Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf - https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware - https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware - https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware - https://jvn.jp/en/vu/JVNVU96198617/
CVE ID: CVE-2023-27390 State: PUBLISHED Published: 2023-07-05T15:51:51.012Z Last Updated: 2024-08-02T12:09:43.282Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Diagon Products: Diagon Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1744
CVE ID: CVE-2023-27391 State: PUBLISHED Published: 2023-08-11T02:37:17.469Z Last Updated: 2024-10-15T15:08:54.960Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Toolkit and component software installers Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-
tainer: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html
CVE ID: CVE-2023-27392 State: PUBLISHED Published: 2023-08-11T02:37:12.554Z Last Updated: 2024-10-02T13:24:36.609Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Support android application Problem Types: information disclosure, CWE-276 Description: Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00862.html
CVE ID: CVE-2023-27394 State: PUBLISHED Published: 2023-03-28T20:05:21.304Z Last Updated: 2025-01-16T21:38:12.795Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ProPump and Controls, Inc. Products: Osprey Pump Controller Problem Types: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Description: Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView.php scripts. Additional Analyst Notes: - CVE Program Co
rameter called by DataLogView.php, EventsView.php and AlarmsView.php scripts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06
CVE ID: CVE-2023-27395 State: PUBLISHED Published: 2023-10-12T15:27:54.988Z Last Updated: 2024-08-02T12:09:43.368Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SoftEther VPN Products: SoftEther VPN Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vul
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1735 - https://www.softether.org/9-about/News/904-SEVPN202301
CVE ID: CVE-2023-27396 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-24T16:45:20.428Z Vendors: OMRON Corporation Products: Multiple OMRON products which implement FINS protocol Problem Types: Insecure Design Description: FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext communication, and (2)No authentication required. When FINS messages are intercepted, the contents may be retrieved. When arbitrary FINS messages
uthentication required. When FINS messages are intercepted, the contents may be retrieved. When arbitrary FINS messages are injected, any commands may be executed on, or the system information may be retrieved from, the affected device. Affected products and versions are as follows: SYSMAC CS-series CPU Units, all versions, SYSMAC CJ-series CPU Units, all versions, SYSMAC CP-series CPU Units, all versions, SYSMAC NJ-series CPU Units, all versions, SYSMAC NX1P-series CPU Units, all versions, SYSMAC NX102-series CPU Units, all versions, and SYSMAC NX7 Database Connection CPU Units (Ver.1.16 or later) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
Units (Ver.1.16 or later) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.us-cert.gov/ics/advisories/icsa-19-346-02 - https://www.ia.omron.com/product/vulnerability/OMSR-2023-003_en.pdf - https://www.fa.omron.co.jp/product/vulnerability/OMSR-2023-003_ja.pdf - https://jvn.jp/en/ta/JVNTA91513661/ - https://jvn.jp/ta/JVNTA91513661/ - https://www.us-cert.gov/ics/advisories/icsa-20-063-03 - https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02
CVE ID: CVE-2023-27397 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T13:55:13.137Z Vendors: MicroEngine Inc. Products: MicroEngine Mailform Problem Types: Unrestricted upload of file with dangerous type Description: Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://microengine.jp/information/security_2023_05.html - https://jvn.jp/en/jp/JVN31701509/
CVE ID: CVE-2023-27398 State: PUBLISHED Published: 2023-03-14T09:31:59.223Z Last Updated: 2025-02-27T17:51:53.652Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20304) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-20304) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27399 State: PUBLISHED Published: 2023-03-14T09:32:00.337Z Last Updated: 2025-02-27T17:44:11.011Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20299, ZDI-CAN-20346) Additional Analyst Notes: - CVE Program Container: - CISA ADP
ext of the current process. (ZDI-CAN-20299, ZDI-CAN-20346) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27400 State: PUBLISHED Published: 2023-03-14T09:32:01.353Z Last Updated: 2025-02-27T16:24:58.149Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20300) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ext of the current process. (ZDI-CAN-20300) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27401 State: PUBLISHED Published: 2023-03-14T09:32:02.339Z Last Updated: 2025-02-27T16:21:56.336Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-125 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20308, ZDI-CAN-20345) Additional Analyst Notes: - CVE Program Container: - CISA AD
text of the current process. (ZDI-CAN-20308, ZDI-CAN-20345) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27402 State: PUBLISHED Published: 2023-03-14T09:32:03.342Z Last Updated: 2025-02-27T16:21:32.807Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-125 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20334) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
text of the current process. (ZDI-CAN-20334) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27403 State: PUBLISHED Published: 2023-03-14T09:32:04.358Z Last Updated: 2025-02-27T16:21:04.021Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-119 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20303, ZDI-CAN-20348) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
. (ZDI-CAN-20303, ZDI-CAN-20348) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27404 State: PUBLISHED Published: 2023-03-14T09:32:05.334Z Last Updated: 2025-02-27T16:11:29.483Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-121 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20433) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
nt process. (ZDI-CAN-20433) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27405 State: PUBLISHED Published: 2023-03-14T09:32:06.315Z Last Updated: 2025-02-27T16:07:56.651Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-125 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20432) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
text of the current process. (ZDI-CAN-20432) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27406 State: PUBLISHED Published: 2023-03-14T09:32:07.305Z Last Updated: 2025-02-27T16:05:19.159Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation Problem Types: CWE-121 Description: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20449) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
nt process. (ZDI-CAN-20449) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-847261.pdf
CVE ID: CVE-2023-27407 State: PUBLISHED Published: 2023-05-09T11:51:22.062Z Last Updated: 2025-01-28T18:51:06.264Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-77 Description: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cer
as the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf
CVE ID: CVE-2023-27408 State: PUBLISHED Published: 2023-05-09T11:51:23.165Z Last Updated: 2025-01-28T16:47:32.859Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-378 Description: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interface on the affected device to interfere with the integrity of the mutex and the data it protects. Additional Analyst N
rface on the affected device to interfere with the integrity of the mutex and the data it protects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf
CVE ID: CVE-2023-27409 State: PUBLISHED Published: 2023-05-09T11:51:24.217Z Last Updated: 2025-01-28T16:47:12.923Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-22 Description: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac` parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file named `address`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cer
e named `address`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf
CVE ID: CVE-2023-27410 State: PUBLISHED Published: 2023-05-09T11:51:25.305Z Last Updated: 2025-01-28T18:43:07.712Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SCALANCE LPE9403 Problem Types: CWE-122 Description: A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` binary. The binary will crash if supplied with a backup password longer than 255 characters. This could allow an authenticated privileged attacker to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
er to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-325383.pdf
CVE ID: CVE-2023-27411 State: PUBLISHED Published: 2023-08-08T09:20:16.661Z Last Updated: 2025-02-27T21:10:28.041Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-89 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-472630
CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf
CVE ID: CVE-2023-27412 State: PUBLISHED Published: 2023-08-08T10:35:27.838Z Last Updated: 2024-09-25T16:46:18.427Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Everest themes Products: Mocho Blog Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Mocho Blog theme <= 1.0.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mocho-blog/wordpress-mocho-blog-theme-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27413 State: PUBLISHED Published: 2023-06-22T07:42:22.354Z Last Updated: 2024-10-10T17:37:48.245Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Shazzad Hossain Khan Products: W4 Post List Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Shazzad Hossain Khan W4 Post List plugin <= 2.4.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/w4-post-list/wordpress-w4-post-list-plugin-2-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27414 State: PUBLISHED Published: 2023-06-21T13:27:47.982Z Last Updated: 2024-10-10T17:39:30.600Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Popup Box Team Products: Popup box Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Popup Box Team Popup box plugin <= 3.4.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ays-popup-box/wordpress-popup-box-plugin-3-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27415 State: PUBLISHED Published: 2023-08-08T11:53:16.667Z Last Updated: 2024-09-25T16:51:45.823Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Themeqx Products: LetterPress Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themeqx LetterPress plugin <= 1.1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/letterpress/wordpress-letterpress-plugin-1-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27416 State: PUBLISHED Published: 2023-08-08T10:25:38.362Z Last Updated: 2025-02-19T21:27:03.705Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Decon Digital Products: Decon WP SMS Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Decon Digital Decon WP SMS plugin <= 1.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/decon-wp-sms/wordpress-decon-wp-sms-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27417 State: PUBLISHED Published: 2023-11-12T22:57:57.303Z Last Updated: 2024-08-02T14:49:12.702Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Timo Reith Products: Affiliate Super Assistent Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Timo Reith Affiliate Super Assistent plugin <= 1.5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/amazonsimpleadmin/wordpress-affiliate-super-assistent-plugin-1-5-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-27418 State: PUBLISHED Published: 2023-11-12T22:53:01.459Z Last Updated: 2024-08-30T14:30:11.917Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Wow-Company Products: Side Menu Lite – add sticky fixed buttons Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Side Menu Lite – add sticky fixed buttons plugin <= 4.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/side-menu-lite/wordpress-side-menu-lite-plugin-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve