Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37833 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-12T14:27:24.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed by privileged users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strik3r0x1/Vulns/blob/main/BAC%20leads%20to%20access%20Traps%20configurations.md
CVE ID: CVE-2023-37835 State: REJECTED Published: N/A Last Updated: 2023-11-07T19:23:46.943108 Description: No description available.
CVE ID: CVE-2023-37836 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T19:56:42.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thorfdbg/libjpeg/issues/87#BUG1
CVE ID: CVE-2023-37837 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T19:07:51.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thorfdbg/libjpeg/issues/87#BUG0
CVE ID: CVE-2023-37839 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T19:07:06.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yezere/src/blob/main/Dedecms%20v5.7.109%20Background%20Command%20Execution%20Vulnerability.md
CVE ID: CVE-2023-37847 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T16:12:59.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://novel-plus.com - https://novel.xxyopen.com/index.htm - https://github.com/KingBangQ/CVE-2023-37847/blob/main/README.md
CVE ID: CVE-2023-37849 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T19:04:34.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://heegong.github.io/posts/Local-privilege-escalation-in-Panda-Dome-VPN-for-Windows-Installer/ - https://www.pandasecurity.com/en/support/card?id=100080 - https://www.pandasecurity.com/en/homeusers/vpn/
CVE ID: CVE-2023-37850 State: REJECTED Published: N/A Last Updated: 2023-07-17T00:00:00 Description: No description available.
CVE ID: CVE-2023-37855 State: PUBLISHED Published: 2023-08-09T06:37:07.620Z Last Updated: 2024-10-08T14:57:56.693Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-610 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37856 State: PUBLISHED Published: 2023-08-09T06:36:49.331Z Last Updated: 2024-10-08T15:03:25.682Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-610 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisor
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37857 State: PUBLISHED Published: 2023-08-09T06:37:26.551Z Last Updated: 2024-10-08T14:56:47.591Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-798 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing the attacker to create valid session cookies. These session-cookies created by the attacker are not sufficient to obtain a valid session on the device. Additional Analyst Notes:
on-cookies created by the attacker are not sufficient to obtain a valid session on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37858 State: PUBLISHED Published: 2023-08-09T06:37:48.351Z Last Updated: 2024-08-02T17:23:27.783Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-311 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cryptographic keys allowing to decrypt an encrypted web application login password. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37859 State: PUBLISHED Published: 2023-08-09T06:36:07.644Z Last Updated: 2024-08-02T17:23:27.576Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-269 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowledge of the SNMPv2 r/w community string to execute system commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37860 State: PUBLISHED Published: 2023-08-09T06:34:56.332Z Last Updated: 2024-10-10T17:50:45.168Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-862 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37861 State: PUBLISHED Published: 2023-08-09T06:34:36.113Z Last Updated: 2024-10-10T17:59:20.403Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-78 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specially crafted HTTP POST when uploading a certificate to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-01
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37862 State: PUBLISHED Published: 2023-08-09T06:35:14.704Z Last Updated: 2024-10-10T17:43:31.957Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-862 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This might cause certificate errors for SSL-connections and might result in a partial denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cer
denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37863 State: PUBLISHED Published: 2023-08-09T06:36:28.150Z Last Updated: 2024-10-10T18:24:06.844Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-78 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37864 State: PUBLISHED Published: 2023-08-09T06:35:48.425Z Last Updated: 2024-10-10T17:34:41.503Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-494 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-37865 State: PUBLISHED Published: 2024-06-04T07:11:42.671Z Last Updated: 2024-08-02T17:23:27.597Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IP2Location Products: Download IP2Location Country Blocker Problem Types: CWE-290 Description: Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ip2location-country-blocke
ichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ip2location-country-blocker/wordpress-ip2location-country-blocker-plugin-2-29-1-ip-bypass-vulnerability-vulnerability?_s_id=cve
CVE ID: CVE-2023-37866 State: PUBLISHED Published: 2024-05-17T06:48:15.773Z Last Updated: 2024-08-02T17:23:27.738Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Crocoblock Products: JetFormBuilder Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in Crocoblock JetFormBuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/jetformbuilder/wordpress-jetformbuilder-plugin-3-0-8-authenticated-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2023-37867 State: PUBLISHED Published: 2023-11-30T14:11:23.800Z Last Updated: 2024-08-02T17:23:26.978Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: YetAnotherStarsRating.com Products: YASR – Yet Another Star Rating Plugin for WordPress Problem Types: CWE-367 Description: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue affects YASR – Yet Another Star Rating Plugin for WordPress: from n/a through 3.3.8. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/yet-another-stars-rating/wordp
tes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/yet-another-stars-rating/wordpress-yasr-yet-another-stars-rating-plugin-3-3-8-race-condition-vulnerability?_s_id=cve
CVE ID: CVE-2023-37868 State: PUBLISHED Published: 2023-11-30T15:17:50.393Z Last Updated: 2024-08-02T17:23:27.640Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Leap13 Products: Premium Addons PRO Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Leap13 Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/premium-addons-pro/wordpress-premium-addons-pro-plugin-2-9-0-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2023-37869 State: PUBLISHED Published: 2024-06-19T13:46:57.466Z Last Updated: 2024-08-02T17:23:27.570Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Premium Addons Products: Premium Addons PRO Problem Types: CWE-862 Description: Missing Authorization vulnerability in Premium Addons Premium Addons PRO.This issue affects Premium Addons PRO: from n/a through 2.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/premium-addons-pro/wordpress-premium-addons-pro-plugin-2-9-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37870 State: PUBLISHED Published: 2024-06-19T12:29:20.560Z Last Updated: 2024-08-02T17:23:27.769Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Woo Products: WooCommerce Warranty Requests Problem Types: CWE-862 Description: Missing Authorization vulnerability in Woo WooCommerce Warranty Requests.This issue affects WooCommerce Warranty Requests: from n/a through 2.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-warranty/wordpress-woocommerce-warranty-requests-plugin-2-1-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37871 State: PUBLISHED Published: 2023-12-20T13:57:10.560Z Last Updated: 2024-08-02T17:23:27.562Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: WooCommerce Products: GoCardless Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce GoCardless.This issue affects GoCardless: from n/a through 2.5.6. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-gateway-gocardless/wordpress-woocommerce-gocardless-gateway-plugin-2-5-6-unauthenticated-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2023-37872 State: PUBLISHED Published: 2024-06-19T13:44:31.215Z Last Updated: 2024-08-02T17:23:27.654Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Woo Products: WooCommerce Ship to Multiple Addresses Problem Types: CWE-862 Description: Missing Authorization vulnerability in Woo WooCommerce Ship to Multiple Addresses.This issue affects WooCommerce Ship to Multiple Addresses: from n/a through 3.8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-5-broken-acce
bility/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37873 State: PUBLISHED Published: 2023-08-05T22:18:45.682Z Last Updated: 2024-09-25T16:57:02.281Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WooCommerce Products: Shipping Multiple Addresses Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-5-reflected-cross-site-scripting-xss-vulnerability?_s_id
ses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37874 State: PUBLISHED Published: 2023-08-05T22:14:19.760Z Last Updated: 2024-09-25T16:57:13.479Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Dimitar Ivanov Products: HTTP Headers Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dimitar Ivanov HTTP Headers plugin <= 1.18.11 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/http-headers/wordpress-http-headers-plugin-1-18-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37875 State: PUBLISHED Published: 2023-09-12T08:17:22.310Z Last Updated: 2024-09-24T20:36:33.108Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Wing FTP Server Products: Wing FTP Server Problem Types: CWE-116 Description: Improper encoding or escaping of output in Wing FTP Server (User Web Client) allows Cross-Site Scripting (XSS).This issue affects Wing FTP Server: <= 7.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wftpserver.com/serverhistory.htm
CVE ID: CVE-2023-37878 State: PUBLISHED Published: 2023-09-12T08:16:36.910Z Last Updated: 2024-09-26T14:13:48.788Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Wing FTP Server Products: Wing FTP Server Problem Types: CWE-276 Description: Insecure default permissions in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wftpserver.com/serverhistory.htm
CVE ID: CVE-2023-37879 State: PUBLISHED Published: 2023-09-12T08:15:31.668Z Last Updated: 2024-09-24T20:47:19.799Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Wing FTP Server Products: Wing FTP Server Problem Types: CWE-922 Description: Insecure storage of sensitive information in Wing FTP Server (User Web Client) allows information elicitation.This issue affects Wing FTP Server: <= 7.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wftpserver.com/serverhistory.htm
CVE ID: CVE-2023-37881 State: PUBLISHED Published: 2023-09-12T08:14:20.704Z Last Updated: 2024-09-25T15:24:43.792Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Wing FTP Server Products: Wing FTP Server Problem Types: CWE-863 Description: Weak access control in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wftpserver.com/serverhistory.htm
CVE ID: CVE-2023-37885 State: PUBLISHED Published: 2024-03-25T04:32:51.401Z Last Updated: 2024-08-02T17:23:27.653Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: InspiryThemes Products: RealHomes Problem Types: CWE-862 Description: Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/realhomes/wordpress-realhomes-theme-4-0-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37886 State: PUBLISHED Published: 2024-03-25T04:29:42.445Z Last Updated: 2024-08-02T17:23:27.493Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: InspiryThemes Products: RealHomes Problem Types: CWE-862 Description: Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/realhomes/wordpress-realhomes-theme-4-0-2-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-37887 State: PUBLISHED Published: 2024-12-13T14:23:49.149Z Last Updated: 2024-12-13T18:33:37.574Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: WPSchoolPress Team Products: WPSchoolPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPSchoolPress Team WPSchoolPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSchoolPress: from n/a through 2.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpschoolpress/vulnerability/wordpress-wpschoolpress-plugin-2-2-3-broken-access-control-vulnerability?_s_id=c
ress/plugin/wpschoolpress/vulnerability/wordpress-wpschoolpress-plugin-2-2-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37888 State: PUBLISHED Published: 2024-05-17T06:48:40.863Z Last Updated: 2024-08-02T17:23:27.670Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: By Averta Products: Shortcodes and extra features for Phlox theme Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and extra features for Phlox theme allows PHP Local File Inclusion.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.14.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnera
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/auxin-elements/wordpress-phlox-core-elements-plugin-2-14-0-unauthenticated-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2023-37889 State: PUBLISHED Published: 2023-07-18T12:25:06.278Z Last Updated: 2024-09-30T13:08:02.371Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WPAdmin Products: WPAdmin AWS CDN Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPAdmin WPAdmin AWS CDN plugin <= 2.0.13 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/aws-cdn-by-wpadmin/wordpress-wpadmin-aws-cdn-plugin-2-0-13-cross-site-request-forgery-csrf?_s_id=cve