Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-27611 State: PUBLISHED Published: 2023-11-12T22:35:55.226Z Last Updated: 2024-08-30T14:31:14.875Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: audrasjb Products: Reusable Blocks Extended Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in audrasjb Reusable Blocks Extended plugin <= 0.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/reusable-blocks-extended/wordpress-reusable-blocks-extended-plugin-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-27612 State: PUBLISHED Published: 2023-06-22T07:55:24.614Z Last Updated: 2024-10-10T17:27:00.236Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Paul Ryley Products: Site Reviews Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Paul Ryley Site Reviews plugin <= 6.5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/site-reviews/wordpress-site-reviews-plugin-6-5-1-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-27613 State: PUBLISHED Published: 2023-05-29T14:06:05.611Z Last Updated: 2024-10-10T18:56:41.632Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MonitorClick Products: Forms Ada – Form Builder Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MonitorClick Forms Ada – Form Builder plugin <= 1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/forms-ada-form-builder/wordpress-forms-ada-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27614 State: PUBLISHED Published: 2023-04-23T10:54:36.688Z Last Updated: 2025-01-09T15:37:04.251Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Ian Haycox Products: Motor Racing League Problem Types: CWE-79 Description: Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Ian Haycox Motor Racing League plugin <= 1.9.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/motor-racing-league/wordpress-motor-racing-league-plugin-1-9-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27615 State: PUBLISHED Published: 2023-10-06T12:57:47.502Z Last Updated: 2024-09-19T14:52:29.878Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Dipak C. Gajjar Products: WP Super Minify Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Dipak C. Gajjar WP Super Minify plugin <= 1.5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-super-minify/wordpress-wp-super-minify-plugin-1-5-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-27616 State: PUBLISHED Published: 2023-09-27T05:27:17.616Z Last Updated: 2024-09-23T18:26:23.135Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: David F. Carr Products: RSVPMaker Problem Types: CWE-79 Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rsvpmaker/wordpress-rsvpmaker-plugin-10-6-4-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-27617 State: PUBLISHED Published: 2023-09-27T05:22:52.415Z Last Updated: 2024-08-02T13:39:16.041Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: David F. Carr Products: RSVPMaker Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rsvpmaker/wordpress-rsvpmaker-plugin-10-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27618 State: PUBLISHED Published: 2023-06-22T08:33:56.990Z Last Updated: 2024-08-02T12:16:36.680Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: AGILELOGIX Products: Store Locator WordPress Problem Types: CWE-79 Description: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in AGILELOGIX Store Locator WordPress plugin <= 1.4.9 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/agile-store-locator/wordpress-store-locator-wordpress-plugin-1-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27619 State: PUBLISHED Published: 2023-04-25T11:41:49.591Z Last Updated: 2025-01-09T15:34:57.368Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Macho Themes Products: Regina Lite Problem Types: CWE-79 Description: Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes Regina Lite theme <= 2.0.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/regina-lite/wordpress-regina-lite-theme-2-0-7-reflected-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-27620 State: PUBLISHED Published: 2023-04-07T13:49:45.827Z Last Updated: 2025-01-10T18:56:34.845Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: RoboSoft Products: Photo Gallery, Images, Slider in Rbs Image Gallery Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-site Scripting (XSS) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/robo-gallery/wordpress-robo-gallery-plugin-3-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27621 State: PUBLISHED Published: 2023-08-30T15:58:14.609Z Last Updated: 2024-09-24T19:08:03.272Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: MrDemonWolf Products: Livestream Notice Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MrDemonWolf Livestream Notice plugin <= 1.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/livestream-notice/wordpress-livestream-notice-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27622 State: PUBLISHED Published: 2023-09-27T07:53:43.406Z Last Updated: 2024-09-23T12:51:16.468Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Abel Ruiz Products: GuruWalk Affiliates Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abel Ruiz GuruWalk Affiliates plugin <= 1.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/guruwalk-affiliates/wordpress-guruwalk-affiliates-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27623 State: PUBLISHED Published: 2023-11-12T22:43:48.201Z Last Updated: 2024-08-30T14:30:56.876Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Jens Törnell Products: WP Page Numbers Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jens Törnell WP Page Numbers plugin <= 0.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-page-numbers/wordpress-wp-page-numbers-plugin-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-27624 State: PUBLISHED Published: 2023-06-13T15:04:10.838Z Last Updated: 2024-10-10T18:56:18.781Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Marcelotorres Products: Redirect After Login Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marcelotorres Redirect After Login plugin <= 0.1.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/redirect-after-login/wordpress-redirect-after-login-plugin-0-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27625 State: PUBLISHED Published: 2024-12-09T11:31:21.984Z Last Updated: 2024-12-09T13:49:55.471Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Paul Ryley Products: Site Reviews Problem Types: CWE-862 Description: Missing Authorization vulnerability in Paul Ryley Site Reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 6.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/site-reviews/vulnerability/wordpress-site-reviews-plugin-6-5-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-27626 State: PUBLISHED Published: 2024-12-09T11:31:21.167Z Last Updated: 2024-12-09T18:44:08.835Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Aleksandar Urošević Products: Stock Ticker Problem Types: CWE-862 Description: Missing Authorization vulnerability in Aleksandar Urošević Stock Ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Ticker: from n/a through 3.23.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stock-ticker/vulnerability/wordpress-stock-ticker-plugin-3-23-0-broken-access-control-vulnerability?_s_id=cv
ress/plugin/stock-ticker/vulnerability/wordpress-stock-ticker-plugin-3-23-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-27627 State: PUBLISHED Published: 2023-08-08T11:42:24.238Z Last Updated: 2024-08-02T13:40:04.995Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: eggemplo Products: Woocommerce Email Report Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in eggemplo Woocommerce Email Report plugin <= 2.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wooemailreport/wordpress-woocommerce-email-report-plugin-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27628 State: PUBLISHED Published: 2023-09-27T07:49:49.620Z Last Updated: 2024-09-23T12:51:41.251Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Webvitaly Products: Sitekit Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Webvitaly Sitekit plugin <= 1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sitekit/wordpress-sitekit-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27629 State: PUBLISHED Published: 2023-06-22T07:46:05.161Z Last Updated: 2024-10-10T17:27:16.528Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Paul Ryley Products: Site Reviews Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Paul Ryley Site Reviews plugin <= 6.5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/site-reviews/wordpress-site-reviews-plugin-6-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27630 State: PUBLISHED Published: 2024-03-26T20:05:23.471Z Last Updated: 2024-08-06T14:27:25.376Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PeepSo Products: Community by PeepSo Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PeepSo Community by PeepSo.This issue affects Community by PeepSo: from n/a through 6.0.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/peepso-core/wordpress-community-by-peepso-plugin-6-0-9-0-server-information-disclosure?_s_id=cve
CVE ID: CVE-2023-27631 State: PUBLISHED Published: 2023-06-22T07:29:07.240Z Last Updated: 2024-10-10T17:38:28.736Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: mmrs151 Products: Daily Prayer Time Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.05.04 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/daily-prayer-time-for-mosques/wordpress-daily-prayer-time-plugin-2023-02-21-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-27632 State: PUBLISHED Published: 2023-11-12T22:49:02.422Z Last Updated: 2024-08-30T14:30:38.938Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: mmrs151 Products: Daily Prayer Time Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.03.08 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/daily-prayer-time-for-mosques/wordpress-daily-prayer-time-plugin-2023-02-21-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-27633 State: PUBLISHED Published: 2023-11-22T13:12:04.857Z Last Updated: 2025-06-10T13:38:02.242Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Pixelgrade Products: Customify – Intuitive Website Styling Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Customify – Intuitive Website Styling plugin <= 2.10.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/customify/wordpress-customify-plugin-2-10-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-27634 State: PUBLISHED Published: 2023-06-15T13:19:52.068Z Last Updated: 2024-10-21T11:43:56.988Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Shingo Products: Intrepidity Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability allows arbitrary file upload in Shingo Intrepidity plugin <= 1.5.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/intrepidity/wordpress-intrepidity-theme-1-5-1-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2023-27635 State: PUBLISHED Published: 2023-03-05T00:00:00.000Z Last Updated: 2025-03-06T15:54:30.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a crafted .deb file. (The path is shown to the user before execution.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.debian.org/1031267
CVE ID: CVE-2023-27636 State: PUBLISHED Published: 2024-06-16T00:00:00 Last Updated: 2024-08-02T12:16:36.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://aldisaw.id/security/2024/06/03/CVE-2023-27636.html - https://www.exploit-db.com/exploits/52035
CVE ID: CVE-2023-27637 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-26T15:40:22.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised product_id GET parameter in order to exploit an insecure parameter in the front controller file designer.php, which could lead to a SQL injection. This is exploited in the wild in March 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codecanyon.net/item/prestashop-custom-product-designer/19202018 - https://tshi
A ADP Vulnrichment: References: - https://codecanyon.net/item/prestashop-custom-product-designer/19202018 - https://tshirtecommerce.com/ - https://friends-of-presta.github.io/security-advisories/module/2023/03/21/tshirtecommerce_cwe-89.html
CVE ID: CVE-2023-27638 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-26T15:39:18.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised tshirtecommerce_design_cart_id GET parameter in order to exploit an insecure parameter in the functions hookActionCartSave and updateCustomizationTable, which could lead to a SQL injection. This is exploited in the wild in March 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codecanyon.net/item/prestashop-cust
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codecanyon.net/item/prestashop-custom-product-designer/19202018 - https://tshirtecommerce.com/ - https://friends-of-presta.github.io/security-advisories/module/2023/03/21/tshirtecommerce_cwe-89.html
CVE ID: CVE-2023-27639 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T19:42:36.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter file_name in the tshirtecommerce/ajax.php?type=svg endpoint, to allow a remote attacker to traverse directories on the system in order to open files (without restriction on the extension and path). Only files that can be parsed in XML can be opened. This is exploited in the wild in March 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
. This is exploited in the wild in March 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/module/2023/03/30/tshirtecommerce_cwe-22.html
CVE ID: CVE-2023-27640 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-08T20:58:57.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter type in the /tshirtecommerce/fonts.php endpoint, to allow a remote attacker to traverse directories on the system in order to open files (without restriction on the extension and path). The content of the file is returned with base64 encoding. This is exploited in the wild in March 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
is exploited in the wild in March 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/module/2023/03/30/tshirtecommerce_cwe-22.html
CVE ID: CVE-2023-27641 State: PUBLISHED Published: 2023-03-05T00:00:00.000Z Last Updated: 2025-03-06T15:53:06.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hosakauk/exploits/blob/master/listserv_report_xss.MD
CVE ID: CVE-2023-27643 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:43:45.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service via the Rescan button in Queue and Select Folders button in Library Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer - https://powerampapp.com/ - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27643/CVE%20detail.md
CVE ID: CVE-2023-27645 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-10T21:23:43.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in POWERAMP audioplayer build 925 bundle play and build 954 allows a remote attacker to gain privileges via the reverb and EQ preset parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer - https://powerampapp.com/ - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27645/CVE%20detail.md
CVE ID: CVE-2023-27647 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:41:21.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.dualspace.com/pc/en/products.html - https://app-lock-master.en.uptodown.com/android/download - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27647/CVE%20detail.md
CVE ID: CVE-2023-27648 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:39:16.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corporate.timmystudios.com/ - https://play.google.com/store/apps/details?id=com.jb.gokeyboard.theme.twchangecolorofkeypad - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27648/CVE%20detail.md
CVE ID: CVE-2023-27649 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:37:38.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Trusted Tools Free Music v.2.1.0.47, v.2.0.0.46, v.1.9.1.45, v.1.8.2.43 allows a remote attacker to cause a denial of service via the search history table Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bestools.group/ - https://play.google.com/store/apps/details?id=freemusic.download.musicplayer.mp3player - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27649/CVE%20detail.md