Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-29062 State: PUBLISHED Published: 2023-11-28T20:34:22.945Z Last Updated: 2024-08-02T14:00:15.040Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Becton, Dickinson and Company (BD) Products: FACSChorus Problem Types: CWE-287 Description: The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use of LLMNR, MBT-NS, or MDNS and will result in NTLMv2 hashes being sent to a malicious entity position on the local network. These hashes can subsequently be attacked through br
hes being sent to a malicious entity position on the local network. These hashes can subsequently be attacked through brute force and cracked if a weak password is used. This attack would only apply to domain joined systems. Additional Analyst Notes: - CVE Program Container: References: - https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE ID: CVE-2023-29063 State: PUBLISHED Published: 2023-11-28T20:34:59.290Z Last Updated: 2024-08-02T14:00:14.934Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Becton, Dickinson and Company (BD) Products: FACSChorus Problem Types: CWE-1299 Description: The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup. Additional Analyst Notes: - CVE Program Container: References: - https://www.bd.com/en-us/about-b
on RAM during startup. Additional Analyst Notes: - CVE Program Container: References: - https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE ID: CVE-2023-29064 State: PUBLISHED Published: 2023-11-28T20:35:30.214Z Last Updated: 2024-10-11T17:57:54.519Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Becton, Dickinson and Company (BD) Products: FACSChorus Problem Types: CWE-798 Description: The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE ID: CVE-2023-29065 State: PUBLISHED Published: 2023-11-28T20:35:59.061Z Last Updated: 2024-12-02T19:28:37.461Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Becton, Dickinson and Company (BD) Products: FACSChorus Problem Types: CWE-277 Description: The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be used to alter or destroy data stored in the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschoru
CVE ID: CVE-2023-29066 State: PUBLISHED Published: 2023-11-28T20:36:13.494Z Last Updated: 2024-08-02T14:00:15.314Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Becton, Dickinson and Company (BD) Products: FACSChorus Problem Types: CWE-266 Description: The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders. Additional Analyst Notes: - CVE Program Container: References: - https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software
CVE ID: CVE-2023-29067 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:02:40.845Z Vendors: n/a Products: Autodesk AutoCAD Problem Types: Memory Corruption Write Description: A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005
CVE ID: CVE-2023-29068 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-05T14:41:43.199Z Vendors: n/a Products: Autodesk products Problem Types: memory corruption vulnerability Description: A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0009
CVE ID: CVE-2023-29069 State: PUBLISHED Published: 2023-11-22T06:26:45.699Z Last Updated: 2024-08-02T14:00:16.187Z Vendors: Autodesk Products: Desktop Connector Description: A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs. These files may then have elevated privileges leading to a Privilege Escalation vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0013
CVE ID: CVE-2023-29073 State: PUBLISHED Published: 2023-11-23T03:07:13.478Z Last Updated: 2024-08-02T14:00:15.309Z Vendors: Autodesk Products: AutoCAD, Advance Steel and Civil 3D Problem Types: CWE-122 Description: A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018
CVE ID: CVE-2023-29074 State: PUBLISHED Published: 2023-11-23T03:36:41.944Z Last Updated: 2024-08-02T14:00:15.859Z Vendors: Autodesk Products: AutoCAD, Advance Steel and Civil 3D Problem Types: CWE-787 Description: A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018
CVE ID: CVE-2023-29075 State: PUBLISHED Published: 2023-11-23T03:39:44.267Z Last Updated: 2024-10-15T17:46:11.626Z Vendors: Autodesk Products: AutoCAD, Advance Steel and Civil 3D Problem Types: CWE-787 Description: A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018
CVE ID: CVE-2023-29076 State: PUBLISHED Published: 2023-11-23T03:45:53.401Z Last Updated: 2024-12-02T20:32:57.620Z Vendors: Autodesk Products: AutoCAD, Advance Steel and Civil 3D Description: A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018
CVE ID: CVE-2023-29078 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2023-29079 State: REJECTED Published: N/A Last Updated: 2023-05-29T00:00:00 Description: No description available.
CVE ID: CVE-2023-29080 State: PUBLISHED Published: 2025-01-30T17:41:55.526Z Last Updated: 2025-02-12T17:03:46.935Z Vendors: Revenera Products: InstallShield Problem Types: CWE-552 Description: Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or InstallScript MSI project extracting few binaries to a predefined writable folder during installation time. The standard user account has write access to these files and folders, hence replacing them during installation time can lead to a DLL hijacking vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://commun
n lead to a DLL hijacking vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.revenera.com/s/article/cve-2023-29080-security-patch-for-the-possible-privileged-escalation-scenarios-identified-in-installshield-nbsp
CVE ID: CVE-2023-29081 State: PUBLISHED Published: 2024-01-26T20:02:50.978Z Last Updated: 2025-05-29T15:12:06.187Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Revenera Products: InstallShield Problem Types: CWE-276 Description: A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-Inst
- CISA ADP Vulnrichment: References: - https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-InstallShield-Symlink-Vulnerability-Affecting/ta-p/305052
CVE ID: CVE-2023-29084 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:27:41.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://manageengine.com - https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-29084.html - http://packetstormsecurity.com/files/172755/ManageEngine-ADManager-Plus-Command-Injection.html
CVE ID: CVE-2023-29085 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T21:07:04.937Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP status line. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product
gram Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - http://packetstormsecurity.com/files/172288/Shannon-Baseband-SIP-Status-Line-Stack-Buffer-Overflow.html
CVE ID: CVE-2023-29086 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T21:06:11.359Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Min-SE header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/produ
rogram Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - http://packetstormsecurity.com/files/172293/Shannon-Baseband-SIP-Min-SE-Header-Stack-Buffer-Overflow.html
CVE ID: CVE-2023-29087 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T15:07:05.262Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Retry-After header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/
CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - http://packetstormsecurity.com/files/172295/Shannon-Baseband-SIP-Retry-After-Header-Heap-Buffer-Overflow.html
CVE ID: CVE-2023-29088 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T15:06:22.205Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Session-Expires header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-supp
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - http://packetstormsecurity.com/files/172289/Shannon-Baseband-SIP-Session-Expires-Header-Stack-Buffer-Overflow.html
CVE ID: CVE-2023-29089 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T15:04:58.291Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding SIP multipart messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/pro
Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - http://packetstormsecurity.com/files/172292/Shannon-Baseband-Negative-Size-Memcpy-Out-Of-Bounds-Read.html
CVE ID: CVE-2023-29090 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T15:03:55.744Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Via header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-
ram Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - http://packetstormsecurity.com/files/172287/Shannon-Baseband-Via-Header-Decoder-Stack-Buffer-Overflow.html
CVE ID: CVE-2023-29091 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:32:45.193Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-securit
tainer: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - http://packetstormsecurity.com/files/172282/Shannon-Baseband-SIP-URI-Decoder-Stack-Buffer-Overflow.html
CVE ID: CVE-2023-29092 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-28T19:55:44.482Z Severity: LOW (CVSS 3.1 CVSS:3.1/AC:L/AV:P/A:L/C:L/I:N/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource can occur due to improper handling of parameters while binding a network interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-29093 State: PUBLISHED Published: 2023-06-26T05:33:47.271Z Last Updated: 2024-10-10T17:11:42.074Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PI Websolution Products: Conditional cart fee Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PI Websolution Conditional cart fee plugin <= 1.0.96 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/conditional-extra-fees-for-woocommerce/wordpress-conditional-extra-fees-for-woocommerce-plugin-1-0-96-cross-site-scriptin
onditional-extra-fees-for-woocommerce/wordpress-conditional-extra-fees-for-woocommerce-plugin-1-0-96-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29094 State: PUBLISHED Published: 2023-04-07T12:59:29.606Z Last Updated: 2025-01-10T18:56:59.898Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PI Websolution Products: Product page shipping calculator for WooCommerce Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product page shipping calculator for WooCommerce plugin <= 1.3.20 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/product-page-shipping-calculator-for-woocommerce/wordpress-product-page-shipping-calculator-for-wooco
base/vulnerability/product-page-shipping-calculator-for-woocommerce/wordpress-product-page-shipping-calculator-for-woocommerce-plugin-1-3-20-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29095 State: PUBLISHED Published: 2023-07-10T13:08:33.885Z Last Updated: 2024-10-17T15:48:46.139Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: David F. Carr Products: RSVPMaker Problem Types: CWE-89 Description: Auth. (admin+) SQL Injection (SQLi) vulnerability in David F. Carr RSVPMaker plugin < 10.5.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rsvpmaker/wordpress-rsvpmaker-plugin-10-5-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-29096 State: PUBLISHED Published: 2023-12-20T17:16:06.155Z Last Updated: 2024-08-02T14:00:15.848Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: BestWebSoft Products: Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a through 1.7.0. Additional Analyst Notes: - CVE Program Container: References: -
Database Plugin For WordPress: from n/a through 1.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/contact-form-to-db/wordpress-contact-form-to-db-by-bestwebsoft-plugin-1-7-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-29097 State: PUBLISHED Published: 2023-08-14T13:46:57.849Z Last Updated: 2024-09-25T16:44:00.503Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: a3rev Software Products: a3 Portfolio Problem Types: CWE-79 Description: Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in a3rev Software a3 Portfolio plugin <= 3.1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/a3-portfolio/wordpress-a3-portfolio-plugin-3-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29098 State: PUBLISHED Published: 2023-05-26T14:28:22.119Z Last Updated: 2024-10-10T17:31:33.485Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ArtistScope Products: CopySafe Web Protection Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ArtistScope CopySafe Web Protection plugin <= 3.13 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-copysafe-web/wordpress-copysafe-web-protection-plugin-3-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29099 State: PUBLISHED Published: 2023-08-08T10:45:48.643Z Last Updated: 2024-09-25T16:46:08.637Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Elegant themes Products: Divi Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Elegant themes Divi theme <= 4.20.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/divi/wordpress-divi-theme-4-20-2-contributor-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29100 State: PUBLISHED Published: 2023-06-23T12:17:10.473Z Last Updated: 2024-10-10T17:12:57.442Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Dream-Theme Products: The7 Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin <= 11.6.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/dt-the7/wordpress-the7-theme-11-6-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve