Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-50777 State: PUBLISHED Published: 2023-12-13T17:30:21.995Z Last Updated: 2025-05-22T18:09:21.987Z Vendors: Jenkins Project Products: Jenkins PaaSLane Estimate Plugin Description: Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3182 - http://www.openwall.com/lists/oss-security/2023/12/13/4
CVE ID: CVE-2023-50778 State: PUBLISHED Published: 2023-12-13T17:30:22.627Z Last Updated: 2025-02-13T17:19:39.337Z Vendors: Jenkins Project Products: Jenkins PaaSLane Estimate Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified token. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3179 - http://www.openwall.com/lists/oss-security/2023/12/13/4
CVE ID: CVE-2023-50779 State: PUBLISHED Published: 2023-12-13T17:30:23.280Z Last Updated: 2025-02-13T17:19:40.136Z Vendors: Jenkins Project Products: Jenkins PaaSLane Estimate Plugin Description: Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified token. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3179 - http://www.openwall.com/lists/oss-security/2023/12/13/4
CVE ID: CVE-2023-50780 State: PUBLISHED Published: 2024-10-14T16:03:38.321Z Last Updated: 2025-03-19T20:11:35.774Z Vendors: Apache Software Foundation Products: Apache ActiveMQ Artemis Problem Types: CWE-285 Description: Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint. Before version 2.29.0, this also included the Log4J2 MBean. This MBean is not meant for exposure to non-administrative users. This could eventually allow an authenticated attacker to write arbitrary files to the filesystem and indirectly achieve RCE. Users are recommended to upgrade to version 2.29.0 or later, which f
files to the filesystem and indirectly achieve RCE. Users are recommended to upgrade to version 2.29.0 or later, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/63b78shqz312phsx7v1ryr7jv7bprg58
CVE ID: CVE-2023-50781 State: PUBLISHED Published: 2024-02-05T20:45:14.089Z Last Updated: 2025-11-20T17:32:51.527Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Update Infrastructure 4 for Cloud Providers, Red Hat Virtualization 4 Problem Types: CWE-208 Description: A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE P
which may lead to exposure of confidential or sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-50781 - https://bugzilla.redhat.com/show_bug.cgi?id=2254426
CVE ID: CVE-2023-50782 State: PUBLISHED Published: 2024-02-05T20:45:49.705Z Last Updated: 2025-11-20T17:33:03.848Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Satellite 6, Red Hat Update Infrastructure 4 for Cloud Providers Problem Types: CWE-208 Description: A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data. Additional Analyst Notes: - C
that use RSA key exchanges, which may lead to exposure of confidential or sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-50782 - https://bugzilla.redhat.com/show_bug.cgi?id=2254432
CVE ID: CVE-2023-50783 State: PUBLISHED Published: 2023-12-21T09:28:47.746Z Last Updated: 2025-02-13T17:19:40.647Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-284 Description: Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are recommended to upgrade to 2.8.0, which fixes this issue Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/airflow/pull/33932 - https://lists.apache.org/thread
s: - CVE Program Container: References: - https://github.com/apache/airflow/pull/33932 - https://lists.apache.org/thread/rs7cr3yp726mb89s1m844hy9pq7frgcn - http://www.openwall.com/lists/oss-security/2023/12/21/4
CVE ID: CVE-2023-50784 State: PUBLISHED Published: 2023-12-16T00:00:00.000Z Last Updated: 2025-11-04T18:20:38.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet (if a websocket port is open). Remote code execution might be possible on some uncommon, older platforms. Additional Analyst Notes: - CVE Program Container: References: - https://www.unrealircd.org/index/news - https://forums.unrealircd.org/viewtopic.php?t=9340 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
cd.org/viewtopic.php?t=9340 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BV6TFYPQOKYRGPEAKOWSO6PSCBV6LUR3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZT7QU4FCQBHYOYVD7FW5QAWNAQCSGLA/
CVE ID: CVE-2023-50785 State: PUBLISHED Published: 2024-01-25T00:00:00 Last Updated: 2024-10-28T00:16:23.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2023-50785.html
CVE ID: CVE-2023-50786 State: PUBLISHED Published: 2025-07-05T00:00:00.000Z Last Updated: 2025-07-07T18:35:07.867Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: dradisframework Products: Dradis Problem Types: CWE-294 Description: Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded (uploaded) images. This can be leveraged by an authorized author to attempt to steal the Net-NTLM hashes of other authors on a Windows domain network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://dradis.com/ - https://dradis.com/ce - https://securiteam.io/2025/07/04/cve-2023-50786-drad
chment: References: - https://dradis.com/ - https://dradis.com/ce - https://securiteam.io/2025/07/04/cve-2023-50786-dradis-ntlm-theft-vulnerability/
CVE ID: CVE-2023-50803 State: PUBLISHED Published: 2024-06-05T00:00:00 Last Updated: 2024-11-26T15:48:51.623Z Severity: LOW (CVSS 3.7 CVSS:3.1/AC:H/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check replay protection specified by the NAS (Non-Access-Stratum) module. This can lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Conta
atum) module. This can lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-50804 State: PUBLISHED Published: 2024-06-05T00:00:00.000Z Last Updated: 2025-03-18T19:54:12.026Z Severity: LOW (CVSS 3.7 CVSS:3.1/AC:H/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor, and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check format types specified by the NAS (Non-Access-Stratum) module. This can lead to bypass of authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
atum) module. This can lead to bypass of authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-50805 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-11-25T15:47:51.256Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
of-bounds write in the heap in 2G (no auth). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2023-50805/
CVE ID: CVE-2023-50806 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-10-25T17:49:27.232Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850 Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem 5123, Exynos Modem 5300 that allows out-of-bounds access to a heap buffer in the SIM Proactive Command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Prog
unds access to a heap buffer in the SIM Proactive Command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2023-50806/
CVE ID: CVE-2023-50807 State: PUBLISHED Published: 2024-07-09T00:00:00 Last Updated: 2024-08-02T22:23:43.796Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Samsung Wearable Processor and Modems with versions Exynos 9110, Exynos Modem 5123, Exynos Modem 5300 that allows an out-of-bounds write in the heap in 2G (no auth). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/c
support/product-security-updates/ - https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2023-50807/
CVE ID: CVE-2023-50808 State: PUBLISHED Published: 2024-02-13T00:00:00 Last Updated: 2024-08-19T14:45:34.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P38
CVE ID: CVE-2023-50809 State: PUBLISHED Published: 2024-08-09T00:00:00.000Z Last Updated: 2025-03-13T15:40:55.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt_7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code execution within the kernel. This affects Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, and Five. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sonos.com/en-us/security-advisory-2024-0001
CVE ID: CVE-2023-50810 State: PUBLISHED Published: 2024-08-09T00:00:00 Last Updated: 2024-08-23T15:01:15.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used to override the kernel command-line parameters and ultimately bypass the Secure Boot implementation. This affects PLAY5 gen 2, PLAYBASE, PLAY:1, One, One SL, and Amp. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
PLAY5 gen 2, PLAYBASE, PLAY:1, One, One SL, and Amp. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sonos.com/en-us/security-advisory-2024-0001
CVE ID: CVE-2023-50811 State: PUBLISHED Published: 2024-03-19T00:00:00.000Z Last Updated: 2025-03-27T16:03:30.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific reception by POST HTTP request interception. Iterating that parameter, it has been possible to access to the application and take control of many other receptions in addition the assigned one. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2023-50821 State: PUBLISHED Published: 2024-04-09T08:34:35.452Z Last Updated: 2025-02-26T18:41:29.599Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC PCS 7 V9.1, SIMATIC WinCC Runtime Professional V17, SIMATIC WinCC Runtime Professional V18, SIMATIC WinCC Runtime Professional V19, SIMATIC WinCC V7.5, SIMATIC WinCC V8.0 Problem Types: CWE-120 Description: A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Prof
rsions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 1), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 16), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly validate the input provided in the login dialog box. An attacker could leverage this vulnerability to cause a persistent denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-730482.html
CVE ID: CVE-2023-50822 State: PUBLISHED Published: 2023-12-21T14:33:06.623Z Last Updated: 2025-04-24T14:50:45.451Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Currency.Wiki Products: Currency Converter Widget – Exchange Rates Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Currency.Wiki Currency Converter Widget – Exchange Rates allows Stored XSS.This issue affects Currency Converter Widget – Exchange Rates: from n/a through 3.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/c
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/currency-converter-widget/wordpress-currency-converter-widget-plugin-3-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50823 State: PUBLISHED Published: 2023-12-21T14:35:29.199Z Last Updated: 2024-09-13T14:57:00.966Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Wipeout Media Products: CSS & JavaScript Toolbox Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wipeout Media CSS & JavaScript Toolbox allows Stored XSS.This issue affects CSS & JavaScript Toolbox: from n/a through 11.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/css-javascript-toolbox/wordpress-css-javascript-toolbox-
nt: References: - https://patchstack.com/database/vulnerability/css-javascript-toolbox/wordpress-css-javascript-toolbox-plugin-11-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50824 State: PUBLISHED Published: 2023-12-21T14:42:04.982Z Last Updated: 2024-11-20T20:18:08.731Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Brian Batt Products: Insert or Embed Articulate Content into WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Batt Insert or Embed Articulate Content into WordPress allows Stored XSS.This issue affects Insert or Embed Articulate Content into WordPress: from n/a through 4.3000000021. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/da
021. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/insert-or-embed-articulate-content-into-wordpress/wordpress-insert-or-embed-articulate-content-into-wordpress-plugin-4-3000000021-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50825 State: PUBLISHED Published: 2023-12-21T14:44:20.101Z Last Updated: 2024-08-02T22:23:43.444Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Terrier Tenacity Products: iframe Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terrier Tenacity iframe Shortcode allows Stored XSS.This issue affects iframe Shortcode: from n/a through 2.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/iframe-shortcode/wordpress-iframe-shortcode-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=
abase/vulnerability/iframe-shortcode/wordpress-iframe-shortcode-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50826 State: PUBLISHED Published: 2023-12-21T14:46:28.254Z Last Updated: 2024-08-02T22:23:42.990Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Freshlight Lab Products: Menu Image, Icons made easy Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a through 3.10. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/menu-image/wordpress-menu-image-icons-made-easy-plugin-3-10-cross-site
: - https://patchstack.com/database/vulnerability/menu-image/wordpress-menu-image-icons-made-easy-plugin-3-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50827 State: PUBLISHED Published: 2023-12-21T14:48:27.932Z Last Updated: 2024-08-02T22:23:44.213Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Accredible Products: Accredible Certificates & Open Badges Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Accredible Accredible Certificates & Open Badges allows Stored XSS.This issue affects Accredible Certificates & Open Badges: from n/a through 1.4.8. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/accredible-certificates/wordpress-accredible-ce
m Container: References: - https://patchstack.com/database/vulnerability/accredible-certificates/wordpress-accredible-certificates-open-badges-plugin-1-4-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50828 State: PUBLISHED Published: 2023-12-21T14:50:26.284Z Last Updated: 2024-08-02T22:23:43.556Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: David Vongries Products: Ultimate Dashboard – Custom WordPress Dashboard Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Vongries Ultimate Dashboard – Custom WordPress Dashboard allows Stored XSS.This issue affects Ultimate Dashboard – Custom WordPress Dashboard: from n/a through 3.7.11. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate
Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate-dashboard/wordpress-ultimate-dashboard-plugin-3-7-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50829 State: PUBLISHED Published: 2023-12-21T17:10:51.231Z Last Updated: 2024-09-13T14:56:35.022Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Aerin Products: Loan Repayment Calculator and Application Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aerin Loan Repayment Calculator and Application Form allows Stored XSS.This issue affects Loan Repayment Calculator and Application Form: from n/a through 2.9.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/quick
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/quick-interest-slider/wordpress-loan-repayment-calculator-and-application-form-plugin-2-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve