Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.0), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.0), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.0), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.0), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.0). An Improper Neutralization of Special Elements used in an OS Command with root privileges vulnerability exists in the handling of the DDNS configuration. This could allow malicious local administrators to issue commands on system level after a successful IP address update. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.sieme
successful IP address update. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf - https://cert-portal.siemens.com/productcert/html/ssa-180704.html - https://cert-portal.siemens.com/productcert/html/ssa-602936.html - https://cert-portal.siemens.com/productcert/html/ssa-690517.html
CVE ID: CVE-2023-49692 State: PUBLISHED Published: 2023-12-12T11:27:26.231Z Last Updated: 2024-08-13T07:53:59.588Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM RM1224 LTE(4G) EU, RUGGEDCOM RM1224 LTE(4G) NAM, SCALANCE M804PB, SCALANCE M812-1 ADSL-Router, SCALANCE M816-1 ADSL-Router, SCALANCE M826-2 SHDSL-Router, SCALANCE M874-2, SCALANCE M874-3, SCALANCE M876-3, SCALANCE M876-3 (ROK), SCALANCE M876-4, SCALANCE M876-4 (EU), SCALANCE M876-4 (NAM), SCALANCE MUM853-1 (EU), SCALANCE MUM856-1 (EU), SCALANCE MUM856-1 (RoW), SCALANCE S615 EEC LAN-Router, SCALANCE S615 LAN-Router Problem Types: CWE-78 Description: A vulnerab
NCE MUM856-1 (RoW), SCALANCE S615 EEC LAN-Router, SCALANCE S615 LAN-Router Problem Types: CWE-78 Description: A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-
, SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK58
l versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2). An Improper Neutralization of Special Elements used in an OS Command with root privileges vulnerability exists in the parsing of the IPSEC configuration. This could allow malicious local administrators to issue commands on system level after a new connection is established. Additional Analyst Notes: - CVE Program Container
issue commands on system level after a new connection is established. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-068047.pdf - https://cert-portal.siemens.com/productcert/html/ssa-068047.html - https://cert-portal.siemens.com/productcert/html/ssa-602936.html
CVE ID: CVE-2023-49693 State: PUBLISHED Published: 2023-11-29T22:41:02.567Z Last Updated: 2024-08-02T22:01:25.966Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NETGEAR Products: NETGEAR ProSAFE Network Management System Problem Types: CWE-306 Description: NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2023-39 - https://kb.netgear.com/000065886/Security-Advisory-for-Sensitive-Information-Dis
ble.com/security/research/tra-2023-39 - https://kb.netgear.com/000065886/Security-Advisory-for-Sensitive-Information-Disclosure-on-the-NMS300-PSV-2023-0126
CVE ID: CVE-2023-49694 State: PUBLISHED Published: 2023-11-29T22:47:42.597Z Last Updated: 2024-08-02T22:01:25.766Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NETGEAR Products: NETGEAR ProSAFE Network Management System Problem Types: CWE-284 Description: A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2023-39 - https://kb.netgear.com/0
- CVE Program Container: References: - https://www.tenable.com/security/research/tra-2023-39 - https://kb.netgear.com/000065885/Security-Advisory-for-Vertical-Privilege-Escalation-on-the-NMS300-PSV-2023-0127
CVE ID: CVE-2023-49695 State: PUBLISHED Published: 2023-12-12T08:58:47.925Z Last Updated: 2024-10-08T19:27:02.245Z Vendors: ELECOM CO.,LTD. Products: WRC-X3000GSN, WRC-X3000GS, WRC-X3000GSA Problem Types: OS command injection Description: OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command by sending a specially crafted request to the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20231212-01/ - https://jvn.jp/en/vu/JVNVU9749
ISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20231212-01/ - https://jvn.jp/en/vu/JVNVU97499577/
CVE ID: CVE-2023-49699 State: PUBLISHED Published: 2023-11-30T07:04:48.134Z Last Updated: 2024-08-02T22:01:25.926Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L) Vendors: ASR Products: Falcon Problem Types: CWE-119 Description: Memory Corruption in IMS while calling VoLTE Streamingmedia Interface Additional Analyst Notes: - CVE Program Container: References: - https://www.asrmicro.com/en/goods/psirt?cid=31
CVE ID: CVE-2023-49700 State: PUBLISHED Published: 2023-11-30T07:12:51.584Z Last Updated: 2024-08-02T22:01:25.954Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L) Vendors: ASR Products: Falcon Problem Types: CWE-120 Description: Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large. Additional Analyst Notes: - CVE Program Container: References: - https://www.asrmicro.com/en/goods/psirt?cid=31
CVE ID: CVE-2023-49701 State: PUBLISHED Published: 2023-11-30T07:15:14.820Z Last Updated: 2024-08-02T22:01:25.781Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H) Vendors: ASR Products: Falcon Problem Types: CWE-119 Description: Memory Corruption in SIM management while USIMPhase2init Additional Analyst Notes: - CVE Program Container: References: - https://www.asrmicro.com/en/goods/psirt?cid=31
CVE ID: CVE-2023-49706 State: PUBLISHED Published: 2023-12-19T00:00:00 Last Updated: 2024-11-26T15:04:14.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers to escalate privileges, thereby allowing them to act as and with the permissions of another user. Attackers must generate repeated API requests to trigger a race condition with concurrent user activity in the self-service portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.linotp.org/news.html - https://linotp.org/CVE-2023-49706.txt - https://linotp.org
ulnrichment: References: - https://www.linotp.org/news.html - https://linotp.org/CVE-2023-49706.txt - https://linotp.org/security-update-linotp3-selfservice.html
CVE ID: CVE-2023-49707 State: PUBLISHED Published: 2023-12-14T08:51:59.222Z Last Updated: 2024-08-04T08:41:50.541Z Vendors: joomlart.com Products: S5 Register module for Joomla Problem Types: CWE-89 Description: SQLi vulnerability in S5 Register module for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/s5-register/
CVE ID: CVE-2023-49708 State: PUBLISHED Published: 2023-12-14T08:51:59.913Z Last Updated: 2024-08-04T08:42:58.638Z Vendors: Joomstar.com Products: Starshop component for Joomla Problem Types: CWE-89 Description: SQLi vulnerability in Starshop component for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/starshop/
CVE ID: CVE-2023-49710 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:18:51.894Z Description: No description available.
CVE ID: CVE-2023-49712 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:18:52.455Z Description: No description available.
CVE ID: CVE-2023-49713 State: PUBLISHED Published: 2023-12-12T09:16:26.932Z Last Updated: 2024-08-02T22:01:26.024Z Vendors: JTEKT ELECTRONICS CORPORATION Products: GC-A22W-CW, GC-A24W-C(W), GC-A26W-C(W), GC-A24, GC-A24-M, GC-A25, GC-A26, GC-A26-J2, GC-A27-C, GC-A28-C Problem Types: Denial-of-service (DoS) Description: Denial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.electronics.jtekt.co.jp/en/topics/202312116562/ - https://jvn.jp/en/jp/JVN3414583
m Container: References: - https://www.electronics.jtekt.co.jp/en/topics/202312116562/ - https://jvn.jp/en/jp/JVN34145838/
CVE ID: CVE-2023-49715 State: PUBLISHED Published: 2024-01-10T15:48:10.029Z Last Updated: 2025-11-04T18:19:45.345Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WWBN Products: AVideo Problem Types: CWE-434 Description: A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution when chained with an LFI vulnerability. An attacker can send a series of HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintel
nerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1885
CVE ID: CVE-2023-49716 State: PUBLISHED Published: 2024-02-09T03:45:37.621Z Last Updated: 2025-06-17T21:29:29.697Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H) Vendors: Emerson Products: Rosemount GC370XA, Rosemount GC700XA, Rosemount GC1500XA Problem Types: CWE-77 Description: In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an authenticated user with network access could run arbitrary commands from a remote computer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01 - https://www.emerson.com/documents/automation/security-notification-emerson-gas-ch
events/ics-advisories/icsa-24-030-01 - https://www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf
CVE ID: CVE-2023-49721 State: PUBLISHED Published: 2024-02-14T21:57:40.878Z Last Updated: 2024-10-24T16:44:29.650Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Canonical Ltd. Products: LXD Description: An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/2040139 - https://nvd.nist.gov/vuln/detail/CVE-2023-48733 - https://www.openwall.com/lists/oss-security/2024/02/14/4 - https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2040137
CVE ID: CVE-2023-49722 State: PUBLISHED Published: 2024-01-09T09:54:57.409Z Last Updated: 2025-06-17T20:39:17.535Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Bosch Products: BCC101, BCC102, BCC50 Problem Types: CWE-1125 Description: Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-473852.html
CVE ID: CVE-2023-49733 State: PUBLISHED Published: 2023-11-30T11:29:35.188Z Last Updated: 2025-02-13T17:18:53.184Z Vendors: Apache Software Foundation Products: Apache Cocoon Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/t87nntzt6dxw354zbqr9k7l7o1x8gq11 - http://www.openwall.com/lists/oss-security/2023/11/30/5
CVE ID: CVE-2023-49734 State: PUBLISHED Published: 2023-12-19T09:52:13.373Z Last Updated: 2025-02-13T17:18:54.094Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-863 Description: An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2. Users are recommended to upgrade to version 3.0.2 or 2.1.3, which fixes the issue. Additional Analyst Notes: - CVE Pr
2. Users are recommended to upgrade to version 3.0.2 or 2.1.3, which fixes the issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/985h6ltvtbvdoysso780kkj7x744cds5 - http://www.openwall.com/lists/oss-security/2023/12/19/3
CVE ID: CVE-2023-49735 State: PUBLISHED Published: 2023-11-30T21:17:28.243Z Last Updated: 2024-11-20T18:12:54.281Z Vendors: Apache Software Foundation Products: Apache Tiles Problem Types: CWE-22 Description: ** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the session was not validated while resolving XML definition files, leading to possible path traversal and eventually SSRF/XXE when passing user-controlled data to this key. Passing user-controlled data to this key may be relatively common, as it was also used like that to set the language in the 'tiles-test' application shipped with Tiles. This issue affects Apache Tiles from version 2 on
o set the language in the 'tiles-test' application shipped with Tiles. This issue affects Apache Tiles from version 2 onwards. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/8ktm4vxr6vvc1qsxh6ft8jzmom1zl65p
CVE ID: CVE-2023-49736 State: PUBLISHED Published: 2023-12-19T09:33:10.415Z Last Updated: 2025-02-13T17:18:54.638Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-89 Description: A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow for SQL injection in Apache Superset.This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2. Users are recommended to upgrade to version 3.0.2, which fixes the issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/1kf481bgs3451q
e issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/1kf481bgs3451qcz6hfhobs7xvhp8n1p - http://www.openwall.com/lists/oss-security/2023/12/19/2
CVE ID: CVE-2023-49738 State: PUBLISHED Published: 2024-01-10T15:48:11.922Z Last Updated: 2025-11-04T18:19:46.590Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: WWBN Products: AVideo Problem Types: CWE-73 Description: An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1881
CVE ID: CVE-2023-49739 State: PUBLISHED Published: 2023-12-14T14:43:09.916Z Last Updated: 2025-06-03T18:50:21.027Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: IdeaBox Creations Products: PowerPack Pro for Elementor Description: Vulnerability in IdeaBox Creations PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a through 2.9.23. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/powerpack-elements/vulnerability/wordpress-powerpack-pro-for-elementor-plugin-2-9-23-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-49740 State: PUBLISHED Published: 2023-12-14T14:40:36.861Z Last Updated: 2024-11-20T20:36:49.744Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Seraphinite Solutions Products: Seraphinite Accelerator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Seraphinite Solutions Seraphinite Accelerator allows Reflected XSS.This issue affects Seraphinite Accelerator: from n/a through 2.20.28. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/seraphinite-accelerator/wordpress-serap
SA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/seraphinite-accelerator/wordpress-seraphinite-accelerator-plugin-2-20-28-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-49741 State: PUBLISHED Published: 2024-06-04T11:05:10.944Z Last Updated: 2024-08-02T22:01:26.166Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wpdevart Products: Coming soon and Maintenance mode Problem Types: CWE-290 Description: Authentication Bypass by Spoofing vulnerability in wpdevart Coming soon and Maintenance mode allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coming soon and Maintenance mode: from n/a through 3.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/coming-soon-page/wordpress-coming-soon-and-maint
Container: References: - https://patchstack.com/database/vulnerability/coming-soon-page/wordpress-coming-soon-and-maintenance-mode-plugin-3-7-3-ip-filtering-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2023-49742 State: PUBLISHED Published: 2024-04-18T08:11:06.373Z Last Updated: 2024-08-02T22:01:26.016Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Support Genix Products: Support Genix Problem Types: CWE-862 Description: Missing Authorization vulnerability in Support Genix.This issue affects Support Genix: from n/a through 1.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/support-genix-lite/wordpress-support-genix-plugin-1-2-3-broken-access-control-lead-to-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-49743 State: PUBLISHED Published: 2023-12-14T14:37:54.468Z Last Updated: 2024-08-02T22:01:25.916Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jeff Starr Products: Dashboard Widgets Suite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Dashboard Widgets Suite allows Stored XSS.This issue affects Dashboard Widgets Suite: from n/a through 3.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/dashboard-widgets-suite/wordpress-dashboard-widgets-suite-plugin-3-4-1-cross-site-scripti
ack.com/database/vulnerability/dashboard-widgets-suite/wordpress-dashboard-widgets-suite-plugin-3-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-49744 State: PUBLISHED Published: 2023-12-15T15:42:15.908Z Last Updated: 2024-08-02T22:01:25.815Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Gift Up Products: Gift Up Gift Cards for WordPress and WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Gift Up Gift Up Gift Cards for WordPress and WooCommerce.This issue affects Gift Up Gift Cards for WordPress and WooCommerce: from n/a through 2.21.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/gift-up/wordpress-gift-up-gift-cards-for-wordpress-and-woocommerce-plugin-2-21-3-cross-
stack.com/database/vulnerability/gift-up/wordpress-gift-up-gift-cards-for-wordpress-and-woocommerce-plugin-2-21-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-49745 State: PUBLISHED Published: 2023-12-14T14:34:36.404Z Last Updated: 2024-08-02T22:01:25.924Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Spiffy Plugins Products: Spiffy Calendar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows Stored XSS.This issue affects Spiffy Calendar: from n/a through 4.9.5. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-49746 State: PUBLISHED Published: 2023-12-07T10:50:20.261Z Last Updated: 2024-10-01T15:48:00.607Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Softaculous Team Products: SpeedyCache – Cache, Optimization, Performance Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/speedycache/wordpress-speedycache-plugin-1-1-2-ser