Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47679 State: PUBLISHED Published: 2024-05-17T08:35:39.155Z Last Updated: 2024-08-02T21:16:42.951Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: QODE Interactive Products: Qi Addons For Elementor Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QODE Interactive Qi Addons For Elementor allows PHP Local File Inclusion.This issue affects Qi Addons For Elementor: from n/a through 1.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/qi-addons-for-elementor/wordpress-qi-addons-
gram Container: References: - https://patchstack.com/database/vulnerability/qi-addons-for-elementor/wordpress-qi-addons-for-elementor-plugin-1-6-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2023-47680 State: PUBLISHED Published: 2023-11-13T23:13:54.633Z Last Updated: 2025-01-08T21:04:38.111Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Qode Interactive Products: Qi Addons For Elementor Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Qode Interactive Qi Addons For Elementor plugin <= 1.6.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/qi-addons-for-elementor/wordpress-qi-addons-for-elementor-plugin-1-6-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47681 State: PUBLISHED Published: 2024-06-19T11:07:45.163Z Last Updated: 2024-08-02T21:16:42.692Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: QuadLayers Products: WooCommerce Checkout Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager.This issue affects WooCommerce Checkout Manager: from n/a through 7.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-checkout-manager/wordpress-woocommerce-checkout-manager-plugin-7-3-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47682 State: PUBLISHED Published: 2024-05-17T08:36:12.682Z Last Updated: 2024-08-02T21:16:43.343Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: weDevs Products: WP User Frontend Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in weDevs WP User Frontend allows Privilege Escalation.This issue affects WP User Frontend: from n/a through 3.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-user-frontend/wordpress-wp-user-frontend-plugin-3-6-5-authenticated-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2023-47683 State: PUBLISHED Published: 2024-05-17T08:36:38.232Z Last Updated: 2024-08-02T21:16:43.635Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: miniOrange Products: WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Privilege Escalation.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://pat
n/a through 7.6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/miniorange-login-openid/wordpress-social-login-social-sharing-by-miniorange-plugin-7-6-6-authenticated-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2023-47684 State: PUBLISHED Published: 2023-11-13T23:09:09.129Z Last Updated: 2025-01-08T21:06:13.903Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ThemePunch OHG Products: Essential Grid Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThemePunch OHG Essential Grid plugin <= 3.1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/essential-grid/wordpress-essential-grid-plugin-3-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47685 State: PUBLISHED Published: 2023-11-18T20:40:20.617Z Last Updated: 2024-08-14T18:00:34.764Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Lukman Nakib Products: Preloader Matrix Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Lukman Nakib Preloader Matrix.This issue affects Preloader Matrix: from n/a through 2.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/matrix-pre-loader/wordpress-preloader-matrix-plugin-2-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47686 State: PUBLISHED Published: 2023-11-16T22:44:51.127Z Last Updated: 2024-08-12T14:10:05.713Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Kiboko Labs Products: Arigato Autoresponder and Newsletter Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47687 State: PUBLISHED Published: 2023-11-16T22:09:02.882Z Last Updated: 2024-08-28T15:15:28.424Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: VJInfotech Products: Woo Custom and Sequential Order Number Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in VJInfotech Woo Custom and Sequential Order Number plugin <= 2.6.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-custom-and-sequential-order-number/wordpress-woo-custom-and-sequential-order-number-plugin-2-6-0-cross-site-request-forgery-csrf-vulnerabili
l-order-number/wordpress-woo-custom-and-sequential-order-number-plugin-2-6-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47688 State: PUBLISHED Published: 2023-11-16T22:06:00.967Z Last Updated: 2024-08-28T15:15:07.179Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Alexufo Products: Youtube SpeedLoad Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Alexufo Youtube SpeedLoad plugin <= 0.6.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/youtube-speedload/wordpress-youtube-speedload-plugin-0-6-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47689 State: PUBLISHED Published: 2025-01-02T12:00:37.500Z Last Updated: 2025-01-03T18:59:36.734Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Toast Plugins Products: Animator Problem Types: CWE-862 Description: Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animator: from n/a through 3.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/scroll-triggered-animations/vulnerability/wordpress-animator-plugin-3-0-9-unauthenticated-plugin-settings-change-vulnerability?_s_id
ered-animations/vulnerability/wordpress-animator-plugin-3-0-9-unauthenticated-plugin-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2023-47690 State: PUBLISHED Published: 2023-11-13T23:03:33.476Z Last Updated: 2025-01-08T21:07:13.893Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Anton Bond Products: Additional Order Filters for WooCommerce Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin <= 1.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/additional-order-filters-for-woocommerce/wordpress-additional-order-filters-for-woocommerce-plugin-1-10-reflected-cross-site-scriptin
der-filters-for-woocommerce/wordpress-additional-order-filters-for-woocommerce-plugin-1-10-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47691 State: REJECTED Published: 2024-03-07T13:30:47.564Z Last Updated: 2024-03-20T12:54:38.068Z Description: No description available.
