Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
user supplied attributes like 'before' and 'after'. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aa5f7f2a-c7b7-4339-a608-51fd684c18bf?source=cve - https://plugins.trac.wordpress.org/changeset/2963794
CVE ID: CVE-2023-4839 State: PUBLISHED Published: 2024-03-13T01:57:27.155Z Last Updated: 2024-08-02T07:38:00.738Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: wpgmaps Products: WP Go Maps (formerly WP Google Maps) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Go Maps for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in
ossible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/208c5ed1-879f-45ea-833e-d2e54c4f063f?source=cve - https://plugins.trac.wordpress.org/changeset/3045434/wp-google-maps/trunk/legacy-core.php
CVE ID: CVE-2023-4840 State: PUBLISHED Published: 2023-09-12T01:52:13.337Z Last Updated: 2025-02-05T19:29:54.077Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: chrisvrichardson Products: MapPress Maps for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mappress' shortcode in versions up to, and including, 2.88.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and
tput escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c3d2c9a4-32f7-484f-86ce-a33ef1174b28?source=cve - https://plugins.trac.wordpress.org/browser/mappress-google-maps-for-wordpress/tags/2.88.4/mappress_map.php#L381 - https://plugins.trac.wordpress.org/browser/mappress-google-maps-for-wordpress/tags/2.88.5/mappress.php?rev=2965022#L919
CVE ID: CVE-2023-4841 State: PUBLISHED Published: 2023-09-14T02:29:50.124Z Last Updated: 2025-02-05T19:28:50.871Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: smashballoon Products: Feeds for YouTube (YouTube video, channel, and gallery plugin) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Feeds for YouTube for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube-feed' shortcode in versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated
sufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/376e2638-a873-4142-ad7d-067ae3333709?source=cve - https://plugins.trac.wordpress.org/browser/feeds-for-youtube/tags/2.1/templates/feed.php#L33 - https://plugins.trac.wordpress.org/changeset/2966017/feeds-for-youtube#file564
CVE ID: CVE-2023-4842 State: PUBLISHED Published: 2023-11-07T11:31:08.348Z Last Updated: 2025-02-05T18:49:18.125Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: warfareplugins Products: Social Sharing Plugin – Social Warfare Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social_warfare' shortcode in versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers w
input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8f5b9aff-0833-4887-ae59-df5bc88c7f91?source=cve - https://plugins.trac.wordpress.org/browser/social-warfare/tags/4.4.1/lib/buttons-panel/SWP_Buttons_Panel_Trait.php#L304 - https://plugins.trac.wordpress.org/browser/social-warfare/tags/4.4.1/lib/buttons-panel/SWP_Buttons_Panel_Trait.php
304 - https://plugins.trac.wordpress.org/browser/social-warfare/tags/4.4.1/lib/buttons-panel/SWP_Buttons_Panel_Trait.php#L877 - https://plugins.trac.wordpress.org/changeset/2982662/social-warfare#file0
CVE ID: CVE-2023-4843 State: PUBLISHED Published: 2023-09-08T16:06:44.528Z Last Updated: 2024-09-25T20:06:07.459Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Pegasystems Products: Pega Platform Problem Types: CWE-74 Description: Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only be modified by an authenticated administrative user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pega.com/support-doc/pega-security-advisory-%E2%80%93-d23-vulnerability-remediation-note?
CVE ID: CVE-2023-4844 State: PUBLISHED Published: 2023-09-08T21:31:04.739Z Last Updated: 2024-09-26T14:50:25.852Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Membership System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file club_edit_query.php. The manipulation of the argument club_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239253 was assigned to this vulnerability. Additional Analyst Notes: - CVE
he public and may be used. The identifier VDB-239253 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239253 - https://vuldb.com/?ctiid.239253 - https://github.com/Meizhi-hua/cve/blob/main/Simple-Membership-System%20club_edit_query.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-4845 State: PUBLISHED Published: 2023-09-09T07:00:08.491Z Last Updated: 2024-08-02T07:38:00.733Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Membership System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file account_edit_query.php. The manipulation of the argument admin_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239254 is the identifier assigned to this vulnerability. Additional Analyst Notes: - C
o the public and may be used. VDB-239254 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239254 - https://vuldb.com/?ctiid.239254 - https://github.com/BigBaos/MemShipVul/blob/main/Simple-Membership-System%20account_edit_query.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-4846 State: PUBLISHED Published: 2023-09-09T07:31:04.377Z Last Updated: 2025-06-25T14:21:50.860Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Membership System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file delete_member.php. The manipulation of the argument mem_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239255. Additional Analyst Notes: - CVE Pr
ublic and may be used. The associated identifier of this vulnerability is VDB-239255. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239255 - https://vuldb.com/?ctiid.239255 - https://github.com/Swpan2018/Vulhub/blob/main/Simple-Membership-System%20delete_member.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-4847 State: PUBLISHED Published: 2023-09-09T08:00:08.461Z Last Updated: 2024-08-02T07:38:00.767Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Book Catalog App Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument book_title/book_author leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239256. Additional Analyst Notes:
n disclosed to the public and may be used. The identifier of this vulnerability is VDB-239256. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239256 - https://vuldb.com/?ctiid.239256 - https://skypoc.wordpress.com/2023/09/04/sourcecodester-simple-book-catalog-app-v1-0-has-multiple-vulnerabilities/
CVE ID: CVE-2023-4848 State: PUBLISHED Published: 2023-09-09T10:00:06.817Z Last Updated: 2024-09-26T14:53:56.089Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Book Catalog App Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file delete_book.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239257 was assigned to this vulnerability. Additional Analyst Notes: - CVE
e public and may be used. The identifier VDB-239257 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239257 - https://vuldb.com/?ctiid.239257 - https://skypoc.wordpress.com/2023/09/04/sourcecodester-simple-book-catalog-app-v1-0-has-multiple-vulnerabilities/
CVE ID: CVE-2023-4849 State: PUBLISHED Published: 2023-09-09T10:31:05.725Z Last Updated: 2024-09-26T14:59:00.276Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-239258 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239258 - https://vuldb.com/?ctiid.239258 - https://github.com/TinkAnet/cve/blob/main/sql.md
CVE ID: CVE-2023-4850 State: PUBLISHED Published: 2023-09-09T11:31:06.449Z Last Updated: 2024-08-02T07:38:00.815Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239259. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id
-239259. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239259 - https://vuldb.com/?ctiid.239259 - https://github.com/RCEraser/cve/blob/main/sql_inject_2.md
CVE ID: CVE-2023-4851 State: PUBLISHED Published: 2023-09-09T12:00:08.226Z Last Updated: 2024-08-02T07:38:00.867Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239260. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239260 - https://vuldb.com
39260. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239260 - https://vuldb.com/?ctiid.239260 - https://github.com/liuqiba12345678/cve/blob/main/sql.md
CVE ID: CVE-2023-4852 State: PUBLISHED Published: 2023-09-09T12:31:04.998Z Last Updated: 2024-08-02T07:38:00.963Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239261 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id
ability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239261 - https://vuldb.com/?ctiid.239261 - https://github.com/r1pte/cve/blob/main/sql.md
