Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40642 State: PUBLISHED Published: 2023-10-08T03:36:01.134Z Last Updated: 2024-09-19T14:59:52.099Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40643 State: PUBLISHED Published: 2023-10-08T03:36:01.449Z Last Updated: 2024-09-19T18:23:14.608Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40644 State: PUBLISHED Published: 2023-10-08T03:36:01.781Z Last Updated: 2024-09-19T18:22:34.179Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40645 State: PUBLISHED Published: 2023-10-08T03:36:02.223Z Last Updated: 2024-09-19T18:20:59.211Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40646 State: PUBLISHED Published: 2023-10-08T03:36:02.579Z Last Updated: 2024-09-19T18:19:45.319Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40647 State: PUBLISHED Published: 2023-10-08T03:36:02.894Z Last Updated: 2024-09-19T18:18:39.752Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40648 State: PUBLISHED Published: 2023-10-08T03:36:03.195Z Last Updated: 2024-09-19T18:16:45.415Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40649 State: PUBLISHED Published: 2023-10-08T03:36:03.484Z Last Updated: 2024-09-19T18:16:04.475Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A Description: In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40650 State: PUBLISHED Published: 2023-10-08T03:36:03.774Z Last Updated: 2024-09-19T18:45:33.483Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In Telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40651 State: PUBLISHED Published: 2023-10-08T03:36:04.059Z Last Updated: 2024-09-19T18:21:20.793Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40652 State: PUBLISHED Published: 2023-10-08T03:36:04.349Z Last Updated: 2024-09-19T18:09:40.765Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T606/T612/T616 Description: In jpg driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40653 State: PUBLISHED Published: 2023-10-08T03:36:04.636Z Last Updated: 2024-08-02T18:38:51.087Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed Additional Analyst Notes: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40654 State: PUBLISHED Published: 2023-10-08T03:36:04.923Z Last Updated: 2024-09-19T18:02:38.896Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074
CVE ID: CVE-2023-40655 State: PUBLISHED Published: 2023-12-14T08:51:55.509Z Last Updated: 2024-12-04T16:10:29.105Z Vendors: mooj.org Products: Proforms Basic component for Joomla Problem Types: CWE-79 Description: A reflected XSS vulnerability was discovered in the Proforms Basic component for Joomla. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://extensions.joomla.org/extension/proforms-basic/
CVE ID: CVE-2023-40656 State: PUBLISHED Published: 2023-12-14T08:51:59.728Z Last Updated: 2024-08-04T08:42:43.172Z Vendors: plasma-web.ru Products: Quickform component for Joomla Problem Types: CWE-79 Description: A reflected XSS vulnerability was discovered in the Quickform component for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/quickform/
CVE ID: CVE-2023-40657 State: PUBLISHED Published: 2023-12-14T08:51:56.186Z Last Updated: 2024-08-04T08:42:06.240Z Vendors: artio.net Products: Joomdoc component for Joomla Problem Types: CWE-79 Description: A reflected XSS vulnerability was discovered in the Joomdoc component for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/joomdoc/
CVE ID: CVE-2023-40658 State: PUBLISHED Published: 2023-12-14T08:52:01.492Z Last Updated: 2024-08-04T08:42:27.091Z Vendors: deconf.net Products: Clicky Analytics Dashboard module for Joomla Problem Types: CWE-79 Description: A reflected XSS vulnerability was discovered in the Clicky Analytics Dashboard module for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://deconf.com/clicky-analytics-dashboard-joomla/
CVE ID: CVE-2023-40659 State: PUBLISHED Published: 2023-12-14T08:52:04.496Z Last Updated: 2024-08-04T08:43:11.072Z Vendors: joomboost.com Products: Easy Quick Contact module for Joomla Problem Types: CWE-79 Description: A reflected XSS vulnerability was discovered in the Easy Quick Contact module for Joomla. Additional Analyst Notes: - CVE Program Container: References: - https://extensions.joomla.org/extension/contacts-and-feedback/contact-forms/easy-quick-contact/
CVE ID: CVE-2023-40660 State: PUBLISHED Published: 2023-11-06T16:58:42.939Z Last Updated: 2025-11-06T22:59:00.695Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7 Problem Types: CWE-287 Description: A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally
ity risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally, the token can internally track login status. This flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system without the user's awareness. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:7876 - https://access.redhat.com/errata/RHSA-2023:7879 - https://access.redhat.com/security/cve/CVE-2023-40660 - https://bugzilla.redhat.com/show_bug.cgi?id=2240912 - https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651 - https://github.com/O
om/show_bug.cgi?id=2240912 - https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651 - https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1 - https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisories
CVE ID: CVE-2023-40661 State: PUBLISHED Published: 2023-11-06T16:58:43.029Z Last Updated: 2025-11-06T22:59:01.794Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7 Problem Types: CWE-119 Description: Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a custom-crafted USB device or smart card to manipulate responses to APDUs. Thi
access to the computer system and employ a custom-crafted USB device or smart card to manipulate responses to APDUs. This manipulation can potentially allow compromise key generation, certificate loading, and other card management operations during enrollment. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:7876 - https://access.redhat.com/errata/RHSA-2023:7879 - https://access.redhat.com/security/cve/CVE-2023-40661 - https://bugzilla.redhat.com/show_bug.cgi?id=2240913 - https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651 - https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1 - https://github.com/OpenSC/OpenSC/w
#issuecomment-1674806651 - https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1 - https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisories
CVE ID: CVE-2023-40662 State: PUBLISHED Published: 2023-11-30T14:56:49.403Z Last Updated: 2024-08-02T18:38:51.134Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Jonk @ Follow me Darling Products: Cookies and Content Security Policy Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jonk @ Follow me Darling Cookies and Content Security Policy.This issue affects Cookies and Content Security Policy: from n/a through 2.15. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cookies-and-content-security-policy/wordpress-cookies-and-content-sec
s: - https://patchstack.com/database/vulnerability/cookies-and-content-security-policy/wordpress-cookies-and-content-security-policy-plugin-2-15-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2023-40663 State: PUBLISHED Published: 2023-09-27T05:40:13.695Z Last Updated: 2025-02-19T21:23:37.397Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rextheme Products: WP VR Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rextheme WP VR plugin <= 8.3.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpvr/wordpress-wp-vr-plugin-8-3-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40664 State: PUBLISHED Published: 2023-09-27T05:50:09.514Z Last Updated: 2024-09-23T13:29:08.088Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: RedNao Products: Donations Made Easy – Smart Donations Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/smart-donations/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40665 State: PUBLISHED Published: 2023-09-27T06:24:24.410Z Last Updated: 2024-09-23T13:28:51.920Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Pdfcrowd Products: Save as Image plugin by Pdfcrowd Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as Image plugin by Pdfcrowd plugin <= 2.16.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/save-as-image-by-pdfcrowd/wordpress-save-as-image-plugin-by-pdfcrowd-plugin-2-16-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40667 State: PUBLISHED Published: 2023-09-27T06:40:05.376Z Last Updated: 2024-09-23T12:53:52.116Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Lasso Products: Simple URLs Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lasso Simple URLs plugin <= 117 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-urls/wordpress-simple-urls-plugin-117-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40668 State: PUBLISHED Published: 2023-09-27T06:31:06.054Z Last Updated: 2024-09-23T12:54:12.258Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Pdfcrowd Products: Save as PDF plugin by Pdfcrowd Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd plugin <= 2.16.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/save-as-pdf-by-pdfcrowd/wordpress-save-as-pdf-plugin-by-pdfcrowd-plugin-2-16-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40669 State: PUBLISHED Published: 2023-09-27T06:49:20.322Z Last Updated: 2024-09-23T12:53:10.738Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: twinpictures, baden03 Products: Collapse-O-Matic Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in twinpictures, baden03 Collapse-O-Matic plugin <= 1.8.5.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/jquery-collapse-o-matic/wordpress-collapse-o-matic-plugin-1-8-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40670 State: PUBLISHED Published: 2024-12-13T14:24:08.244Z Last Updated: 2024-12-13T18:04:51.901Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ReviewX Team Products: ReviewX Problem Types: CWE-862 Description: Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-plugin-1-6-17-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-40671 State: PUBLISHED Published: 2023-10-06T12:38:30.516Z Last Updated: 2024-09-19T14:57:21.381Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: 大侠wp Products: DX-auto-save-images Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in 大侠wp DX-auto-save-images plugin <= 1.4.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dx-auto-save-images/wordpress-dx-auto-save-images-plugin-1-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-40672 State: PUBLISHED Published: 2024-06-12T09:36:29.149Z Last Updated: 2024-08-02T18:38:51.106Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Hardik Chavada Products: Sticky Social Media Icons Problem Types: CWE-862 Description: Missing Authorization vulnerability in Hardik Chavada Sticky Social Media Icons.This issue affects Sticky Social Media Icons: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/sticky-social-media-icons/wordpress-sticky-social-media-icons-plugin-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-40673 State: PUBLISHED Published: 2024-06-04T07:21:34.896Z Last Updated: 2024-08-02T18:38:51.136Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: cartpauj Products: Cartpauj Register Captcha Problem Types: CWE-799 Description: : Improper Control of Interaction Frequency vulnerability in cartpauj Cartpauj Register Captcha allows Functionality Misuse.This issue affects Cartpauj Register Captcha: from n/a through 1.0.02. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cartpauj-register-captcha/wordpress-cartpauj-register-captcha-plugin-1-0-02-captcha-bypass-
k.com/database/vulnerability/cartpauj-register-captcha/wordpress-cartpauj-register-captcha-plugin-1-0-02-captcha-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2023-40674 State: PUBLISHED Published: 2023-11-30T12:24:39.287Z Last Updated: 2024-08-02T18:38:51.143Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Lasso Products: Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management: from n/a through 118. Additional Analyst Notes: - CVE Program Container: Re
uct Displays, and Affiliate Link Management: from n/a through 118. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/simple-urls/wordpress-simple-urls-plugin-117-shortcode-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40675 State: PUBLISHED Published: 2023-09-27T07:22:00.549Z Last Updated: 2024-09-23T12:52:52.277Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PluginOps Products: Landing Page Builder Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps Landing Page Builder plugin <= 1.5.1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/page-builder-add/wordpress-landing-page-builder-plugin-1-5-1-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-40676 State: PUBLISHED Published: 2023-09-27T06:45:17.760Z Last Updated: 2024-09-23T12:53:28.815Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jason Crouse, VeronaLabs Products: Slimstat Analytics Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin <= 5.0.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-slimstat/wordpress-slimstat-analytics-plugin-5-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-40677 State: PUBLISHED Published: 2023-09-27T07:25:11.583Z Last Updated: 2024-09-23T12:52:31.037Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Gopi Ramasamy Products: Vertical marquee plugin Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical marquee plugin <= 7.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/vertical-marquee-plugin/wordpress-vertical-marquee-plugin-plugin-7-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-40678 State: PUBLISHED Published: 2024-12-13T14:24:08.792Z Last Updated: 2024-12-13T18:02:39.780Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Lasso Products: Simple URLs Problem Types: CWE-862 Description: Missing Authorization vulnerability in Lasso Simple URLs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple URLs: from n/a through 117. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-urls/vulnerability/wordpress-simple-urls-plugin-117-broken-access-control-vulnerability?_s_id=cve