Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31067 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:43:32.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/174275/TSPlus-16.0.2.14-Insecure-Permissions.html - https://www.exploit-db.com/exploits/51679
CVE ID: CVE-2023-31068 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:02:00.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/174272/TSPlus-16.0.0.0-Insecure-Permissions.html - https://www.exploit-db.com/exploits/51680
CVE ID: CVE-2023-31069 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:01:13.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html - https://www.exploit-db.com/exploits/51681
CVE ID: CVE-2023-31071 State: PUBLISHED Published: 2023-08-17T08:41:21.755Z Last Updated: 2024-09-25T16:43:07.899Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Yannick Lefebvre Products: Modal Dialog Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.14 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/modal-dialog/wordpress-modal-dialog-plugin-3-5-14-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31072 State: PUBLISHED Published: 2023-08-17T14:35:30.070Z Last Updated: 2024-08-02T14:45:25.576Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Praveen Goswami Products: Advanced Category Template Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Praveen Goswami Advanced Category Template plugin <= 0.1 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/advanced-category-template/wordpress-advanced-category-template-plugin-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31073 State: PUBLISHED Published: 2024-12-09T11:31:00.349Z Last Updated: 2024-12-09T13:49:56.038Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Jose Vega Products: Display custom fields in the frontend – Post and User Profile Fields Problem Types: CWE-862 Description: Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display custom fields in the frontend – Post and User Profile Fields: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pa
User Profile Fields: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/shortcode-to-display-post-and-user-data/vulnerability/wordpress-shortcode-to-display-post-and-user-data-plugin-1-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-31074 State: PUBLISHED Published: 2023-08-17T10:01:35.142Z Last Updated: 2024-09-25T16:42:50.929Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: hupe13 Products: Extensions for Leaflet Map Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in hupe13 Extensions for Leaflet Map plugin <= 3.4.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/extensions-leaflet-map/wordpress-extensions-for-leaflet-map-plugin-3-4-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31075 State: PUBLISHED Published: 2023-11-18T22:41:18.382Z Last Updated: 2024-08-02T14:45:25.606Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Arshid Products: Easy Hide Login Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-hide-login/wordpress-easy-hide-login-plugin-1-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31076 State: PUBLISHED Published: 2023-08-17T08:44:53.942Z Last Updated: 2024-09-25T16:42:59.507Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Really Simple Plugins Products: Recipe Maker For Your Food Blog from Zip Recipes Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/zip-recipes/wordpress-recipe-maker-for-your-food-blog-from-zip-recipes-plugin-8-0-6-reflected-
om/database/vulnerability/zip-recipes/wordpress-recipe-maker-for-your-food-blog-from-zip-recipes-plugin-8-0-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31077 State: PUBLISHED Published: 2023-11-10T13:36:15.359Z Last Updated: 2024-09-03T17:51:34.624Z Vendors: ReCorp Products: Export WP Page to Static HTML/CSS Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ReCorp Export WP Page to Static HTML/CSS plugin <= 2.1.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/export-wp-page-to-static-html/wordpress-export-wp-page-to-static-html-css-plugin-2-1-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31078 State: PUBLISHED Published: 2023-11-10T13:32:41.750Z Last Updated: 2024-09-03T17:48:08.920Z Vendors: Marco Steinbrecher Products: WP BrowserUpdate Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.4.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-browser-update/wordpress-wp-browserupdate-plugin-4-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31079 State: PUBLISHED Published: 2023-08-17T14:31:13.135Z Last Updated: 2024-09-25T14:49:18.482Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Chris Roberts Products: Tippy Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Chris Roberts Tippy plugin <= 6.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tippy/wordpress-tippy-plugin-6-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31080 State: PUBLISHED Published: 2024-06-09T09:27:46.796Z Last Updated: 2024-08-02T14:45:25.644Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: Unlimited Elements Products: Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Problem Types: CWE-862 Description: Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/
st Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-65-multiple-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-31081 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T19:25:50.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/media/test-drivers/vidtv/vidtv_bridge.c in the Linux kernel 6.2. There is a NULL pointer dereference in vidtv_mux_stop_thread. In vidtv_stop_streaming, after dvb->mux=NULL occurs, it executes vidtv_mux_stop_thread(dvb->mux). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/all/CA+UBctDXyiosaiR7YNKCs8k0aWu4gU+YutRcnC+TDJkXpHjQag%40mail.gmail.com/ - https://security.netapp.com/advisory/ntap-20230929-0003/ - https://bugzilla.
4gU+YutRcnC+TDJkXpHjQag%40mail.gmail.com/ - https://security.netapp.com/advisory/ntap-20230929-0003/ - https://bugzilla.suse.com/show_bug.cgi?id=1210782
CVE ID: CVE-2023-31082 State: PUBLISHED Published: 2023-04-24T00:00:00 Last Updated: 2024-08-02T14:45:25.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. There is a sleeping function called from an invalid context in gsmld_write, which will block the kernel. Note: This has been disputed by 3rd parties as not a valid vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/all/CA+UBctCZok5FSQ=LPRA+A-jocW=L8FuMVZ_7MNqhh483P5yN8A%40mail.gmail.com/ - https://security.netapp.com/advisory/ntap-20230929-0003/ - https://bugzilla.suse.com/show_bug.cgi?id=1210781
CVE ID: CVE-2023-31083 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-11-03T21:48:24.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before hu->proto is set. A NULL pointer dereference may occur. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/all/CA+UBctC3p49aTgzbVgkSZ2+TQcqq4fPDO7yZitFT5uBPDeCO2g%40mail.gmail.com/ - https://security.netapp.com/advisory/ntap-20230929-0003/ - https://git.kernel.org/cgit/linux/ker
O2g%40mail.gmail.com/ - https://security.netapp.com/advisory/ntap-20230929-0003/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9c33663af9ad115f90c076a1828129a3fbadea98 - https://bugzilla.suse.com/show_bug.cgi?id=1210780
CVE ID: CVE-2023-31084 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-03-18T19:16:50.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
&fepriv->sem) may block the process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/all/CA+UBctCu7fXn4q41O_3=id1+OdyQ85tZY1x+TkT-6OVBL6KAUw%40mail.gmail.com/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AOATNX5UFL7V7W2QDIQKOHFFHYKWFP4W/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HIEOLEOURP4BJZMIL7UGGPYRRB44UDN/ - https://www.debian.org/security/2023/dsa-5448 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://www.debian.org/security/2023/dsa-5480 - https://security.netapp.com/advisory/ntap-
ounce/2023/07/msg00030.html - https://www.debian.org/security/2023/dsa-5480 - https://security.netapp.com/advisory/ntap-20230929-0003/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b8c75e4a1b325ea0a9433fa8834be97b5836b946
CVE ID: CVE-2023-31085 State: PUBLISHED Published: 2023-04-24T00:00:00 Last Updated: 2024-08-02T14:45:25.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/all/687864524.118195.1681799447034.JavaMail.zimbra%40nod.at/ - https://security.netapp.com/advisory/ntap-20230929-0003/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=017c73a34a661a861712f7cc1393a123e5b2208c
CVE ID: CVE-2023-31086 State: PUBLISHED Published: 2023-11-09T22:57:04.171Z Last Updated: 2024-09-03T17:48:49.842Z Vendors: Igor Benic Products: Simple Giveaways – Grow your business, email lists and traffic with contests Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests plugin <= 2.46.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/giveasap/wordpress-simple-giveaways-plugin-2-45-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31087 State: PUBLISHED Published: 2023-11-09T17:57:49.576Z Last Updated: 2024-09-03T18:47:28.511Z Vendors: JoomSky Products: JS Job Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/js-jobs/wordpress-js-jobs-manager-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31088 State: PUBLISHED Published: 2023-11-09T22:53:08.821Z Last Updated: 2024-09-03T17:50:39.793Z Vendors: Faraz Quazi Products: Floating Action Button Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Faraz Quazi Floating Action Button plugin <= 1.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/floating-action-button/wordpress-floating-action-button-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31089 State: PUBLISHED Published: 2023-11-18T22:38:01.974Z Last Updated: 2024-08-02T14:45:25.657Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Tradebooster Products: Video XML Sitemap Generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/video-xml-sitemap-generator/wordpress-video-xml-sitemap-generator-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31090 State: PUBLISHED Published: 2024-04-24T15:45:54.626Z Last Updated: 2024-08-02T14:45:25.140Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Unlimited Elements Products: Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to a Web Server.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.60. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
e Widgets, Addons, Templates): from n/a through 1.5.60. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-60-unrestricted-zip-extraction-vulnerability?_s_id=cve
CVE ID: CVE-2023-31091 State: PUBLISHED Published: 2023-08-17T10:46:13.104Z Last Updated: 2024-09-25T16:42:43.088Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Pradeep Singh Products: Dynamically Register Sidebars Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pradeep Singh Dynamically Register Sidebars plugin <= 1.0.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dynamically-register-sidebars/wordpress-dynamically-register-sidebars-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31092 State: PUBLISHED Published: 2023-12-20T16:06:08.229Z Last Updated: 2024-08-02T14:45:25.639Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L) Vendors: Foxskav Products: Easy Bet Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Foxskav Easy Bet.This issue affects Easy Bet: from n/a through 1.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-bet/wordpress-easy-bet-plugin-1-0-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-31093 State: PUBLISHED Published: 2023-11-09T22:49:25.672Z Last Updated: 2024-09-03T17:52:31.124Z Vendors: Chronosly Products: Chronosly Events Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Chronosly Chronosly Events Calendar plugin <= 2.6.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/chronosly-events-calendar/wordpress-chronosly-events-calendar-plugin-2-6-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31094 State: PUBLISHED Published: 2023-08-18T12:50:58.025Z Last Updated: 2025-02-19T21:26:21.087Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Lauri Karisola / WP Trio Products: Stock Sync for WooCommerce Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin <= 2.4.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/stock-sync-for-woocommerce/wordpress-stock-sync-for-woocommerce-plugin-2-4-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=
or-woocommerce/wordpress-stock-sync-for-woocommerce-plugin-2-4-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31095 State: PUBLISHED Published: 2023-12-29T09:50:01.256Z Last Updated: 2024-08-02T14:45:25.672Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: CRM Perks Products: Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database
from n/a through 1.2.8. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cf7-hubspot/wordpress-integration-for-contact-form-7-hubspot-plugin-1-2-8-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-31096 State: PUBLISHED Published: 2023-10-10T00:00:00 Last Updated: 2024-09-19T14:04:25.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory (IOCTL 0x1b2150). An attacker can exploit this to elevate privileges from a medium-integrity process to SYSTEM. This can also be used to bypass kernel-level protections such as AV or PPL, because exploit code runs with high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver) ransomware campa
with high-integrity privileges and can be used in coordinated BYOVD (bring your own vulnerable driver) ransomware campaigns. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.broadcom.com - https://cschwarz1.github.io/posts/0x04/
CVE ID: CVE-2023-31098 State: PUBLISHED Published: 2023-05-22T15:31:53.989Z Last Updated: 2024-10-11T13:59:56.171Z Vendors: Apache Software Foundation Products: Apache InLong Problem Types: CWE-521 Description: Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0. When users change their password to a simple password (with any character or symbol), attackers can easily guess the user's password and access the account. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7805 https://github.com/apache/inlong/pull/7805 to solve it. Additional Analyst
k https://github.com/apache/inlong/pull/7805 https://github.com/apache/inlong/pull/7805 to solve it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/1fvloc3no1gbffzrcsx9ltsg08wr2d1w
CVE ID: CVE-2023-31099 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:17:32.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://manageengine.com - https://www.manageengine.com/network-monitoring/security-updates/cve-2023-31099.html
CVE ID: CVE-2023-31100 State: PUBLISHED Published: 2023-11-14T23:17:07.869Z Last Updated: 2025-07-28T20:48:38.895Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Phoenix Products: SecureCore™ Technology™ 4 Problem Types: CWE-284 Description: Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: * from 4.3.0.0 before 4.3.0.203 * from 4.3.1.0 before 4.3.1.163 * from 4.4.0.0 before 4.4.0.217 * from 4.5.0.0 before 4.5.0.138 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phoenixtech.com/phoenix-security
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phoenixtech.com/phoenix-security-notifications/cve-2023-31100/