Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-5938 State: PUBLISHED Published: 2024-05-15T16:08:41.610Z Last Updated: 2024-08-02T08:14:25.135Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Nozomi Networks Products: Arc Problem Types: CWE-22 Description: Multiple functions use archives without properly validating the filenames therein, rendering the application vulnerable to path traversal via 'zip slip' attacks. An administrator able to provide tampered archives to be processed by the affected versions of Arc may be able to have arbitrary files extracted to arbitrary filesystem locations. Leveraging this issue, an attacker may be able to overwrite arbitrary files on the target filesystem
esystem locations. Leveraging this issue, an attacker may be able to overwrite arbitrary files on the target filesystem and cause critical impacts on the system (e.g., arbitrary command execution on the victim’s machine). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:16-01
CVE ID: CVE-2023-5939 State: PUBLISHED Published: 2023-12-26T18:33:10.220Z Last Updated: 2024-08-02T08:14:25.120Z Vendors: Unknown Products: rtMedia for WordPress, BuddyPress and bbPress Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 loads the contents of the import file in an unsafe manner, leading to remote code execution by privileged users. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/db5d41fc-bcd3-414f-aa99-54d5537007bc
CVE ID: CVE-2023-5940 State: PUBLISHED Published: 2023-12-11T19:22:39.568Z Last Updated: 2024-08-02T08:14:25.136Z Vendors: Unknown Products: WP Not Login Hide (WPNLH) Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Not Login Hide (WPNLH) WordPress plugin through 1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d594c00d-2905-449b-80cd-95965a96cd4b
CVE ID: CVE-2023-5941 State: PUBLISHED Published: 2023-11-08T08:52:26.564Z Last Updated: 2025-02-13T17:25:58.008Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-787, CWE-131 Description: In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sflush() stdio function in libc does not correctly update FILE objects' write space members for write-buffered streams when the write(2) system call returns an error. Depending on the nature of an application that calls libc's stdio functions and the presence of errors returned from the write(2) system call (or an overridden stdio write routine) a heap buffer overflow may occur. Such ov
returned from the write(2) system call (or an overridden stdio write routine) a heap buffer overflow may occur. Such overflows may lead to data corruption or the execution of arbitrary code at the privilege level of the calling program. Additional Analyst Notes: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-23:15.stdio.asc - https://security.netapp.com/advisory/ntap-20231214-0004/
CVE ID: CVE-2023-5942 State: PUBLISHED Published: 2023-11-27T16:22:05.089Z Last Updated: 2025-06-05T14:00:11.181Z Vendors: Unknown Products: Medialist Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Medialist WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/914559e1-eed5-4a69-8371-a48055835453
CVE ID: CVE-2023-5943 State: PUBLISHED Published: 2024-01-29T14:44:25.295Z Last Updated: 2025-06-11T17:03:58.559Z Vendors: Unknown Products: Wp-Adv-Quiz Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Wp-Adv-Quiz WordPress plugin before 1.0.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/18fbe9d5-4829-450b-988c-8ba4becd032a/
CVE ID: CVE-2023-5944 State: PUBLISHED Published: 2023-12-04T23:08:48.592Z Last Updated: 2024-08-02T08:14:25.147Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DOPSoft Problem Types: CWE-121 Description: Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate user to execute a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-01 - https://diastudio.deltaww.com/home/downloads?sec=download#catalog
CVE ID: CVE-2023-5945 State: PUBLISHED Published: 2023-11-03T12:31:29.214Z Last Updated: 2025-02-05T18:51:45.144Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: nik00726 Products: video carousel slider with lightbox Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the responsive_video_gallery_with_lightbox_video_management_func() function. This makes it possible for unauthenticated attackers to delete videos hosted from the video slider via a forged request grant
makes it possible for unauthenticated attackers to delete videos hosted from the video slider via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dc052b00-65a7-4668-8bdd-b06d69d12a4a?source=cve - https://github.com/wp-plugins/wp-responsive-video-gallery-with-lightbox/blob/master/wp-responsive-video-gallery-with-lightbox.php - https://plugins.trac.wordpress.org/browser/wp-responsive-video-gallery-with-lightbox/tags/1.0.1/wp-responsive-video-gallery-with-lightbox.php
CVE ID: CVE-2023-5946 State: PUBLISHED Published: 2023-11-03T13:51:21.686Z Last Updated: 2025-02-05T18:51:37.399Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: evarisk Products: Digirisk Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Digirisk plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'current_group_id' parameter in version 6.0.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performin
ted attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d41355ed-77d0-48b3-bbb3-4cc3b4df4b2a?source=cve - https://plugins.trac.wordpress.org/changeset/1428184/digirisk/trunk/modules/society/controller/group.controller.01.php
CVE ID: CVE-2023-5947 State: REJECTED Published: N/A Last Updated: 2024-02-27T14:40:35.864Z Description: No description available.
CVE ID: CVE-2023-5948 State: PUBLISHED Published: 2023-11-03T06:40:02.720Z Last Updated: 2024-09-05T14:32:26.617Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: teamamaze Products: teamamaze/amazefileutilities Problem Types: CWE-285 Description: Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ac1363b5-207b-40d9-aac5-e66d6213f692 - https://github.com/teamamaze/amazefileutilities/commit/62d02204d452603ab85c50d43c7c680e4256c7d7
CVE ID: CVE-2023-5949 State: PUBLISHED Published: 2023-12-18T20:08:03.243Z Last Updated: 2024-08-02T08:14:25.139Z Vendors: Unknown Products: SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer Problem Types: CWE-862 Missing Authorization Description: The SmartCrawl WordPress plugin before 3.8.3 does not prevent unauthorised users from accessing password-protected posts' content. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3cec27ca-f470-402d-ae3e-271cb59cf407
CVE ID: CVE-2023-5950 State: PUBLISHED Published: 2023-11-06T14:30:28.972Z Last Updated: 2024-09-05T13:42:38.581Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Rapid7 Products: Velociraptor Problem Types: CWE-79 Description: Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerability allows attackers to inject JS into the error path, potentially leading to unauthorized execution of scripts within a user's web browser. This vulnerability is fixed in version 0.7.0-04 and a patch is available to download. Patches are also available for version 0.6.9 (0.6.9-1). Additional Analyst Notes: - CVE Progr
is available to download. Patches are also available for version 0.6.9 (0.6.9-1). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Velocidex/velociraptor/releases/tag/v0.7.0
CVE ID: CVE-2023-5951 State: PUBLISHED Published: 2023-12-04T21:28:42.287Z Last Updated: 2024-10-01T15:48:15.779Z Vendors: Unknown Products: Welcart e-Commerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/81dc093a-545d-4bcd-ab85-ee9472d709e5
CVE ID: CVE-2023-5952 State: PUBLISHED Published: 2023-12-04T21:27:54.563Z Last Updated: 2024-08-02T08:14:25.117Z Vendors: Unknown Products: Welcart e-Commerce Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow unautehtniacted users to perform PHP Object Injection when a suitable gadget is present on the blog Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0acd613e-dbd6-42ae-9f3d-6d6e77a4c1b7
CVE ID: CVE-2023-5953 State: PUBLISHED Published: 2023-12-04T21:28:03.020Z Last Updated: 2025-05-29T13:53:03.148Z Vendors: Unknown Products: Welcart e-Commerce Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type, CWE-352 Cross-Site Request Forgery (CSRF) Description: The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action handling such upload. As a result, any authenticated users, such as subscriber could upload arbitrary files, such as PHP on the server Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerabil
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6d29ba12-f14a-4cee-baae-a6049d83bce6
CVE ID: CVE-2023-5954 State: PUBLISHED Published: 2023-11-09T20:13:49.346Z Last Updated: 2025-02-13T17:25:58.499Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-401 Description: HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2023-33-vault-requests-triggering-policy-checks-may-lead-to-unbounded-memory-c
: - https://discuss.hashicorp.com/t/hcsec-2023-33-vault-requests-triggering-policy-checks-may-lead-to-unbounded-memory-consumption/59926 - https://security.netapp.com/advisory/ntap-20231227-0001/
CVE ID: CVE-2023-5955 State: PUBLISHED Published: 2023-12-11T19:30:26.587Z Last Updated: 2024-10-01T14:35:50.973Z Vendors: Unknown Products: Contact Form Email Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1b5fce7e-14fc-4548-8747-96fdd58fdd98
CVE ID: CVE-2023-5956 State: PUBLISHED Published: 2024-01-29T14:44:20.684Z Last Updated: 2025-06-09T20:49:19.994Z Vendors: Unknown Products: Wp-Adv-Quiz Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Wp-Adv-Quiz WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b3d1fbae-88c9-45d1-92c6-0a529b21e3b2/
CVE ID: CVE-2023-5957 State: PUBLISHED Published: 2024-01-08T19:00:32.181Z Last Updated: 2025-06-18T16:04:16.427Z Vendors: Unknown Products: Ni Purchase Order(PO) For WooCommerce Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Ni Purchase Order(PO) For WooCommerce WordPress plugin through 1.2.1 does not validate logo and signature image files uploaded in the settings, allowing high privileged user to upload arbitrary files to the web server, triggering an RCE vulnerability by uploading a web shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/70f823ff-64ad-4f05-9eb3-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/70f823ff-64ad-4f05-9eb3-b69b3b79dc12
CVE ID: CVE-2023-5958 State: PUBLISHED Published: 2023-11-27T16:22:03.963Z Last Updated: 2024-08-02T08:14:25.133Z Vendors: Unknown Products: POST SMTP Mailer Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/22fa478d-e42e-488d-9b4b-a8720dec7cee
CVE ID: CVE-2023-5959 State: PUBLISHED Published: 2023-11-11T09:00:06.698Z Last Updated: 2024-08-02T08:14:25.138Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Byzoro Products: Smart S85F Management Platform Problem Types: CWE-640 Description: A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the file /login.php. The manipulation of the argument txt_newpwd leads to weak password recovery. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-244992. NOTE: The vendor was contacted early about this disclo
may be used. The identifier of this vulnerability is VDB-244992. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.244992 - https://vuldb.com/?ctiid.244992 - https://vuldb.com/?submit.232562 - https://github.com/Changboqian/cve/blob/main/reset_password_improperly.md
CVE ID: CVE-2023-5960 State: PUBLISHED Published: 2023-11-28T02:05:45.830Z Last Updated: 2024-08-02T08:14:25.225Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Zyxel Products: USG FLEX series firmware, VPN series firmware Problem Types: CWE-269 Description: An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/z
onal Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps
CVE ID: CVE-2023-5961 State: PUBLISHED Published: 2023-12-23T09:01:02.875Z Last Updated: 2024-11-27T18:28:44.244Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Moxa Products: ioLogik E1200 Series Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be treated as an authentic request. This vulnerability may lead an attacker to perform operations on behalf of the victimized user. Additional Analyst Notes: - CVE Program Contai
lead an attacker to perform operations on behalf of the victimized user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerability
CVE ID: CVE-2023-5962 State: PUBLISHED Published: 2023-12-23T09:09:01.920Z Last Updated: 2024-10-28T06:14:46.184Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Moxa Products: ioLogik E1200 Series Problem Types: CWE-328 Description: A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get unexpected authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iol
- CVE Program Container: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-235250-iologik-e1200-series-web-server-vulnerability
CVE ID: CVE-2023-5963 State: PUBLISHED Published: 2023-11-06T12:18:56.276Z Last Updated: 2024-10-03T06:23:16.410Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search function by chaining too many syntax operators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/423468
CVE ID: CVE-2023-5964 State: PUBLISHED Published: 2023-11-06T12:27:12.281Z Last Updated: 2025-06-12T14:19:29.853Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: 1E Products: Platform Problem Types: CWE-20 Description: The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on Windows clients. To remediate this issue DELETE the instruction “Show dialogue with caption %Caption% and message %Message%”
ows clients. To remediate this issue DELETE the instruction “Show dialogue with caption %Caption% and message %Message%” from the list of instructions in the Settings UI, and replace it with the new instruction 1E-Exchange-ShowNotification instruction available in the updated End-User Interaction product pack. The new instruction should show as “Show %Type% type notification with header %Header% and message %Message%” with a version of 7.1 or above. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.1e.com/product-packs/end-user-interaction/ - https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2006/
CVE ID: CVE-2023-5965 State: PUBLISHED Published: 2023-11-30T13:26:15.451Z Last Updated: 2024-10-01T14:48:52.974Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: EspoCRM Products: EspoCRM Problem Types: CWE-434 Description: An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-espocrm
CVE ID: CVE-2023-5966 State: PUBLISHED Published: 2023-11-30T13:26:48.245Z Last Updated: 2025-06-03T13:52:15.298Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: EspoCRM Products: EspoCRM Problem Types: CWE-434 Description: An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-espocrm
CVE ID: CVE-2023-5967 State: PUBLISHED Published: 2023-11-06T15:24:24.544Z Last Updated: 2024-09-12T19:30:12.159Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-754 Description: Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-5968 State: PUBLISHED Published: 2023-11-06T15:35:14.094Z Last Updated: 2024-09-12T19:26:46.796Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates