Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32579 State: PUBLISHED Published: 2023-11-09T21:18:23.155Z Last Updated: 2024-09-04T13:22:59.866Z Vendors: Designs & Code Products: Forget About Shortcode Buttons Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Designs & Code Forget About Shortcode Buttons plugin <= 2.1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/forget-about-shortcode-buttons/wordpress-forget-about-shortcode-buttons-plugin-2-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32580 State: PUBLISHED Published: 2023-06-23T12:05:26.700Z Last Updated: 2024-10-10T17:13:17.023Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WPExperts Products: Password Protected Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPExperts Password Protected plugin <= 2.6.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/password-protected/wordpress-password-protected-plugin-2-6-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32581 State: PUBLISHED Published: 2024-12-13T14:23:24.268Z Last Updated: 2024-12-13T19:03:05.451Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: MobileMonkey Products: WP-Chatbot for Messenger Problem Types: CWE-862 Description: Missing Authorization vulnerability in MobileMonkey WP-Chatbot for Messenger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Chatbot for Messenger: from n/a through 4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-chatbot/vulnerability/wordpress-wp-chatbot-for-messenger-plugin-4-7-broken-access-cont
.com/database/wordpress/plugin/wp-chatbot/vulnerability/wordpress-wp-chatbot-for-messenger-plugin-4-7-broken-access-control?_s_id=cve
CVE ID: CVE-2023-32582 State: PUBLISHED Published: 2023-06-03T11:04:48.735Z Last Updated: 2024-10-10T18:56:35.060Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Kyle Maurer Products: Don8 Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kyle Maurer Don8 plugin <= 0.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/don8/wordpress-don8-plugin-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32583 State: PUBLISHED Published: 2023-11-13T01:18:36.141Z Last Updated: 2024-08-28T18:09:23.552Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Prashant Walke Products: WP All Backup Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Prashant Walke WP All Backup plugin <= 2.4.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-all-backup/wordpress-wp-all-backup-plugin-2-4-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32584 State: PUBLISHED Published: 2023-08-25T08:53:42.728Z Last Updated: 2024-09-24T19:26:24.800Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: John Newcombe Products: eBecas Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in John Newcombe eBecas plugin <= 3.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ebecas/wordpress-ebecas-plugin-3-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32585 State: PUBLISHED Published: 2024-12-13T14:23:24.839Z Last Updated: 2024-12-13T18:46:55.446Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Total-Soft Products: Portfolio Gallery – Responsive Image Gallery Problem Types: CWE-862 Description: Missing Authorization vulnerability in Total-Soft Portfolio Gallery – Responsive Image Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio Gallery – Responsive Image Gallery: from n/a through 1.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gallery-portfolio/vulnerability/w
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gallery-portfolio/vulnerability/wordpress-portfolio-gallery-responsive-image-gallery-plugin-1-4-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32586 State: PUBLISHED Published: 2024-12-13T14:23:25.449Z Last Updated: 2024-12-13T18:46:05.223Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Thomas Michalak Products: Soundcloud Is Gold Problem Types: CWE-862 Description: Missing Authorization vulnerability in Thomas Michalak Soundcloud Is Gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through 2.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/soundcloud-is-gold/vulnerability/wordpress-soundcloud-is-gold-plugin-2-5-1-broken-access-control?_s
ase/wordpress/plugin/soundcloud-is-gold/vulnerability/wordpress-soundcloud-is-gold-plugin-2-5-1-broken-access-control?_s_id=cve
CVE ID: CVE-2023-32587 State: PUBLISHED Published: 2023-11-09T21:14:29.097Z Last Updated: 2024-09-03T18:05:51.918Z Vendors: WP Reactions, LLC Products: WP Reactions Lite Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Reactions, LLC WP Reactions Lite plugin <= 1.3.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-reactions-lite/wordpress-wp-reactions-lite-plugin-1-3-8-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2023-32588 State: PUBLISHED Published: 2023-11-13T01:14:36.960Z Last Updated: 2024-08-28T18:10:00.776Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: BRANDbrilliance Products: Post State Tags Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in BRANDbrilliance Post State Tags plugin <= 2.0.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/post-state-tags/wordpress-post-state-tags-plugin-2-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32589 State: PUBLISHED Published: 2023-05-20T22:48:09.735Z Last Updated: 2025-01-09T15:12:31.976Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: PingOnline Products: Dyslexiefont Free Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PingOnline Dyslexiefont Free plugin <= 1.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dyslexiefont/wordpress-dyslexiefont-free-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32590 State: PUBLISHED Published: 2023-12-20T15:02:24.178Z Last Updated: 2024-08-02T15:18:38.037Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Daniel Söderström / Sidney van de Stouwe Products: Subscribe to Category Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category.This issue affects Subscribe to Category: from n/a through 2.7.4. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/subscribe-to-category/wordpress-subscribe-to-catego
ntainer: References: - https://patchstack.com/database/vulnerability/subscribe-to-category/wordpress-subscribe-to-category-plugin-2-7-4-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-32591 State: PUBLISHED Published: 2023-08-25T08:57:49.082Z Last Updated: 2024-09-24T19:26:13.311Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Cloud Primero B.V Products: DBargain Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cloud Primero B.V DBargain plugin <= 3.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/d-bargain/wordpress-dbargain-plugin-3-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32592 State: PUBLISHED Published: 2023-11-09T21:08:34.081Z Last Updated: 2024-09-03T18:09:09.045Z Vendors: Palasthotel by Edward Bock, Katharina Rompf Products: Sunny Search Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin <= 1.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fast-search-powered-by-solr/wordpress-sunny-search-plugin-1-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32593 State: PUBLISHED Published: 2024-12-13T14:23:25.996Z Last Updated: 2024-12-13T18:52:47.964Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: GS Plugins Products: GS Pins for Pinterest Problem Types: CWE-862 Description: Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through 1.6.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gs-pinterest-portfolio/vulnerability/wordpress-gs-pins-for-pinterest-plugin-1-6-7-broken-access-cont
se/wordpress/plugin/gs-pinterest-portfolio/vulnerability/wordpress-gs-pins-for-pinterest-plugin-1-6-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32594 State: PUBLISHED Published: 2023-11-09T21:02:48.242Z Last Updated: 2024-09-03T18:11:58.889Z Vendors: Benedict B., Maciej Gryniuk Products: Hyphenator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Benedict B., Maciej Gryniuk Hyphenator plugin <= 5.1.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/hyphenator/wordpress-hyphenator-plugin-5-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32595 State: PUBLISHED Published: 2023-08-25T10:01:07.935Z Last Updated: 2024-09-24T19:25:46.087Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Palasthotel by Edward Bock, Katharina Rompf Products: Sunny Search Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin <= 1.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fast-search-powered-by-solr/wordpress-sunny-search-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32596 State: PUBLISHED Published: 2023-08-25T10:19:36.357Z Last Updated: 2024-09-24T19:25:36.525Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Wolfgang Ertl Products: weebotLite Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wolfgang Ertl weebotLite plugin <= 1.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/weebotlite/wordpress-weebotlite-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32597 State: PUBLISHED Published: 2023-08-30T11:45:27.890Z Last Updated: 2024-09-24T19:23:53.070Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: I Thirteen Web Solution Products: Video Gallery Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Video Gallery plugin <= 1.0.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/video-slider-with-thumbnails/wordpress-video-gallery-plugin-1-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32598 State: PUBLISHED Published: 2023-08-25T11:14:41.700Z Last Updated: 2024-09-24T19:25:05.378Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: A. R. Jones Products: Featured Image Pro Post Grid Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in A. R. Jones Featured Image Pro Post Grid plugin <= 5.14 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/featured-image-pro/wordpress-featured-image-pro-post-grid-plugin-5-14-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32599 State: PUBLISHED Published: 2024-12-13T14:23:26.551Z Last Updated: 2024-12-13T21:18:17.389Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Bill Minozzi Products: reCAPTCHA for all Problem Types: CWE-862 Description: Missing Authorization vulnerability in Bill Minozzi reCAPTCHA for all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects reCAPTCHA for all: from n/a through 1.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/recaptcha-for-all/vulnerability/wordpress-recaptcha-for-all-plugin-1-22-broken-access-control-vulnerability?_
ess/plugin/recaptcha-for-all/vulnerability/wordpress-recaptcha-for-all-plugin-1-22-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32600 State: PUBLISHED Published: 2023-08-05T23:00:33.905Z Last Updated: 2024-09-25T16:52:12.279Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rank Math Products: Rank Math SEO Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Rank Math SEO plugin <= 1.0.119 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/seo-by-rank-math/wordpress-rank-math-seo-plugin-1-0-119-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32601 State: PUBLISHED Published: 2024-12-13T14:23:27.127Z Last Updated: 2024-12-13T18:47:35.107Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Booking Ultra Pro Products: Booking Ultra Pro Problem Types: CWE-862 Description: Missing Authorization vulnerability in Booking Ultra Pro Booking Ultra Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Ultra Pro: from n/a through 1.1.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/booking-ultra-pro/vulnerability/wordpress-booking-ultra-pro-appointments-booking-calendar-plugin-
abase/wordpress/plugin/booking-ultra-pro/vulnerability/wordpress-booking-ultra-pro-appointments-booking-calendar-plugin-plugin-1-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32602 State: PUBLISHED Published: 2023-11-09T20:59:05.972Z Last Updated: 2024-09-03T18:06:01.411Z Vendors: LOKALYZE Products: CALL ME NOW Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in LOKALYZE CALL ME NOW plugin <= 3.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/lokalyze-call-now/wordpress-call-me-now-plugin-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32603 State: PUBLISHED Published: 2023-08-25T11:19:50.781Z Last Updated: 2024-09-24T19:24:57.854Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: RedNao Products: Donations Made Easy – Smart Donations Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/smart-donations/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32604 State: PUBLISHED Published: 2023-06-26T21:57:14.354Z Last Updated: 2024-10-21T21:11:38.297Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32605. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/
CVE ID: CVE-2023-32605 State: PUBLISHED Published: 2023-06-26T21:57:26.284Z Last Updated: 2024-12-05T14:39:59.932Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32604. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/
CVE ID: CVE-2023-32607 State: PUBLISHED Published: 2023-06-30T02:14:54.146Z Last Updated: 2024-12-05T15:25:31.382Z Vendors: Implem Inc. Products: Pleasanter (Community Edition and Enterprise Edition) Problem Types: Cross-site scripting (XSS) Description: Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pleasanter.org/archives/vulnerability-update-202306 - https://jvn.jp/en/jp/JVN97818024/
CVE ID: CVE-2023-32608 State: PUBLISHED Published: 2023-06-30T02:15:52.270Z Last Updated: 2024-12-05T15:23:26.469Z Vendors: Implem Inc. Products: Pleasanter (Community Edition and Enterprise Edition) Problem Types: Directory traversal Description: Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to alter an arbitrary file on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pleasanter.org/archives/vulnerability-update-202306 - https://jvn.jp/en/jp/JVN97818024/
CVE ID: CVE-2023-32609 State: PUBLISHED Published: 2023-08-11T02:37:32.969Z Last Updated: 2024-10-01T20:45:59.157Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel Unite(R) android application Problem Types: information disclosure, CWE-284 Description: Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00932.html
CVE ID: CVE-2023-32610 State: PUBLISHED Published: 2023-06-29T00:57:08.509Z Last Updated: 2024-11-26T20:21:40.414Z Vendors: SYNCK GRAPHICA Products: Mailform Pro CGI Problem Types: Denial-of-service (DoS) Description: Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synck.com/blogs/news/newsroom/detail_1686638620.html - https://www.synck.com/downloads/cgi-perl/mailformpro/feature_1361268679.html - https://jvn.jp/en/jp/JVN70502982/index.html
CVE ID: CVE-2023-32611 State: PUBLISHED Published: 2023-09-14T19:07:19.011Z Last Updated: 2025-02-13T16:54:50.478Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: glib2, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Extra Packages for Enterprise Linux, Fedora 38, Fedora 37 Problem Types: CWE-400 Description: A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.
g, leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-32611 - https://bugzilla.redhat.com/show_bug.cgi?id=2211829 - https://gitlab.gnome.org/GNOME/glib/-/issues/2797 - https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html - https://security.netapp.com/advisory/ntap-20231027-0005/ - https://security.gentoo.org/glsa/202311-18
CVE ID: CVE-2023-32612 State: PUBLISHED Published: 2023-06-30T04:01:42.987Z Last Updated: 2024-11-27T15:27:50.171Z Vendors: WAVLINK TECHNOLOGY Ltd. Products: WL-WN531AX2 Problem Types: Client-side enforcement of server-side security Description: Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wavlink.com/en_us/firmware/details/932108ffc5.html - https://jvn.jp/en/jp/JVN78634340/
CVE ID: CVE-2023-32613 State: PUBLISHED Published: 2023-06-30T04:02:25.928Z Last Updated: 2024-12-05T15:21:58.594Z Vendors: WAVLINK TECHNOLOGY Ltd. Products: WL-WN531AX2 Problem Types: Exposure of resource to wrong sphere Description: Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wavlink.com/en_us/firmware/details/932108ffc5.html - https://jvn.jp/en/jp/JVN78634340/
CVE ID: CVE-2023-32614 State: PUBLISHED Published: 2023-09-25T15:22:34.963Z Last Updated: 2025-11-04T19:16:20.226Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Accusoft Products: ImageGear Problem Types: CWE-124 Description: A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1749