Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40529 State: PUBLISHED Published: 2024-01-10T22:03:07.433Z Last Updated: 2025-11-04T19:20:15.170Z Vendors: Apple Products: iOS and iPadOS Problem Types: A person with physical access to a device may be able to use VoiceOver to access private calendar information Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17 and iPadOS 17. A person with physical access to a device may be able to use VoiceOver to access private calendar information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938
CVE ID: CVE-2023-40530 State: PUBLISHED Published: 2023-08-25T03:47:15.400Z Last Updated: 2024-10-02T18:13:34.400Z Vendors: SKYLARK HOLDINGS CO., LTD. Products: 'Skylark' App for Android, 'Skylark' App for iOS Problem Types: Improper authorization in handler for custom URL scheme Description: Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/detai
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=jp.co.skylark.app.gusto - https://apps.apple.com/jp/app/%E3%81%99%E3%81%8B%E3%81%84%E3%82%89%E3%83%BC%E3%81%8F%E3%82%A2%E3%83%97%E3%83%AA/id906930478 - https://jvn.jp/en/jp/JVN03447226/
CVE ID: CVE-2023-40531 State: PUBLISHED Published: 2023-09-06T09:21:09.828Z Last Updated: 2024-09-26T20:17:40.940Z Vendors: TP-LINK Products: Archer AX6000 Problem Types: OS command injection Description: Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-ax6000/v1/#Firmware - https://jvn.jp/en/vu/JVNVU99392903/
CVE ID: CVE-2023-40532 State: PUBLISHED Published: 2023-09-26T08:14:17.836Z Last Updated: 2024-09-24T14:50:19.887Z Vendors: Collne Inc. Products: Welcart e-Commerce Problem Types: Path traversal Description: Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the files on the web server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.welcart.com/archives/20106.html - https://jvn.jp/en/jp/JVN97197972/
CVE ID: CVE-2023-40533 State: REJECTED Published: 2024-05-01T15:31:00.893Z Last Updated: 2024-05-08T21:49:47.414Z Description: No description available.
CVE ID: CVE-2023-40534 State: PUBLISHED Published: 2023-10-10T12:32:37.830Z Last Updated: 2024-09-19T13:48:43.571Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IP Next SPK Problem Types: CWE-401 Description: When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated with the virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
l Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000133467
CVE ID: CVE-2023-40535 State: PUBLISHED Published: 2023-09-05T08:39:42.741Z Last Updated: 2024-09-30T17:15:08.996Z Vendors: i-PRO Co., Ltd. Products: VI Web Client Problem Types: Cross-site scripting (XSS) Description: Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://downloadvi.com/downloads/IPServer/v7.9/796232/v796232RN.pdf - https://jvn.jp/en/jp/JVN60140221/
CVE ID: CVE-2023-40536 State: PUBLISHED Published: 2024-05-16T20:47:17.497Z Last Updated: 2024-08-02T18:38:50.695Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi software for Windows Problem Types: denial of service, CWE-421 Description: Race condition for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html
CVE ID: CVE-2023-40537 State: PUBLISHED Published: 2023-10-10T12:32:50.806Z Last Updated: 2024-09-19T13:42:04.256Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-613 Description: An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K29141800
CVE ID: CVE-2023-40539 State: REJECTED Published: 2024-07-18T16:29:27.586Z Last Updated: 2025-04-09T20:25:02.684Z Description: No description available.
CVE ID: CVE-2023-40540 State: PUBLISHED Published: 2023-11-14T19:05:06.268Z Last Updated: 2024-08-30T15:16:20.978Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) NUC BIOS firmware Problem Types: information disclosure, CWE-1303 Description: Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01001.html
CVE ID: CVE-2023-40541 State: PUBLISHED Published: 2023-09-26T20:14:48.631Z Last Updated: 2025-11-04T19:20:16.296Z Vendors: Apple Products: macOS Problem Types: A shortcut may output sensitive user data without consent Description: This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-40542 State: PUBLISHED Published: 2023-10-10T12:33:01.031Z Last Updated: 2025-09-18T19:50:26.052Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-770 Description: When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000134652
CVE ID: CVE-2023-40544 State: PUBLISHED Published: 2024-02-06T21:27:00.798Z Last Updated: 2024-08-02T18:38:50.381Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Westermo Products: Lynx Problem Types: CWE-319 Description: An attacker with access to the network where the affected devices are located could maliciously actions to obtain, via a sniffer, sensitive information exchanged via TCP communications. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-04
CVE ID: CVE-2023-40545 State: PUBLISHED Published: 2024-02-06T17:27:42.361Z Last Updated: 2024-08-22T16:53:12.079Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ping Identity Products: PingFederate Problem Types: CWE-306 Description: Authentication bypass when an OAuth2 Client is using client_secret_jwt as its authentication method on affected 11.3 versions via specially crafted requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pingidentity.com/s/article/SECADV040-PingFederate-OAuth-Client-Authentication-Bypass - https://www.pingidentity.com/en/resources/downloads/pingfederate/previous-release
e-OAuth-Client-Authentication-Bypass - https://www.pingidentity.com/en/resources/downloads/pingfederate/previous-releases.html - https://docs.pingidentity.com/r/en-us/pingfederate-113/hro1701116403236
CVE ID: CVE-2023-40546 State: PUBLISHED Published: 2024-01-29T16:29:26.258Z Last Updated: 2025-11-20T19:53:32.512Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Sup
ervice, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support Problem Types: CWE-476 Description: A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a crash under certain circumstances. Additional Analyst No
nction doesn't match the format string used by it, leading to a crash under certain circumstances. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1834 - https://access.redhat.com/errata/RHSA-2024:1835 - https://access.redhat.com/errata/RHSA-2024:1873 - https://access.redhat.com/errata/RHSA-2024:1876 - https://access.redhat.com/errata/RHSA-2024:1883 - https://access.redhat.com/errata/RHSA-2024:1902 - https://access.redhat.com/errata/RHSA-2024:1903 - https://access.redhat.com/errata/RHSA-2024:1959 - https://access.redhat.com/errata/RHSA-2024:2086 - https://access.redhat.com/security/cve/CVE-2023-40546 - https
4:1959 - https://access.redhat.com/errata/RHSA-2024:2086 - https://access.redhat.com/security/cve/CVE-2023-40546 - https://bugzilla.redhat.com/show_bug.cgi?id=2241796
CVE ID: CVE-2023-40547 State: PUBLISHED Published: 2024-01-25T15:54:23.102Z Last Updated: 2025-11-20T07:24:31.172Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Suppo
vice, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support Problem Types: CWE-787 Description: A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write primitive and complete system compromise. This flaw is only exploitable during
ompletely controlled out-of-bounds write primitive and complete system compromise. This flaw is only exploitable during the early boot phase, an attacker needs to perform a Man-in-the-Middle or compromise the boot server to be able to exploit this vulnerability successfully. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1834 - https://access.redhat.com/errata/RHSA-2024:1835 - https://access.redhat.com/errata/RHSA-2024:1873 - https://access.redhat.com/errata/RHSA-2024:1876 - https://access.redhat.com/errata/RHSA-2024:1883 - https://access.redhat.com/errata/RHSA-2024:1902 - https://access.redhat.com/errata/R
.redhat.com/errata/RHSA-2024:1883 - https://access.redhat.com/errata/RHSA-2024:1902 - https://access.redhat.com/errata/RHSA-2024:1903 - https://access.redhat.com/errata/RHSA-2024:1959 - https://access.redhat.com/errata/RHSA-2024:2086 - https://access.redhat.com/security/cve/CVE-2023-40547 - https://bugzilla.redhat.com/show_bug.cgi?id=2234589
CVE ID: CVE-2023-40548 State: PUBLISHED Published: 2024-01-29T14:53:44.319Z Last Updated: 2025-11-20T19:53:32.879Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Suppo
vice, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support Problem Types: CWE-787 Description: A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or
ation operations, leading to a heap-based buffer overflow. This flaw causes memory corruption and can lead to a crash or data integrity issues during the boot phase. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1834 - https://access.redhat.com/errata/RHSA-2024:1835 - https://access.redhat.com/errata/RHSA-2024:1873 - https://access.redhat.com/errata/RHSA-2024:1876 - https://access.redhat.com/errata/RHSA-2024:1883 - https://access.redhat.com/errata/RHSA-2024:1902 - https://access.redhat.com/errata/RHSA-2024:1903 - https://access.redhat.com/errata/RHSA-2024:1959 - https://access.redhat.com/errata/RHSA-2024:2
m/errata/RHSA-2024:1903 - https://access.redhat.com/errata/RHSA-2024:1959 - https://access.redhat.com/errata/RHSA-2024:2086 - https://access.redhat.com/security/cve/CVE-2023-40548 - https://bugzilla.redhat.com/show_bug.cgi?id=2241782
CVE ID: CVE-2023-40549 State: PUBLISHED Published: 2024-01-29T16:29:26.170Z Last Updated: 2025-11-20T19:53:36.835Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Sup
ervice, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support Problem Types: CWE-125 Description: An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
ing in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1834 - https://access.redhat.com/errata/RHSA-2024:1835 - https://access.redhat.com/errata/RHSA-2024:1873 - https://access.redhat.com/errata/RHSA-2024:1876 - https://access.redhat.com/errata/RHSA-2024:1883 - https://access.redhat.com/errata/RHSA-2024:1902 - https://access.redhat.com/errata/RHSA-2024:1903 - https://access.redhat.com/errata/RHSA-2024:1959 - https://access.redhat.com/errata/RHSA-2024:2086 - https://access.redhat.com/security/cve/CVE-2023-40549 - https://bugzilla.redhat.com/show_bug.cgi?id=2241797
CVE ID: CVE-2023-40550 State: PUBLISHED Published: 2024-01-29T16:29:23.050Z Last Updated: 2025-11-20T19:53:40.168Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Sup
ervice, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support Problem Types: CWE-125 Description: An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's boot phase. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1834 - https://access.redhat.com/errata/RHSA-2024:1835
ichment: References: - https://access.redhat.com/errata/RHSA-2024:1834 - https://access.redhat.com/errata/RHSA-2024:1835 - https://access.redhat.com/errata/RHSA-2024:1873 - https://access.redhat.com/errata/RHSA-2024:1876 - https://access.redhat.com/errata/RHSA-2024:1883 - https://access.redhat.com/errata/RHSA-2024:1902 - https://access.redhat.com/errata/RHSA-2024:1903 - https://access.redhat.com/errata/RHSA-2024:1959 - https://access.redhat.com/errata/RHSA-2024:2086 - https://access.redhat.com/security/cve/CVE-2023-40550 - https://bugzilla.redhat.com/show_bug.cgi?id=2259915
CVE ID: CVE-2023-40551 State: PUBLISHED Published: 2024-01-29T16:46:43.579Z Last Updated: 2025-11-20T19:53:39.583Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Sup
ervice, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support Problem Types: CWE-125 Description: A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1834 - https://access.redhat.com/errata/RHS
Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1834 - https://access.redhat.com/errata/RHSA-2024:1835 - https://access.redhat.com/errata/RHSA-2024:1873 - https://access.redhat.com/errata/RHSA-2024:1876 - https://access.redhat.com/errata/RHSA-2024:1883 - https://access.redhat.com/errata/RHSA-2024:1902 - https://access.redhat.com/errata/RHSA-2024:1903 - https://access.redhat.com/errata/RHSA-2024:1959 - https://access.redhat.com/errata/RHSA-2024:2086 - https://access.redhat.com/security/cve/CVE-2023-40551 - https://bugzilla.redhat.com/show_bug.cgi?id=2259918
CVE ID: CVE-2023-40552 State: PUBLISHED Published: 2023-09-06T08:11:12.161Z Last Updated: 2024-09-24T18:49:52.386Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Gurcharan Singh Products: Fitness calculators plugin Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gurcharan Singh Fitness calculators plugin plugin <= 2.0.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fitness-calculators/wordpress-fitness-calculators-plugin-plugin-2-0-7-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-40553 State: PUBLISHED Published: 2023-09-06T08:20:32.274Z Last Updated: 2024-09-24T18:49:23.314Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Plausible.io Products: Plausible Analytics Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Plausible.Io Plausible Analytics plugin <= 1.3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/plausible-analytics/wordpress-plausible-analytics-plugin-1-3-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40554 State: PUBLISHED Published: 2023-09-06T08:14:39.927Z Last Updated: 2024-09-24T18:49:35.800Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Blog2Social, Adenion Products: Blog2Social: Social Media Auto Post & Scheduler Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin <= 7.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/blog2social/wordpress-blog2social-plugin-7-2-0-reflected-cross-site-scripting-xss-vulnerability?_s