Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40723 State: PUBLISHED Published: 2025-03-11T14:54:28.770Z Last Updated: 2025-03-12T04:00:49.660Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X) Vendors: Fortinet Products: FortiSIEM Problem Types: CWE-200 Description: An exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.4 and 6.6.0 through 6.6.3 and 6.5.0 through 6.5.1 and 6.4.0 through 6.4.2 and 6.3.0 through 6.3.3 and 6.2.0 through 6.2.1 and 6.1.0 through 6.1.2 and 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 allows attacker to execute unauthorized code or commands via api
h 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 allows attacker to execute unauthorized code or commands via api request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-117
CVE ID: CVE-2023-40724 State: PUBLISHED Published: 2023-09-12T09:32:24.395Z Last Updated: 2025-02-27T20:56:12.283Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-316 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a memory dump, and get access to credentials, and use it for impersonation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40725 State: PUBLISHED Published: 2023-09-12T09:32:25.460Z Last Updated: 2025-02-27T20:56:05.719Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-209 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40726 State: PUBLISHED Published: 2023-09-12T09:32:26.511Z Last Updated: 2025-02-27T20:55:59.460Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-550 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40727 State: PUBLISHED Published: 2023-09-12T09:32:27.559Z Last Updated: 2025-02-27T20:55:51.804Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-347 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. This could allow an attacker to tamper the application code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40728 State: PUBLISHED Published: 2023-09-12T09:32:28.603Z Last Updated: 2025-02-27T20:55:46.343Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-922 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.s
ndition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40729 State: PUBLISHED Published: 2023-09-12T09:32:29.661Z Last Updated: 2025-02-27T20:55:38.366Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-319 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate, or steal confidential information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/produ
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40730 State: PUBLISHED Published: 2023-09-12T09:32:30.722Z Last Updated: 2025-02-27T20:55:33.063Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-284 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.sie
ition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40731 State: PUBLISHED Published: 2023-09-12T09:32:31.767Z Last Updated: 2025-02-27T20:55:24.812Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-434 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application allows users to upload arbitrary file types. This could allow an attacker to upload malicious files, that could potentially lead to code tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40732 State: PUBLISHED Published: 2023-09-12T09:32:32.841Z Last Updated: 2025-02-27T20:55:18.275Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: QMS Automotive Problem Types: CWE-613 Description: A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-147266.pdf
CVE ID: CVE-2023-40735 State: PUBLISHED Published: 2023-08-21T11:35:44.087Z Last Updated: 2025-07-02T14:49:49.673Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Cavo – Connecting for a Safer World Products: BUTTERFLY BUTTON Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON (Architecture flaw) allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vulsec.org/advisories - https://github.com/
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vulsec.org/advisories - https://github.com/VULSecLabs/Vulnerabilities/blob/main/CVE/CVE-2023-40735.md - https://butterfly-button.web.app/ - https://github.com/TheButterflyButton - https://github.com/TheButterflySDK - https://www.butterfly-button.com/
CVE ID: CVE-2023-40743 State: PUBLISHED Published: 2023-09-05T14:42:13.317Z Last Updated: 2025-02-13T17:08:43.713Z Vendors: Apache Software Foundation Products: Apache Axis Problem Types: CWE-20 Description: ** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to this API method, this could expose the application to DoS, SSRF and even attacks leading to RCE. As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. As a workaround, you ma
1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis 2/Java. As a workaround, you may review your code to verify no untrusted or unsanitized input is passed to "ServiceFactory.getService", or by applying the patch from https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 . The Apache Axis project does not expect to create an Axis 1.x release fixing this problem, though contributors that would like to work towards this are welcome. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 - https://li
er: References: - https://github.com/apache/axis-axis1-java/commit/7e66753427466590d6def0125e448d2791723210 - https://lists.apache.org/thread/gs0qgk2mgss7zfhzdd6ftfjvm4kp7v82 - https://lists.debian.org/debian-lts-announce/2023/10/msg00025.html
CVE ID: CVE-2023-40744 State: REJECTED Published: N/A Last Updated: 2023-10-02T17:15:21.053Z Description: No description available.
CVE ID: CVE-2023-40745 State: PUBLISHED Published: 2023-10-05T18:55:26.192Z Last Updated: 2025-11-20T19:53:48.182Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-190 Description: LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RH
ed buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2289 - https://access.redhat.com/security/cve/CVE-2023-40745 - https://bugzilla.redhat.com/show_bug.cgi?id=2235265
CVE ID: CVE-2023-40747 State: PUBLISHED Published: 2024-03-18T00:32:58.218Z Last Updated: 2025-03-18T19:08:32.049Z Vendors: A.K.I Software Products: pmman.exe (Standard edition), pmman.exe (Pro edition), pmman.exe (Standard + IMAP4 edition), pmman.exe (Pro + IMAP4 edition), pmman.exe (Enterprise edition) Problem Types: Directory traversal Description: Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://akiso
de DocumentRoot. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://akisoftware.com/Vulnerability202301.html - https://jvn.jp/en/jp/JVN92720882/
CVE ID: CVE-2023-40748 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:56:06.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/food-delivery-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40749 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:55:40.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/food-delivery-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40750 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:55:20.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/yacht-listing-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40751 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:54:31.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/fundraising-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40752 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:53:50.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/make-an-offer-widget - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40753 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:53:15.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/ticket-support-script - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40754 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:52:43.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/car-rental-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40755 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:47:09.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widget v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/callback-widget/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40756 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:43:34.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/callback-widget/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40757 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:39:34.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/food-delivery-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40758 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:54:59.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/document-creator/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40759 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:38:49.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/restaurant-booking-system/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40760 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:38:11.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/hotel-booking-system/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40761 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:37:43.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/yacht-listing-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40762 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:37:19.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/fundraising-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40763 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:36:54.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/taxi-booking-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40764 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:36:19.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/car-rental-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40765 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:35:36.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/event-booking-calendar/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40766 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:34:49.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/ticket-support-script/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE ID: CVE-2023-40767 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:31:13.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/make-an-offer-widget/ - https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f