Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-2198 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T16:46:54.703Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitl
arkdown endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/408273 - https://hackerone.com/reports/1947187 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2198.json
CVE ID: CVE-2023-2199 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T16:45:38.544Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A Regular Expression Denial of Service was possible via sending crafted payloads to the preview_markdown endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git
markdown endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/408272 - https://hackerone.com/reports/1943819 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2199.json
CVE ID: CVE-2023-2200 State: PUBLISHED Published: 2023-07-13T02:02:34.411Z Last Updated: 2024-10-30T19:31:16.274Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-116 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to inject HTML in an email address field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/408281 - https://hackerone.com/reports/1935
DP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/408281 - https://hackerone.com/reports/1935628
CVE ID: CVE-2023-2201 State: PUBLISHED Published: 2023-06-02T03:36:06.353Z Last Updated: 2024-12-23T16:23:12.358Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mihail-chepovskiy Products: Web Directory Free Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Web Directory Free for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and including, 1.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level privile
preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d831fa81-4714-4757-b75d-0a8f5edda910?source=cve - https://plugins.trac.wordpress.org/browser/web-directory-free/tags/1.6.6/search/plugin/classes/search/search_forms_manager.php#L1425
CVE ID: CVE-2023-2202 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-04T20:48:53.222Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: francoisjacquet Products: francoisjacquet/rosariosis Problem Types: CWE-284 Description: Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/efe6ef47-d17c-4773-933a-4836c32db85c - https://github.com/francoisjacquet/rosariosis/commit/6433946abfb34324616e833b1c00d0b2450753be
CVE ID: CVE-2023-2203 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-22T19:41:51.118Z Vendors: n/a Products: WebKitGTK Problem Types: CWE-416 Description: A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
Red Hat Enterprise Linux 9.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2188543 - https://access.redhat.com/security/cve/CVE-2023-2203 - https://access.redhat.com/errata/RHSA-2023:3108 - https://access.redhat.com/errata/RHSA-2023:2653
CVE ID: CVE-2023-2204 State: PUBLISHED Published: 2023-04-21T06:31:03.348Z Last Updated: 2024-08-02T06:12:20.662Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Retro Basketball Shoes Online Store Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file faqs.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226969 was assigned to this vulnerability. Additional Analyst
isclosed to the public and may be used. The identifier VDB-226969 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226969 - https://vuldb.com/?ctiid.226969 - https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%205.pdf
CVE ID: CVE-2023-2205 State: PUBLISHED Published: 2023-04-21T07:00:05.285Z Last Updated: 2024-11-22T16:03:00.462Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Retro Basketball Shoes Online Store Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-226970 is the identifier assigned to this vulnerability. Additional Ana
een disclosed to the public and may be used. VDB-226970 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.226970 - https://vuldb.com/?ctiid.226970 - https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%201.pdf
CVE ID: CVE-2023-2206 State: PUBLISHED Published: 2023-04-21T07:31:03.384Z Last Updated: 2024-08-02T06:12:20.673Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Retro Basketball Shoes Online Store Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226971. Additional Analyst Notes: - CVE Pr
ublic and may be used. The associated identifier of this vulnerability is VDB-226971. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226971 - https://vuldb.com/?ctiid.226971 - https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%202.pdf
CVE ID: CVE-2023-2207 State: PUBLISHED Published: 2023-04-21T07:31:04.400Z Last Updated: 2024-08-02T06:12:20.681Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Retro Basketball Shoes Online Store Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file contactus1.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226972. Additional Analyst Notes: - CVE Program Containe
ic and may be used. The identifier of this vulnerability is VDB-226972. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226972 - https://vuldb.com/?ctiid.226972 - https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%203.pdf
CVE ID: CVE-2023-2208 State: PUBLISHED Published: 2023-04-21T08:00:06.684Z Last Updated: 2024-08-02T06:12:20.670Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Retro Basketball Shoes Online Store Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226973 was assigned to this vulnerability. Additional Analyst Notes
ed to the public and may be used. The identifier VDB-226973 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226973 - https://vuldb.com/?ctiid.226973 - https://github.com/E1CHO/cve_hub/blob/main/Retro%20Basketball%20Shoes%20Online%20Store/Retro%20Basketball%20Shoes%20Online%20Store%20-%20vuln%204.pdf
CVE ID: CVE-2023-2209 State: PUBLISHED Published: 2023-04-21T08:00:08.467Z Last Updated: 2024-08-02T06:12:20.664Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Coffee Shop POS System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/sales/view_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226974 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vuln
and may be used. VDB-226974 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.226974 - https://vuldb.com/?ctiid.226974 - https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%201.pdf
CVE ID: CVE-2023-2210 State: PUBLISHED Published: 2023-04-21T08:31:03.116Z Last Updated: 2024-08-02T06:12:20.666Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Coffee Shop POS System Problem Types: CWE-89 Description: A vulnerability has been found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/categories/view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226975. Additional Analyst
sclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226975. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226975 - https://vuldb.com/?ctiid.226975 - https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%202.pdf
CVE ID: CVE-2023-2211 State: PUBLISHED Published: 2023-04-21T09:00:05.645Z Last Updated: 2024-08-02T06:12:20.664Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Coffee Shop POS System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categories/manage_category.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226976. Additional Analyst Notes: - CVE Progra
o the public and may be used. The identifier of this vulnerability is VDB-226976. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226976 - https://vuldb.com/?ctiid.226976 - https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%203.pdf
CVE ID: CVE-2023-2212 State: PUBLISHED Published: 2023-04-21T09:31:03.626Z Last Updated: 2025-02-04T20:44:15.608Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Coffee Shop POS System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/products/view_product.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226977 was assigned to this vulnerability. Additional Analyst Notes: - CVE Progr
lic and may be used. The identifier VDB-226977 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.226977 - https://vuldb.com/?ctiid.226977 - https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%204.pdf
CVE ID: CVE-2023-2213 State: PUBLISHED Published: 2023-04-21T09:31:04.618Z Last Updated: 2024-08-02T06:12:20.676Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Coffee Shop POS System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/products/manage_product.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-226978 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Progr
blic and may be used. VDB-226978 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226978 - https://vuldb.com/?ctiid.226978 - https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%205.pdf
CVE ID: CVE-2023-2214 State: PUBLISHED Published: 2023-04-21T10:00:05.640Z Last Updated: 2024-08-02T06:12:20.695Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Coffee Shop POS System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/sales/manage_sale.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226979. Additional Analyst Notes: - CVE Program C
nd may be used. The associated identifier of this vulnerability is VDB-226979. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226979 - https://vuldb.com/?ctiid.226979 - https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%206.pdf
CVE ID: CVE-2023-2215 State: PUBLISHED Published: 2023-04-21T10:00:07.135Z Last Updated: 2024-11-22T21:36:49.489Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Coffee Shop POS System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226980. Additional Analyst Notes: - CVE Program Container: - CISA A
be used. The identifier of this vulnerability is VDB-226980. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.226980 - https://vuldb.com/?ctiid.226980 - https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%207.pdf
CVE ID: CVE-2023-2216 State: PUBLISHED Published: 2023-04-21T10:31:03.863Z Last Updated: 2024-08-02T06:12:20.656Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Coffee Shop POS System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226981 was assigned to this vulnerability. Additional Analyst Notes: - CV
the public and may be used. The identifier VDB-226981 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226981 - https://vuldb.com/?ctiid.226981 - https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%208.pdf
CVE ID: CVE-2023-2217 State: PUBLISHED Published: 2023-04-21T10:31:04.905Z Last Updated: 2025-02-04T20:43:36.056Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Task Reminder System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Task Reminder System 1.0. This affects an unknown part of the file /admin/reminders/manage_reminder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226983. Additional Analyst Notes: -
o the public and may be used. The associated identifier of this vulnerability is VDB-226983. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.226983 - https://vuldb.com/?ctiid.226983 - https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%202.pdf
CVE ID: CVE-2023-2218 State: PUBLISHED Published: 2023-04-21T11:00:06.238Z Last Updated: 2024-08-02T06:12:20.667Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Task Reminder System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Task Reminder System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226984. Additional Analyst Notes: - CVE Program Container
c and may be used. The identifier of this vulnerability is VDB-226984. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226984 - https://vuldb.com/?ctiid.226984 - https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%203.pdf
CVE ID: CVE-2023-2219 State: PUBLISHED Published: 2023-04-21T11:00:07.866Z Last Updated: 2024-08-02T06:12:20.674Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Task Reminder System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as problematic. This issue affects some unknown processing of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226985 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Co
nd may be used. The identifier VDB-226985 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226985 - https://vuldb.com/?ctiid.226985 - https://github.com/E1CHO/cve_hub/blob/main/Task%20Reminder%20System/Task%20Reminder%20System%20-%20vuln%204.pdf
CVE ID: CVE-2023-2220 State: PUBLISHED Published: 2023-04-21T11:31:03.118Z Last Updated: 2024-08-02T06:12:20.671Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Dream Technology Products: mica Problem Types: CWE-79 Description: A vulnerability was found in Dream Technology mica up to 3.0.5. It has been classified as problematic. Affected is an unknown function of the component Form Object Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-226986 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226986 - https://vuldb.com/?ctiid.226986 - ht
nalyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.226986 - https://vuldb.com/?ctiid.226986 - https://gitee.com/596392912/mica/issues/I6TGJD
CVE ID: CVE-2023-2221 State: PUBLISHED Published: 2023-06-19T10:52:42.024Z Last Updated: 2024-12-12T21:05:26.061Z Vendors: Unknown Products: WP Custom Cursors | WordPress Cursor Plugin Problem Types: CWE-89 SQL Injection Description: The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6666688e-7239-4d40-a348-307cf8f3b657
CVE ID: CVE-2023-2222 State: REJECTED Published: N/A Last Updated: 2023-10-03T15:46:24.436Z Description: No description available.