CVE ID: CVE-2023-4853 State: PUBLISHED Published: 2023-09-20T09:47:32.150Z Last Updated: 2025-11-07T10:17:29.266Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Openshift Serverless 1 on RHEL 8, Red Hat build of OptaPlanner 8, Red Hat build of Quarkus 2.13.8.SP2, Red Hat Camel Extensions for Quarkus 2.13.3-1, Red Hat OpenShift Serverless 1.30, RHEL-8 based Middleware Containers, RHINT Camel-K-1.10.2, RHINT Service Registry 2.5.4 GA, RHPAM 7.13.4 async, Red Hat Process Automation 7 Problem Types: CWE-148 Description: A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accep
was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:5170 - https://access.redhat.com/errata/RHSA-2023:5310 - https://access.redhat.com/errata/RHSA-2023:5337 - https://access.redhat.com/errata/RHSA-2023:5446 - https://access.redhat.com/errata/RHSA-2023:5479 - https://access.redhat.com/errata/RHSA-2023:5480
rrata/RHSA-2023:5446 - https://access.redhat.com/errata/RHSA-2023:5479 - https://access.redhat.com/errata/RHSA-2023:5480 - https://access.redhat.com/errata/RHSA-2023:6107 - https://access.redhat.com/errata/RHSA-2023:6112 - https://access.redhat.com/errata/RHSA-2023:7653 - https://access.redhat.com/security/cve/CVE-2023-4853 - https://access.redhat.com/security/vulnerabilities/RHSB-2023-002 - https://bugzilla.redhat.com/show_bug.cgi?id=2238034
CVE ID: CVE-2023-4855 State: PUBLISHED Published: 2024-04-15T17:58:53.588Z Last Updated: 2024-08-02T07:38:00.762Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: SMM, SMM2, FPC Problem Types: CWE-78 Description: A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute unauthorized commands via IPMI. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-140420
CVE ID: CVE-2023-4856 State: PUBLISHED Published: 2024-04-15T17:59:50.197Z Last Updated: 2024-08-02T07:38:00.888Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: SMM, SMM2, FPC Problem Types: CWE-78 Description: A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-140420
CVE ID: CVE-2023-4857 State: PUBLISHED Published: 2024-04-15T18:00:03.660Z Last Updated: 2024-08-02T07:38:00.772Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: SMM, SMM2, FPC Problem Types: CWE-306 Description: An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute certain IPMI calls that could lead to exposure of limited system information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-140420
CVE ID: CVE-2023-4858 State: PUBLISHED Published: 2023-11-06T20:41:21.712Z Last Updated: 2025-02-26T21:22:53.148Z Vendors: Unknown Products: Simple Table Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple Table Manager WordPress plugin through 1.5.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ef8029e0-9282-401a-a77d-10b6656adaa6 - https://github.com
P Vulnrichment: References: - https://wpscan.com/vulnerability/ef8029e0-9282-401a-a77d-10b6656adaa6 - https://github.com/nightcloudos/bug_report/blob/main/vendors/poc2.md
CVE ID: CVE-2023-4859 State: REJECTED Published: N/A Last Updated: 2024-05-23T15:37:48.427Z Description: No description available.
CVE ID: CVE-2023-4860 State: PUBLISHED Published: 2024-07-16T22:30:26.329Z Last Updated: 2024-08-02T07:38:00.739Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/40064341
CVE ID: CVE-2023-4861 State: PUBLISHED Published: 2023-10-16T19:39:21.036Z Last Updated: 2025-04-23T16:11:26.687Z Vendors: Unknown Products: File Manager Pro Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7fa03f00-25c7-4e40-8592-bb4001ce019d
CVE ID: CVE-2023-4862 State: PUBLISHED Published: 2023-10-16T19:38:56.312Z Last Updated: 2024-08-02T07:38:00.803Z Vendors: Unknown Products: File Manager Pro Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS by high-privilege users. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/81821bf5-69e1-4005-b3eb-d541490909cc
CVE ID: CVE-2023-4863 State: PUBLISHED Published: 2023-09-12T14:24:59.275Z Last Updated: 2025-10-21T23:05:38.429Z Vendors: Google Products: Chrome, libwebp Problem Types: Heap buffer overflow Description: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html - https://crbug.com/1479274 - https://en.bandisoft.com/honeyview/history/ - https://stackdiary.
date-for-desktop_11.html - https://crbug.com/1479274 - https://en.bandisoft.com/honeyview/history/ - https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/ - https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/ - https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863 - https://security-tracker.debian.org/tracker/CVE-2023-4863 - https://bugzilla.suse.com/show_bug.cgi?id=1215231 - https://news.ycombinator.com/item?id=37478403 - https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/ - https://www.debian.org/secur
ngcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/ - https://www.debian.org/security/2023/dsa-5496 - https://www.debian.org/security/2023/dsa-5497 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/ - https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html - https://lists.fedoraproject.org/archives/list/pack