Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1146 State: PUBLISHED Published: 2023-03-02T00:00:00.000Z Last Updated: 2025-03-07T21:38:52.141Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: flatpressblog Products: flatpressblog/flatpress Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d6d1e1e2-2f67-4d28-aa84-b30fb1d2e737 - https://github.com/flatpressblog/flatpress/commit/0ee4f2e8a7b9276880b56858e408cc9c6643cc3b
CVE ID: CVE-2023-1147 State: PUBLISHED Published: 2023-03-02T00:00:00.000Z Last Updated: 2025-03-07T15:50:32.208Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: flatpressblog Products: flatpressblog/flatpress Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/187f5353-f866-4d26-a5ba-fca378520020 - https://github.com/flatpressblog/flatpress/commit/264217f318a8852c4f3e34350d4a0e1363cdd727
CVE ID: CVE-2023-1148 State: PUBLISHED Published: 2023-03-02T00:00:00.000Z Last Updated: 2025-03-07T21:40:11.640Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: flatpressblog Products: flatpressblog/flatpress Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f0cc2c4b-fdf9-483b-9a83-4e0dfeb4dac7 - https://github.com/flatpressblog/flatpress/commit/3a32aad0dec5df24c6576d7567d4f2eadbfc75de
CVE ID: CVE-2023-1149 State: PUBLISHED Published: 2023-03-02T00:00:00.000Z Last Updated: 2025-03-07T21:41:24.232Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H) Vendors: btcpayserver Products: btcpayserver/btcpayserver Problem Types: CWE-76 Description: Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/2e734209-d7b0-4f57-a8be-c65c82208f2f - https://github.com/btcpayserver/btcpayserver/commit/ddb125f45892b4dafdbd5c072af1ce623758bb92
CVE ID: CVE-2023-1150 State: PUBLISHED Published: 2023-06-26T06:19:53.942Z Last Updated: 2024-12-05T19:07:34.007Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: WAGO Products: 750-332, 750-362/xxx-xxx, 750-363/xxx-xxx, 750-364/xxx-xxx, 750-365/xxx-xxx, 750-823, 750-832/xxx-xxx, 750-862, 750-890/xxx-xxx, 750-891, 750-893 Problem Types: CWE-772 Description: Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-005/
CVE ID: CVE-2023-1151 State: PUBLISHED Published: 2023-03-02T06:31:04.911Z Last Updated: 2024-08-02T05:40:57.960Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Electronic Medical Records System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of
ck can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222163. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222163 - https://vuldb.com/?ctiid.222163 - https://github.com/lcg-22266/bug_report/blob/main/vendors/Patrick%20Mvuma/Electronic%20Medical%20Records%20System/SQLi-1.md
CVE ID: CVE-2023-1152 State: PUBLISHED Published: 2023-03-17T08:21:19.538Z Last Updated: 2025-02-26T16:43:02.076Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Utarit Information Technologies Products: Persolus Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0154-2
CVE ID: CVE-2023-1153 State: PUBLISHED Published: 2023-03-21T11:19:53.116Z Last Updated: 2025-02-25T21:09:45.765Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Pacsrapor Products: Pacsrapor Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Pacsrapor: before 1.22. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0163
CVE ID: CVE-2023-1154 State: PUBLISHED Published: 2023-03-21T11:21:13.622Z Last Updated: 2025-02-26T16:51:03.841Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Pacsrapor Products: Pacsrapor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pacsrapor allows Reflected XSS.This issue affects Pacsrapor: before 1.22. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0163
CVE ID: CVE-2023-1155 State: PUBLISHED Published: 2023-03-02T17:03:45.118Z Last Updated: 2025-01-13T17:02:51.558Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: nicdark Products: Cost Calculator Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_icon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary w
This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/750be90d-dc12-4974-8921-75259d56c7b3 - https://wordpress.org/plugins/nd-projects/#developers
CVE ID: CVE-2023-1156 State: PUBLISHED Published: 2023-03-02T18:07:23.125Z Last Updated: 2024-08-02T05:40:57.932Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Health Center Patient Record Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Health Center Patient Record Management System 1.0. This vulnerability affects unknown code of the file admin/fecalysis_form.php. The manipulation of the argument itr_no leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-22222
emotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222220. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.222220 - https://vuldb.com/?ctiid.222220 - https://github.com/Lacer23/bug_report/blob/main/bug_report/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md
CVE ID: CVE-2023-1157 State: PUBLISHED Published: 2023-03-02T18:16:23.510Z Last Updated: 2024-08-02T05:40:57.977Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: finixbit Products: elf-parser Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elf_parser::Elf_parser::get_segments of the file elf_parser.cpp. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affect
may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-222222 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222222 - https://vuldb.com/?ctiid.222222 - https://github.com/10cksYiqiyinHangzhouTechnology/elf-parser_segments_poc
CVE ID: CVE-2023-1158 State: PUBLISHED Published: 2023-05-24T21:26:53.129Z Last Updated: 2025-01-16T15:30:17.683Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hitachi Vantara Products: Pentaho Business Analytics Server Problem Types: CWE-863 Description: Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/14456024873741-IMPORTANT-Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before
entaho.com/hc/en-us/articles/14456024873741-IMPORTANT-Resolved-Pentaho-BA-Server-Incorrect-Authorization-Versions-before-9-4-0-1-and-9-3-0-3-including-8-3-x-Impacted-CVE-2023-1158-
CVE ID: CVE-2023-1159 State: PUBLISHED Published: 2023-06-02T06:06:48.397Z Last Updated: 2024-12-20T23:59:57.483Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: ladela Products: WordPress Online Booking and Scheduling Plugin – Bookly Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrative privileges to inject arbitrary web scripts in p
. This makes it possible for authenticated attackers with administrative privileges to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d4cdf774-c93b-4b94-85ba-aa56bf401873?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2913570%40bookly-responsive-appointment-booking-tool&new=2913570%40bookly-responsive-appointment-booking-tool&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1160 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T21:42:46.610Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-1103 Description: Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3ce480dc-1b1c-4230-9287-0dc3b31c2f87 - https://github.com/cockpit-hq/cockpit/commit/690016208850f2d788ebc3c67884d4c692587eb8
CVE ID: CVE-2023-1161 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-11-03T21:47:05.085Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer copy without checking size of input ('classic buffer overflow') in Wireshark Description: ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-08.html - https://gitlab.com/wireshark/wireshark/-/iss
t: References: - https://www.wireshark.org/security/wnpa-sec-2023-08.html - https://gitlab.com/wireshark/wireshark/-/issues/18839 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1161.json - https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-1162 State: PUBLISHED Published: 2023-03-03T06:49:57.117Z Last Updated: 2024-08-02T05:40:58.063Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: DrayTek Products: Vigor 2960 Problem Types: CWE-77 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222258 is the identifier assigned to this v
remotely. The exploit has been disclosed to the public and may be used. VDB-222258 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222258 - https://vuldb.com/?ctiid.222258 - https://github.com/xxy1126/Vuln/blob/main/Draytek/2.md
CVE ID: CVE-2023-1163 State: PUBLISHED Published: 2023-03-03T06:49:59.427Z Last Updated: 2024-08-02T05:40:57.970Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: DrayTek Products: Vigor 2960 Problem Types: CWE-22 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability is the function getSyslogFile of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated
ersal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222259. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222259 - https://vuldb.com/?ctiid.222259 - https://github.com/xxy1126/Vuln/blob/main/Draytek/3.md
CVE ID: CVE-2023-1164 State: PUBLISHED Published: 2023-03-03T06:56:06.175Z Last Updated: 2024-11-25T15:27:39.258Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: KylinSoft Products: kylin-activation Problem Types: CWE-285 Description: A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.11-23 and 1.30.10-5.p23 is able to address this issue. It is recommended to
ic and may be used. Upgrading to version 1.3.11-23 and 1.30.10-5.p23 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222260. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222260 - https://vuldb.com/?ctiid.222260 - https://github.com/i900008/vulndb/blob/main/kylin-activation_vuln.md
CVE ID: CVE-2023-1165 State: PUBLISHED Published: 2023-03-03T07:00:49.188Z Last Updated: 2024-11-25T15:26:56.044Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Zhong Bang Products: CRMEB Java Problem Types: CWE-89 Description: A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-222261 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
-222261 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222261 - https://vuldb.com/?ctiid.222261 - https://github.com/ha1yuYiqiyinHangzhouTechn0logy/crmeb_java/blob/main/README.md
CVE ID: CVE-2023-1166 State: PUBLISHED Published: 2023-06-27T13:17:21.743Z Last Updated: 2024-11-27T19:15:26.442Z Vendors: Unknown Products: Ultimate-Premium-Plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/825eccf9-f351-4a5b-b238-9969141b94fa
CVE ID: CVE-2023-1167 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T20:52:43.715Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/392715 - https://gitlab.com/gitlab-org/cves/-
Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/392715 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1167.json
CVE ID: CVE-2023-1168 State: PUBLISHED Published: 2023-03-21T20:22:09.558Z Last Updated: 2025-02-26T16:33:03.782Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba CX 10000 Switch Series, Aruba CX 9300 Switch Series, Aruba CX 8400 Switch Series, Aruba CX 8360 Switch Series, Aruba CX 8325 Switch Series, Aruba CX 8320 Switch Series, Aruba CX 6400 Switch Series, Aruba CX 6300 Switch Series, Aruba CX 6200F Switch Series Problem Types: n/a Description: An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful exploitation of this vulnerability results in the ability
ity exists in the AOS-CX Network Analytics Engine. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-004.txt
CVE ID: CVE-2023-1169 State: PUBLISHED Published: 2023-06-09T05:33:32.336Z Last Updated: 2024-12-20T23:35:32.687Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ooohboi Products: OoohBoi Steroids for Elementor Problem Types: CWE-862 Missing Authorization Description: The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'file_uploader_callback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
age attachments to the site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c56ed896-9267-49e6-a207-fe5362fe18cd?source=cve - https://plugins.trac.wordpress.org/browser/ooohboi-steroids-for-elementor/tags/2.1.3/inc/exopite-simple-options/upload-class.php - https://plugins.trac.wordpress.org/changeset/2888622/ooohboi-steroids-for-elementor/tags/2.1.5/inc/exopite-simple-options/upload-class.php?old=2874981&old_path=ooohboi-steroids-for-elementor%2Ftags%2F2.1.4%2Finc%2Fexopite-simple-options%2Fupload-class.php
CVE ID: CVE-2023-1170 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T21:43:59.011Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4 - https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/ - https:/
project.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/
CVE ID: CVE-2023-1171 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:06:21.570Z Description: No description available.
CVE ID: CVE-2023-1172 State: PUBLISHED Published: 2023-03-17T12:20:30.748Z Last Updated: 2025-01-13T16:57:36.802Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: ladela Products: WordPress Online Booking and Scheduling Plugin – Bookly Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute w
aping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c3efbd9d-e2b5-4915-a964-29a49c7fba86?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2876981%40bookly-responsive-appointment-booking-tool&new=2876981%40bookly-responsive-appointment-booking-tool&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1173 State: REJECTED Published: N/A Last Updated: 2023-03-10T00:00:00 Description: No description available.