Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
onment variable OPENSSL_ia32cap: OPENSSL_ia32cap=:~0x200000 The FIPS provider is not affected by this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20230908.txt - https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=4bfac4471f53c4f74c8d81020beb938f92d84ca5 - https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6754de4a121ec7f261b16723180df6592cbb4508 - https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a632d534c73eeb3e3db8c7540d811194ef7c79ff
CVE ID: CVE-2023-4808 State: PUBLISHED Published: 2023-11-20T18:55:05.343Z Last Updated: 2024-08-02T07:38:00.794Z Vendors: Unknown Products: WP Post Popup Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Post Popup WordPress plugin through 3.7.3 does not sanitise and escape some of its inputs, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bb8e9f06-477b-4da3-b5a6-4f06084ecd57
CVE ID: CVE-2023-4809 State: PUBLISHED Published: 2023-09-06T19:26:45.833Z Last Updated: 2025-02-13T17:18:10.982Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-167 Description: In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not be recognized as the correct ultimate payload. Instead a packet with multiple IPv6 fragment headers would unexpectedly be interpreted as a fragmented packet, rather than as whatever the real payload is. As a result, IPv6 fragments may bypass pf firewall rules written on the a
, rather than as whatever the real payload is. As a result, IPv6 fragments may bypass pf firewall rules written on the assumption all fragments have been reassembled and, as a result, be forwarded or processed by the host. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-23:10.pf.asc - http://www.openwall.com/lists/oss-security/2023/09/08/5 - http://www.openwall.com/lists/oss-security/2023/09/08/6 - http://www.openwall.com/lists/oss-security/2023/09/08/7 - https://security.netapp.com/advisory/ntap-20231221-0009/
CVE ID: CVE-2023-4810 State: PUBLISHED Published: 2023-11-06T20:41:11.175Z Last Updated: 2025-02-26T21:22:07.889Z Vendors: Unknown Products: Responsive Pricing Table Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dfde5436-dd5c-4c70-a9c2-3cb85cc99c0a - https://port
ISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dfde5436-dd5c-4c70-a9c2-3cb85cc99c0a - https://portswigger.net/web-security/cross-site-scripting/stored
CVE ID: CVE-2023-4811 State: PUBLISHED Published: 2023-10-16T19:39:16.639Z Last Updated: 2025-04-23T16:11:48.850Z Vendors: Unknown Products: WordPress File Upload Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7f9271f2-4de4-4be3-8746-2a3f149eb1d1
CVE ID: CVE-2023-4812 State: PUBLISHED Published: 2024-01-12T13:56:56.701Z Last Updated: 2025-11-20T04:09:58.261Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/424398 -
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/424398 - https://hackerone.com/reports/2115574
CVE ID: CVE-2023-4813 State: PUBLISHED Published: 2023-09-12T21:54:33.387Z Last Updated: 2025-11-11T19:29:11.106Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-416 Description: A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called
s been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHBA-2024:2413 - https://access.redhat.com/errata/RHSA-2023:5453 - https://access.redhat.com/errata/RHSA-2023:5455 - https://access.redhat.com/errata/RHSA-2023:7409 - https://access.redhat.com/security/cve/CVE-2023-4813 - https://bugzilla.redhat.com/show_bug.cgi?id=2237798
CVE ID: CVE-2023-4814 State: PUBLISHED Published: 2023-09-14T06:43:07.463Z Last Updated: 2024-09-25T14:17:10.360Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Trellix Products: Data Loss Prevention Endpoint for Windows Problem Types: CWE-250 Description: A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does not have permission to. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10407
CVE ID: CVE-2023-4815 State: PUBLISHED Published: 2023-09-07T06:26:09.174Z Last Updated: 2024-09-26T19:25:34.623Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: answerdev Products: answerdev/answer Problem Types: CWE-306 Description: Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/4cd3eeb4-57c9-4af2-ad19-2166c9e0fd2c - https://github.com/answerdev/answer/commit/e75142a55546e01d8904f59db228422561f51666
CVE ID: CVE-2023-4816 State: PUBLISHED Published: 2023-09-11T07:40:46.735Z Last Updated: 2024-09-25T20:01:08.623Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L) Vendors: Hitachi Energy Products: Asset Suite 9 Problem Types: CWE-287 Description: A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holder action (Accept, Release, and Clear) for another user and entering an arbitrary password in the holder action confirmation dialog box. Despite entering an arbitrary password in the confirma
arbitrary password in the holder action confirmation dialog box. Despite entering an arbitrary password in the confirmation box, the system will execute the selected holder action. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://images.go.hitachienergy.com/Web/ABBEnterpriseSoftware/%7B70b3d323-4866-42e1-8a75-58996729c1d4%7D_8DBD000172-VU-2023-23_Asset_Suite_Tagout_vulnerability_Rev1.pdf
CVE ID: CVE-2023-4817 State: PUBLISHED Published: 2023-10-03T15:03:03.694Z Last Updated: 2024-09-19T19:46:01.454Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ICP DAS Products: ET-7060 Problem Types: CWE-434 Description: This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the upload functionality, compromising the entire device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/unrestricted-file-upload-vulnerability-icp-das-et-7060
CVE ID: CVE-2023-4818 State: PUBLISHED Published: 2024-01-15T13:28:53.084Z Last Updated: 2025-06-17T13:36:53.048Z Vendors: PAX Technology Products: A920 Problem Types: CWE-74 Description: PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development - https://blog.stmcyber.com/pax-pos-cves-2023/ - https://cert.pl/en/posts/2024/01/CVE-2023-4818/ - https://cert.pl/
ment - https://blog.stmcyber.com/pax-pos-cves-2023/ - https://cert.pl/en/posts/2024/01/CVE-2023-4818/ - https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE ID: CVE-2023-4819 State: PUBLISHED Published: 2023-10-16T19:38:55.423Z Last Updated: 2025-04-23T16:14:38.486Z Vendors: Unknown Products: Shared Files Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded file. Therefore, an attacker can upload an allowed file extension injected with malicious scripts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4423b023-cf4a-46cb-b314-7a09ac08b29a
CVE ID: CVE-2023-4820 State: PUBLISHED Published: 2023-10-16T19:39:21.880Z Last Updated: 2025-03-05T16:25:51.915Z Vendors: Unknown Products: PowerPress Podcasting plugin by Blubrry Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e866a214-a142-43c7-b93d-ff2301a3e432
CVE ID: CVE-2023-4821 State: PUBLISHED Published: 2023-10-16T19:39:23.618Z Last Updated: 2025-04-23T16:11:18.030Z Vendors: Unknown Products: Drag and Drop Multiple File Upload for WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an attacker can upload unsafe .shtml or .svg files containing malicious scripts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3ac0853b-03f7-44b9-aa9b-72df3e01a9b5
CVE ID: CVE-2023-4822 State: PUBLISHED Published: 2023-10-16T08:45:59.756Z Last Updated: 2025-06-16T16:48:57.367Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: Grafana Products: Grafana Enterprise Problem Types: CWE-269 Description: Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations. It also allows an Organization Admin to assign or revoke any permissions that they
ion Admin roles in all organizations. It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally. This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user. The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2023-4822 - https:/
ntainer: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2023-4822 - https://security.netapp.com/advisory/ntap-20231103-0008/
CVE ID: CVE-2023-4823 State: PUBLISHED Published: 2023-10-31T13:54:42.835Z Last Updated: 2025-04-23T16:10:34.712Z Vendors: Unknown Products: WP Meta and Date Remover Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/84f53e
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/84f53e27-d8d2-4fa3-91f9-447037508d30
CVE ID: CVE-2023-4824 State: PUBLISHED Published: 2023-11-20T18:55:03.719Z Last Updated: 2024-08-29T13:38:27.160Z Vendors: Unknown Products: Woohoo Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/71c616ff-0a7e-4f6d-950b-79c469a28263
CVE ID: CVE-2023-4826 State: PUBLISHED Published: 2024-02-23T09:14:29.634Z Last Updated: 2024-11-04T17:07:33.241Z Vendors: Unknown Products: socialdriver Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/99ec0add-8f4d-4d68-91aa-80b1631a53bf/ - http://socialdriver.com
CVE ID: CVE-2023-4827 State: PUBLISHED Published: 2023-10-16T08:32:43.945Z Last Updated: 2025-04-23T16:15:08.767Z Vendors: Unknown Products: File Manager Pro Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using GET requests, such as uploading a web shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d4daf0e1-8018-448a-964c-427a355e005f
CVE ID: CVE-2023-4828 State: PUBLISHED Published: 2023-09-13T15:16:13.903Z Last Updated: 2024-09-24T19:52:35.463Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Proofpoint Products: ITM Server Problem Types: CWE-754 Description: An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure of sensitive data events from the agent about the personally identifiable information (PII) and intellectual property it monitors, and a
a events from the agent about the personally identifiable information (PII) and intellectual property it monitors, and all such data could be altered or deleted before reaching the ITM Server. An attacker must first successfully obtain valid agent credentials and agent hostname. All versions prior to 7.14.3.69 are affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-008
CVE ID: CVE-2023-4829 State: PUBLISHED Published: 2023-10-13T12:24:05.277Z Last Updated: 2024-09-17T17:05:37.681Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: froxlor Products: froxlor/froxlor Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/babd73ca-6c80-4145-8c7d-33a883fe606b - https://github.com/froxlor/froxlor/commit/4711a414360782fe4fc94f7c25027077cbcdf73d
CVE ID: CVE-2023-4830 State: PUBLISHED Published: 2023-09-15T05:52:34.443Z Last Updated: 2024-09-25T15:24:44.351Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Tura Products: Signalix Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tura Signalix allows SQL Injection.This issue affects Signalix: 7T_0228. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0529
CVE ID: CVE-2023-4831 State: PUBLISHED Published: 2023-09-15T07:01:47.851Z Last Updated: 2024-09-25T15:23:32.863Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ncode Products: Ncep Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncode Ncep allows SQL Injection.This issue affects Ncep: before 20230914 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0529-2
CVE ID: CVE-2023-4832 State: PUBLISHED Published: 2023-09-14T17:49:40.530Z Last Updated: 2024-09-25T19:28:58.171Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Aceka Products: Company Management Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0523
CVE ID: CVE-2023-4833 State: PUBLISHED Published: 2023-09-15T08:22:11.916Z Last Updated: 2024-09-25T15:19:19.462Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Besttem Products: Network Marketing Software Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Besttem Network Marketing Software allows SQL Injection.This issue affects Network Marketing Software: before 1.0.2309.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0533
CVE ID: CVE-2023-4834 State: PUBLISHED Published: 2023-10-16T08:40:13.064Z Last Updated: 2024-09-16T18:17:07.881Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Lion Europe, Helmholz Products: mbCONNECT24, mymbCONNECT24, myREX24, myREX24.virtual Problem Types: CWE-269 Description: In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to. Additional Analyst Notes: - CVE Program Container: - CISA AD
ce information in his account he should not have access to. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-041 - https://cert.vde.com/en/advisories/VDE-2023-043
CVE ID: CVE-2023-4835 State: PUBLISHED Published: 2023-09-15T08:09:23.112Z Last Updated: 2024-09-25T15:20:11.119Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CF Software Products: Oil Management Software Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CF Software Oil Management Software allows SQL Injection.This issue affects Oil Management Software: before 20230912 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0533
CVE ID: CVE-2023-4836 State: PUBLISHED Published: 2023-10-31T13:54:46.188Z Last Updated: 2025-04-03T13:21:19.295Z Vendors: Unknown Products: WordPress File Sharing Plugin Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c17f2534-d791-4fe3-b45b-875777585dc6 - https://research.cleantalk.org/cve-2023-4836-user-priv
//wpscan.com/vulnerability/c17f2534-d791-4fe3-b45b-875777585dc6 - https://research.cleantalk.org/cve-2023-4836-user-private-files-idor-to-sensitive-data-and-private-files-exposure-leak-of-info-poc
CVE ID: CVE-2023-4837 State: PUBLISHED Published: 2023-10-10T09:20:53.558Z Last Updated: 2024-09-18T19:02:34.543Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Jan Syski Products: SmodBIP Problem Types: CWE-352 Description: SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of SmodBIP. SmodBIP is no longer maintained and the vulnerability will not be fixed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2023/10/CV
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2023/10/CVE-2023-4837/ - https://cert.pl/en/posts/2023/10/CVE-2023-4837/ - https://smod.pl/
CVE ID: CVE-2023-4838 State: PUBLISHED Published: 2023-09-09T01:50:27.901Z Last Updated: 2025-02-05T19:30:18.872Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: specialk Products: Simple Download Counter Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes like 'before' and 'after'. This makes it possible for authenticated attackers, with contributo