Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-23761 State: PUBLISHED Published: 2023-04-07T18:41:47.038Z Last Updated: 2025-02-07T20:14:26.121Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-287 Description: An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist's URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability wa
Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1 - https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8 - https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11 - https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15 - https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18
CVE ID: CVE-2023-23762 State: PUBLISHED Published: 2023-04-07T18:41:52.689Z Last Updated: 2025-02-10T15:20:05.018Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-697 Description: An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code maintainer. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11,
ability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.1 - https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.8 - https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.11 - https://docs.github.com/en/enterprise-server@3.5/admin/release-notes#3.5.15 - https://docs.github.com/en/enterprise-server@3.4/admin/release-notes#3.4.18
CVE ID: CVE-2023-23763 State: PUBLISHED Published: 2023-09-01T14:23:42.930Z Last Updated: 2024-10-01T14:23:19.054Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-200 Description: An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that allowed a fork to retain read access to an upstream repository after its visibility was changed to private. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.10.0 and was fixed in versions 3.9.4, 3.8.9, 3.7.16 and 3.6.18. This vulnerability was reported via the GitHub Bug Bounty program. A
fixed in versions 3.9.4, 3.8.9, 3.7.16 and 3.6.18. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.18-security-fixes - https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.16-security-fixes - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.9-security-fixes - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.4-security-fixes
CVE ID: CVE-2023-23764 State: PUBLISHED Published: 2023-07-27T20:45:19.973Z Last Updated: 2024-10-16T20:11:49.691Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:N) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-697 Description: An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff within the GitHub pull request UI. To do so, an attacker would need write access to the repository. This vulnerability affected GitHub Enterprise Server versions 3.7.0 and above and was fixed in versions 3.7.9, 3.8.2, and 3.9.1. This vulnerability was reported via the GitHub Bug Bounty pr
nd above and was fixed in versions 3.7.9, 3.8.2, and 3.9.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.1 - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.2 - https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.9
CVE ID: CVE-2023-23765 State: PUBLISHED Published: 2023-08-30T22:33:40.932Z Last Updated: 2024-09-27T14:22:23.490Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:N) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-697 Description: An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To exploit this vulnerability, an attacker would need write access to the repository. This vulnerability was reported via the GitHub Bug Bounty Program https://bounty.github.com/ . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
nty Program https://bounty.github.com/ . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.6/admin/release-notes#3.6.16 - https://docs.github.com/en/enterprise-server@3.7/admin/release-notes#3.7.13 - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.9 - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.1
CVE ID: CVE-2023-23766 State: PUBLISHED Published: 2023-09-22T14:18:49.735Z Last Updated: 2024-09-24T14:29:38.315Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-697 Description: An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To do so, an attacker would need write access to the repository. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.6.17, 3.7.15, 3.8.8, 3.9.3, and 3.10.1. This vulnerability was reported via the GitHub Bug Bounty
s fixed in versions 3.6.17, 3.7.15, 3.8.8, 3.9.3, and 3.10.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.github.com/enterprise-server@3.6/admin/release-notes#3.6.17 - https://docs.github.com/enterprise-server@3.7/admin/release-notes#3.7.15 - https://docs.github.com/enterprise-server@3.8/admin/release-notes#3.8.8 - https://docs.github.com/enterprise-server@3.9/admin/release-notes#3.9.3 - https://docs.github.com/enterprise-server@3.10/admin/release-notes#3.10.1
CVE ID: CVE-2023-23767 State: REJECTED Published: 2023-10-24T20:25:02.425Z Last Updated: 2023-11-08T15:23:11.662Z Description: No description available.
CVE ID: CVE-2023-23770 State: PUBLISHED Published: 2023-08-29T08:47:13.848Z Last Updated: 2024-10-02T14:38:55.765Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:L/MI:H/MA:H) Vendors: Motorola Products: MBTS Site Controller Problem Types: CWE-259 Description: Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface (MMI), allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
password that cannot be changed or disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2023-23771 State: PUBLISHED Published: 2023-08-29T08:48:26.004Z Last Updated: 2024-10-02T14:01:56.047Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:L/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: Motorola Products: MBTS Base Radio Problem Types: CWE-259 Description: Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface (MMI), allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
t be changed or disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2023-23772 State: PUBLISHED Published: 2023-08-29T08:48:45.339Z Last Updated: 2024-10-02T14:00:09.387Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:H/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: Motorola Products: MBTS Site Controller Problem Types: CWE-347 Description: Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device. Additional Analyst Notes: - C
e execution, extract secret key material, and/or leave a persistent implant on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2023-23773 State: PUBLISHED Published: 2023-08-29T08:49:00.979Z Last Updated: 2024-10-01T20:39:57.051Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:N/MAC:L/MPR:H/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: Motorola Products: EBTS/MBTS Base Radio Problem Types: CWE-347 Description: Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device. Additional Analyst Notes: - CVE Program C
extract secret key material, and/or leave a persistent implant on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2023-23774 State: PUBLISHED Published: 2023-08-29T08:49:32.508Z Last Updated: 2024-10-03T13:52:17.494Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C/CR:H/IR:H/AR:M/MAV:L/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H) Vendors: Motorola Products: EBTS/MBTS Base Radio Problem Types: CWE-248 Description: Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution
al access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tetraburst.com/
CVE ID: CVE-2023-23775 State: PUBLISHED Published: 2024-06-11T14:32:00.651Z Last Updated: 2024-08-02T10:42:26.252Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiSOAR Problem Types: CWE-89 Description: Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.com/psirt/FG-IR-22-448
CVE ID: CVE-2023-23776 State: PUBLISHED Published: 2023-03-07T16:04:45.915Z Last Updated: 2024-10-22T20:48:34.537Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:X) Vendors: Fortinet Products: FortiAnalyzer Problem Types: CWE-200 Description: An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated attacker to read the client machine password in plain text in a heartbeat response when a log-fetch request is made from the FortiAnalyzer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
log-fetch request is made from the FortiAnalyzer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-447
CVE ID: CVE-2023-23777 State: PUBLISHED Published: 2023-07-11T08:49:41.131Z Last Updated: 2024-10-23T14:25:45.259Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-78 Description: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.18 and below may allow a privileged attacker to execute arbitrary bash commands via crafted cli backup parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-1
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-131
CVE ID: CVE-2023-23778 State: PUBLISHED Published: 2023-02-16T18:06:19.308Z Last Updated: 2024-10-22T20:50:05.765Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-23 Description: A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated user to obtain unauthorized access to files and data via specifically crafted web requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-142
CVE ID: CVE-2023-23779 State: PUBLISHED Published: 2023-02-16T18:06:16.796Z Last Updated: 2024-10-23T14:46:56.695Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-78 Description: Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forti
f HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-133
CVE ID: CVE-2023-23780 State: PUBLISHED Published: 2023-02-16T18:05:49.933Z Last Updated: 2024-10-23T14:48:11.378Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-121 Description: A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versions allows attacker to escalation of privilege via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-118
CVE ID: CVE-2023-23781 State: PUBLISHED Published: 2023-02-16T18:06:09.054Z Last Updated: 2024-10-23T14:47:34.620Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted XML files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-151
CVE ID: CVE-2023-23782 State: PUBLISHED Published: 2023-02-16T18:05:57.691Z Last Updated: 2024-10-23T14:47:48.425Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-122 Description: A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically crafted arguments to existing commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-1
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-111
CVE ID: CVE-2023-23783 State: PUBLISHED Published: 2023-02-16T18:05:55.113Z Last Updated: 2024-10-23T14:47:59.100Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-134 Description: A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-187
CVE ID: CVE-2023-23784 State: PUBLISHED Published: 2023-02-16T18:05:52.595Z Last Updated: 2024-10-22T20:50:15.670Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-23 Description: A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to information disclosure via specially crafted web requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-22-251
CVE ID: CVE-2023-23785 State: PUBLISHED Published: 2023-05-03T14:12:58.592Z Last Updated: 2025-01-09T15:30:21.132Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: DgCult Products: Exquisite PayPal Donation Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DgCult Exquisite PayPal Donation plugin <= v2.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/exquisite-paypal-donation/wordpress-exquisite-paypal-donation-plugin-v2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23786 State: PUBLISHED Published: 2023-05-10T07:19:23.244Z Last Updated: 2025-01-09T15:21:25.390Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Christof Servit Products: affiliate-toolkit Problem Types: CWE-79 Description: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Christof Servit affiliate-toolkit plugin <= 3.3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/affiliate-toolkit-starter/wordpress-affiliate-toolkit-plugin-3-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23787 State: PUBLISHED Published: 2023-07-10T15:39:12.983Z Last Updated: 2024-08-02T14:48:36.958Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Premmerce Products: Premmerce Redirect Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Redirect Manager plugin <= 1.0.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/premmerce-redirect-manager/wordpress-premmerce-redirect-manager-plugin-1-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-23788 State: PUBLISHED Published: 2023-05-10T07:15:00.382Z Last Updated: 2025-01-09T15:21:38.734Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Florin Arjocu Products: Custom More Link Complete Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Florin Arjocu Custom More Link Complete plugin <= 1.4.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/custom-more-link-complete/wordpress-custom-more-link-complete-plugin-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23789 State: PUBLISHED Published: 2023-05-10T07:28:14.629Z Last Updated: 2025-01-09T15:21:14.481Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Premmerce Products: Premmerce Redirect Manager Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Premmerce Premmerce Redirect Manager plugin <= 1.0.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/premmerce-redirect-manager/wordpress-premmerce-redirect-manager-plugin-1-0-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-23790 State: PUBLISHED Published: 2023-05-03T09:58:29.903Z Last Updated: 2025-01-09T15:32:33.190Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: Pods Framework Team Products: Pods – Custom Content Types and Fields Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Pods Framework Team Pods – Custom Content Types and Fields plugin <= 2.9.10.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pods/wordpress-pods-custom-content-types-and-fields-plugin-2-9-10-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-23791 State: PUBLISHED Published: 2023-07-11T06:55:36.612Z Last Updated: 2024-10-07T18:23:01.274Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: HasThemes Products: HT Menu Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Menu plugin <= 1.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ht-menu-lite/wordpress-ht-menu-wordpress-mega-menu-builder-for-elementor-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve