Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-23455 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-03-20T20:54:48.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2023/01/10/1 - https://www.openwall.com/lists/oss-security/2023/01/10/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux
ttps://www.openwall.com/lists/oss-security/2023/01/10/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a2965c7be0522eaa18808684b7b82b248515511b - https://www.debian.org/security/2023/dsa-5324 - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2023-23456 State: PUBLISHED Published: 2023-01-12T00:00:00 Last Updated: 2024-12-11T19:02:29.592Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Problem Types: CWE-787 Description: A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial of service (abort) via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2160381 - https://github.com/upx/upx/commit/510505a85cbe45e51fbd470f1aa8b02157c429d4 - https://github.com/upx/upx/issues/632 - https://lists.fedoraproject.org/archives
505a85cbe45e51fbd470f1aa8b02157c429d4 - https://github.com/upx/upx/issues/632 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/
CVE ID: CVE-2023-23457 State: PUBLISHED Published: 2023-01-12T00:00:00.000Z Last Updated: 2025-04-07T15:31:13.258Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Problem Types: CWE-119 Description: A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2160382 - https://github.com/upx/upx/commit/779b648c5f6aa9b33f4728f79dd4d0efec0bf860 - https://github.com/upx/upx/issues/631 - https:
ps://github.com/upx/upx/commit/779b648c5f6aa9b33f4728f79dd4d0efec0bf860 - https://github.com/upx/upx/issues/631 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EL3BVKIGG3SH6I3KPOYQAWCBD4UMPOPI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGEP3FBNRZXGLIA2B2ICMB32JVMPREFZ/
CVE ID: CVE-2023-23458 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T19:17:22.429Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Sunell Products: DVR Problem Types: CWE-200 Description: Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23459 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T19:15:53.167Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Priority Products: Priority for Windows Problem Types: CWE-89 Description: Priority Windows may allow Command Execution via SQL Injection using an unspecified method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23460 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T19:03:33.525Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Priority Products: Priority Web Problem Types: Authentication bypass Description: Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23461 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T19:02:39.088Z Vendors: Hasherezade (github) Products: Libpeconv Problem Types: access violation Description: Libpeconv – access violation, before commit b076013 (30/11/2022). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23462 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:10:06.420Z Vendors: Hasherezade (github) Products: Libpeconv Problem Types: CWE-190 Description: Libpeconv – integer overflow, before commit 75b1565 (30/11/2022). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23463 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:05:49.323Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Sunell Products: DVR Problem Types: CWE-522 Description: Sunell DVR, latest version, Insufficiently Protected Credentials (CWE-522) may be exposed through an unspecified request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23464 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:04:49.548Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Media CP Products: Media Control Panel Problem Types: Information disclosure Description: Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23465 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:03:54.314Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Media CP Products: Media Control Panel Problem Types: CWE-352 Description: Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23466 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:03:30.823Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Media CP Products: Media Control Panel Problem Types: insufficiently protected credential change Description: Media CP Media Control Panel latest version. Insufficiently protected credential change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23467 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:02:35.148Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Media CP Products: Media Control Panel Problem Types: CWE-79 Description: Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-23468 State: PUBLISHED Published: 2023-06-27T18:30:35.685Z Last Updated: 2024-11-01T15:07:48.314Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Robotic Process Automation for Cloud Pak Problem Types: 284 Improper Access Control Description: IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster. IBM X-Force ID: 244500. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7005999 - https://exchange.xforce.
tainer: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7005999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/244500
CVE ID: CVE-2023-23469 State: PUBLISHED Published: 2023-02-01T18:12:22.589Z Last Updated: 2025-03-26T15:08:13.712Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cloud Pak for Business Automation Problem Types: 525 Information Exposure Through Browser Caching Description: IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/sup
44504. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6857999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/244504
CVE ID: CVE-2023-23470 State: PUBLISHED Published: 2023-05-04T13:32:02.652Z Last Updated: 2025-01-29T16:44:37.491Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations, as a result of improper SQL processing. By using a specially crafted SQL operation, the administrator could exploit the vulnerability to perform additional administrator operations. IBM X-Force ID: 244510. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
nal administrator operations. IBM X-Force ID: 244510. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6987767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/244510
CVE ID: CVE-2023-23472 State: PUBLISHED Published: 2024-12-11T12:14:54.975Z Last Updated: 2024-12-11T14:43:47.950Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-497 Description: IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6988167
CVE ID: CVE-2023-23473 State: PUBLISHED Published: 2023-08-28T00:52:17.702Z Last Updated: 2024-09-30T17:51:24.364Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-352 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 245400. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6988169 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ent: References: - https://www.ibm.com/support/pages/node/6988169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245400
CVE ID: CVE-2023-23474 State: PUBLISHED Published: 2024-05-03T17:15:55.611Z Last Updated: 2024-08-02T10:35:32.181Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cognos Controller Problem Types: CWE-209 Description: IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 245403. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245403
CVE ID: CVE-2023-23475 State: PUBLISHED Published: 2023-02-08T18:08:25.082Z Last Updated: 2025-03-25T13:56:26.364Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: Infosphere Information Server Problem Types: CWE-79 Description: IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245423. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6890711
CVE ID: CVE-2023-23476 State: PUBLISHED Published: 2023-08-02T14:40:34.754Z Last Updated: 2024-10-11T14:09:29.520Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Robotic Process Automation, Robotic Process Automation for Cloud Pak Problem Types: CWE-863 Description: IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to insufficient authorization validation on some API routes. IBM X-Force ID: 245425. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7017490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
t: References: - https://www.ibm.com/support/pages/node/7017490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245425
CVE ID: CVE-2023-23477 State: PUBLISHED Published: 2023-02-03T17:24:13.649Z Last Updated: 2025-03-25T19:46:39.725Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-94 Description: IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. IBM X-Force ID: 245513. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6891111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245513
CVE ID: CVE-2023-23480 State: PUBLISHED Published: 2023-06-08T01:42:38.541Z Last Updated: 2025-01-06T19:33:37.109Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: CWE-79 Description: IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245885. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
-Force ID: 245885. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7001563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245885
CVE ID: CVE-2023-23481 State: PUBLISHED Published: 2023-06-08T01:29:08.786Z Last Updated: 2025-01-06T19:58:37.805Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: CWE-79 Description: IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245889. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
. IBM X-Force ID: 245889. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7001561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245889
CVE ID: CVE-2023-23482 State: PUBLISHED Published: 2023-06-08T01:09:18.115Z Last Updated: 2025-01-06T20:02:20.647Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: 451 User Interface (UI) Misrepresentation of Critical Information Description: IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 245891. Ad
to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 245891. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7001569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245891
CVE ID: CVE-2023-23487 State: PUBLISHED Published: 2023-07-09T23:54:40.577Z Last Updated: 2025-02-13T16:44:09.412Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: 778 Insufficient Logging Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245918 - https://security.netapp.com/advisory/ntap-20230731-000
7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/245918 - https://security.netapp.com/advisory/ntap-20230731-0007/
CVE ID: CVE-2023-23488 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:05:09.171Z Vendors: n/a Products: Paid Memberships Pro WordPress Plugin Problem Types: Unauthenticated SQL Injection Description: The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-2 - http://packetstormsecurity.com/files/171661/WordPress-Paid-Memberships-Pro-2.9.8-SQL-Injection.html
CVE ID: CVE-2023-23489 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:05:40.306Z Vendors: n/a Products: Easy Digital Downloads WordPress Plugin Problem Types: Unauthenticated SQL Injection Description: The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edd_download_search' action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-2
CVE ID: CVE-2023-23490 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:06:34.794Z Vendors: n/a Products: Survey Maker WordPress Plugin Problem Types: Authenticated SQL Injection Description: The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parameter of its 'ays_surveys_export_json' action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-2
CVE ID: CVE-2023-23491 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:07:05.591Z Vendors: n/a Products: Quick Event Manager WordPress Plugin Problem Types: Reflected Cross-Site Scripting Description: The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' parameter of its 'qem_ajax_calendar' action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-3
CVE ID: CVE-2023-23492 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:07:48.525Z Vendors: n/a Products: Login with Phone Number WordPress Plugin Problem Types: Reflected Cross-Site Scripting Description: The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-3
CVE ID: CVE-2023-23493 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T13:56:54.609Z Vendors: Apple Products: macOS Problem Types: An encrypted volume may be unmounted and remounted by a different user without prompting for the password Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213605 - https://support.apple.com/en-us/HT213604
CVE ID: CVE-2023-23494 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T16:06:28.360Z Vendors: Apple Products: iOS and iPadOS Problem Types: A user in a privileged network position may be able to cause a denial-of-service Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. A user in a privileged network position may be able to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213676
CVE ID: CVE-2023-23495 State: PUBLISHED Published: 2023-09-26T20:14:31.599Z Last Updated: 2025-11-04T19:14:40.705Z Vendors: Apple Products: macOS Problem Types: An app may be able to access sensitive user data Description: A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14. An app may be able to access sensitive user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-23496 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T13:55:41.336Z Vendors: Apple Products: iOS and iPadOS, tvOS, Safari, macOS, watchOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213606 - https://sup