Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30448 State: PUBLISHED Published: 2023-07-08T18:19:59.040Z Last Updated: 2025-02-13T16:49:28.120Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253437 - https://security.netapp.c
com/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253437 - https://security.netapp.com/advisory/ntap-20230731-0007/
CVE ID: CVE-2023-30449 State: PUBLISHED Published: 2023-07-08T18:31:30.940Z Last Updated: 2025-02-13T16:49:28.669Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253439 - https://security.netapp.com/advisory/ntap-202
de/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253439 - https://security.netapp.com/advisory/ntap-20230731-0007/
CVE ID: CVE-2023-30450 State: PUBLISHED Published: 2023-04-08T00:00:00.000Z Last Updated: 2025-02-12T16:22:02.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure (while a cluster is turned off) in order to have TLS on broker RPC ports. NOTE: the fix was also backported to the 22.2 and 22.3 branches. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/redpanda-data/redpanda/pull/7719 - https://githu
am Container: - CISA ADP Vulnrichment: References: - https://github.com/redpanda-data/redpanda/pull/7719 - https://github.com/redpanda-data/redpanda/commit/58795aa07e88e0a63cebf4e1d9fcc717ceef0557 - https://github.com/redpanda-data/redpanda/commit/cf82b99457e2434d3674e424ab560fe201e6c365 - https://github.com/redpanda-data/redpanda/commit/a839056381ea7cd71e68495854e388daf7a08ba7 - https://github.com/redpanda-data/redpanda/compare/v23.1.1...v23.1.2
CVE ID: CVE-2023-30451 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T14:21:44.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in data[sys_file_storage]*[data][sDEF][lDEF][basePath][vDEF]. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/176274/TYPO3-11.5.24-Path-Traversal.html
CVE ID: CVE-2023-30452 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T16:07:07.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MoroSystems EasyMind - Mind Maps plugin before 2.15.0 for Confluence allows persistent XSS when saving a Mind Map with the hyperlink parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://marketplace.atlassian.com/apps/1211267/easymind-mind-maps-for-confluence/version-history - https://y-security.de/news-en/easymind-cross-site-scripting-cve-2023-30452/index.html
CVE ID: CVE-2023-30453 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-12T17:11:09.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://marketplace.atlassian.com/apps/1217030/reminder-for-jira-follow-up-issues?tab=overview&hosting=cloud - https://y-security.de/news-en/reminder-for-jira-cross-site-scripting-cve-2023-30453/index.html
CVE ID: CVE-2023-30454 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T20:35:47.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ebankIT before 7. Document Object Model based XSS exists within the /Security/Transactions/Transactions.aspx endpoint. Users can supply their own JavaScript within the ctl100$ctl00MainContent$TransactionMainContent$accControl$hdnAccountsArray POST parameter that will be passed to an eval() function and executed upon pressing the continue button. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.ebankit.com/blog-press - https://packetstormsecu
Program Container: - CISA ADP Vulnrichment: References: - https://blog.ebankit.com/blog-press - https://packetstormsecurity.com/files/172063/ebankIT-6-Cross-Site-Scripting.html
CVE ID: CVE-2023-30455 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T20:25:37.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ebankIT before 7. A Denial-of-Service attack is possible through the GET parameter EStatementsIds located on the /Controls/Generic/EBMK/Handlers/EStatements/DownloadEStatement.ashx endpoint. The GET parameter accepts over 100 comma-separated e-statement IDs without throwing an error. When this many IDs are supplied, the server takes around 60 seconds to respond and successfully generate the expected ZIP archive (during this time period, no other pages load). A threat actor could issue a request
y generate the expected ZIP archive (during this time period, no other pages load). A threat actor could issue a request to this endpoint with 100+ statement IDs every 30 seconds, potentially resulting in an overload of the server for all users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.ebankit.com/blog-press - https://packetstormsecurity.com/files/172064/ebankIT-6-Denial-Of-Service.html
CVE ID: CVE-2023-30456 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-03-19T15:43:31.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/112e66017bff7f2837030f34c2bc19501e9212d5 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.8 - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - https:/
debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - https://security.netapp.com/advisory/ntap-20230511-0007/ - http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html
CVE ID: CVE-2023-30458 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:00:42.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16308/medicine-tracker-system-php-oop-and-mysql-db-source-code-free-download.html
- https://www.sourcecodester.com/php/16308/medicine-tracker-system-php-oop-and-mysql-db-source-code-free-download.html - https://www.sourcecodester.com/download-code?nid=16308&title=Medicine+Tracker+System+in+PHP+%28OOP%29+and+MySQL+DB+Source+Code+Free+Download - https://github.com/d34dun1c02n/CVE-2023-30458
CVE ID: CVE-2023-30459 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:00:59.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and executing it on the server (via server settings in the administrator control panel on port 8101, by default). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://smartptt.com - https://github.com/Toxich4/CVE-2023-30459
CVE ID: CVE-2023-30463 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:11:09.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tass-belgium/picotcp/releases - https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/
CVE ID: CVE-2023-30464 State: PUBLISHED Published: 2024-09-18T00:00:00 Last Updated: 2024-09-19T18:19:03.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/idealeer/e41c7fb3b661d4262d0b6f21e12168ba
CVE ID: CVE-2023-30465 State: PUBLISHED Published: 2023-04-11T14:35:11.308Z Last Updated: 2025-02-13T16:49:29.206Z Vendors: Apache Software Foundation Products: Apache InLong Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL injection attack, an attacker can extract the username of the user with ID 1 from the "user" table, one character at a time. Users are advised to upgrade to Apache InLong's 1.6.0 or cherry-pi
ID 1 from the "user" table, one character at a time. Users are advised to upgrade to Apache InLong's 1.6.0 or cherry-pick [1] to solve it. https://programmer.help/blogs/jdbc-deserialization-vulnerability-learning.html [1] https://github.com/apache/inlong/issues/7529 https://github.com/apache/inlong/issues/7529 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/mrh4nr3jrlbj6nxkn4q8hddbfh1pnok0 - http://www.openwall.com/lists/oss-security/2023/04/11/2
CVE ID: CVE-2023-30466 State: PUBLISHED Published: 2023-04-28T10:06:26.684Z Last Updated: 2025-01-30T17:16:05.788Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: NVR MS-Nxxxx-xxG, NVR MS-Nxxxx-xxE, NVR MS-Nxxxx-xxT, NVR MS-Nxxxx-xxH , NVR MS-Nxxxx-xxC Problem Types: CWE-640 Description: This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to a weak password reset mechanism at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Su
remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to account takeover on the targeted device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0121
CVE ID: CVE-2023-30467 State: PUBLISHED Published: 2023-04-28T10:12:11.694Z Last Updated: 2025-01-30T17:13:53.409Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Milesight Products: NVR MS-Nxxxx-xxG, NVR MS-Nxxxx-xxE, NVR MS-Nxxxx-xxT, NVR MS-Nxxxx-xxH , NVR MS-Nxxxx-xxC Problem Types: CWE-285 Description: This vulnerability exists in Milesight 4K/H.265 Series NVR models (MS-Nxxxx-xxG, MS-Nxxxx-xxE, MS-Nxxxx-xxT, MS-Nxxxx-xxH and MS-Nxxxx-xxC), due to improper authorization at the Milesight NVR web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful expl
er could exploit this vulnerability by sending a specially crafted http requests on the targeted device. Successful exploitation of this vulnerability could allow remote attacker to perform unauthorized activities on the targeted device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0121
CVE ID: CVE-2023-30469 State: PUBLISHED Published: 2023-05-23T01:02:58.540Z Last Updated: 2025-01-17T16:32:42.936Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N) Vendors: Hitachi Products: Hitachi Ops Center Analyzer Problem Types: CWE-79 Description: Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-115/index.html
CVE ID: CVE-2023-30470 State: PUBLISHED Published: 2023-05-18T21:27:57.350Z Last Updated: 2025-01-21T20:09:25.765Z Vendors: Facebook Products: Hermes Problem Types: CWE-416: Use After Free Description: A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990f737ebb9d9810633502f65ed462b819c09 could have been used by an attacker to achieve remote code execution. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.
are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2023-30470 - https://github.com/facebook/hermes/commit/da8990f737ebb9d9810633502f65ed462b819c09
CVE ID: CVE-2023-30471 State: PUBLISHED Published: 2023-09-27T07:57:00.851Z Last Updated: 2025-02-19T21:23:30.463Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Cornel Raiu Products: WP Search Analytics Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cornel Raiu WP Search Analytics plugin <= 1.4.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/search-analytics/wordpress-wp-search-analytics-plugin-1-4-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30472 State: PUBLISHED Published: 2023-09-27T10:42:38.828Z Last Updated: 2024-09-23T12:50:57.851Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MyThemeShop Products: URL Shortener by MyThemeShop Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin <= 1.0.17 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mts-url-shortener/wordpress-url-shortener-by-mythemeshop-plugin-1-0-17-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30473 State: PUBLISHED Published: 2023-08-16T09:52:38.429Z Last Updated: 2024-09-25T15:01:39.008Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Maxim Glazunov Products: YML for Yandex Market Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov YML for Yandex Market plugin <= 3.10.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yml-for-yandex-market/wordpress-yml-for-yandex-market-plugin-3-10-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30474 State: PUBLISHED Published: 2023-04-16T07:50:49.069Z Last Updated: 2025-01-10T18:54:06.139Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Kilian Evang Products: Ultimate Noindex Nofollow Tool II Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Kilian Evang Ultimate Noindex Nofollow Tool II plugin <= 1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ultimate-noindex-nofollow-tool-ii/wordpress-ultimate-noindex-nofollow-tool-ii-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-30475 State: PUBLISHED Published: 2023-08-14T13:53:31.680Z Last Updated: 2024-08-02T14:48:51.275Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Elliot Sowersby, RelyWP Products: WooCommerce Affiliate Plugin – Coupon Affiliates Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin <= 5.4.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-coupon-usage/wordpress-coupon-affiliates-plugin-5-4-5-reflected-cross-site-scripting-x
ck.com/database/vulnerability/woo-coupon-usage/wordpress-coupon-affiliates-plugin-5-4-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30476 State: PUBLISHED Published: 2024-12-09T11:31:06.995Z Last Updated: 2024-12-09T18:45:53.783Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Sparkle Themes Products: Blogger Buzz Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sparkle Themes Blogger Buzz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Blogger Buzz: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/blogger-buzz/vulnerability/wordpress-blogger-buzz-theme-1-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-30477 State: PUBLISHED Published: 2023-08-14T13:57:33.636Z Last Updated: 2024-09-25T16:43:50.120Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Essitco Products: AFFILIATE Solution Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Essitco AFFILIATE Solution plugin <= 1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/affiliate-solution/wordpress-affiliate-solution-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30478 State: PUBLISHED Published: 2023-11-10T13:42:14.519Z Last Updated: 2024-09-03T17:52:10.203Z Vendors: Tribulant Products: Newsletters Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters plugin <= 4.8.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/newsletters-lite/wordpress-newsletters-plugin-4-8-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-30479 State: PUBLISHED Published: 2024-12-09T11:31:06.204Z Last Updated: 2024-12-09T18:45:59.282Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Stamped.io Products: Stamped.io Product Reviews & UGC for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Stamped.io Stamped.io Product Reviews & UGC for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stamped.io Product Reviews & UGC for WooCommerce: from n/a through 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stampedio-product-r
alyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stampedio-product-reviews/vulnerability/wordpress-stamped-io-product-reviews-ugc-for-woocommerce-plugin-2-3-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-30480 State: PUBLISHED Published: 2024-03-25T04:48:59.703Z Last Updated: 2024-08-02T14:28:51.092Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Sparkle WP Products: Educenter Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sparkle WP Educenter.This issue affects Educenter: from n/a through 1.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/educenter/wordpress-educenter-theme-1-5-1-broken-access-control?_s_id=cve
CVE ID: CVE-2023-30481 State: PUBLISHED Published: 2023-08-10T11:43:13.444Z Last Updated: 2024-09-25T15:08:08.013Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Alexey Golubnichenko Products: AGP Font Awesome Collection Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin <= 3.2.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/agp-font-awesome-collection/wordpress-agp-font-awesome-collection-plugin-3-2-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30482 State: PUBLISHED Published: 2023-08-08T12:11:31.082Z Last Updated: 2024-09-25T16:50:41.657Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: VillaTheme Products: WPBulky Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in VillaTheme WPBulky plugin <= 1.0.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpbulky-wp-bulk-edit-post-types/wordpress-wpbulky-plugin-1-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30483 State: PUBLISHED Published: 2023-08-14T13:42:51.069Z Last Updated: 2024-09-25T16:44:08.957Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Kiboko Labs Products: Watu Quiz Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.9.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/watu/wordpress-watu-quiz-plugin-3-3-9-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve