Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3635 State: PUBLISHED Published: 2023-07-12T18:34:31.609Z Last Updated: 2024-10-23T13:32:52.994Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Problem Types: CWE-195 Description: GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/ - https://github.com/square/okio/commit/81bce1a30af244550b0324597720
io-gzip-source-unhandled-exception-dos-xray-523195/ - https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b
CVE ID: CVE-2023-3636 State: PUBLISHED Published: 2023-08-31T05:33:09.460Z Last Updated: 2024-10-01T19:20:23.130Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wedevs Products: WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts Problem Types: CWE-269 Improper Privilege Management Description: The WP Project Manager plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.6.4 due to insufficient restriction on the 'save_users_map_name' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by
kes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'usernames' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6a5e4708-db3e-483c-852f-1a487825cf92?source=cve - https://plugins.trac.wordpress.org/browser/wedevs-project-manager/tags/2.6.3/src/User/Controllers/User_Controller.php#L158 - https://plugins.trac.wordpress.org/changeset/2942291/wedevs-project-manager#file1792
CVE ID: CVE-2023-3637 State: PUBLISHED Published: 2023-07-25T12:47:31.531Z Last Updated: 2025-11-20T17:39:47.319Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 13 (Queens) Operational Tools, Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 17.0, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0 Problem Types: CWE-400 Description: An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstraine
cated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:4283 - https://access.redhat.com/security/cve/CVE-2023-3637 - https://bugzilla.redhat.com/show_bug.cgi?id=2222270
CVE ID: CVE-2023-3638 State: PUBLISHED Published: 2023-07-19T14:22:13.198Z Last Updated: 2025-01-16T21:31:09.285Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: GeoVision Products: GV-ADR2701 Problem Types: CWE-287 Description: In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-05
CVE ID: CVE-2023-3640 State: PUBLISHED Published: 2023-07-24T15:19:29.983Z Last Updated: 2025-11-14T14:20:58.908Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-203 Description: A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which w
ious CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:6583 - https://access.redhat.com/security/cve/CVE-2023-3640 - https://bugzilla.redhat.com/show_bug.cgi?id=2217523
CVE ID: CVE-2023-3641 State: PUBLISHED Published: 2023-07-12T16:31:03.571Z Last Updated: 2024-08-02T07:01:57.515Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: khodakhah Products: NodCMS Problem Types: CWE-79 Description: A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /en/blog-comment-4 of the component POST Request Handler. The manipulation of the argument comment_name/comment_content leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233887. Additional Analyst Notes: - CVE Program Container: Refe
. The associated identifier of this vulnerability is VDB-233887. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233887 - https://vuldb.com/?ctiid.233887
CVE ID: CVE-2023-3642 State: PUBLISHED Published: 2023-07-12T17:00:03.821Z Last Updated: 2024-10-22T17:58:16.015Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: GZ Scripts Products: Vacation Rental Website Problem Types: CWE-79 Description: A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/ of the component HTTP POST Request Handler. The manipulation of the argument username/title/comment leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233888. Additional
oss site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233888. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233888 - https://vuldb.com/?ctiid.233888
CVE ID: CVE-2023-3643 State: PUBLISHED Published: 2023-07-12T17:31:03.036Z Last Updated: 2024-08-02T07:01:56.820Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: Boss Mini Problem Types: CWE-73 Description: A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233889 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://v
