Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37356 State: PUBLISHED Published: 2024-05-03T01:58:41.380Z Last Updated: 2024-08-02T17:09:34.109Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Kofax Products: Power PDF Problem Types: CWE-125 Description: Kofax Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF files. The issue results from the lack of proper
en a malicious file. The specific flaw exists within the parsing of GIF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-20461. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-951/
CVE ID: CVE-2023-37357 State: PUBLISHED Published: 2024-05-03T01:58:42.112Z Last Updated: 2024-08-02T17:09:34.198Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Kofax Products: Power PDF Problem Types: CWE-125 Description: Kofax Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper
en a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-20468. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-952/
CVE ID: CVE-2023-37358 State: PUBLISHED Published: 2024-05-03T01:58:42.822Z Last Updated: 2024-08-02T17:09:34.222Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Kofax Products: Power PDF Problem Types: CWE-125 Description: Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper
en a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-20469. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-953/
CVE ID: CVE-2023-37359 State: PUBLISHED Published: 2024-05-03T01:58:43.691Z Last Updated: 2024-08-02T17:09:34.025Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Kofax Products: Power PDF Problem Types: CWE-125 Description: Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper
en a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-20470. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-954/
CVE ID: CVE-2023-37360 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-26T16:13:54.841Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AC:L/AV:L/A:L/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security products). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/manugarg/pacparser/security/advisories/GHSA-62q6-v997-f7v9
CVE ID: CVE-2023-37361 State: PUBLISHED Published: 2023-07-25T00:00:00 Last Updated: 2024-10-23T19:57:15.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trustwave.com - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=32305
CVE ID: CVE-2023-37362 State: PUBLISHED Published: 2023-07-19T21:50:42.036Z Last Updated: 2025-03-06T15:04:53.644Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Weintek Products: Weincloud Problem Types: CWE-522 Description: Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04
CVE ID: CVE-2023-37364 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T16:10:19.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ws-inc.com - https://ws-inc.com/security.html
CVE ID: CVE-2023-37365 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-12-05T15:26:57.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nmslib/hnswlib/issues/467
CVE ID: CVE-2023-37367 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T18:38:57.179Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. In the NAS Task, an improperly implemented security check for standard can disallow desired services for a while via consecutive NAS messages. Additional Analyst Notes: - CVE Program Contai
d can disallow desired services for a while via consecutive NAS messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-37368 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T18:16:06.387Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123). In the Shannon MM Task, Missing validation of a NULL pointer can cause abnorm
Exynos Modem 5300, and Exynos Auto T5123). In the Shannon MM Task, Missing validation of a NULL pointer can cause abnormal termination via a malformed NR MM packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-37369 State: PUBLISHED Published: 2023-08-20T00:00:00 Last Updated: 2024-08-02T17:09:34.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugreports.qt.io/browse/QTBUG-114829 - https://codereview.qt-project.org/c/qt/qtbase/+/455027 - https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html - https://lists.fedoraproject.org/archives/
/455027 - https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZK7EDD4ILPPSQAYO54FANUC4NFYLTHU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3JR3N3IF5MUSETGYE46OZFOGGPY3VZT/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
CVE ID: CVE-2023-37372 State: PUBLISHED Published: 2023-08-08T09:20:27.473Z Last Updated: 2025-02-27T21:10:21.124Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-89 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remote attackers to execute arbitrary SQL queries on the server database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf
CVE ID: CVE-2023-37373 State: PUBLISHED Published: 2023-08-08T09:20:28.582Z Last Updated: 2025-02-27T21:10:15.750Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM CROSSBOW Problem Types: CWE-306 Description: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An unauthenticated remote attacker could write arbitrary files to the affected application's file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-472630.pdf
CVE ID: CVE-2023-37374 State: PUBLISHED Published: 2023-07-11T09:07:26.462Z Last Updated: 2024-11-08T16:59:50.279Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-121 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-C
specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21054) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf
CVE ID: CVE-2023-37375 State: PUBLISHED Published: 2023-07-11T09:07:27.503Z Last Updated: 2024-11-07T19:25:06.960Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-121 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to stack-based buffer overflow while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-C
specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21060) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf
CVE ID: CVE-2023-37376 State: PUBLISHED Published: 2023-07-11T09:07:28.531Z Last Updated: 2024-11-07T17:59:55.536Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-843 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application contains a type confusion vulnerability while parsing STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21051) Additional An
files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21051) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf
CVE ID: CVE-2023-37377 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T18:12:57.503Z Severity: LOW (CVSS 2 CVSS:3.1/AC:L/AV:L/A:L/C:N/I:N/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper handling of length parameter inconsistency can cause incorrect packet filtering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-37378 State: PUBLISHED Published: 2023-07-03T00:00:00 Last Updated: 2024-09-05T14:51:02.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sf.net/p/nsis/bugs/1296 - https://nsis.sourceforge.io/Docs/AppendixF.html#v3.09 - https://sourceforge.net/p/nsis/news/2023/07/nsis-309-released/ - https://github.com/kichik/nsis/commit/281e2851fe669d10e0650fc89d0e7fb74a598967 - https://github.com/kichik/nsis/commit/409b5841479c44fbf33a6ba97c1146e46f965467 - https://github.
