Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-46558 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:17:24.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/25/1.md
CVE ID: CVE-2023-46559 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:29:56.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/9/1.md
CVE ID: CVE-2023-46560 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:29:39.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/23/1.md
CVE ID: CVE-2023-46562 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:28:21.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/8/1.md
CVE ID: CVE-2023-46563 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:27:41.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/7/1.md
CVE ID: CVE-2023-46564 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:02:34.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/6/1.md
CVE ID: CVE-2023-46565 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-09-06T19:02:56.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in pkg/server/fsm.go. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/osrg/gobgp/issues/2725
CVE ID: CVE-2023-46566 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T20:45:42.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in msoulier tftpy commit 467017b844bf6e31745138a30e2509145b0c529c allows a remote attacker to cause a denial of service via the parse function in the TftpPacketFactory class. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/msoulier/tftpy/issues/140
CVE ID: CVE-2023-46569 State: PUBLISHED Published: 2023-10-28T00:00:00 Last Updated: 2024-09-09T19:51:25.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/issues/22334 - https://gist.github.com/gandalf4a/afeaf8cc958f95876f0ee245b8a002e8
CVE ID: CVE-2023-46570 State: PUBLISHED Published: 2023-10-28T00:00:00 Last Updated: 2024-09-09T19:52:40.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/issues/22333 - https://gist.github.com/gandalf4a/d7fa58f1b3418ef08ad244acccc10ba6
CVE ID: CVE-2023-46574 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T17:54:08.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OraclePi/repo/blob/main/totolink%20A3700R/1/A3700R%20%20V9.1.2u.6165_20211012%20vuln.md
CVE ID: CVE-2023-46575 State: PUBLISHED Published: 2023-11-24T00:00:00 Last Updated: 2024-08-02T20:45:42.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “order” parameter Additional Analyst Notes: - CVE Program Container: References: - https://meshery.io - https://github.com/meshery/meshery/pull/9372 - https://github.com/meshery/meshery/commit/ffe00967acfe4444a5db08ff3a4cafb9adf6013f - https://github.com/meshery/meshery/compare/v0.6.178...v0.6.179
CVE ID: CVE-2023-46580 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T14:57:05.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46580-Code-Projects-Inventory-Management-1.0-Stored-Cross-Site-Scripting-Vulnerability.md
CVE ID: CVE-2023-46581 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T14:56:28.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46581-Code-Projects-Inventory-Management-1.0-SQL-Injection-Vulnerability.md
CVE ID: CVE-2023-46582 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:06:36.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46582-Code-Projects-Inventory-Management-1.0-SQL-Injection-Vulnerability.md
CVE ID: CVE-2023-46583 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-10T20:04:29.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rumble773/sec-research/blob/main/NiV/CVE-2023-46583.md
CVE ID: CVE-2023-46584 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T13:52:16.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rumble773/sec-research/blob/main/NiV/CVE-2023-46584.md
CVE ID: CVE-2023-46586 State: PUBLISHED Published: 2024-10-09T00:00:00.000Z Last Updated: 2025-03-19T14:33:22.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ltworf/weborf/pull/88 - https://github.com/ltworf/weborf/commit/49824204add55aab0568d90a6b1e7c822d32120d - https://github.com/ltworf/weborf/commit/6f83c3e9ceed8b0d93608fd5d42b53c081057991 - https://github.com/ltworf/weborf/pull/88/commits/7057d254b734dfc9cfb58983f901aa6ec3c94fd4
CVE ID: CVE-2023-46587 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-12T20:09:18.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nasroabd/vulns/tree/main/XnView/2.51.5
CVE ID: CVE-2023-46589 State: PUBLISHED Published: 2023-11-28T15:31:52.366Z Last Updated: 2025-10-29T12:00:24.622Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-444 Description: Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. Older, EOL versions may also be affected. Users are recom
possibility of request smuggling when behind a reverse proxy. Older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr - https://www.openwall.com/lists/oss-security/2023/11/28/2
CVE ID: CVE-2023-46590 State: PUBLISHED Published: 2023-11-14T11:04:22.500Z Last Updated: 2025-01-08T16:19:58.713Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: Siemens OPC UA Modelling Editor (SiOME) Problem Types: CWE-611 Description: A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
XML data and read arbitrary files in the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-197270.pdf
CVE ID: CVE-2023-46595 State: PUBLISHED Published: 2023-11-02T07:47:50.794Z Last Updated: 2025-11-12T08:38:33.676Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Algosec Products: Algosec FireFlow Problem Types: CWE-79 Description: Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can lead to relay domain attacks. Fixed in A32.20 (b570 or above), A32.50 (b390 or above) Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/79.html
CVE ID: CVE-2023-46596 State: PUBLISHED Published: 2024-02-15T06:07:19.393Z Last Updated: 2024-08-02T20:45:42.302Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L) Vendors: Algosec Products: Algosec FireFlow Problem Types: CWE-79 Description: Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60 permits an attacker to initiate an XSS attack by injecting malicious executable scripts into the application's code. Fixed in version A32.20 (b600 and above), A32.50 (b430 and above), A32.60 (b250 and above) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Co
e), A32.50 (b430 and above), A32.60 (b250 and above) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.algosec.com/docs/en/cves/Content/tech-notes/cves/cve-2023-46596.htm
CVE ID: CVE-2023-46601 State: PUBLISHED Published: 2023-11-14T11:04:23.657Z Last Updated: 2025-01-08T16:19:25.775Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: COMOS Problem Types: CWE-284 Description: A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-137900.pdf
CVE ID: CVE-2023-46602 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-17T14:20:21.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/InternationalColorConsortium/DemoIccMAX/pull/53
CVE ID: CVE-2023-46603 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-08-02T20:45:42.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/InternationalColorConsortium/DemoIccMAX/pull/53
CVE ID: CVE-2023-46604 State: PUBLISHED Published: 2023-10-27T14:59:31.046Z Last Updated: 2025-11-03T21:50:00.516Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: Apache Software Foundation Products: Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module Problem Types: CWE-502 Description: The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on
class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt - https://www.openwall.com/lists/oss-security/2023/10/27/5 - https://security.netapp.com/advisory/ntap-20231110-0010/ - https://packetstormsecurity.com/files/175676/Apache-ActiveMQ-Unauthenticated-Remote-Code-Execution.html - https://lists.debian.org/debian-lts
curity.com/files/175676/Apache-ActiveMQ-Unauthenticated-Remote-Code-Execution.html - https://lists.debian.org/debian-lts-announce/2023/11/msg00013.html - http://seclists.org/fulldisclosure/2024/Apr/18
CVE ID: CVE-2023-46605 State: PUBLISHED Published: 2025-01-02T12:00:18.293Z Last Updated: 2025-01-03T19:08:47.707Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Ruslan Suhar Products: Convertful – Your Ultimate On-Site Conversion Tool Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Convertful – Your Ultimate On-Site Conversion Tool: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/convertful/
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/convertful/vulnerability/wordpress-convertful-your-ultimate-on-site-conversion-tool-plugin-2-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-46606 State: PUBLISHED Published: 2025-01-02T12:00:18.952Z Last Updated: 2025-01-03T19:05:34.018Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: AtomChat Products: AtomChat Problem Types: CWE-862 Description: Missing Authorization vulnerability in AtomChat AtomChat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/atomchat/vulnerability/wordpress-atomchat-plugin-1-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-46607 State: PUBLISHED Published: 2025-01-02T12:00:19.580Z Last Updated: 2025-01-03T19:05:27.075Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WP iCal Availability Products: WP iCal Availability Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP iCal Availability WP iCal Availability allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP iCal Availability: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-ical-availability/vulnerability/wordpress-wp-ical-availability-plugin-1-0-3-brok
hstack.com/database/wordpress/plugin/wp-ical-availability/vulnerability/wordpress-wp-ical-availability-plugin-1-0-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-46608 State: PUBLISHED Published: 2025-01-02T12:00:20.249Z Last Updated: 2025-01-03T19:05:20.220Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WPDO Products: DoLogin Security Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPDO DoLogin Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DoLogin Security: from n/a through 3.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dologin/vulnerability/wordpress-dologin-security-plugin-3-7-1-multiple-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-46609 State: PUBLISHED Published: 2025-01-02T12:00:20.875Z Last Updated: 2025-01-03T19:05:10.393Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: FeedFocal Products: FeedFocal Problem Types: CWE-862 Description: Missing Authorization vulnerability in FeedFocal FeedFocal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FeedFocal: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/feedfocal/vulnerability/wordpress-feedfocal-plugin-1-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-46610 State: PUBLISHED Published: 2025-01-02T12:00:21.498Z Last Updated: 2025-01-03T19:05:03.615Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: quillforms.com Products: Quill Forms Problem Types: CWE-862 Description: Missing Authorization vulnerability in quillforms.com Quill Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quill Forms: from n/a through 3.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quillforms/vulnerability/wordpress-quill-forms-plugin-3-3-0-broken-access-control-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-46611 State: PUBLISHED Published: 2025-01-02T12:00:22.156Z Last Updated: 2025-01-02T17:17:59.853Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: yourownprogrammer Products: YOP Poll Problem Types: CWE-305 Description: Authentication Bypass by Primary Weakness vulnerability in yourownprogrammer YOP Poll allows Authentication Bypass.This issue affects YOP Poll: from n/a through 6.5.28. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yop-poll/vulnerability/wordpress-yop-poll-plugin-6-5-28-vote-manipulation-due-to-broken-captcha-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-46612 State: PUBLISHED Published: 2025-01-02T12:00:22.765Z Last Updated: 2025-01-02T14:52:08.340Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: codedrafty Products: Mediabay Problem Types: CWE-862 Description: Missing Authorization vulnerability in codedrafty Mediabay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mediabay: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mediabay-lite/vulnerability/wordpress-mediabay-plugin-1-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-46613 State: PUBLISHED Published: 2023-11-08T15:12:50.632Z Last Updated: 2024-10-29T18:31:45.760Z Vendors: Jens Kuerschner Products: Add to Calendar Button Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jens Kuerschner Add to Calendar Button plugin <= 1.5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/add-to-calendar-button/wordpress-add-to-calendar-button-plugin-1-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-46614 State: PUBLISHED Published: 2023-11-09T18:06:06.771Z Last Updated: 2024-09-03T18:44:26.033Z Vendors: Mat Bao Corp Products: WP Helper Premium Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mat Bao Corp WP Helper Premium plugin <= 4.5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-helper-lite/wordpress-wp-helper-premium-plugin-4-5-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve