Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
l access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html
CVE ID: CVE-2023-32545 State: PUBLISHED Published: 2023-06-06T14:51:49.298Z Last Updated: 2025-01-07T18:08:04.567Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Cscape, Cscape EnvisionRV Problem Types: CWE-125 Description: The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/i
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE ID: CVE-2023-32546 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T19:25:41.982Z Vendors: Chatwork Co., Ltd. Products: Chatwork Desktop Application (Mac) Problem Types: Code injection Description: Code injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier. If this vulnerability is exploited, a non-administrative user of the Mac where the product is installed may store and obtain audio and image data from the product without the user's consent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.chatwork.com/ja/download/ - https://jvn.jp/en/jp/JVN96828492/
CVE ID: CVE-2023-32547 State: PUBLISHED Published: 2023-08-11T02:37:33.498Z Last Updated: 2024-10-10T15:06:01.338Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: MAVinci Desktop Software for Intel(R) Falcon 8+ Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00934.html
CVE ID: CVE-2023-32548 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T19:23:14.601Z Vendors: KINGSOFT JAPAN, INC. Products: WPS Office Problem Types: OS Command Injection Description: OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attack connects the product to a malicious server and sends a specially crafted data, an arbitrary OS command may be executed on the system where the product is installed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.kingsoft.jp/about/20230605.html - https://jvn.jp/en/jp/JVN36060509/
CVE ID: CVE-2023-32549 State: PUBLISHED Published: 2023-06-06T15:07:24.623Z Last Updated: 2025-01-07T18:04:02.775Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Canonical Ltd. Products: Landscape Problem Types: CWE-338 Description: Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/landscape/+bug/1929034
CVE ID: CVE-2023-32550 State: PUBLISHED Published: 2023-06-06T15:07:42.162Z Last Updated: 2025-01-07T18:01:11.352Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: Canonical Ltd. Products: Landscape Problem Types: CWE-497 Description: Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/landscape/+bug/1929037
CVE ID: CVE-2023-32551 State: PUBLISHED Published: 2023-06-06T15:07:49.329Z Last Updated: 2025-01-07T17:58:25.779Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Canonical Ltd. Products: Landscape Problem Types: CWE-601 Description: Landscape allowed URLs which caused open redirection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/landscape/+bug/1929620
CVE ID: CVE-2023-32552 State: PUBLISHED Published: 2023-06-26T21:56:06.010Z Last Updated: 2024-12-04T16:32:13.213Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to disclose sensitive information on agents. This is similar to, but not identical to CVE-2023-32553 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-655/
CVE ID: CVE-2023-32553 State: PUBLISHED Published: 2023-06-26T21:56:16.388Z Last Updated: 2024-12-04T16:23:57.330Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to disclose sensitive information on agents. This is similar to, but not identical to CVE-2023-32552. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-653/
CVE ID: CVE-2023-32554 State: PUBLISHED Published: 2023-06-26T21:56:27.443Z Last Updated: 2024-12-04T21:25:50.212Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32555. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-657/
CVE ID: CVE-2023-32555 State: PUBLISHED Published: 2023-06-26T21:56:37.560Z Last Updated: 2024-12-04T21:24:00.254Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32554. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-656/
CVE ID: CVE-2023-32556 State: PUBLISHED Published: 2023-06-26T21:56:48.500Z Last Updated: 2024-12-04T21:19:21.403Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-
tps://success.trendmicro.com/dcx/s/solution/000293108?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-651/
CVE ID: CVE-2023-32557 State: PUBLISHED Published: 2023-06-26T21:57:00.765Z Last Updated: 2024-12-04T21:16:16.359Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293108?language=en_US
CVE ID: CVE-2023-32558 State: PUBLISHED Published: 2023-09-12T01:36:55.861Z Last Updated: 2025-04-30T22:25:00.415Z Vendors: NodeJS Products: Node Description: The use of the deprecated API `process.binding()` can bypass the permission model through path traversal. This vulnerability affects all users using the experimental permission model in Node.js 20.x. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/2051257
CVE ID: CVE-2023-32559 State: PUBLISHED Published: 2023-08-24T01:23:29.038Z Last Updated: 2025-11-04T16:10:11.750Z Vendors: NodeJS Products: Node Description: A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the policy mechanism by requiring internal modules and eventually take advantage of `process.binding('spawn_sync')` run arbitrary code, outside of the limits defined in a `policy.json` file. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA
was issued, the policy is an experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1946470 - https://security.netapp.com/advisory/ntap-20231006-0006/
CVE ID: CVE-2023-32560 State: PUBLISHED Published: 2023-08-10T19:07:38.628Z Last Updated: 2025-03-06T15:46:27.791Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US - http://packetstormsecurity.com/files/1
vanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US - http://packetstormsecurity.com/files/174459/Ivanti-Avalance-Remote-Code-Execution.html - http://packetstormsecurity.com/files/174698/Ivanti-Avalanche-MDM-Buffer-Overflow.html
CVE ID: CVE-2023-32561 State: PUBLISHED Published: 2023-08-10T19:07:32.960Z Last Updated: 2025-03-06T15:47:28.746Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: A previously generated artifact by an administrator could be accessed by an attacker. The contents of this artifact could lead to authentication bypass. Fixed in version 6.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US
CVE ID: CVE-2023-32562 State: PUBLISHED Published: 2023-08-10T19:04:54.388Z Last Updated: 2025-03-06T15:47:54.922Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to achieve a remove code execution. Fixed in version 6.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US
CVE ID: CVE-2023-32563 State: PUBLISHED Published: 2023-08-10T19:04:48.128Z Last Updated: 2025-02-13T16:54:49.972Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An unauthenticated attacker could achieve the code execution through a RemoteControl server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US - https://twitter.com/wvuuuuuuuuuuuuu/status/1694956245742923939
CVE ID: CVE-2023-32564 State: PUBLISHED Published: 2023-08-10T19:04:43.054Z Last Updated: 2024-10-09T19:33:58.502Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remove code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US
CVE ID: CVE-2023-32565 State: PUBLISHED Published: 2023-08-10T19:03:46.116Z Last Updated: 2024-10-04T13:07:00.263Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Ivanti Products: Avalanche Description: An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US
CVE ID: CVE-2023-32566 State: PUBLISHED Published: 2023-08-10T18:58:36.194Z Last Updated: 2024-10-04T13:07:17.804Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Ivanti Products: Avalanche Description: An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack. Fixed in version 6.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US
CVE ID: CVE-2023-32567 State: PUBLISHED Published: 2023-08-10T18:58:24.647Z Last Updated: 2024-10-09T19:34:58.135Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Ivanti Products: Wavelink Description: Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.1.236_release_notes.txt
CVE ID: CVE-2023-32568 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T15:54:14.856Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The VIOM web application does not validate user-supplied data and appends it to OS commands and internal binaries used by the application. An attacker with root/administrator level privileges can leverage this to read sensitive data stored on the servers, modify data or server configuration, and delete data or application configuration. Addi
tive data stored on the servers, modify data or server configuration, and delete data or application configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS23-007
CVE ID: CVE-2023-32569 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T15:50:06.763Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. The InfoScale VIOM web application is vulnerable to SQL Injection in some of the areas of the application. This allows attackers (who must have admin credentials) to submit arbitrary SQL commands on the back-end database to create, read, update, or delete any sensitive data stored in the database. Additional Analyst Notes: - CVE Program Cont
create, read, update, or delete any sensitive data stored in the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS23-007
CVE ID: CVE-2023-32570 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T15:42:41.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://code.videolan.org/videolan/dav1d/-/commit/cf617fdae0b9bfabd27282854c8e81450d955efa - https://code.videolan.org/videolan/dav1d/-/tags/1.2.0 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXZ6CUNJFDJLCFOZHY2TIGMCAEITLCRP/ - https://lists.fe
rg/archives/list/package-announce%40lists.fedoraproject.org/message/LXZ6CUNJFDJLCFOZHY2TIGMCAEITLCRP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WGSO7UMOF4MVLQ5H6KIV7OG6ONS377B/ - https://security.gentoo.org/glsa/202310-05
CVE ID: CVE-2023-32571 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T15:23:54.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zzzprojects/System.Linq.Dynamic.Core - https://research.nccgroup.com/2023/06/13/dynamic-linq-injection-remote-code-execution-vulnerability-cve-2023-32571/
CVE ID: CVE-2023-32572 State: PUBLISHED Published: 2023-10-02T23:09:04.606Z Last Updated: 2024-09-23T13:39:45.764Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Pure Storage Products: FlashArray Purity Description: A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_-_FlashArray_pgroup_Retention_Lock_SafeMode_Protection_CVE
Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_-_FlashArray_pgroup_Retention_Lock_SafeMode_Protection_CVE-2023-32572
CVE ID: CVE-2023-32573 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T20:49:30.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codereview.qt-project.org/c/qt/qtsvg/+/474093 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3IHQZCEUFVOPWG75V2HDKXNUZBB4FX/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
CVE ID: CVE-2023-32574 State: PUBLISHED Published: 2024-12-13T14:23:23.746Z Last Updated: 2024-12-13T18:49:02.081Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Fahad Mahmood Products: Injection Guard Problem Types: CWE-862 Description: Missing Authorization vulnerability in Fahad Mahmood Injection Guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/injection-guard/vulnerability/wordpress-injection-guard-plugin-1-2-1-broken-access-control-vulnerability?_s_id=c
/plugin/injection-guard/vulnerability/wordpress-injection-guard-plugin-1-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32575 State: PUBLISHED Published: 2023-08-25T10:28:38.710Z Last Updated: 2024-09-24T19:25:15.831Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PI Websolution Products: Product page shipping calculator for WooCommerce Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.25 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/product-page-shipping-calculator-for-woocommerce/wordpress-product-page-shipping-calculator-for-wooco
base/vulnerability/product-page-shipping-calculator-for-woocommerce/wordpress-product-page-shipping-calculator-for-woocommerce-plugin-1-3-25-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32576 State: PUBLISHED Published: 2023-08-25T08:38:49.452Z Last Updated: 2024-09-24T19:26:49.990Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Plainware Products: Locatoraid Store Locator Problem Types: CWE-79 Description: Auth. (subscriber+) Stored Cross-Site Scripting') vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.18 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/locatoraid/wordpress-locatoraid-store-locator-plugin-3-9-18-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32577 State: PUBLISHED Published: 2023-08-25T08:46:17.572Z Last Updated: 2024-09-24T19:26:37.679Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Eji Osigwe Products: DevBuddy Twitter Feed Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eji Osigwe DevBuddy Twitter Feed plugin <= 4.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/devbuddy-twitter-feed/wordpress-devbuddy-twitter-feed-plugin-4-0-0-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-32578 State: PUBLISHED Published: 2023-09-04T11:30:18.590Z Last Updated: 2024-09-24T18:50:25.148Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Twinpictures Products: Column-Matic Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Twinpictures Column-Matic plugin <= 1.3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/column-matic/wordpress-column-matic-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve