Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-2829 State: PUBLISHED Published: 2023-06-21T16:26:24.932Z Last Updated: 2025-02-13T16:48:38.687Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Description: A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.isc.org/docs/cve-2023-282
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.isc.org/docs/cve-2023-2829 - https://security.netapp.com/advisory/ntap-20230703-0010/
CVE ID: CVE-2023-2830 State: PUBLISHED Published: 2023-10-03T11:22:49.483Z Last Updated: 2024-09-23T15:21:05.883Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Trustindex.io Products: WP Testimonials Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Trustindex.Io WP Testimonials plugin <= 1.4.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/testimonial-widgets/wordpress-wp-testimonials-plugin-1-4-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-2831 State: PUBLISHED Published: 2023-06-16T09:06:15.292Z Last Updated: 2024-12-06T22:59:43.137Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an attacker to cause a Denial of Service by sending a message containing a large number of escaped characters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2023-2832 State: PUBLISHED Published: 2023-05-22T10:43:44.187Z Last Updated: 2025-01-21T21:38:14.276Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: unilogies Products: unilogies/bumsys Problem Types: CWE-89 Description: SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/37b80402-0edf-4f26-a668-b6f8b48dcdfb - https://github.com/unilogies/bumsys/commit/1b426f58a513194206d0ea8ab58baf1461e54978
CVE ID: CVE-2023-2833 State: PUBLISHED Published: 2023-06-06T09:33:23.412Z Last Updated: 2024-12-23T16:22:51.376Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wpdevteam Products: ReviewX – Multi-criteria Rating & Reviews for WooCommerce Problem Types: CWE-269 Improper Privilege Management Description: The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp
minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_screen_options[option]' and 'wp_screen_options[value]' parameters during a screen option update. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/70e1d701-2cff-4793-9e4c-5b16a4038e8d?source=cve - https://plugins.trac.wordpress.org/browser/reviewx/tags/1.6.13/includes/rx-functions.php#L972 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2916148%40reviewx&old=2912114%40reviewx&sfp_email=&sfph_mail=#file472 - https://lana.codes/lanavdb/a889c3ff-5df0-4d7e-951f-0b0406468efa/ -
ld=2912114%40reviewx&sfp_email=&sfph_mail=#file472 - https://lana.codes/lanavdb/a889c3ff-5df0-4d7e-951f-0b0406468efa/ - https://www.wordfence.com/blog/2023/05/wpdeveloper-addresses-privilege-escalation-vulnerability-in-reviewx-wordpress-plugin/
CVE ID: CVE-2023-2834 State: PUBLISHED Published: 2023-06-30T01:56:17.606Z Last Updated: 2024-11-26T16:12:18.198Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: stylemix Products: Booking Calendar | Appointment Booking | BookIt Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is due to insufficient verification on the user being supplied during booking an appointment through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an admi
plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cfd32e46-a4fc-4c10-b546-9f9da75db791?source=cve - https://plugins.trac.wordpress.org/browser/bookit/tags/2.3.6/includes/classes/CustomerController.php#L27 - https://plugins.trac.wordpress.org/browser/bookit/tags/2.3.6/includes/classes/database/Customers.php#L63 - https://plugins.trac.wordpress.org/changeset/2919529/bookit - https://plugins.trac.wordpress.org/changeset/2925153/bookit -
