Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3573 State: PUBLISHED Published: 2023-08-08T06:51:34.335Z Last Updated: 2024-10-15T19:23:30.106Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PHOENIX CONTACT Products: WP 6070-WVPS, WP 6101-WXPS, WP 6121-WXPS, WP 6156-WHPS, WP 6185-WHPS, WP 6215-WHPS Problem Types: CWE-78 Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisori
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-018/
CVE ID: CVE-2023-3574 State: PUBLISHED Published: 2023-07-10T08:48:31.650Z Last Updated: 2024-10-30T14:35:46.384Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/customer-data-framework Problem Types: CWE-285 Description: Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1dcb4f01-e668-4aa3-a6a3-838532e500c6 - https://github.com/pimcore/customer-data-framework/commit/f15668c86db254e86ba7ac895bc3cdd1a2a3cc45
CVE ID: CVE-2023-3575 State: PUBLISHED Published: 2023-08-07T14:31:20.665Z Last Updated: 2025-04-23T16:19:34.166Z Vendors: Unknown Products: Quiz And Survey Master Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6f884688-2c0d-4844-bd31-ef7085edf112 - https://www.onvio.nl/nieuws/research-day-discovering-vulnerabilities-in-wordpress-plugins
CVE ID: CVE-2023-3576 State: PUBLISHED Published: 2023-10-04T18:02:23.926Z Last Updated: 2025-11-20T17:39:50.684Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-119 Description: A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service. Additional Analyst Notes: -
mory leak issue, resulting an application crash, eventually leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6575 - https://access.redhat.com/security/cve/CVE-2023-3576 - https://bugzilla.redhat.com/show_bug.cgi?id=2219340
CVE ID: CVE-2023-3577 State: PUBLISHED Published: 2023-07-17T15:18:07.871Z Last Updated: 2024-10-21T19:58:58.448Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-918 Description: Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3578 State: PUBLISHED Published: 2023-07-10T11:00:04.835Z Last Updated: 2024-08-02T07:01:55.878Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: DedeCMS Problem Types: CWE-918 Description: A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The manipulation of the argument rssurl leads to server-side request forgery. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233371. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.23337
ulnerability is VDB-233371. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233371 - https://vuldb.com/?ctiid.233371 - https://github.com/nightcloudos/cve/blob/main/SSRF.md
CVE ID: CVE-2023-3579 State: PUBLISHED Published: 2023-07-10T11:31:03.159Z Last Updated: 2024-10-17T19:46:08.530Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: HadSky Problem Types: CWE-352 Description: A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-233372. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
nerability is VDB-233372. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233372 - https://vuldb.com/?ctiid.233372 - https://github.com/nightcloudos/cve/blob/main/CSRF.md
CVE ID: CVE-2023-3580 State: PUBLISHED Published: 2023-07-10T11:38:22.090Z Last Updated: 2024-10-30T14:26:21.886Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: squidex Products: squidex/squidex Problem Types: CWE-167 Description: Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/4eed53ca-06c2-43aa-aea8-c03ea5f13ce4 - https://github.com/squidex/squidex/commit/2aca7621845ce18ed4065cba8e3d0fa68aaf02bf
CVE ID: CVE-2023-3581 State: PUBLISHED Published: 2023-07-17T15:20:00.186Z Last Updated: 2024-10-30T13:54:50.335Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-346 Description: Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3582 State: PUBLISHED Published: 2023-07-17T15:21:35.038Z Last Updated: 2024-10-21T19:59:17.695Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to, Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3584 State: PUBLISHED Published: 2023-07-17T15:23:02.918Z Last Updated: 2024-10-21T19:50:40.857Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost fails to properly check the authorization of POST /api/v4/teams when passing a team override scheme ID in the request, allowing an authenticated attacker with knowledge of a Team Override Scheme ID to create a new team with said team override scheme. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3585 State: PUBLISHED Published: 2023-07-17T15:24:20.975Z Last Updated: 2024-10-21T19:43:02.507Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3586 State: PUBLISHED Published: 2023-07-17T15:25:30.532Z Last Updated: 2024-10-22T13:40:29.225Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3587 State: PUBLISHED Published: 2023-07-17T15:26:51.996Z Last Updated: 2024-10-22T13:40:42.183Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-862 Description: Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3588 State: PUBLISHED Published: 2023-09-13T18:22:11.313Z Last Updated: 2024-08-02T07:01:57.318Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Dassault Systèmes Products: Teamwork Cloud - Business Edition, Teamwork Cloud - Enterprise Edition, Teamwork Cloud - Business Pro Edition, Teamwork Cloud - Standard Edition Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.3ds.com
