Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2023-0013
The ABAP Keyword Documentation of SAP NetWeaver Application Server - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, for ABAP and ABAP Platform does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
Affected Products: NetWeaver AS for ABAP and ABAP Platform
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3283283'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0014
SAP NetWeaver ABAP Server and ABAP Platform - versions SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, KERNEL 7.22, 7.53, 7.77, 7.81, 7.85, 7.89, KRNL64UC 7.22, 7.22EXT, 7.53, KRNL64NUC 7.22, 7.22EXT, creates information about system identity in an ambiguous format. This could lead to capture-replay vulnerability and may be exploited by malicious users to obtain illegitimate access to the system.



Affected Products: NetWeaver ABAP Server and ABAP Platform
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3089413'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0015
In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
Affected Products: SAP BusinessObjects Business Intelligence Platform
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3251447'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0016
SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of this issue could lead to SQL injection vulnerability and could allow an attacker to access, modify, and/or delete data from the backend database.
Affected Products: SAP BPC MS 10.0
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3275391'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0017
An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current system. This could allow the attacker to have full read access to user data, make modifications to user data, and make services within the system unavailable.
Affected Products: NetWeaver AS for Java
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3268093'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0018
Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC application - versions 420, and 430, an attacker with basic user-level privileges can modify/upload crystal reports containing a malicious payload. Once these reports are viewable, anyone who opens those reports would be susceptible to stored XSS attacks. As a result of the attack, information maintained in the victim's web browser can be read, modified, and sent to the attacker.
Affected Products: BusinessObjects Business Intelligence Platform (Central management console)
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3266006'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0019
In SAP GRC (Process Control) - versions GRCFND_A V1200, GRCFND_A V8100, GRCPINW V1100_700, GRCPINW V1100_731, GRCPINW V1200_750, remote-enabled function module in the proprietary SAP solution enables an authenticated attacker with minimal privileges to access all the confidential data stored in the database. Successful exploitation of this vulnerability can expose user credentials from client-specific tables of the database, leading to high impact on confidentiality.


Affected Products: SAP GRC (Process Control)
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3281724'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0020
SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information which is otherwise restricted. On successful exploitation, there could be a high impact on confidentiality and limited impact on integrity of the application.


Affected Products: SAP BusinessObjects Business Intelligence Platform
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3263135'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0021
Due to insufficient encoding of user input, SAP NetWeaver - versions 700, 701, 702, 731, 740, 750, allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password, which could lead to reflected Cross-Site scripting. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.


Affected Products: SAP NetWeaver
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3274920'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0022
SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On successful exploitation, an attacker can perform operations that may completely compromise the application causing a high impact on the confidentiality, integrity, and availability of the application.
Affected Products: BusinessObjects Business Intelligence platform (Analysis edition for OLAP)
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3262810'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0023
In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.
Affected Products: Bank Account Management (Manage Banks)
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3150704'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0024
SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources, resulting in Cross-Site Scripting vulnerability.


Affected Products: Solution Manager (BSP Application)
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3265846'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0025
SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an unsuspecting user, can be used to read or modify some sensitive information or craft a payload which may restrict access to the desired resources.


Affected Products: Solution Manager (BSP Application)
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3267442'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0026
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a BGP update message is received over an established BGP session, and that message contains a specific, optional transitive attribute, this session will be torn down with an update message error. This issue cannot propagate beyond an affected system as the processing error occurs as soon as the update is received. This issue is exploitable remotely as the respective attribute can propagate through unaffected systems and intermediate AS (if any). Continuous receipt of a BGP update containing this attribute will create a sustained Denial of Service (DoS) condition. Some customers have experienced these BGP session flaps which prompted Juniper SIRT to release this advisory out of cycle before fixed releases are widely available as there is an effective workaround.

This issue affects:
Juniper Networks Junos OS
15.1R1 and later versions prior to 20.4R3-S8;
21.1 version 21.1R1 and later versions prior to 21.2R3-S6;
21.3 versions prior to 21.3R3-S5;
21.4 versions prior to 21.4R3-S4;
22.1 versions prior to 22.1R3-S4;
22.2 versions prior to 22.2R3-S2;
22.3 versions prior to 22.3R2-S2, 22.3R3-S1;
22.4 versions prior to 22.4R2-S1, 22.4R3;
23.1 versions prior to 23.1R1-S1, 23.1R2.

Juniper Networks Junos OS Evolved
All versions prior to 20.4R3-S8-EVO;
21.1 version 21.1R1-EVO and later versions prior to 21.2R3-S6-EVO;
21.3 versions prior to 21.3R3-S5-EVO;
21.4 versions prior to 21.4R3-S4-EVO;
22.1 versions prior to 22.1R3-S4-EVO;
22.2 versions prior to 22.2R3-S2-EVO;
22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;
22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO;
23.1 versions prior to 23.1R1-S1-EVO, 23.1R2-EVO.

Affected Products: Junos OS
References: [{'tags': ['vendor-advisory'], 'url': 'https://supportportal.juniper.net/JSA71542'}, {'tags': ['product'], 'url': 'https://www.juniper.net/documentation/us/en/software/junos/bgp/topics/topic-map/bgp-error-messages.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0027
Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.


Affected Products: Modbus TCP Server Add On Instructions
References: [{'url': 'https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1138766'}]
CVE State: PUBLISHED
Explain CVE-2023-0028
Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.
Affected Products: linagora/twake
References: [{'url': 'https://huntr.dev/bounties/bfd935f4-2d1d-4d3f-8b59-522abe7dd065'}, {'url': 'https://github.com/linagora/twake/commit/61f4c0caf4ce61c839fb304a707972974daacae9'}]
CVE State: PUBLISHED
Explain CVE-2023-0029
A vulnerability was found in Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B. It has been rated as problematic. This issue affects some unknown processing of the component Telnet Service. The manipulation leads to denial of service. The attack may be initiated remotely. The identifier VDB-217169 was assigned to this vulnerability.
Affected Products: RE708
References: [{'url': 'https://vuldb.com/?id.217169', 'tags': ['vdb-entry']}, {'url': 'https://vuldb.com/?ctiid.217169', 'tags': ['signature', 'permissions-required']}, {'url': 'https://www.youtube.com/watch?v=yh0pK7YlmI4', 'tags': ['media-coverage']}]
CVE State: PUBLISHED
Explain CVE-2023-0030
A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected Products: kernel
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2157270'}, {'url': 'https://github.com/torvalds/linux/commit/729eba3355674f2d9524629b73683ba1d1cd3f10'}, {'url': 'https://security.netapp.com/advisory/ntap-20230413-0010/'}]
CVE State: PUBLISHED
Explain CVE-2023-0033
The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
Affected Products: PDF Viewer
References: [{'url': 'https://wpscan.com/vulnerability/2d9ae43b-75a7-4fcc-bce3-d9e9d7a97ec0', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0034
The JetWidgets For Elementor WordPress plugin before 1.0.14 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Affected Products: JetWidgets For Elementor
References: [{'url': 'https://wpscan.com/vulnerability/ffbdb8a1-19c3-45e9-81b0-ad47a0791c4a', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0035
softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege.

Affected Products: OpenHarmony
References: [{'url': 'https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md'}]
CVE State: PUBLISHED
Explain CVE-2023-0036
platform_callback_stub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege.

Affected Products: OpenHarmony
References: [{'url': 'https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md'}]
CVE State: PUBLISHED
Explain CVE-2023-0037
The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
Affected Products: 10Web Map Builder for Google Maps
References: [{'url': 'https://wpscan.com/vulnerability/33ab1fe2-6611-4f43-91ba-52c56f02ed56', 'tags': ['exploit', 'vdb-entry', 'technical-description']}, {'url': 'https://bulletin.iese.de/post/wd-google-maps_1-0-72_1'}]
CVE State: PUBLISHED
Explain CVE-2023-0038
The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts when submitting quizzes that will execute whenever a user accesses the submissions page.
Affected Products: Survey Maker – Best WordPress Survey Plugin
References: [{'url': 'https://www.wordfence.com/threat-intel/vulnerabilities/id/a2a58fab-d4a3-4333-8495-e094ed85bb61'}, {'url': 'https://plugins.trac.wordpress.org/browser/survey-maker/tags/3.1.4/public/partials/class-survey-maker-submissions-summary-shortcode.php?rev=2839688#L311'}]
CVE State: PUBLISHED
Explain CVE-2023-0040
Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the result of insufficient validation of HTTP header field values before sending them to the network. Users are vulnerable if they pass untrusted data into HTTP header field values without prior sanitisation. Common use-cases here might be to place usernames from a database into HTTP header fields. This vulnerability allows attackers to inject new HTTP header fields, or entirely new requests, into the data stream. This can cause requests to be understood very differently by the remote server than was intended. In general, this is unlikely to result in data disclosure, but it can result in a number of logical errors and other misbehaviours.
Affected Products: Async HTTP Client
References: [{'url': 'https://github.com/swift-server/async-http-client/security/advisories/GHSA-v3r5-pjpm-mwgq'}]
CVE State: PUBLISHED
Explain CVE-2023-0041
IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration.  IBM X-Force ID:  243657.
Affected Products: Security Guardium
References: [{'tags': ['vendor-advisory'], 'url': 'https://www.ibm.com/support/pages/node/7000021'}, {'tags': ['vdb-entry'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/243657'}]
CVE State: PUBLISHED
Explain CVE-2023-0042
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2. GitLab Pages allows redirection to arbitrary protocols.
Affected Products: GitLab
References: [{'url': 'https://gitlab.com/gitlab-org/gitlab-pages/-/issues/728'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0042.json'}]
CVE State: PUBLISHED
Explain CVE-2023-0043
The Custom Add User WordPress plugin through 2.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected Products: Custom Add User
References: [{'url': 'https://wpscan.com/vulnerability/e012f23a-7daf-4ef3-b116-d0e2ed5bd0a3', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0044
If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack can be prevented with the Quarkus CSRF Prevention feature.
Affected Products: quarkus-vertx-http
References: [{'url': 'https://access.redhat.com/security/cve/CVE-2023-0044'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2158081'}]
CVE State: PUBLISHED
Explain CVE-2023-0045
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set  function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall.  The patch that added the support for the conditional mitigation via prctl (ib_prctl_set) dates back to the kernel 4.9.176.

We recommend upgrading past commit a664ec9158eeddd75121d39c9a0758016097fa96


Affected Products: Linux Kernel
References: [{'url': 'https://git.kernel.org/tip/a664ec9158eeddd75121d39c9a0758016097fa96'}, {'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20230714-0001/'}, {'url': 'https://github.com/google/security-research/security/advisories/GHSA-9x5g-vmxf-4qj8'}]
CVE State: PUBLISHED
Explain CVE-2023-0046
Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch.
Affected Products: lirantal/daloradius
References: [{'url': 'https://huntr.dev/bounties/2214dc41-f283-4342-95b1-34a2f4fea943'}, {'url': 'https://github.com/lirantal/daloradius/commit/2013c2d1231e99dac918247b69b198ded1f30a1c'}]
CVE State: PUBLISHED
Explain CVE-2023-0048
Code Injection in GitHub repository lirantal/daloradius prior to master-branch.
Affected Products: lirantal/daloradius
References: [{'url': 'https://huntr.dev/bounties/57abd666-4b9c-4f59-825d-1ec832153e79'}, {'url': 'https://github.com/lirantal/daloradius/commit/3650eea7277a5c278063214a5b71dbd7d77fc5aa'}]
CVE State: PUBLISHED
Explain CVE-2023-0049
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9'}, {'url': 'https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c'}, {'name': 'FEDORA-2023-0f6a9433cf', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3Y752EAVACVC5XY2TMGGOAIU25VQRPDW/'}, {'name': 'FEDORA-2023-208f2107d5', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T33LLWHLH63XDCO5OME7NWN63RA4U5HF/'}, {'url': 'https://support.apple.com/kb/HT213670'}, {'name': '20230327 APPLE-SA-2023-03-27-3 macOS Ventura 13.3', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2023/Mar/17'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2023-0050
An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A specially crafted Kroki diagram could lead to a stored XSS on the client side which allows attackers to perform arbitrary actions on behalf of victims.
Affected Products: GitLab
References: [{'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/387023'}, {'url': 'https://hackerone.com/reports/1731349'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0050.json'}]
CVE State: PUBLISHED
Explain CVE-2023-0051
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/1c8686db-baa6-42dc-ba45-aed322802de9'}, {'url': 'https://github.com/vim/vim/commit/c32949b0779106ed5710ae3bffc5053e49083ab4'}, {'url': 'https://support.apple.com/kb/HT213670'}, {'name': '20230327 APPLE-SA-2023-03-27-3 macOS Ventura 13.3', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2023/Mar/17'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2023-0052
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device management, an unauthorized user could access the system and modify the device configuration, which could result in the unauthorized user executing unrestricted malicious commands.


Affected Products: Nova 220 (EYK220F001) DDC with BACnet connection
References: [{'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05'}]
CVE State: PUBLISHED
Explain CVE-2023-0053
SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and 
prior and BACnetstac version 4.2.1 and prior have only FTP and Telnet 
available for device management. Any sensitive information communicated 
through these protocols, such as credentials, is sent in cleartext. An 
attacker could obtain sensitive information such as user credentials to 
gain access to the system. 




Affected Products: Nova 220 (EYK220F001) DDC with BACnet connection
References: [{'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-05'}]
CVE State: PUBLISHED
Explain CVE-2023-0054
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/b289ee0f-fd16-4147-bd01-c6289c45e49d'}, {'url': 'https://github.com/vim/vim/commit/3ac1d97a1d9353490493d30088256360435f7731'}, {'url': 'https://support.apple.com/kb/HT213670'}, {'name': '20230327 APPLE-SA-2023-03-27-3 macOS Ventura 13.3', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2023/Mar/17'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}, {'name': '[debian-lts-announce] 20230612 [SECURITY] [DLA 3453-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html'}]
CVE State: PUBLISHED
Explain CVE-2023-0055
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.
Affected Products: pyload/pyload
References: [{'url': 'https://huntr.dev/bounties/ed88e240-99ff-48a1-bf32-8e1ef5f13cce'}, {'url': 'https://github.com/pyload/pyload/commit/7b53b8d43c2c072b457dcd19c8a09bcfc3721703'}]
CVE State: PUBLISHED
Explain CVE-2023-0056
An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted malicious server in an OpenShift cluster. The biggest impact is to availability.
Affected Products: haproxy
References: [{'url': 'https://access.redhat.com/security/cve/CVE-2023-0056'}]
CVE State: PUBLISHED
Explain CVE-2023-0057
Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33.
Affected Products: pyload/pyload
References: [{'url': 'https://huntr.dev/bounties/12b64f91-d048-490c-94b0-37514b6d694d'}, {'url': 'https://github.com/pyload/pyload/commit/bd2a31b7de54570b919aa1581d486e6ee18c0f64'}]
CVE State: PUBLISHED
Explain CVE-2023-0059
The Youzify WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Youzify
References: [{'url': 'https://wpscan.com/vulnerability/5e26c485-9a5a-44a3-95b3-6c063a1c321c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0060
The Responsive Gallery Grid WordPress plugin before 2.3.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Responsive Gallery Grid
References: [{'url': 'https://wpscan.com/vulnerability/be2fc859-3158-4f06-861d-382381a7551b', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0061
The Judge.me Product Reviews for WooCommerce WordPress plugin before 1.3.21 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Judge.me Product Reviews for WooCommerce
References: [{'url': 'https://wpscan.com/vulnerability/a1d0d131-c773-487e-88f8-e3d63936fbbb', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0062
The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: EAN for WooCommerce
References: [{'url': 'https://wpscan.com/vulnerability/450f94a3-56b1-41c7-ac29-fbda1dc04794', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0063
The WordPress Shortcodes WordPress plugin through 1.6.36 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: WordPress Shortcodes
References: [{'url': 'https://wpscan.com/vulnerability/2262f2fc-8122-46ed-8e67-8c34ee35fc97', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0064
The eVision Responsive Column Layout Shortcodes WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: eVision Responsive Column Layout Shortcodes
References: [{'url': 'https://wpscan.com/vulnerability/97be5795-b5b8-40c7-80bf-7da95da7705a', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0065
The i2 Pros & Cons WordPress plugin through 1.3.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: i2 Pros & Cons
References: [{'url': 'https://wpscan.com/vulnerability/42c3ac68-4bbc-4d47-ad53-2c9ed48cd677', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0066
The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Companion Sitemap Generator
References: [{'url': 'https://wpscan.com/vulnerability/545c9e2f-bacd-4f30-ae01-de1583e26d32', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0067
The Timed Content WordPress plugin before 2.73 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Timed Content
References: [{'url': 'https://wpscan.com/vulnerability/92f43da9-9903-4bcf-99e8-0e269072d389', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0068
The Product GTIN (EAN, UPC, ISBN) for WooCommerce WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Product GTIN (EAN, UPC, ISBN) for WooCommerce
References: [{'url': 'https://wpscan.com/vulnerability/4abd1454-380c-4c23-8474-d7da4b2f3b8e', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0069
The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: WPaudio MP3 Player
References: [{'url': 'https://wpscan.com/vulnerability/d9f00bcb-3746-4a9d-a222-4d532e84615f', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0070
The ResponsiveVoice Text To Speech WordPress plugin before 1.7.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: ResponsiveVoice Text To Speech
References: [{'url': 'https://wpscan.com/vulnerability/0d8fbd1a-9fac-42ac-94e0-f8921deb1696', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0071
The WP Tabs WordPress plugin before 2.1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: WP Tabs
References: [{'url': 'https://wpscan.com/vulnerability/3834a162-2cdc-41e9-9c9d-2b576eed4db9', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0072
The WC Vendors Marketplace WordPress plugin before 2.4.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: WC Vendors Marketplace
References: [{'url': 'https://wpscan.com/vulnerability/bb2b876f-7216-4f31-9d1f-a45405c545ce', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0073
The Client Logo Carousel WordPress plugin through 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Client Logo Carousel
References: [{'url': 'https://wpscan.com/vulnerability/e5599968-a435-405a-8829-9840a2144987', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0074
The WP Social Widget WordPress plugin before 2.2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: WP Social Widget
References: [{'url': 'https://wpscan.com/vulnerability/82f543e3-9397-4364-9546-af5ea134fcd4', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0075
The Amazon JS WordPress plugin through 0.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Amazon JS
References: [{'url': 'https://wpscan.com/vulnerability/097acd6f-3291-4cdc-a054-4432b6350411', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0076
The Download Attachments WordPress plugin through 1.2.24 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Download Attachments
References: [{'url': 'https://wpscan.com/vulnerability/a0a44f8a-877c-40df-a3ba-b9b806ffb772', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0077
Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to overflow buffers via unspecified vectors.
Affected Products: Synology Router Manager (SRM)
References: [{'url': 'https://www.synology.com/en-global/security/advisory/Synology_SA_22_25', 'name': 'Synology_SA_22_25', 'tags': ['vendor-advisory']}]
CVE State: PUBLISHED
Explain CVE-2023-0078
The Resume Builder WordPress plugin through 3.1.1 does not sanitize and escape some parameters related to Resume, which could allow users with a role as low as subscriber to perform Stored XSS attacks against higher privilege users
Affected Products: Resume Builder
References: [{'url': 'https://wpscan.com/vulnerability/e667854f-56f8-4dbe-9573-6652a8aacc2c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0080
The Customer Reviews for WooCommerce WordPress plugin before 5.16.0 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to include arbitrary files via a traversal attack. This could also allow them to read non PHP files and retrieve their content. RCE could also be achieved if the attacker manage to upload a malicious image containing PHP code, and then include it via the affected attribute, on a default WP install, authors could easily achieve that given that they have the upload_file capability.
Affected Products: Customer Reviews for WooCommerce
References: [{'url': 'https://wpscan.com/vulnerability/6b0d63ed-e244-4f20-8f10-a6e0c7ccadd4', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0081
The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: MonsterInsights
References: [{'url': 'https://wpscan.com/vulnerability/76d2963c-ebff-498f-9484-3c3008750c14', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0082
The ExactMetrics WordPress plugin before 7.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: ExactMetrics
References: [{'url': 'https://wpscan.com/vulnerability/e1ba5047-0c39-478f-89c7-b0bb638efdff', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0083
The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, 

OpenHarmony-v3.0.7 and prior versions

has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

Affected Products: OpenHarmony
References: [{'url': 'https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md'}]
CVE State: PUBLISHED
Explain CVE-2023-0084
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page, which is the submissions page.
Affected Products: Metform Elementor Contact Form Builder – Flexible and Design-Friendly Contact Form builder plugin for WordPress
References: [{'url': 'https://www.wordfence.com/threat-intel/vulnerabilities/id/05f7d9fe-e95f-4ddf-9bce-2aeac3c2e946'}, {'url': 'https://wordpress.org/plugins/metform/#description'}, {'url': 'https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2845078%40metform&new=2845078%40metform&sfp_email=&sfph_mail='}]
CVE State: PUBLISHED
Explain CVE-2023-0085
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1. This is due to insufficient server side checking on the captcha value submitted during a form submission. This makes it possible for unauthenticated attackers to bypass Captcha restrictions and for attackers to utilize bots to submit forms.
Affected Products: Metform Elementor Contact Form Builder – Flexible and Design-Friendly Contact Form builder plugin for WordPress
References: [{'url': 'https://www.wordfence.com/threat-intel/vulnerabilities/id/69527d4b-49b6-47cd-93b6-39350f881ec9'}, {'url': 'https://wordpress.org/plugins/metform/'}, {'url': 'https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2868889%40metform&new=2868889%40metform&sfp_email=&sfph_mail='}]
CVE State: PUBLISHED
Explain CVE-2023-0086
The JetWidgets for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.12. This is due to missing nonce validation on the save() function. This makes it possible for unauthenticated attackers to to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.  This can be used to enable SVG uploads that could make Cross-Site Scripting possible.
Affected Products: JetWidgets For Elementor
References: [{'url': 'https://www.wordfence.com/threat-intel/vulnerabilities/id/8de3d3c7-bde2-4455-8d60-20307f0a53ee'}, {'url': 'https://plugins.trac.wordpress.org/browser/jetwidgets-for-elementor/trunk/includes/class-jet-widgets-settings.php#L149'}]
CVE State: PUBLISHED
Explain CVE-2023-0087
The Swifty Page Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘spm_plugin_options_page_tree_max_width’ parameter in versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Affected Products: Swifty Page Manager
References: [{'url': 'https://www.wordfence.com/threat-intel/vulnerabilities/id/8550a405-9fa2-41a3-b556-05ff9f577ce4'}, {'url': 'https://plugins.trac.wordpress.org/browser/swifty-page-manager/trunk/view/page_tree.php?rev=1555394#L174'}]
CVE State: PUBLISHED
Explain CVE-2023-0088
The Swifty Page Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on several AJAX actions handling page creation and deletion among other things. This makes it possible for unauthenticated attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected Products: Swifty Page Manager
References: [{'url': 'https://www.wordfence.com/threat-intel/vulnerabilities/id/75b8f71d-9f75-4b42-ac5f-c6ffb476aae4'}, {'url': 'https://plugins.trac.wordpress.org/browser/swifty-page-manager/trunk/swifty-page-manager.php?rev=1555394#L994'}]
CVE State: PUBLISHED
Explain CVE-2023-0089

The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'.

This affects all versions 8.20.0 and below. 






Affected Products: enterprise_protection
References: [{'url': 'https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001'}]
CVE State: PUBLISHED
Explain CVE-2023-0090
The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'.  Exploitation requires network access to the webservices API, but such access is a non-standard configuration.  This affects all versions 8.20.0 and below.


Affected Products: enterprise_protection
References: [{'url': 'https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0001'}]
CVE State: PUBLISHED
Explain CVE-2023-0091
A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.
Affected Products: Keycloak
References: [{'url': 'https://access.redhat.com/security/cve/CVE-2023-0091'}]
CVE State: PUBLISHED
Explain CVE-2023-0093
Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vulnerable to command injection. To exploit this issue, an attacker would need to phish the user to enter an attacker controlled server URL during enrollment.
Affected Products: Advanced Server Access
References: [{'url': 'https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2023-0093/'}]
CVE State: PUBLISHED
Explain CVE-2023-0095
The Page View Count WordPress plugin before 2.6.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Page View Count
References: [{'url': 'https://wpscan.com/vulnerability/009ca72e-e8fa-4fdc-ab2d-4210f8f4710f', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0096
The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Form builder to get in touch with visitors, grow your email list and collect payments — Happyforms
References: [{'url': 'https://wpscan.com/vulnerability/b28150e7-214b-4bcd-85c0-e819c4223484', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0097
The Post Grid, Post Carousel, & List Category Posts WordPress plugin before 2.4.19 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected Products: Post Grid, Post Carousel, & List Category Posts
References: [{'url': 'https://wpscan.com/vulnerability/19379f08-d667-4b1e-a774-0f4a17ad7bff', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0098
The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber.
Affected Products: Simple URLs
References: [{'url': 'https://wpscan.com/vulnerability/db0b3275-40df-404e-aa8d-53558f0122d8', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0099
The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Affected Products: Simple URLs
References: [{'url': 'https://wpscan.com/vulnerability/fd50f2d6-e420-4220-b485-73f33227e8f8', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2023-0100
In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the __report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13.
Affected Products: Eclipse BIRT (Business Intelligence Reporting Tool)
References: [{'url': 'https://bugs.eclipse.org/bugs/show_bug.cgi?id=580391'}]
CVE State: PUBLISHED
Explain CVE-2023-0101
A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host.
Affected Products: Nessus
References: [{'url': 'https://www.tenable.com/security/tns-2023-01'}, {'url': 'https://www.tenable.com/security/tns-2023-02'}]
CVE State: PUBLISHED