Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47211 State: PUBLISHED Published: 2024-01-08T14:45:37.183Z Last Updated: 2025-11-04T18:19:03.852Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: ManageEngine Products: OpManager Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851 - https://www.manageen
P Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851 - https://www.manageengine.com/itom/advisory/cve-2023-47211.html
CVE ID: CVE-2023-47212 State: PUBLISHED Published: 2024-05-01T15:31:02.603Z Last Updated: 2025-11-04T17:12:54.250Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: stb Products: stb_vorbis.c Problem Types: CWE-190 Description: A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1846 - https://lists.fedoraproject.org/archi
eferences: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1846 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LBIPXOBWUHPAH4QHMVP2AWWAPDDZDQ66/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WRORYQ2Z2XXHPX36JHBUSDVY6IOMW2N/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHQQXX27ACLLYUQHWSL3DVCOGUK5ZA4/
CVE ID: CVE-2023-47213 State: PUBLISHED Published: 2023-11-16T07:29:28.376Z Last Updated: 2024-10-21T14:27:58.805Z Vendors: First Co., Ltd. Products: CFR-904E, CFR-908E, CFR-916E, CFR-4EHD, CFR-8EHD, CFR-16EHD, CFR-4EHA, CFR-8EHA, CFR-16EHA, CFR-4EAAM, CFR-4EABC, CFR-4EAA, CFR-8EAA, CFR-16EAA, CFR-4EAB, CFR-8EAB, CFR-16EAB, CFR-1004EA, CFR-1008EA, CFR-1016EA, MD-404HD, MD-808HD, MD-404HA, MD-808HA, MD-404AA, MD-808AA, MD-404AB, MD-808AB Problem Types: Use of hard-coded password Description: First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provi
nticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.c-first.co.jp/information/ddososhirase/ - https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf - https://jvn.jp/en/vu/JVNVU99077347/
CVE ID: CVE-2023-47215 State: PUBLISHED Published: 2023-12-26T07:20:53.804Z Last Updated: 2024-08-02T21:01:22.674Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting (XSS) Description: Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/ - https://jvn.jp/en/jp/JVN18715935/
CVE ID: CVE-2023-47216 State: PUBLISHED Published: 2024-01-02T07:23:02.954Z Last Updated: 2025-04-17T18:48:52.277Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-772 Description: in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md
CVE ID: CVE-2023-47217 State: PUBLISHED Published: 2023-11-20T11:46:46.686Z Last Updated: 2024-08-28T19:44:43.689Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-120 Description: in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md
CVE ID: CVE-2023-47218 State: PUBLISHED Published: 2024-02-13T02:44:14.677Z Last Updated: 2025-05-07T21:13:18.700Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - C
6 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-57 - https://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed/
CVE ID: CVE-2023-47219 State: PUBLISHED Published: 2024-01-05T16:18:32.213Z Last Updated: 2025-04-17T18:12:53.814Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: QuMagie Problem Types: CWE-89 Description: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-32
CVE ID: CVE-2023-47220 State: PUBLISHED Published: 2024-05-03T02:32:04.674Z Last Updated: 2024-08-02T21:01:22.912Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: Media Streaming add-on Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5 ( 2024/01/22 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https
( 2024/01/22 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-15
CVE ID: CVE-2023-47221 State: PUBLISHED Published: 2024-03-08T16:15:23.594Z Last Updated: 2024-08-02T21:01:22.965Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: Photo Station Problem Types: CWE-22 Description: A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 ( 2023/12/15 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References
on 6.4.2 ( 2023/12/15 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-13
CVE ID: CVE-2023-47222 State: PUBLISHED Published: 2024-04-26T15:01:27.370Z Last Updated: 2024-08-02T21:01:22.689Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: Media Streaming add-on Problem Types: CWE-200, CWE-22, CWE-287 Description: An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5 ( 2024/01/22 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
dia Streaming add-on 500.1.1.5 ( 2024/01/22 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-15
CVE ID: CVE-2023-47223 State: PUBLISHED Published: 2023-11-08T18:29:41.310Z Last Updated: 2025-02-19T21:18:44.564Z Vendors: WP Map Plugins Products: Basic Interactive World Map Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Map Plugins Basic Interactive World Map plugin <= 2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/basic-interactive-world-map/wordpress-basic-interactive-world-map-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47224 State: PUBLISHED Published: 2025-01-02T12:00:32.129Z Last Updated: 2025-01-03T19:00:21.415Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: WP Travel Products: WP Travel Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Travel WP Travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through 7.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-travel/vulnerability/wordpress-wp-travel-plugin-7-5-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47225 State: PUBLISHED Published: 2025-01-02T12:00:32.729Z Last Updated: 2025-01-02T14:52:07.761Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: KaizenCoders Products: Short URL Problem Types: CWE-862 Description: Missing Authorization vulnerability in KaizenCoders Short URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Short URL: from n/a through 1.6.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/shorten-url/vulnerability/wordpress-short-url-plugin-1-6-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47226 State: PUBLISHED Published: 2023-11-08T18:33:43.159Z Last Updated: 2024-09-04T13:48:53.014Z Vendors: I Thirteen Web Solution Products: Post Sliders & Post Grids Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plugin <= 1.0.20 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/post-slider-carousel/wordpress-post-sliders-post-grids-plugin-1-0-20-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47227 State: PUBLISHED Published: 2023-11-08T18:42:08.234Z Last Updated: 2024-09-04T15:40:47.456Z Vendors: Web-Settler Products: Social Feed | All social media in one place Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Social Feed | All social media in one place plugin <= 1.5.4.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/add-facebook/wordpress-social-feed-all-social-media-in-one-place-plugin-1-5-4-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47228 State: PUBLISHED Published: 2023-11-08T18:46:25.446Z Last Updated: 2024-09-04T15:44:10.047Z Vendors: Muneeb Products: Layer Slider Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/slider-slideshow/wordpress-layer-slider-plugin-1-1-9-7-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-47229 State: PUBLISHED Published: 2023-11-08T18:50:46.582Z Last Updated: 2024-08-02T21:09:35.663Z Vendors: Vyas Dipen Products: Top 25 Social Icons Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vyas Dipen Top 25 Social Icons plugin <= 3.1 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/top-25-social-icons/wordpress-top-25-social-icons-plugin-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47230 State: PUBLISHED Published: 2023-11-13T00:07:46.307Z Last Updated: 2025-01-08T21:37:57.223Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Cimatti Consulting Products: WordPress Contact Forms by Cimatti Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.6.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/contact-forms/wordpress-wordpress-contact-forms-by-cimatti-plugin-1-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47231 State: PUBLISHED Published: 2023-11-08T18:54:39.316Z Last Updated: 2024-08-02T21:09:35.666Z Vendors: Bainternet Products: ShortCodes UI Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/shortcodes-ui/wordpress-shortcodes-ui-plugin-1-9-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47233 State: PUBLISHED Published: 2023-11-03T00:00:00.000Z Last Updated: 2025-03-06T15:58:48.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1216
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1216702 - https://marc.info/?l=linux-kernel&m=169907678011243&w=2 - https://lore.kernel.org/all/20231104054709.716585-1-zyytlz.wz%40163.com/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f7352557a35ab7888bc7831411ec8a3cbe20d78 - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE ID: CVE-2023-47234 State: PUBLISHED Published: 2023-11-03T00:00:00.000Z Last Updated: 2025-11-04T16:10:42.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FRRouting/frr/pull/14716/commits/c37119df45bbf4ef713bc10475af2ee06e12f3bf - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2023-47235 State: PUBLISHED Published: 2023-11-03T00:00:00.000Z Last Updated: 2025-11-04T16:10:43.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/14716/commits/6814f2e0138a6ea5e1f83bdd9085d9a77999900b - https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html
CVE ID: CVE-2023-47236 State: PUBLISHED Published: 2023-12-20T13:28:12.655Z Last Updated: 2024-08-02T21:09:35.736Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Avirtum Products: iPages Flipbook For WordPress Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Flipbook For WordPress.This issue affects iPages Flipbook For WordPress: from n/a through 1.4.8. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ipages-flipbook/wordpress-ipages-flipbook-for-wordpress-plugin-1-4-8-sql-injection-vulnerability?
database/vulnerability/ipages-flipbook/wordpress-ipages-flipbook-for-wordpress-plugin-1-4-8-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-47237 State: PUBLISHED Published: 2023-11-09T18:09:49.955Z Last Updated: 2025-02-19T21:18:33.508Z Vendors: Martin Gibson Products: Auto Publish for Google My Business Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson Auto Publish for Google My Business plugin <= 3.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-google-my-business-auto-publish/wordpress-auto-publish-for-google-my-business-plugin-3-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47238 State: PUBLISHED Published: 2023-11-09T18:21:51.224Z Last Updated: 2025-02-19T21:18:24.891Z Vendors: WebberZone Products: Top 10 – WordPress Popular posts by WebberZone Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin <= 3.3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/top-10/wordpress-top-10-plugin-3-3-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47239 State: PUBLISHED Published: 2023-11-16T18:58:13.725Z Last Updated: 2024-08-02T21:09:35.699Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Scott Paterson Products: Easy PayPal Shopping Cart Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Scott Paterson Easy PayPal Shopping Cart plugin <= 1.1.10 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-paypal-shopping-cart/wordpress-easy-paypal-shopping-cart-plugin-1-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47240 State: PUBLISHED Published: 2023-11-16T18:48:08.324Z Last Updated: 2024-09-04T20:30:24.640Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Codeboxr Products: CBX Map for Google Map & OpenStreetMap Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap plugin <= 1.1.11 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cbxgooglemap/wordpress-cbx-map-for-google-map-openstreetmap-plugin-1-1-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47241 State: PUBLISHED Published: 2025-01-02T12:00:33.359Z Last Updated: 2025-01-03T19:00:05.108Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: CoCart Headless, LLC Products: CoCart – Headless ecommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in CoCart Headless, LLC CoCart – Headless ecommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoCart – Headless ecommerce: from n/a through 3.11.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cart-rest-api-for-woocommerce/vulnerability/wordpress-cocart-
rences: - https://patchstack.com/database/wordpress/plugin/cart-rest-api-for-woocommerce/vulnerability/wordpress-cocart-headless-ecommerce-plugin-3-9-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47242 State: PUBLISHED Published: 2023-11-16T18:44:41.431Z Last Updated: 2024-09-04T20:31:08.482Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Marco Milesi Products: ANAC XML Bandi di Gara Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/avcp/wordpress-anac-xml-bandi-di-gara-plugin-7-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47243 State: PUBLISHED Published: 2023-11-18T22:06:09.598Z Last Updated: 2024-08-28T15:15:50.780Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: CodeMShop Products: 코드엠샵 마이사이트 – MSHOP MY SITE Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CodeMShop 코드엠샵 마이사이트 – MSHOP MY SITE.This issue affects 코드엠샵 마이사이트 – MSHOP MY SITE: from n/a through 1.1.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mshop-mysite/wordpress-mshop-my-site-plugin-1-1-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47244 State: PUBLISHED Published: 2023-11-23T20:30:56.545Z Last Updated: 2024-08-02T21:09:36.043Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Omnisend Products: Email Marketing for WooCommerce by Omnisend Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Omnisend Email Marketing for WooCommerce by Omnisend.This issue affects Email Marketing for WooCommerce by Omnisend: from n/a through 1.13.8. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/omnisend-connect/wordpress-email-marketing-for-woocommerce-by-omnisend-plug
ttps://patchstack.com/database/vulnerability/omnisend-connect/wordpress-email-marketing-for-woocommerce-by-omnisend-plugin-1-13-7-sensitive-data-exposure-vulnerability?_s_id=cve