Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30484 State: PUBLISHED Published: 2023-05-25T09:32:29.514Z Last Updated: 2025-01-08T22:00:14.642Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: uPress Products: Enable Accessibility Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in uPress Enable Accessibility plugin <= 1.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/enable-accessibility/wordpress-enable-accessibility-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-30485 State: PUBLISHED Published: 2023-09-04T11:07:00.395Z Last Updated: 2024-08-02T14:28:51.043Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Solwin Infotech Products: Responsive WordPress Slider – Avartan Slider Lite Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Solwin Infotech Responsive WordPress Slider – Avartan Slider Lite plugin <= 1.5.3 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/avartan-slider-lite/wordpress-avartan-slider-lite-plugin-1-5-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30486 State: PUBLISHED Published: 2024-12-09T11:31:05.406Z Last Updated: 2024-12-09T18:46:08.482Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: HashThemes Products: Square Problem Types: CWE-862 Description: Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/square/vulnerability/wordpress-square-theme-2-0-0-broken-access-control?_s_id=cve
CVE ID: CVE-2023-30487 State: PUBLISHED Published: 2023-05-18T08:37:57.048Z Last Updated: 2024-08-02T14:47:28.504Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ThimPress Products: LearnPress Export Import Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThimPress LearnPress Export Import plugin <= 4.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/learnpress-import-export/wordpress-learnpress-export-import-plugin-4-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30488 State: PUBLISHED Published: 2024-12-09T11:31:04.599Z Last Updated: 2024-12-09T18:46:15.983Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WP OnlineSupport, Essential Plugin Products: Featured Post Creative Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through 1.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/featured-post-creative/vulnerability/wordpress-fe
chment: References: - https://patchstack.com/database/wordpress/plugin/featured-post-creative/vulnerability/wordpress-featured-post-creative-plugin-1-2-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-30489 State: PUBLISHED Published: 2023-08-14T14:03:53.837Z Last Updated: 2024-09-25T16:47:07.229Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: I Thirteen Web Solution Products: Email Subscription Popup Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <= 1.2.16 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/email-subscribe/wordpress-email-subscription-popup-plugin-1-2-16-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30490 State: PUBLISHED Published: 2024-12-13T14:23:20.955Z Last Updated: 2024-12-13T20:37:55.534Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Matthew Ruddy Products: Easing Slider Problem Types: CWE-862 Description: Missing Authorization vulnerability in Matthew Ruddy Easing Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easing Slider : from n/a through 3.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easing-slider/vulnerability/wordpress-easing-slider-plugin-3-0-8-plugin-settings-reset-vulnerability?_s_id=cve
CVE ID: CVE-2023-30491 State: PUBLISHED Published: 2023-08-05T22:35:24.329Z Last Updated: 2024-09-25T16:52:44.724Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CodeBard Products: CodeBard's Patron Button and Widgets for Patreon Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2.1.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/patron-button-and-widgets-by-codebard/wordpress-codebard-s-patron-button-and-widgets-for-patreon-plugin-2-1-8-cross-site
patron-button-and-widgets-by-codebard/wordpress-codebard-s-patron-button-and-widgets-for-patreon-plugin-2-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30492 State: PUBLISHED Published: 2023-10-26T11:58:32.977Z Last Updated: 2024-08-02T14:28:51.324Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Vark Products: Minimum Purchase for WooCommerce Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vark Minimum Purchase for WooCommerce plugin <= 2.0.0.1 versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/minimum-purchase-for-woocommerce/wordpress-minimum-purchase-for-woocommerce-plugin-2-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30493 State: PUBLISHED Published: 2023-09-27T10:54:37.117Z Last Updated: 2024-09-23T12:50:33.414Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Themefic Products: Ultimate Addons for Contact Form 7 Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ultimate-addons-for-contact-form-7/wordpress-ultimate-addons-for-contact-form-7-plugin-3-1-32-reflected-cross-site-scripting-xss-vulnerability?_s_id
form-7/wordpress-ultimate-addons-for-contact-form-7-plugin-3-1-32-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30494 State: PUBLISHED Published: 2023-09-04T10:28:30.660Z Last Updated: 2024-09-24T18:51:34.040Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ImageRecycle Products: ImageRecycle pdf & image compression Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <= 3.1.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/imagerecycle-pdf-image-compression/wordpress-imagerecycle-pdf-image-compression-plugin-3-1-10-cross-site-scripting-xss-vulnerability?_s
f-image-compression/wordpress-imagerecycle-pdf-image-compression-plugin-3-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30495 State: PUBLISHED Published: 2023-12-20T17:09:25.312Z Last Updated: 2024-08-02T14:28:51.216Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Themefic Products: Ultimate Addons for Contact Form 7 Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate Addons for Contact Form 7.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.1.23. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate-addons-for-contact-form-7/wordpress-ultimate-addons-for-contact-form-7
://patchstack.com/database/vulnerability/ultimate-addons-for-contact-form-7/wordpress-ultimate-addons-for-contact-form-7-plugin-3-1-23-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-30496 State: PUBLISHED Published: 2023-11-22T19:46:36.727Z Last Updated: 2024-08-02T14:28:51.439Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MagePeople Team Products: WpBusTicketly Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MagePeople Team WpBusTicketly plugin <= 5.2.5 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bus-ticket-booking-with-seat-reservation/wordpress-bus-ticket-booking-with-seat-reservation-plugin-5-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30497 State: PUBLISHED Published: 2023-09-06T08:01:35.581Z Last Updated: 2025-02-19T21:23:55.369Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Simon Chuang Products: WP LINE Notify Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Simon Chuang WP LINE Notify plugin <= 1.4.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-line-notify/wordpress-wordpress-line-notify-plugin-1-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30498 State: PUBLISHED Published: 2023-08-15T12:45:55.098Z Last Updated: 2024-08-02T14:28:51.368Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CodeFlavors Products: Vimeotheque: Vimeo WordPress Plugin Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodeFlavors Vimeotheque: Vimeo WordPress Plugin <= 2.2.1 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/codeflavors-vimeo-video-post-lite/wordpress-vimeotheque-plugin-2-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30499 State: PUBLISHED Published: 2023-08-18T14:41:03.606Z Last Updated: 2024-09-25T16:42:35.122Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: FolioVision Products: FV Flowplayer Video Player Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.32.7212 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-32-7212-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30500 State: PUBLISHED Published: 2023-06-22T11:45:21.403Z Last Updated: 2024-10-10T17:23:25.181Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPForms Products: WPForms Lite, WPForms Pro Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= 1.8.1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpforms-lite/wordpress-wpforms-lite-plugin-1-8-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - https://patchstack
te/wordpress-wpforms-lite-plugin-1-8-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - https://patchstack.com/database/vulnerability/wpforms/wordpress-wpforms-pro-plugin-1-8-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30501 State: PUBLISHED Published: 2023-05-16T18:49:59.884Z Last Updated: 2025-01-22T20:18:23.799Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA A
ying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt
CVE ID: CVE-2023-30502 State: PUBLISHED Published: 2023-05-16T18:51:27.762Z Last Updated: 2025-01-22T20:17:51.746Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA A
CVE ID: CVE-2023-30503 State: PUBLISHED Published: 2023-05-16T18:51:40.985Z Last Updated: 2025-01-22T20:17:23.622Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA A
CVE ID: CVE-2023-30504 State: PUBLISHED Published: 2023-05-16T18:51:43.801Z Last Updated: 2025-01-22T21:17:29.095Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA A
CVE ID: CVE-2023-30505 State: PUBLISHED Published: 2023-05-16T18:51:46.597Z Last Updated: 2025-01-22T21:17:03.558Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA A
CVE ID: CVE-2023-30506 State: PUBLISHED Published: 2023-05-16T18:51:50.159Z Last Updated: 2025-01-31T14:57:56.713Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA A
CVE ID: CVE-2023-30507 State: PUBLISHED Published: 2023-05-16T18:54:48.679Z Last Updated: 2025-01-31T14:57:14.975Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/asse
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt
CVE ID: CVE-2023-30508 State: PUBLISHED Published: 2023-05-16T18:55:01.993Z Last Updated: 2025-01-22T20:16:57.185Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/asse
CVE ID: CVE-2023-30509 State: PUBLISHED Published: 2023-05-16T18:55:05.306Z Last Updated: 2025-01-22T20:16:20.443Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/asse
CVE ID: CVE-2023-30510 State: PUBLISHED Published: 2023-05-16T18:56:20.679Z Last Updated: 2025-01-22T20:15:47.705Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Description: A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Aruba EdgeConnect Enterprise instance. The impact of this vulnerability is limited to a subset of URLs which can result in the possible disclosure of data due to the network position of the Aruba EdgeConnect Enterprise instance. Additional Analy
e possible disclosure of data due to the network position of the Aruba EdgeConnect Enterprise instance. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt
CVE ID: CVE-2023-30512 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-07T20:12:17.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cubefs/cubefs/issues/1882
CVE ID: CVE-2023-30513 State: PUBLISHED Published: 2023-04-12T17:05:05.743Z Last Updated: 2025-02-07T19:24:28.934Z Vendors: Jenkins Project Products: Jenkins Kubernetes Plugin Description: Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30514 State: PUBLISHED Published: 2023-04-12T17:05:06.453Z Last Updated: 2025-02-07T19:23:20.193Z Vendors: Jenkins Project Products: Jenkins Azure Key Vault Plugin Description: Jenkins Azure Key Vault Plugin 187.va_cd5fecd198a_ and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30515 State: PUBLISHED Published: 2023-04-12T17:05:07.172Z Last Updated: 2025-02-07T19:16:52.098Z Vendors: Jenkins Project Products: Jenkins Thycotic DevOps Secrets Vault Plugin Description: Jenkins Thycotic DevOps Secrets Vault Plugin 1.0.0 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30516 State: PUBLISHED Published: 2023-04-12T17:05:07.880Z Last Updated: 2025-02-07T19:02:14.079Z Vendors: Jenkins Project Products: Jenkins Image Tag Parameter Plugin Description: Jenkins Image Tag Parameter Plugin 2.0 improperly introduces an option to opt out of SSL/TLS certificate validation when connecting to Docker registries, resulting in job configurations using Image Tag Parameters that were created before 2.0 having SSL/TLS certificate validation disabled by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2840 - http://www.openwall.com/lists/oss-security
ences: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2840 - http://www.openwall.com/lists/oss-security/2023/04/13/3
CVE ID: CVE-2023-30517 State: PUBLISHED Published: 2023-04-12T17:05:08.593Z Last Updated: 2025-02-07T18:08:57.732Z Vendors: Jenkins Project Products: Jenkins NeuVector Vulnerability Scanner Plugin Description: Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2841 - http://www.openwall.com/lists/oss-security/2023/04/13/3