50fc89d0e7fb74a598967 - https://github.com/kichik/nsis/commit/409b5841479c44fbf33a6ba97c1146e46f965467 - https://github.com/kichik/nsis/commit/c40cf78994e74a1a3a381a850c996b251e3277c0 - https://lists.debian.org/debian-lts-announce/2023/07/msg00005.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZPAAU57IA3NP6UOUXNBUQBAYK3JB2IM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A65FBUMHLZ7GBV3VDKUB5EK3A7X2UUWK/
CVE ID: CVE-2023-37379 State: PUBLISHED Published: 2023-08-23T15:38:56.047Z Last Updated: 2025-02-13T17:01:16.710Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-400, CWE-918, CWE-200 Description: Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user to access connection information and exploit the test connection feature by sending many requests, leading to a denial of service (DoS) condition on the server. Furthermore, malicious actors can leverage this vulnerability to establish harmful connections with the server
e server. Furthermore, malicious actors can leverage this vulnerability to establish harmful connections with the server. Users of Apache Airflow are strongly advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulnerability. Additionally, administrators are encouraged to review and adjust user permissions to restrict access to sensitive functionalities, reducing the attack surface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/32052 - https://lists.apache.org/thread/g5c9vcn27lr14go48thrjpo6f4vw571r - http://www.openwall.com/lists/oss-security/2023/08/23/4
CVE ID: CVE-2023-37385 State: PUBLISHED Published: 2024-05-17T06:47:24.319Z Last Updated: 2024-08-02T17:09:34.228Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: StylemixThemes Products: Consulting Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting allows PHP Local File Inclusion.This issue affects Consulting: from n/a through 6.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/consulting/wordpress-consulting-theme-6-3-6-local-file-inclusion?_s_id=cve
CVE ID: CVE-2023-37386 State: PUBLISHED Published: 2023-07-18T12:06:21.300Z Last Updated: 2024-09-25T17:02:24.756Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Products: Media Library Helper Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Media Library Helper plugin <= 1.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/media-library-helper/wordpress-media-library-helper-by-codexin-plugin-1-2-0-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2023-37387 State: PUBLISHED Published: 2023-07-18T12:14:15.680Z Last Updated: 2024-09-25T17:01:58.603Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: RadiusTheme Products: Classified Listing Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme Classified Listing plugin <= 2.4.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/classified-listing/wordpress-classified-listing-plugin-2-4-5-cross-site-request-forgery-csrf-leading-to-thumbnail-removal-vulnerability?_s_id=cve
CVE ID: CVE-2023-37388 State: PUBLISHED Published: 2023-08-10T13:08:02.581Z Last Updated: 2024-09-25T16:44:25.655Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Sudipto Pratap Mahato Products: Simple Light Weight Social Share Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sudipto Pratap Mahato Simple Light Weight Social Share plugin <= 2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/only-tweet-like-share-and-google-1/wordpress-simple-light-weight-social-share-tweet-like-share-and-linkedin-plugin-2-0-cro
ly-tweet-like-share-and-google-1/wordpress-simple-light-weight-social-share-tweet-like-share-and-linkedin-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-37389 State: PUBLISHED Published: 2024-05-17T06:47:46.365Z Last Updated: 2024-08-02T17:09:34.272Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SAASPROJECT Booking Package Products: Booking Package Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from n/a through 1.5.98. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/booking-package/wordpress-booking-package-saasproject-plugin-1-5-98-unauthenticated-privilege-escal
tabase/vulnerability/booking-package/wordpress-booking-package-saasproject-plugin-1-5-98-unauthenticated-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2023-37390 State: PUBLISHED Published: 2023-12-19T15:47:16.422Z Last Updated: 2024-08-02T17:09:34.215Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Themesflat Products: Themesflat Addons For Elementor Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Themesflat Themesflat Addons For Elementor.This issue affects Themesflat Addons For Elementor: from n/a through 2.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/themesflat-addons-for-elementor/wordpress-themesflat-addons-for-elementor-plugin-2-0-0-unauthenticated-php-object-injection-vulnerabili
ns-for-elementor/wordpress-themesflat-addons-for-elementor-plugin-2-0-0-unauthenticated-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-37391 State: PUBLISHED Published: 2023-07-11T09:45:07.141Z Last Updated: 2025-02-19T21:28:25.563Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WPMobilePack.com Products: WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps plugin <= 3.4.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wordpress-mobile-pack/wordpress-wordpress-
ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wordpress-mobile-pack/wordpress-wordpress-mobile-pack-plugin-3-4-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-37392 State: PUBLISHED Published: 2023-07-10T15:50:48.656Z Last Updated: 2024-10-07T18:58:44.923Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Deepak Anand Products: WP Dummy Content Generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Deepak Anand WP Dummy Content Generator plugin <= 2.3.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-dummy-content-generator/wordpress-wp-dummy-content-generator-plugin-2-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve