Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0810 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T14:35:14.175Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: btcpayserver Products: btcpayserver/btcpayserver Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/a48414ea-63d9-453c-b3f3-2c927b71ec68 - https://github.com/btcpayserver/btcpayserver/commit/dffa6accb04df7b80bc584dedef22c9297292ce6
CVE ID: CVE-2023-0811 State: PUBLISHED Published: 2023-03-16T17:41:25.525Z Last Updated: 2025-01-16T21:42:32.824Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Omron , Omron Products: CJ1M SYSMAC CJ-series, CJ1M SYSMAC CS-series , CJ1M SYSMAC CP-series Problem Types: CWE-284 Description: Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or
ing UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01 - https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf
CVE ID: CVE-2023-0812 State: PUBLISHED Published: 2023-05-15T12:15:39.193Z Last Updated: 2025-01-24T20:59:04.022Z Vendors: Unknown Products: Active Directory Integration / LDAP Integration Problem Types: CWE-200 Information Exposure Description: The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0ed5e1b3-f2a3-4eb1-b8ae-d3a62f600107
CVE ID: CVE-2023-0813 State: PUBLISHED Published: 2023-09-15T20:17:41.914Z Last Updated: 2024-09-25T13:35:54.194Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: NETWORK-OBSERVABILITY-1.1.0-RHEL-8 Problem Types: CWE-285 Description: A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in an OpenShift cluster to retrieve flows without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.co
tion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:0786 - https://access.redhat.com/security/cve/CVE-2023-0813 - https://bugzilla.redhat.com/show_bug.cgi?id=2169468
CVE ID: CVE-2023-0814 State: PUBLISHED Published: 2023-02-14T01:13:13.326Z Last Updated: 2025-01-13T17:05:28.945Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: reflectionmedia Products: Profile Builder – User Profile & User Registration Forms Problem Types: CWE-200 Information Exposure Description: The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to sensitive information disclosure via the [user_meta] shortcode in versions up to, and including 3.9.0. This is due to insufficient restriction on sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, w
sensitive user meta values that can be called via that shortcode. This makes it possible for authenticated attackers, with subscriber-level permissions, and above to retrieve sensitive user meta that can be used to gain access to a high privileged user account. This does require the Usermeta shortcode be enabled to be exploited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bbedad66-a5a6-4fb5-b03e-0ecf9fbef19a - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2864329%40profile-builder&new=2864329%40profile-builder&sfp_email=&sfph_mail=
CVE ID: CVE-2023-0815 State: PUBLISHED Published: 2023-02-23T14:52:05.792Z Last Updated: 2025-03-11T18:24:39.053Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: The OpenNMS Group , The OpenNMS Group Products: Meridian, Horizon Problem Types: CWE-532 Description: Potential Insertion of Sensitive Information into Jetty Log Files in multiple versions of OpenNMS Meridian and Horizon could allow disclosure of usernames and passwords if the logging level is set to debug. Users should upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and Horizon installation instructions state that they are intended for installation within an organization's privat
dian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenNMS/opennms/pull/5741/files - https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13
CVE ID: CVE-2023-0816 State: PUBLISHED Published: 2023-03-27T15:37:17.374Z Last Updated: 2025-02-19T16:52:34.177Z Vendors: Unknown Products: Formidable Forms Problem Types: CWE-290 Authentication Bypass by Spoofing Description: The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address of the client, leading to IP Address spoofing and bypass of anti-spam protections. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a281f63f-e295-4666-8a08-01b23cd5a744
CVE ID: CVE-2023-0817 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T14:34:33.147Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: gpac Products: gpac/gpac Problem Types: CWE-126 Description: Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/cb730bc5-d79c-4de6-9e57-10e8c3ce2cf3 - https://github.com/gpac/gpac/commit/be9f8d395bbd196e3812e9cd80708f06bcc206f7
CVE ID: CVE-2023-0818 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T14:32:21.900Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: gpac Products: gpac/gpac Problem Types: CWE-193 Description: Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/038e7472-f3e9-46c2-9aea-d6dafb62a18a - https://github.com/gpac/gpac/commit/377ab25f3e502db2934a9cf4b54739e1c89a02ff - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-0819 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T14:28:01.010Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: gpac Products: gpac/gpac Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/35793610-dccc-46c8-9f55-6a24c621e4ef - https://github.com/gpac/gpac/commit/d067ab3ccdeaa340e8c045a0fd5bcfc22b809e8f - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-0820 State: PUBLISHED Published: 2023-04-03T14:38:25.817Z Last Updated: 2025-02-14T16:53:04.935Z Vendors: Unknown Products: User Role by BestWebSoft Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privilege escalation of any role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b93d9f9d-0fd9-49b8-b465-d32b95351912
CVE ID: CVE-2023-0821 State: PUBLISHED Published: 2023-02-16T21:23:24.500Z Last Updated: 2025-03-18T14:35:44.335Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: HashiCorp Products: Nomad, Nomad Enterprise Problem Types: CWE-409 Description: HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-05-nomad-client-vulnerable-to-decompression-bombs-in-artifact-block/50292
CVE ID: CVE-2023-0822 State: PUBLISHED Published: 2023-02-17T16:46:21.643Z Last Updated: 2025-01-16T21:56:07.791Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-285 Description: The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access privileged functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-298-06
CVE ID: CVE-2023-0823 State: PUBLISHED Published: 2023-03-27T15:37:40.612Z Last Updated: 2025-02-19T16:50:20.556Z Vendors: Unknown Products: Cookie Notice & Compliance for GDPR / CCPA Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.4.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/83f23a9f-9ac
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/83f23a9f-9ace-47d2-a5f3-a4915129b16c
CVE ID: CVE-2023-0824 State: PUBLISHED Published: 2024-01-16T15:56:28.126Z Last Updated: 2025-06-20T17:00:42.429Z Vendors: Unknown Products: User registration & user profile Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The User registration & user profile WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged-in admin add Stored XSS payloads via a CSRF attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/48a3a542-9130-4524-9d19-ff9eccecb148/
CVE ID: CVE-2023-0827 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T18:49:36.800Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/75bc7d07-46a7-4ed9-a405-af4fc47fb422 - https://github.com/pimcore/pimcore/commit/f4050586136cb4c44e3d6042111a1b87b340df95
CVE ID: CVE-2023-0828 State: PUBLISHED Published: 2023-10-03T10:44:18.682Z Last Updated: 2024-09-23T15:20:41.948Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-0829 State: PUBLISHED Published: 2023-09-20T12:38:54.973Z Last Updated: 2024-09-24T19:03:10.987Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Plesk Products: Plesk Problem Types: CWE-79 Description: Plesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting. A malicious subscription owner (either a customer or an additional user), can fully compromise the server if an administrator visits a certain page in Plesk related to the malicious subscription. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerabil
A ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-plesk
CVE ID: CVE-2023-0830 State: PUBLISHED Published: 2023-02-14T16:13:43.586Z Last Updated: 2025-05-01T15:10:33.281Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: EasyNAS Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220950 - https://vuldb.com/?ctiid.22
itional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220950 - https://vuldb.com/?ctiid.220950 - https://vuldb.com/?submit.86683 - https://github.com/xbz0n/CVE-2023-0830 - https://www.exploit-db.com/exploits/51266
CVE ID: CVE-2023-0831 State: PUBLISHED Published: 2023-06-09T05:33:09.916Z Last Updated: 2024-12-20T23:48:47.563Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: webfactory Products: Under Construction Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the dismiss_notice function called via the admin_action_ucp_dismiss_notice action. This makes it possible for unauthenticated attackers to dismiss plugin notifications via a forged request granted they can tric
kes it possible for unauthenticated attackers to dismiss plugin notifications via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/031a1203-6b0d-453b-be8a-12e7f55cb401?source=cve - https://plugins.trac.wordpress.org/browser/under-construction-page/trunk/under-construction.php?rev=2848705#L901
CVE ID: CVE-2023-0832 State: PUBLISHED Published: 2023-06-09T05:33:17.341Z Last Updated: 2024-12-20T23:42:37.249Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: webfactory Products: Under Construction Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the install_weglot function called via the admin_action_install_weglot action. This makes it possible for unauthenticated attackers to perform an unauthorized install of the Weglot Translate plugin via a forged
it possible for unauthenticated attackers to perform an unauthorized install of the Weglot Translate plugin via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4fa84388-3597-4a54-9ae8-d6e04afe9061?source=cve - https://plugins.trac.wordpress.org/browser/under-construction-page/trunk/under-construction.php?rev=2848705#L2389
CVE ID: CVE-2023-0833 State: PUBLISHED Published: 2023-09-27T13:41:12.626Z Last Updated: 2024-08-02T05:24:34.652Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat AMQ Streams 2.2.1, Red Hat AMQ Streams 2.4.0 Problem Types: CWE-209 Description: A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/erra
eir regular permissions. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:1241 - https://access.redhat.com/errata/RHSA-2023:3223 - https://access.redhat.com/security/cve/CVE-2023-0833 - https://bugzilla.redhat.com/show_bug.cgi?id=2169845 - https://github.com/square/okhttp/issues/6738
CVE ID: CVE-2023-0834 State: PUBLISHED Published: 2023-04-28T14:54:53.201Z Last Updated: 2025-01-30T17:09:26.238Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: HYPR Products: Workforce Access Problem Types: CWE-732 Description: Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hypr.com/security-advisories
CVE ID: CVE-2023-0835 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T15:58:16.422Z Vendors: n/a Products: markdown-pdf Problem Types: Server Side XSS Description: markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/relsb/ - https://www.npmjs.com/package/markdown-pdf/
CVE ID: CVE-2023-0836 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T16:42:03.756Z Vendors: n/a Products: HAProxy Problem Types: CWE-200 Description: An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.haproxy.org/?p=haproxy.git%3Ba=commitdiff%3Bh=2e6bf0a - https:
ainer: - CISA ADP Vulnrichment: References: - https://git.haproxy.org/?p=haproxy.git%3Ba=commitdiff%3Bh=2e6bf0a - https://www.debian.org/security/2023/dsa-5388
CVE ID: CVE-2023-0837 State: PUBLISHED Published: 2023-06-14T07:01:10.595Z Last Updated: 2025-01-02T20:43:52.542Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: TeamViewer Products: Remote Problem Types: CWE-285 Description: An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged user to change basic local device settings even though the options were locked. This can result in unwanted changes to the configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.teamviewer.com/en/trust-center/security-bul
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.teamviewer.com/en/trust-center/security-bulletins/tv-2023-1001/
CVE ID: CVE-2023-0838 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T20:59:42.972Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab affecting versions starting from 15.1 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. A maintainer could modify a webhook URL to leak masked webhook secrets by adding a new parameter to the url. This addresses an incomplete fix for CVE-2022-4342. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gi
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/391685 - https://hackerone.com/reports/1871136 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0838.json
CVE ID: CVE-2023-0839 State: PUBLISHED Published: 2023-03-06T07:07:20.075Z Last Updated: 2024-10-15T18:33:59.031Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ProMIS Process Co. Products: inSCADA Problem Types: CWE-1320 Description: Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footprinting.This issue affects inSCADA: before 20230115-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0127
CVE ID: CVE-2023-0840 State: PUBLISHED Published: 2023-02-15T13:28:06.062Z Last Updated: 2025-03-18T14:58:59.026Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: PHPCrazy Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in PHPCrazy 1.1.1. This vulnerability affects unknown code of the file admin/admin.php?action=users&mode=info&user=2. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221086 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
1086 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221086 - https://vuldb.com/?ctiid.221086 - https://github.com/whiex/asdaszdfadsaf/blob/main/PHPCrazyCMS%20storage%20CSRF.docx
CVE ID: CVE-2023-0841 State: PUBLISHED Published: 2023-02-15T13:33:53.115Z Last Updated: 2025-02-13T16:39:08.911Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: GPAC Problem Types: CWE-122 Description: A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Conta