ps://plugins.trac.wordpress.org/changeset/2919529/bookit - https://plugins.trac.wordpress.org/changeset/2925153/bookit - https://www.wordfence.com/blog/2023/06/stylemixthemes-addresses-authentication-bypass-vulnerability-in-bookit-wordpress-plugin/ - https://lana.codes/lanavdb/0dea1346-fd60-4338-8af6-6f89c29075d4/
CVE ID: CVE-2023-2835 State: PUBLISHED Published: 2023-06-02T06:06:47.562Z Last Updated: 2025-02-05T19:44:21.366Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: listingthemes Products: WP Directory Kit Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can success
akes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/847f1c00-0e8f-4d38-84af-fe959e2efe5c?source=cve - https://github.com/Don-H50/wp-vul/blob/main/WDK-xss-exploit.md - https://plugins.trac.wordpress.org/changeset/2917413/wpdirectorykit/trunk/application/views/wdk_messages/index.php
CVE ID: CVE-2023-2836 State: PUBLISHED Published: 2023-05-31T03:36:11.324Z Last Updated: 2025-02-05T19:44:33.382Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: crmperks Products: CRM Perks Forms – WordPress Form Builder Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary
This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/de11636b-a051-4e76-bc26-ed76f66fe0df?source=cve - https://github.com/Don-H50/wp-vul/blob/main/CPF-xss-exploit.md - https://plugins.trac.wordpress.org/changeset/2917582/
CVE ID: CVE-2023-2837 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T15:59:16.485Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: gpac Products: gpac/gpac Problem Types: CWE-121 Description: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/a6bfd1b2-aba8-4c6f-90c4-e95b1831cb17 - https://github.com/gpac/gpac/commit/6f28c4cd607d83ce381f9b4a9f8101ca1e79c611 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-2838 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T16:00:20.863Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: gpac Products: gpac/gpac Problem Types: CWE-125 Description: Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/711e0988-5345-4c01-a2fe-1179604dd07f - https://github.com/gpac/gpac/commit/c88df2e202efad214c25b4e586f243b2038779ba - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-2839 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T16:11:15.521Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: gpac Products: gpac/gpac Problem Types: CWE-369 Description: Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/42dce889-f63d-4ea9-970f-1f20fc573d5f - https://github.com/gpac/gpac/commit/047f96fb39e6bf70cb9f344093f5886e51dce0ac - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-2840 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T16:13:51.656Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: gpac Products: gpac/gpac Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/21926fc2-6eb1-4e24-8a36-e60f487d0257 - https://github.com/gpac/gpac/commit/ba59206b3225f0e8e95a27eff41cb1c49ddf9a37 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-2841 State: PUBLISHED Published: 2023-11-22T15:33:19.683Z Last Updated: 2024-08-02T06:33:05.703Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: zorem Products: Advanced Local Pickup for WooCommerce Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated att
ied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with admin-level privileges to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/125e7ea3-574a-4760-b10b-7a98d94c87a5?source=cve - https://plugins.trac.wordpress.org/browser/advanced-local-pickup-for-woocommerce/trunk/include/wc-local-pickup-admin.php?rev=2889033#L447 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2986002%40advanced-
?rev=2889033#L447 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2986002%40advanced-local-pickup-for-woocommerce%2Ftrunk&old=2983681%40advanced-local-pickup-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2023-2842 State: PUBLISHED Published: 2023-06-27T13:17:17.414Z Last Updated: 2024-11-27T19:22:40.410Z Vendors: Unknown Products: WP Inventory Manager Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Items via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0357ecc7-56f5-4843-a928-bf2d3ce75596
CVE ID: CVE-2023-2843 State: PUBLISHED Published: 2023-08-07T14:31:25.663Z Last Updated: 2024-10-10T19:37:32.883Z Vendors: Unknown Products: MultiParcels Shipping For WooCommerce Problem Types: CWE-89 SQL Injection Description: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parameter before using it in an SQL statement, which could allow any authenticated users, such as subscribers, to perform SQL Injection attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8e713eaf-f332-47e2-a131-c14222201fdc
CVE ID: CVE-2023-2844 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-02-12T16:45:06.603Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: cloudexplorer-dev Products: cloudexplorer-dev/cloudexplorer-lite Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/6644b36e-603d-4dbe-8ee2-5df8b8fb2e22 - https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/d9f55a44e579d312977b02317b2020de758b763a
CVE ID: CVE-2023-2845 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-16T19:47:02.832Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: cloudexplorer-dev Products: cloudexplorer-dev/cloudexplorer-lite Problem Types: CWE-284 Description: Improper Access Control in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudexplorer-dev/cloudexplorer-lite/commit/d9f55a44e579d312977b02317b2020de758b763a - https://huntr.dev/bounties/ac10e81c-998e-4425-9d74-b985d9b0254c
CVE ID: CVE-2023-2846 State: PUBLISHED Published: 2023-06-30T04:05:26.423Z Last Updated: 2025-03-05T18:55:00.963Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Mitsubishi Electric Corporation Products: MELSEC-F Series FX3U-16MR/ES, MELSEC-F Series FX3U-16MT/ES, MELSEC-F Series FX3U-16MT/ESS, MELSEC-F Series FX3U-32MR/ES, MELSEC-F Series FX3U-32MT/ES, MELSEC-F Series FX3U-32MT/ESS, MELSEC-F Series FX3U-48MR/ES, MELSEC-F Series FX3U-48MT/ES, MELSEC-F Series FX3U-48MT/ESS, MELSEC-F Series FX3U-64MR/ES, MELSEC-F Series FX3U-64MT/ES, MELSEC-F Series FX3U-64MT/ESS, MELSEC-F Series FX3U-80MR/ES, MELSEC-F Series FX3U-80MT/ES, MELSEC-F Series FX3U-80MT/ESS, MELSEC-F
ries FX3U-64MT/ESS, MELSEC-F Series FX3U-80MR/ES, MELSEC-F Series FX3U-80MT/ES, MELSEC-F Series FX3U-80MT/ESS, MELSEC-F Series FX3U-128MR/ES, MELSEC-F Series FX3U-128MT/ES, MELSEC-F Series FX3U-128MT/ESS, MELSEC-F Series FX3U-16MR/DS, MELSEC-F Series FX3U-16MT/DS, MELSEC-F Series FX3U-16MT/DSS, MELSEC-F Series FX3U-32MR/DS, MELSEC-F Series FX3U-32MT/DS, MELSEC-F Series FX3U-32MT/DSS, MELSEC-F Series FX3U-48MR/DS, MELSEC-F Series FX3U-48MT/DS, MELSEC-F Series FX3U-48MT/DSS, MELSEC-F Series FX3U-64MR/DS, MELSEC-F Series FX3U-64MT/DS, MELSEC-F Series FX3U-64MT/DSS, MELSEC-F Series FX3U-80MR/DS, MELSEC-F Series FX3U-80MT/DS, MELSEC-F Series FX3U-80MT/DSS, MELSEC-F Series FX3U-32MR/UA1, MELSEC-F
ries FX3U-80MR/DS, MELSEC-F Series FX3U-80MT/DS, MELSEC-F Series FX3U-80MT/DSS, MELSEC-F Series FX3U-32MR/UA1, MELSEC-F Series FX3U-64MR/UA1, MELSEC-F Series FX3U-32MS/ES, MELSEC-F Series FX3U-64MS/ES, MELSEC-F Series FX3U-16MR/ES-A, MELSEC-F Series FX3U-16MT/ES-A, MELSEC-F Series FX3U-32MR/ES-A, MELSEC-F Series FX3U-32MT/ES-A, MELSEC-F Series FX3U-48MR/ES-A, MELSEC-F Series FX3U-48MT/ES-A, MELSEC-F Series FX3U-64MR/ES-A, MELSEC-F Series FX3U-64MT/ES-A, MELSEC-F Series FX3U-80MR/ES-A, MELSEC-F Series FX3U-80MT/ES-A, MELSEC-F Series FX3U-128MR/ES-A, MELSEC-F Series FX3U-128MT/ES-A, MELSEC-F Series FX3UC-16MT/D, MELSEC-F Series FX3UC-32MT/D, MELSEC-F Series FX3UC-64MT/D, MELSEC-F Series FX3UC-
T/ES-A, MELSEC-F Series FX3UC-16MT/D, MELSEC-F Series FX3UC-32MT/D, MELSEC-F Series FX3UC-64MT/D, MELSEC-F Series FX3UC-96MT/D, MELSEC-F Series FX3UC-16MT/DSS, MELSEC-F Series FX3UC-32MT/DSS, MELSEC-F Series FX3UC-64MT/DSS, MELSEC-F Series FX3UC-96MT/DSS, MELSEC-F Series FX3UC-16MR/D-T, MELSEC-F Series FX3UC-16MR/DS-T, MELSEC-F Series FX3UC-32MT-LT, MELSEC-F Series FX3UC-32MT-LT-2, MELSEC-F Series FX3UC-16MT/D-P4, MELSEC-F Series FX3UC-16MT/DSS-P4, MELSEC-F Series FX3G-14MR/ES, MELSEC-F Series FX3G-14MT/ES, MELSEC-F Series FX3G-14MT/ESS, MELSEC-F Series FX3G-24MR/ES, MELSEC-F Series FX3G-24MT/ES, MELSEC-F Series FX3G-24MT/ESS, MELSEC-F Series FX3G-40MR/ES, MELSEC-F Series FX3G-40MT/ES, MELSE
-F Series FX3G-24MT/ES, MELSEC-F Series FX3G-24MT/ESS, MELSEC-F Series FX3G-40MR/ES, MELSEC-F Series FX3G-40MT/ES, MELSEC-F Series FX3G-40MT/ESS, MELSEC-F Series FX3G-60MR/ES, MELSEC-F Series FX3G-60MT/ES, MELSEC-F Series FX3G-60MT/ESS, MELSEC-F Series FX3G-14MR/DS, MELSEC-F Series FX3G-14MT/DS, MELSEC-F Series FX3G-14MT/DSS, MELSEC-F Series FX3G-24MR/DS, MELSEC-F Series FX3G-24MT/DS, MELSEC-F Series FX3G-24MT/DSS, MELSEC-F Series FX3G-40MR/DS, MELSEC-F Series FX3G-40MT/DS, MELSEC-F Series FX3G-40MT/DSS, MELSEC-F Series FX3G-60MR/DS, MELSEC-F Series FX3G-60MT/DS, MELSEC-F Series FX3G-60MT/DSS, MELSEC-F Series FX3G-14MR/ES-A, MELSEC-F Series FX3G-14MT/ES-A, MELSEC-F Series FX3G-24MR/ES-A, MEL
eries FX3G-60MT/DSS, MELSEC-F Series FX3G-14MR/ES-A, MELSEC-F Series FX3G-14MT/ES-A, MELSEC-F Series FX3G-24MR/ES-A, MELSEC-F Series FX3G-24MT/ES-A, MELSEC-F Series FX3G-40MR/ES-A, MELSEC-F Series FX3G-40MT/ES-A, MELSEC-F Series FX3G-60MR/ES-A, MELSEC-F Series FX3G-60MT/ES-A, MELSEC-F Series FX3GC-32MT/D, MELSEC-F Series FX3GC-32MT/DSS, MELSEC-F Series FX3GE-24MR/ES, MELSEC-F Series FX3GE-24MT/ES, MELSEC-F Series FX3GE-24MT/ESS, MELSEC-F Series FX3GE-40MR/ES, MELSEC-F Series FX3GE-40MT/ES, MELSEC-F Series FX3GE-40MT/ESS, MELSEC-F Series FX3GE-24MR/DS, MELSEC-F Series FX3GE-24MT/DS, MELSEC-F Series FX3GE-24MT/DSS, MELSEC-F Series FX3GE-40MR/DS, MELSEC-F Series FX3GE-40MT/DS, MELSEC-F Series F
24MT/DS, MELSEC-F Series FX3GE-24MT/DSS, MELSEC-F Series FX3GE-40MR/DS, MELSEC-F Series FX3GE-40MT/DS, MELSEC-F Series FX3GE-40MT/DSS, MELSEC-F Series FX3GA-24MR-CM, MELSEC-F Series FX3GA-24MT-CM, MELSEC-F Series FX3GA-40MR-CM, MELSEC-F Series FX3GA-40MT-CM, MELSEC-F Series FX3GA-60MR-CM, MELSEC-F Series FX3GA-60MT-CM, MELSEC-F Series FX3S-10MR/DS, MELSEC-F Series FX3S-10MR/ES, MELSEC-F Series FX3S-10MT/DS, MELSEC-F Series FX3S-10MT/DSS, MELSEC-F Series FX3S-10MT/ES, MELSEC-F Series FX3S-10MT/ESS, MELSEC-F Series FX3S-14MR/DS, MELSEC-F Series FX3S-14MR/ES, MELSEC-F Series FX3S-14MT/DS, MELSEC-F Series FX3S-14MT/DSS, MELSEC-F Series FX3S-14MT/ES, MELSEC-F Series FX3S-14MT/ESS, MELSEC-F Series
X3S-14MT/DS, MELSEC-F Series FX3S-14MT/DSS, MELSEC-F Series FX3S-14MT/ES, MELSEC-F Series FX3S-14MT/ESS, MELSEC-F Series FX3S-20MR/DS, MELSEC-F Series FX3S-20MR/ES, MELSEC-F Series FX3S-20MT/DS, MELSEC-F Series FX3S-20MT/DSS, MELSEC-F Series FX3S-20MT/ES, MELSEC-F Series FX3S-20MT/ESS, MELSEC-F Series FX3S-30MR/DS, MELSEC-F Series FX3S-30MR/ES, MELSEC-F Series FX3S-30MT/DS, MELSEC-F Series FX3S-30MT/DSS, MELSEC-F Series FX3S-30MT/ES, MELSEC-F Series FX3S-30MT/ESS, MELSEC-F Series FX3S-30MR/ES-2AD, MELSEC-F Series FX3S-30MT/ES-2AD, MELSEC-F Series FX3S-30MT/ESS-2AD, MELSEC-F Series FX3SA-10MR-CM, MELSEC-F Series FX3SA-10MT-CM, MELSEC-F Series FX3SA-14MR-CM, MELSEC-F Series FX3SA-14MT-CM, MELS
Series FX3SA-10MR-CM, MELSEC-F Series FX3SA-10MT-CM, MELSEC-F Series FX3SA-14MR-CM, MELSEC-F Series FX3SA-14MT-CM, MELSEC-F Series FX3SA-20MR-CM, MELSEC-F Series FX3SA-20MT-CM, MELSEC-F Series FX3SA-30MR-CM, MELSEC-F Series FX3SA-30MT-CM Problem Types: CWE-294 Description: Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf
Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-005_en.pdf - https://jvn.jp/vu/JVNVU94519952 - https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-04
CVE ID: CVE-2023-2847 State: PUBLISHED Published: 2023-06-15T07:46:47.134Z Last Updated: 2024-12-12T16:38:25.361Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ESET, ESET Products: Server Security for Linux, Endpoint Antivirus for Linux, Cyber Security, Endpoint Antivirus for macOS Problem Types: CWE-269 Description: During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied this possible attack vector and has prepared new bui
e management to trigger actions with root privileges. ESET remedied this possible attack vector and has prepared new builds of its products that are no longer susceptible to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.eset.com/en/ca8447
CVE ID: CVE-2023-2848 State: PUBLISHED Published: 2023-09-14T11:36:50.521Z Last Updated: 2024-09-25T18:27:07.732Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: Movim Products: Movim Problem Types: CWE-1385 Description: Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a missing header validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/movim/movim/commit/96372082acd3e5d778a2522a60a1805bf2af31f6 - https://github.com/movim/movim/commit/49e2012aecdf918bb1d16f278fa9ff42fad29a9d - https://mov.im/node/pubsub.movim.eu/Movim/a2d05925-042
com/movim/movim/commit/49e2012aecdf918bb1d16f278fa9ff42fad29a9d - https://mov.im/node/pubsub.movim.eu/Movim/a2d05925-0427-4f3f-b777-d20571ddddff
CVE ID: CVE-2023-2850 State: PUBLISHED Published: 2023-07-25T11:13:18.100Z Last Updated: 2024-10-15T19:05:55.858Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: NodeBB Products: NodeBB Problem Types: CWE-1385 Description: NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Exploitation of this vulnerability allows certain user information to be extracted by attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NodeBB/NodeBB/security/advisories/GHSA-4qcv-qf38-5j3j - https://github.com/NodeBB/NodeBB/commit/51096ad2345fb1d1380bec0a