": "2024-12-14T00:22:03.458801Z",
+            "name": "CVE-2024-38488",
+            "description": "Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise.\nThis allows attackers to brute-force the password of valid users in an automated manner.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-38488"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--00d23f7b-efe4-42d6-b74d-e685fd96c69e.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--16f9817d-fc2b-49b5-8536-e0058d641b39",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--00d23f7b-efe4-42d6-b74d-e685fd96c69e",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:14.327641Z",
+            "modified": "2024-12-14T00:22:14.327641Z",
+            "name": "CVE-2023-32798",
+            "description": "Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-32798"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--01000609-46f4-4f7a-bee4-a285dcf7de21.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6e6b602c-fcaf-45f4-a7ed-03d1d3c39fab",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--01000609-46f4-4f7a-bee4-a285dcf7de21",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:13.614947Z",
+            "modified": "2024-12-14T00:22:13.614947Z",
+            "name": "CVE-2023-41848",
+            "description": "Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-41848"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0106fd0f-0bab-46bb-8f36-7b62280f1573.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--e03a6818-2d87-4afd-9476-fbfb8295ed55",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0106fd0f-0bab-46bb-8f36-7b62280f1573",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:10.002867Z",
+            "modified": "2024-12-14T00:22:10.002867Z",
+            "name": "CVE-2022-46807",
+            "description": "Missing Authorization vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Sync for WooCommerce: from n/a through 2.3.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2022-46807"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--011d0088-9de7-4612-9002-9336a4d34678.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--2c48cae5-b488-4b95-95fd-c63563e1fd2c",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--011d0088-9de7-4612-9002-9336a4d34678",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:04.080847Z",
+            "modified": "2024-12-14T00:22:04.080847Z",
+            "name": "CVE-2024-54305",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woocs J&T Express Malaysia allows Reflected XSS.This issue affects J&T Express Malaysia: from n/a through 2.0.13.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54305"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--01358ba2-3150-46cb-9245-e4c47ce5bff8.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--b866155f-798b-4b62-a126-1c3941bf7d2a",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--01358ba2-3150-46cb-9245-e4c47ce5bff8",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:13.631726Z",
+            "modified": "2024-12-14T00:22:13.631726Z",
+            "name": "CVE-2023-41870",
+            "description": "Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.5.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-41870"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--020786c3-6b0c-4db2-a9da-630d62a2a2ff.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--204e67d3-5d7c-4cef-b204-ed035bc60925",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--020786c3-6b0c-4db2-a9da-630d62a2a2ff",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:13.501723Z",
+            "modified": "2024-12-14T00:22:13.501723Z",
+            "name": "CVE-2023-40331",
+            "description": "Missing Authorization vulnerability in bqworks Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion Slider: from n/a through 1.9.6.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-40331"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--04d918fd-8c3f-4f2e-ba94-a4a8430fd66b.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--1d1fb9b9-e784-442a-8fe4-79a699e7bdcd",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--04d918fd-8c3f-4f2e-ba94-a4a8430fd66b",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:04.055519Z",
+            "modified": "2024-12-14T00:22:04.055519Z",
+            "name": "CVE-2024-54316",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows DOM-Based XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.8.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54316"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--05e23c1e-7acd-44fd-bb49-4b1275f636e9.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--1feae675-4d32-43a9-a55c-2b963dab62d6",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--05e23c1e-7acd-44fd-bb49-4b1275f636e9",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:03.970001Z",
+            "modified": "2024-12-14T00:22:03.970001Z",
+            "name": "CVE-2024-54327",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in universam UNIVERSAM allows Reflected XSS.This issue affects UNIVERSAM: from n/a through n/a.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54327"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0631af6f-f793-4eb0-a2c2-88dace45893b.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--f74a0c35-465f-4f50-a082-0bfb2a3e42e2",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0631af6f-f793-4eb0-a2c2-88dace45893b",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:13.653785Z",
+            "modified": "2024-12-14T00:22:13.653785Z",
+            "name": "CVE-2023-41849",
+            "description": "Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-41849"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0671266f-39a9-4942-9a74-527f2b975d01.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--c394d742-9b28-4b26-804f-1083f1863620",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0671266f-39a9-4942-9a74-527f2b975d01",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:03.944984Z",
+            "modified": "2024-12-14T00:22:03.944984Z",
+            "name": "CVE-2024-54301",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FormFacade FormFacade allows Reflected XSS.This issue affects FormFacade: from n/a through 1.3.6.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54301"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--09691f6a-7c2e-451d-8bd0-38fb1c5d6f13.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--cbc4125c-1d87-4c32-9998-0922fd2d167c",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--09691f6a-7c2e-451d-8bd0-38fb1c5d6f13",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:04.06766Z",
+            "modified": "2024-12-14T00:22:04.06766Z",
+            "name": "CVE-2024-54344",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Quick Shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through 1.3.1.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54344"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0bf14cc6-c53a-4de7-a92e-688c4d491743.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--1b07618e-a6de-4130-a2fd-fc29d370759a",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0bf14cc6-c53a-4de7-a92e-688c4d491743",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:04.097883Z",
+            "modified": "2024-12-14T00:22:04.097883Z",
+            "name": "CVE-2024-54306",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in KCT AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot allows Cross Site Request Forgery.This issue affects AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot: from n/a through 1.6.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54306"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0c332e3a-7e97-406d-b69c-63d97df7ccaa.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--966327e2-a75d-496c-9ff9-8e37643f481f",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0c332e3a-7e97-406d-b69c-63d97df7ccaa",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:13.603594Z",
+            "modified": "2024-12-14T00:22:13.603594Z",
+            "name": "CVE-2023-41866",
+            "description": "Missing Authorization vulnerability in Team Plugins360 Automatic YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic YouTube Gallery: from n/a through 2.3.3.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-41866"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0da3f8e9-2b57-4cba-9782-1ab1822e8a0e.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6310bc9a-05a6-4c71-97c2-da56ed02e32d",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0da3f8e9-2b57-4cba-9782-1ab1822e8a0e",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:13.607184Z",
+            "modified": "2024-12-14T00:22:13.607184Z",
+            "name": "CVE-2023-41132",
+            "description": "Missing Authorization vulnerability in ShapedPlugin LLC Category Slider for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Category Slider for WooCommerce: from n/a through 1.4.15.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-41132"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0f1fe128-62fc-4d08-9ab7-3ecb6d392031.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--a376ae4b-4e6b-4b25-9d18-9b91d525bb76",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0f1fe128-62fc-4d08-9ab7-3ecb6d392031",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2024-12-14T00:22:12.839752Z",
+            "modified": "2024-12-14T00:22:12.839752Z",
+            "name": "CVE-2023-34381",
+            "description": "Missing Authorization vulnerability in Gesundheit Bewegt GmbH Zippy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zippy: from n/a through 1.6.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-34381"
+                }
+            ]
+        }
+    ]
+}