ript code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2023-3589 State: PUBLISHED Published: 2023-10-09T08:54:08.100Z Last Updated: 2024-09-19T14:58:42.152Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Teamwork Cloud - Business Edition, Teamwork Cloud - Enterprise Edition, Teamwork Cloud - Business Pro Edition, Teamwork Cloud - Standard Edition Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server. Additional Analyst Notes: - CVE Program Container:
tions an attacker to send a specifically crafted query to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2023-3590 State: PUBLISHED Published: 2023-07-17T15:28:50.860Z Last Updated: 2024-10-21T19:43:23.581Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3591 State: PUBLISHED Published: 2023-07-17T15:30:05.295Z Last Updated: 2024-10-21T19:39:25.304Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-287 Description: Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3592 State: PUBLISHED Published: 2023-10-02T19:01:54.842Z Last Updated: 2025-02-13T16:55:55.699Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: Eclipse Products: Mosquitto Problem Types: CWE-401 Description: In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types. Additional Analyst Notes: - CVE Program Container: References: - https://mosquitto.org/blog/2023/08/version-2-0-16-released/ - https://security.gentoo.org/glsa/202401-09
CVE ID: CVE-2023-3593 State: PUBLISHED Published: 2023-07-17T15:38:57.759Z Last Updated: 2024-10-21T19:40:56.331Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: Mattermost fails to properly validate markdown, allowing an attacker to crash the server via a specially crafted markdown input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3595 State: PUBLISHED Published: 2023-07-12T12:37:01.939Z Last Updated: 2024-08-02T07:01:57.031Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation, Rockwell Auotmation Products: 1756-EN2T Series A, B, C, 1756-EN2T Series D, 1756-EN2TK Series A, B, C, 1756-EN2TXT Series A, B, C, 1756-EN2TXT Series D, 1756-EN2TP Series A, 1756-EN2TPK Series A, 1756-EN2TPXT Series A, 1756-EN2TR Series A, B, 1756-EN2TR Series C, 1756-EN2TRK Series A, B, 1756-EN2TRK Series C, 1756-EN2TRXT Series A, B, 1756-EN2TRXT Series C, 1756-EN2F Series A, B, 1756-EN2F Series C, 1756-EN2FK Series A, B, 1756-EN2FK Series C, 1756-EN3TR Series A, 1756-EN3TR S
756-EN2F Series A, B, 1756-EN2F Series C, 1756-EN2FK Series A, B, 1756-EN2FK Series C, 1756-EN3TR Series A, 1756-EN3TR Series B, 1756-EN3TRK Series A, 1756-EN3TRK Series B Problem Types: CWE-787 Description: Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device. Additional Analyst Notes: - CVE Program Container: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/11
st Notes: - CVE Program Container: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010
CVE ID: CVE-2023-3596 State: PUBLISHED Published: 2023-07-12T12:51:19.498Z Last Updated: 2024-11-07T16:59:33.267Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Rockwell Automation Products: 1756-EN4TR Series A, 1756-EN4TRK Series A, 1756-EN4TRXT Series A Problem Types: CWE-787 Description: Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/an
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140010
CVE ID: CVE-2023-3597 State: PUBLISHED Published: 2024-04-25T12:20:11.606Z Last Updated: 2025-11-11T15:57:27.827Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat build of Keycloak 22, Red Hat build of Keycloak 22.0.10, RHSSO 7.6.8 Problem Types: CWE-287 Description: A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in org.keycloak.authentication. This flaw allows a remote user authenticated with a password to register a false second authentication factor along with an existing one and bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Re
n existing one and bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1866 - https://access.redhat.com/errata/RHSA-2024:1867 - https://access.redhat.com/errata/RHSA-2024:1868 - https://access.redhat.com/security/cve/CVE-2023-3597 - https://bugzilla.redhat.com/show_bug.cgi?id=2221760
CVE ID: CVE-2023-3598 State: PUBLISHED Published: 2023-07-28T20:06:31.600Z Last Updated: 2025-02-13T16:56:09.207Z Vendors: Google Products: Chrome Problem Types: Out of bounds read and write Description: Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1427865 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQK
1427865 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2UQ3ICYPHCIZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LE64KGGOISKPKMYROSDT4K6QFVDIRF6/
CVE ID: CVE-2023-3599 State: PUBLISHED Published: 2023-07-10T17:31:03.077Z Last Updated: 2024-08-02T07:01:57.189Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Best Fee Management System Problem Types: CWE-264 Description: A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function save_user of the file admin_class.php of the component Add User Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-233450 is the identifier assigned to this vulnerability. Additi
it has been disclosed to the public and may be used. VDB-233450 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.233450 - https://vuldb.com/?ctiid.233450 - https://github.com/movonow/demo/blob/main/click_fees.md
CVE ID: CVE-2023-3600 State: PUBLISHED Published: 2023-07-12T13:45:04.298Z Last Updated: 2024-11-07T16:50:02.772Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in workers Description: During the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1839703 - https://www.mozilla.org/security/advisories/mfsa2023-26/ - https://www.mozilla.org/security/advis
w_bug.cgi?id=1839703 - https://www.mozilla.org/security/advisories/mfsa2023-26/ - https://www.mozilla.org/security/advisories/mfsa2023-27/
CVE ID: CVE-2023-3601 State: PUBLISHED Published: 2023-08-14T19:10:21.138Z Last Updated: 2025-05-05T15:54:29.987Z Vendors: Unknown Products: Simple Author Box Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user information disclosure to users with a role as low as Contributor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c0cc513e-c306-4920-9afb-e33d95a7292f
CVE ID: CVE-2023-3603 State: PUBLISHED Published: 2023-07-21T19:09:44.083Z Last Updated: 2024-09-26T20:04:43.251Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a, Red Hat, Fedora Products: libssh, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Extra Packages for Enterprise Linux 7, Fedora Problem Types: CWE-476 Description: A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being checked for failure. This will likely crash the authenticated us
ng allocation of up to 4GB buffers, which was not being checked for failure. This will likely crash the authenticated user's sftp server connection (if implemented as forking as recommended). For thread-based servers, this might also cause DoS for legitimate users. Given this code is not in any released versions, no security releases have been issued. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-3603 - https://bugzilla.redhat.com/show_bug.cgi?id=2221791
CVE ID: CVE-2023-3604 State: PUBLISHED Published: 2023-08-21T12:29:51.285Z Last Updated: 2024-10-02T17:41:31.835Z Vendors: Unknown Products: Change WP Admin Login Problem Types: CWE-203 Information Exposure Through Discrepancy Description: The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8f6615e8-f607-4ce4-a0e0-d5fc841ead16
CVE ID: CVE-2023-3605 State: PUBLISHED Published: 2023-07-10T20:00:04.915Z Last Updated: 2024-10-15T18:33:35.103Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: PHPGurukul Products: Online Shopping Portal Problem Types: CWE-307 Description: A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Registration Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233467. Additional Analyst Notes: - CVE Program Co
ched remotely. The associated identifier of this vulnerability is VDB-233467. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233467 - https://vuldb.com/?ctiid.233467
CVE ID: CVE-2023-3606 State: PUBLISHED Published: 2023-07-10T20:31:03.571Z Last Updated: 2024-08-02T07:01:56.825Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: TamronOS Problem Types: CWE-78 Description: A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This affects an unknown part of the file /api/ping. The manipulation of the argument host leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233475. NOTE: The vendor was contacted early about this disclosure but did not respond in a
of this vulnerability is VDB-233475. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233475 - https://vuldb.com/?ctiid.233475 - https://github.com/d4n-sec/cve/blob/main/TamronOS%20IPTV.md