Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-29130 State: PUBLISHED Published: 2023-07-11T09:07:06.193Z Last Updated: 2024-11-12T17:03:34.510Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC CN 4100 Problem Types: CWE-284 Description: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/produ
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf
CVE ID: CVE-2023-29131 State: PUBLISHED Published: 2023-07-11T09:07:07.238Z Last Updated: 2024-11-12T17:00:15.582Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC CN 4100 Problem Types: CWE-276 Description: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-313488.pdf
CVE ID: CVE-2023-29132 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:25:19.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occurs when printing of a non-formatted line is concurrent with printing of a formatted line. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://irssi.org/security/irssi_sa_2023_03.txt - https://www.openwall.com/lists/oss-security/2023/03/30/5
CVE ID: CVE-2023-29134 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-02T17:24:14.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T331362 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/898722 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/895774 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/900133 - https://phabricator.wikimedia.org/rECRG920f3c19a84175bcfe9
errit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/900133 - https://phabricator.wikimedia.org/rECRG920f3c19a84175bcfe93f41ecf9f8cef32730f8e
CVE ID: CVE-2023-29137 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-14T19:27:24.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for GrowthExperiments inadvertently returns the timezone preference for arbitrary users, which can be used to de-anonymize users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T328643
CVE ID: CVE-2023-29139 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-14T19:24:42.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissions makes many CheckUserLog API requests in some configurations, denial of service can occur (RequestTimeoutException or upstream request timeout). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T326293
CVE ID: CVE-2023-29140 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-18T16:04:43.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see edits for which the username has been hidden, because there is no check for rev_deleted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T327613
CVE ID: CVE-2023-29141 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-18T16:02:42.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phabricator.wikimedia.org/T285159 - https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/core/+/REL1_39/RELEASE-NOTES-1.39 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYP
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ONWHGOBFD6CQAEGOP5O375XAP2N6RUHT/ - https://www.debian.org/security/2023/dsa-5447 - https://lists.debian.org/debian-lts-announce/2023/08/msg00029.html
CVE ID: CVE-2023-29145 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-26T20:19:18.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://malwarebytes.com - https://www.malwarebytes.com/secure/cves/cve-2023-29145
CVE ID: CVE-2023-29147 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-26T20:11:23.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://malwarebytes.com - https://www.malwarebytes.com/secure/cves/cve-2023-29147
CVE ID: CVE-2023-29150 State: PUBLISHED Published: 2023-04-27T22:01:29.958Z Last Updated: 2025-01-17T17:08:45.022Z Vendors: mySCADA Technologies Products: mySCADA myPRO Problem Types: CWE-78 OS Command Injection Description: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06
CVE ID: CVE-2023-29151 State: PUBLISHED Published: 2023-08-11T02:37:23.573Z Last Updated: 2024-10-10T15:10:46.232Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) PSR SDK Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00907.html
CVE ID: CVE-2023-29152 State: PUBLISHED Published: 2023-06-07T21:46:20.797Z Last Updated: 2025-01-06T21:22:20.741Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H) Vendors: PTC Products: Vuforia Studio Problem Types: CWE-285 Description: By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13
CVE ID: CVE-2023-29153 State: PUBLISHED Published: 2024-02-14T13:38:17.590Z Last Updated: 2025-02-13T16:49:00.967Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) SPS firmware Problem Types: denial of service, CWE-400 Description: Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentially enable denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01003.html - https://security.netapp.com/advisory/ntap-202
intel.com/content/www/us/en/security-center/advisory/intel-sa-01003.html - https://security.netapp.com/advisory/ntap-20240322-0005/
CVE ID: CVE-2023-29154 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T19:24:43.251Z Vendors: Contec Co., Ltd. Products: CONPROSYS HMI System (CHS) Problem Types: SQL Injection Description: SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf - https
ontec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf - https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf - https://jvn.jp/en/vu/JVNVU93372935/
CVE ID: CVE-2023-29155 State: PUBLISHED Published: 2023-11-20T16:28:20.585Z Last Updated: 2025-06-11T14:06:31.953Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: INEA Products: ME RTU Problem Types: CWE- 306 Description: Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an attacker to obtain admin-level access to the host system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-304-02
CVE ID: CVE-2023-29156 State: PUBLISHED Published: 2023-07-11T08:42:03.909Z Last Updated: 2024-11-06T19:38:27.579Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: bluemark Products: ds230 Problem Types: CWE-223 Description: DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID (ODID) messages which force the DroneScout ds230 Remote ID receiver to drop real Remote ID (RID) information and, instead, generate and transmit JSON encoded MQTT messages containing crafted RID informatio
te ID (RID) information and, instead, generate and transmit JSON encoded MQTT messages containing crafted RID information. Consequently, the MQTT broker, typically operated by a system integrator, will have no access to the drones’ real RID information. This issue affects DroneScout ds230 in default configuration from firmware version 20211210-1627 through 20230329-1042. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-29156/ - https://download.bluemark.io/dronescout/firmware/history.txt
CVE ID: CVE-2023-29157 State: PUBLISHED Published: 2023-11-14T19:05:00.952Z Last Updated: 2024-08-30T15:10:16.221Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) OFU software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00900.html
CVE ID: CVE-2023-29158 State: PUBLISHED Published: 2023-06-19T20:11:05.873Z Last Updated: 2024-12-09T20:49:14.599Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: SUBNET Solutions Inc. Products: PowerSYSTEM Center Problem Types: CWE-294 Description: SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or a loss of data integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-166-01
CVE ID: CVE-2023-29159 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T19:18:29.375Z Vendors: Encode Products: Starlette Problem Types: Directory traversal Description: Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/encode/starlette/security/advisories/GHSA-v5gw-mw7f-84px - https://github.com/encode/starlette/releases/tag/0.27.0 - https://jvn.jp/en/jp/JVN95981715/
CVE ID: CVE-2023-29160 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T20:22:40.729Z Vendors: FUJI ELECTRIC CO., LTD. Products: FRENIC RHC Loader Problem Types: Stack-based Buffer Overflow Description: Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://felib.fujielectric.co.jp/download/details.htm?dataid=45829407&site=global&lang=en - https://jvn.jp/en/vu/JVNVU97809354/
CVE ID: CVE-2023-29161 State: PUBLISHED Published: 2023-11-14T19:05:01.481Z Last Updated: 2024-08-30T15:25:17.540Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) OFU software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00900.html
CVE ID: CVE-2023-29162 State: PUBLISHED Published: 2024-02-14T13:38:13.744Z Last Updated: 2025-03-20T14:34:20.632Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: n/a Products: Intel(R) C++ Compiler Classic Problem Types: escalation of privilege, Improper buffer restrictions Description: Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/adv
VE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00988.html
CVE ID: CVE-2023-29163 State: PUBLISHED Published: 2023-05-03T14:34:54.385Z Last Updated: 2025-02-03T18:45:15.885Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-401 Description: When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K20145107
CVE ID: CVE-2023-29164 State: PUBLISHED Published: 2025-02-12T21:19:42.724Z Last Updated: 2025-02-13T19:48:55.115Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N) Vendors: n/a Products: Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP Problem Types: Escalation of Privilege, CWE-284 Description: Improper access control in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, before version 02.01.0017 and Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP before version R01.01.0009 may allow an au
02.01.0017 and Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP before version R01.01.0009 may allow an authenticated user to enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00990.html
CVE ID: CVE-2023-29165 State: PUBLISHED Published: 2023-11-14T19:04:20.572Z Last Updated: 2024-08-02T14:00:15.830Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Arc(TM) Control software Problem Types: escalation of privilege, CWE-428 Description: Unquoted search path or element in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01020.html
CVE ID: CVE-2023-29166 State: PUBLISHED Published: 2023-09-06T01:36:38.138Z Last Updated: 2024-09-26T20:26:29.001Z Vendors: Apple Products: Pro Video Formats Problem Types: A user may be able to elevate privileges Description: A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213882
CVE ID: CVE-2023-29167 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T20:19:47.930Z Vendors: FUJI ELECTRIC CO., LTD. Products: FRENIC RHC Loader Problem Types: Out-of-bounds read Description: Out-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive information on the system where the affected product is installed may be disclosed or arbitrary code may be executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://felib.fujielectric.co.jp/download/details.htm?dataid=45829407&site=global&lang=en - https://jvn.jp/en/vu/JVNVU97809354/
CVE ID: CVE-2023-29168 State: PUBLISHED Published: 2023-06-07T21:42:46.886Z Last Updated: 2025-01-06T19:58:39.131Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PTC Products: Vuforia Studio Problem Types: CWE-522 Description: The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13
CVE ID: CVE-2023-29169 State: PUBLISHED Published: 2023-04-27T22:03:30.341Z Last Updated: 2025-01-17T17:08:18.925Z Vendors: mySCADA Technologies Products: mySCADA myPRO Problem Types: CWE-78 OS Command Injection Description: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06
CVE ID: CVE-2023-29170 State: PUBLISHED Published: 2023-04-07T14:35:55.043Z Last Updated: 2025-01-10T18:56:01.357Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PI Websolution Products: Product Enquiry for WooCommerce, WooCommerce product catalog Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in PI Websolution Product Enquiry for WooCommerce, WooCommerce product catalog plugin <= 2.2.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/enquiry-quotation-for-woocommerce/wordpress-product-enquiry-for-woocommerce-p
ps://patchstack.com/database/vulnerability/enquiry-quotation-for-woocommerce/wordpress-product-enquiry-for-woocommerce-plugin-2-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29171 State: PUBLISHED Published: 2023-04-07T14:21:24.443Z Last Updated: 2024-08-02T14:47:23.903Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Magic Post Thumbnail Products: Magic Post Thumbnail Problem Types: CWE-79 Description: Unauth. Reflected Cross-site Scripting (XSS) vulnerability in Magic Post Thumbnail plugin <= 4.1.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/magic-post-thumbnail/wordpress-magic-post-thumbnail-plugin-4-1-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29172 State: PUBLISHED Published: 2023-04-07T14:16:30.440Z Last Updated: 2025-01-10T18:56:13.805Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PropertyHive Products: PropertyHive Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PropertyHive plugin <= 1.5.46 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/propertyhive/wordpress-propertyhive-plugin-1-5-46-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29173 State: PUBLISHED Published: 2024-12-09T11:31:12.871Z Last Updated: 2024-12-09T18:45:18.228Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: AWESOME TOGI Products: Product Category Tree Problem Types: CWE-862 Description: Missing Authorization vulnerability in AWESOME TOGI Product Category Tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Category Tree: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/product-category-tree/vulnerability/wordpress-product-category-tree-plugin-2-5-broken-access-contr
base/wordpress/plugin/product-category-tree/vulnerability/wordpress-product-category-tree-plugin-2-5-broken-access-control-vulnerability?_s_id=cve