DB-233889 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233889 - https://vuldb.com/?ctiid.233889 - https://drive.google.com/file/d/1RXmDUAjqZvWSvHUrfRerz7My6M3KX7YG/view
CVE ID: CVE-2023-3644 State: PUBLISHED Published: 2023-07-12T18:00:04.970Z Last Updated: 2024-08-02T07:01:57.124Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Service Provider Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_inquiry. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. VDB-233890 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
3890 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233890 - https://vuldb.com/?ctiid.233890
CVE ID: CVE-2023-3645 State: PUBLISHED Published: 2023-08-14T19:10:16.523Z Last Updated: 2024-10-09T13:22:33.794Z Vendors: Unknown Products: Contact Form Builder by Bit Form Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/58c11f1e-6ea0-468c-b974-4aea9eb94b8
m Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/58c11f1e-6ea0-468c-b974-4aea9eb94b82
CVE ID: CVE-2023-3646 State: PUBLISHED Published: 2023-08-29T16:31:57.668Z Last Updated: 2024-09-30T17:44:07.777Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Arista Networks Products: EOS Problem Types: CWE-125 Description: On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/18042-security-advisory-0088
CVE ID: CVE-2023-3647 State: PUBLISHED Published: 2024-01-16T15:54:00.796Z Last Updated: 2025-06-20T17:03:01.898Z Vendors: Unknown Products: IURNY by INDIGITALL Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The IURNY by INDIGITALL WordPress plugin before 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6df05333-b1f1-4324-a1ba-dd36fbf1778c/
CVE ID: CVE-2023-3648 State: PUBLISHED Published: 2023-07-14T06:16:33.827Z Last Updated: 2025-11-03T21:48:50.564Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-762 Description: Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-21.html - https://gitlab.com/wireshark/wireshark/-/issues/19105
CVE ID: CVE-2023-3649 State: PUBLISHED Published: 2023-07-14T06:16:45.767Z Last Updated: 2025-11-03T21:48:52.023Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-126 Description: iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-22.html - https://gitlab.com/wireshark/wireshark/-/issues/19164
CVE ID: CVE-2023-3650 State: PUBLISHED Published: 2023-08-07T14:31:19.068Z Last Updated: 2024-10-15T18:21:56.049Z Vendors: Unknown Products: Bubble Menu Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0a0ecdff-c961-4947-bf7e-bd2392501e33
CVE ID: CVE-2023-3651 State: PUBLISHED Published: 2023-08-08T14:39:15.109Z Last Updated: 2025-09-16T11:08:47.167Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Digital Ant Products: E-Commerce Software Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Ant E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.usom.gov.tr/bildirim/tr-23-0443
CVE ID: CVE-2023-3652 State: PUBLISHED Published: 2023-08-08T14:40:50.144Z Last Updated: 2025-09-16T11:08:07.588Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Digital Ant Products: E-Commerce Software Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Reflected XSS.This issue affects E-Commerce Software: before 11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.usom.gov.tr/bildirim/tr-23-0443
CVE ID: CVE-2023-3653 State: PUBLISHED Published: 2023-08-08T14:42:18.887Z Last Updated: 2024-10-08T15:07:04.004Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Digital Ant Products: E-Commerce Software Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Stored XSS.This issue affects E-Commerce Software: before 11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.usom.gov.tr/bildirim/tr-23-0443
CVE ID: CVE-2023-3654 State: PUBLISHED Published: 2023-10-03T08:10:48.186Z Last Updated: 2024-08-02T07:01:57.363Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH Products: cashIT! - serving solutions. Problem Types: CWE-346 Description: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request. This vulnerability can be triggered by an HTTP endpoint exposed to the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.cashit.at/ - https://doi.org/10.