CVE ID: CVE-2023-47692 State: PUBLISHED Published: 2025-01-02T12:00:38.156Z Last Updated: 2025-01-02T14:52:07.231Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Flothemes Products: Flo Forms Problem Types: CWE-862 Description: Missing Authorization vulnerability in Flothemes Flo Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flo Forms: from n/a through 1.0.41. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/flo-forms/vulnerability/wordpress-flo-forms-plugin-1-0-41-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47693 State: PUBLISHED Published: 2025-01-02T12:00:38.749Z Last Updated: 2025-01-03T18:59:26.836Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Themefic Products: Ultimate Addons for Contact Form 7 Problem Types: CWE-862 Description: Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-addons-for-contact-form-7/vulnerability/wordpress-ultimate
: - https://patchstack.com/database/wordpress/plugin/ultimate-addons-for-contact-form-7/vulnerability/wordpress-ultimate-addons-for-contact-form-7-plugin-3-2-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47694 State: PUBLISHED Published: 2024-12-09T11:30:54.265Z Last Updated: 2024-12-09T16:56:27.032Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: appsbd Products: Mini Cart Drawer For WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mini Cart Drawer For WooCommerce: from n/a through 4.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-mini-cart-drawer/vulnerability/wordpress-mini-cart-drawer-for-woocommer
s://patchstack.com/database/wordpress/plugin/woo-mini-cart-drawer/vulnerability/wordpress-mini-cart-drawer-for-woocommerce-plugin-3-3-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47695 State: PUBLISHED Published: 2023-11-13T22:59:51.149Z Last Updated: 2025-01-08T21:08:10.693Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Scribit Products: Shortcodes Finder Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Scribit Shortcodes Finder plugin <= 1.5.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shortcodes-finder/wordpress-shortcodes-finder-plugin-1-5-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47696 State: PUBLISHED Published: 2023-11-13T22:33:19.948Z Last Updated: 2025-01-08T21:09:05.891Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Gravity Master Products: Product Enquiry for WooCommerce Problem Types: CWE-79 Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/gm-woocommerce-quote-popup/wordpress-product-enquiry-for-woocommerce-plugin-3-0-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-47697 State: PUBLISHED Published: 2023-11-13T22:28:41.379Z Last Updated: 2025-01-08T21:10:57.250Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Event Manager Products: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-man
SA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47698 State: PUBLISHED Published: 2024-12-09T11:30:53.436Z Last Updated: 2024-12-09T17:01:46.208Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Artisan Workshop Products: Japanized For WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Artisan Workshop Japanized For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Japanized For WooCommerce: from n/a through 2.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-for-japan/vulnerability/wordpress-japanized-for-woocommerce-plugin
/patchstack.com/database/wordpress/plugin/woocommerce-for-japan/vulnerability/wordpress-japanized-for-woocommerce-plugin-2-6-4-multiple-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47699 State: PUBLISHED Published: 2024-03-15T15:11:38.385Z Last Updated: 2024-08-02T21:16:43.637Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Secure Proxy Problem Types: CWE-79 Description: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 270974. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7142038 - htt
es: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7142038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270974
CVE ID: CVE-2023-47700 State: PUBLISHED Published: 2024-02-07T16:20:32.473Z Last Updated: 2024-08-22T13:57:17.139Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Storage Virtualize Problem Types: CWE-295 Description: IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server. This could lead to a user connecting to a malicious host, believing that it was a trusted system and deceived into accepting spoofed data. IBM X-Force ID: 271016. Additional Analyst Notes: - CVE Program Container: - CIS
d deceived into accepting spoofed data. IBM X-Force ID: 271016. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7114767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271016
CVE ID: CVE-2023-47701 State: PUBLISHED Published: 2023-12-04T00:19:20.827Z Last Updated: 2025-02-13T17:18:06.386Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7087180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266166 - https://security.netapp.com/advisory/ntap-20240119-0001/
CVE ID: CVE-2023-47702 State: PUBLISHED Published: 2023-12-20T01:11:33.598Z Last Updated: 2024-08-02T21:16:42.991Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-22 Description: IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view modify files on the system. IBM X-Force ID: 271196. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7091157 - https://exchange.xforce.ibmclo
: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7091157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271196
CVE ID: CVE-2023-47703 State: PUBLISHED Published: 2023-12-20T01:45:23.930Z Last Updated: 2024-08-29T17:45:38.125Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-209 Description: IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 271197. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7091157 - ht
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7091157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271197
CVE ID: CVE-2023-47704 State: PUBLISHED Published: 2023-12-20T00:50:42.513Z Last Updated: 2024-11-21T19:02:57.053Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-798 Description: IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7091157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271220
CVE ID: CVE-2023-47705 State: PUBLISHED Published: 2023-12-20T00:56:27.076Z Last Updated: 2024-09-11T20:18:35.663Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-20 Description: IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to improper input validation. IBM X-Force ID: 271228. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7091157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271228
CVE ID: CVE-2023-47706 State: PUBLISHED Published: 2023-12-20T00:59:32.091Z Last Updated: 2024-08-02T21:16:43.755Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-434 Description: IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7091157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271341
CVE ID: CVE-2023-47707 State: PUBLISHED Published: 2023-12-20T01:48:09.428Z Last Updated: 2024-08-02T21:16:43.585Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-79 Description: IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271522. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/70911
D: 271522. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7091157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271522
CVE ID: CVE-2023-47709 State: PUBLISHED Published: 2024-05-11T13:07:58.450Z Last Updated: 2024-08-02T21:16:43.642Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Security Guardium Problem Types: CWE-78 Description: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 271524. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271524
CVE ID: CVE-2023-47710 State: PUBLISHED Published: 2024-05-24T12:01:02.658Z Last Updated: 2024-08-02T21:16:43.555Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Security Guardium Problem Types: CWE-79 Description: IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271525. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7154435
st Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7154435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271525
CVE ID: CVE-2023-47711 State: PUBLISHED Published: 2024-05-11T13:18:21.646Z Last Updated: 2024-08-02T21:16:43.656Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: IBM Products: Security Guardium Problem Types: CWE-434 Description: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow an authenticated user to upload files that would cause a denial of service. IBM X-Force ID: 271526. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271526