e network. Additional Analyst Notes: - CVE Program Container: References: - https://www.cashit.at/ - https://doi.org/10.35011/ww2q-d522
CVE ID: CVE-2023-3655 State: PUBLISHED Published: 2023-10-03T07:53:13.467Z Last Updated: 2025-06-17T15:04:17.174Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH Products: cashIT! - serving solutions. Problem Types: CWE-749 Description: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a dangerous methods, that allows to leak the database (system settings, user accounts,...). This vulnerability can be triggered by an HTTP endpoint exposed to the network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
y an HTTP endpoint exposed to the network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cashit.at/ - https://doi.org/10.35011/ww2q-d522
CVE ID: CVE-2023-3656 State: PUBLISHED Published: 2023-10-03T07:39:53.661Z Last Updated: 2024-08-02T07:01:57.286Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH Products: cashIT! - serving solutions. Problem Types: CWE-749, CWE-94 Description: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.cashit.at/ - https://doi
ed to the network. Additional Analyst Notes: - CVE Program Container: References: - https://www.cashit.at/ - https://doi.org/10.35011/ww2q-d522
CVE ID: CVE-2023-3657 State: PUBLISHED Published: 2023-07-13T10:00:05.373Z Last Updated: 2024-08-02T07:01:57.316Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects some unknown processing of the file Master.php?f=save_book of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-234011. Additional Analyst Notes: - CVE P
be initiated remotely. The associated identifier of this vulnerability is VDB-234011. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234011 - https://vuldb.com/?ctiid.234011
CVE ID: CVE-2023-3658 State: PUBLISHED Published: 2023-07-13T10:31:03.284Z Last Updated: 2024-08-02T07:01:57.326Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file Master.php?f=delete_book of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-234012. Additional Analyst Notes: - CVE Program Container:
attack remotely. The identifier of this vulnerability is VDB-234012. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234012 - https://vuldb.com/?ctiid.234012
CVE ID: CVE-2023-3659 State: PUBLISHED Published: 2023-07-13T11:00:04.551Z Last Updated: 2024-08-02T07:01:57.470Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=user/manage_user. The manipulation of the argument firstname/middlename leads to cross site scripting. The attack can be launched remotely. The identifier VDB-234013 was assigned to this vulnerability. Additional Analyst Notes: - CVE Progra
launched remotely. The identifier VDB-234013 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234013 - https://vuldb.com/?ctiid.234013
CVE ID: CVE-2023-3660 State: PUBLISHED Published: 2023-07-13T11:31:03.319Z Last Updated: 2024-10-23T14:24:20.186Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Campcodes Products: Retro Cellphone Online Store Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add_user_modal.php. The manipulation of the argument un leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-234014 is the identifier assigned to this vulnerability. Additional Analyst
isclosed to the public and may be used. VDB-234014 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234014 - https://vuldb.com/?ctiid.234014 - https://github.com/E1CHO/cve_hub/blob/main/Retro%20Cellphone%20Online%20Store%20-%20vlun%206.pdf
CVE ID: CVE-2023-3661 State: PUBLISHED Published: 2023-07-13T12:00:04.697Z Last Updated: 2024-08-02T07:01:57.365Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=save_inquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-234015. Additional Analyst Notes: - CVE Program Container: References: - https:/
identifier of this vulnerability is VDB-234015. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234015 - https://vuldb.com/?ctiid.234015
CVE ID: CVE-2023-3662 State: PUBLISHED Published: 2023-08-03T10:55:43.844Z Last Updated: 2025-02-27T21:11:28.683Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Development System Problem Types: CWE-427 Description: In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-021/
CVE ID: CVE-2023-3663 State: PUBLISHED Published: 2023-08-03T10:55:08.945Z Last Updated: 2025-02-27T21:11:34.700Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Development System Problem Types: CWE-940 Description: In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-022/
CVE ID: CVE-2023-3664 State: PUBLISHED Published: 2023-09-25T15:56:55.853Z Last Updated: 2024-09-23T19:40:58.978Z Vendors: Unknown Products: FileOrganizer Problem Types: CWE-284 Improper Access Control Description: The FileOrganizer WordPress plugin through 1.0.2 does not restrict functionality on multisite instances, allowing site admins to gain full control over the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d59e6eac-3ebf-40e0-800c-8cbef345423f
CVE ID: CVE-2023-3665 State: PUBLISHED Published: 2023-10-04T14:32:52.925Z Last Updated: 2024-09-19T15:17:05.688Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Trellix Products: Trellix Endpoint Security Problem Types: CWE-74 Description: A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10405