Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47177 State: PUBLISHED Published: 2023-11-06T09:46:14.342Z Last Updated: 2024-09-04T20:16:59.241Z Vendors: Yakir Sitbon, Ariel Klikstein Products: Linker Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yakir Sitbon, Ariel Klikstein Linker plugin <= 1.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/linker/wordpress-linker-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47178 State: PUBLISHED Published: 2024-05-17T08:35:08.416Z Last Updated: 2024-08-02T21:01:22.801Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: POSIMYTH Innovation Products: The Plus Addons for Elementor Pro Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows PHP Local File Inclusion.This issue affects The Plus Addons for Elementor Pro: from n/a through 5.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/theplus_el
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/theplus_elementor_addon/wordpress-the-plus-addons-for-elementor-pro-plugin-5-2-8-unauthenticated-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2023-47179 State: PUBLISHED Published: 2025-01-02T12:00:28.951Z Last Updated: 2025-01-02T17:47:58.306Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ByConsole Products: WooODT Lite Problem Types: CWE-862 Description: Missing Authorization vulnerability in ByConsole WooODT Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooODT Lite: from n/a through 2.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/byconsole-woo-order-delivery-time/vulnerability/wordpress-wooodt-lite-plugin-2-4-6-arbitrary-site-option-update-vulnerability?_s_id=cv
order-delivery-time/vulnerability/wordpress-wooodt-lite-plugin-2-4-6-arbitrary-site-option-update-vulnerability?_s_id=cve
CVE ID: CVE-2023-47180 State: PUBLISHED Published: 2025-01-02T12:00:29.545Z Last Updated: 2025-01-03T19:04:55.609Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: XLPlugins Products: Finale Lite Problem Types: CWE-862 Description: Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale Lite: from n/a through 2.16.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/finale-woocommerce-sales-countdown-timer-discount/vulnerability/wordpress-finale-lite-sales-countdown-timer-discount-for-woocommerc
ommerce-sales-countdown-timer-discount/vulnerability/wordpress-finale-lite-sales-countdown-timer-discount-for-woocommerce-plugin-2-16-0-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2023-47181 State: PUBLISHED Published: 2023-11-08T18:16:01.330Z Last Updated: 2024-08-02T21:01:22.833Z Vendors: Martin Gibson Products: IdeaPush Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson IdeaPush plugin <= 8.52 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ideapush/wordpress-ideapush-plugin-8-46-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47182 State: PUBLISHED Published: 2023-11-06T09:52:48.523Z Last Updated: 2024-09-05T15:39:26.059Z Vendors: Nazmul Hossain Nihal Products: Login Screen Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) leading to a Stored Cross-Site Scripting (XSS) vulnerability in Nazmul Hossain Nihal Login Screen Manager plugin <= 3.5.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/login-screen-manager/wordpress-login-screen-manager-plugin-3-5-2-unauth-stored-cross-site-scripting-xss-via-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47183 State: PUBLISHED Published: 2025-01-02T12:00:30.341Z Last Updated: 2025-01-03T19:00:47.844Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: GiveWP Products: GiveWP Problem Types: CWE-862 Description: Missing Authorization vulnerability in GiveWP GiveWP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 2.33.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-givewp-plugin-2-33-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47184 State: PUBLISHED Published: 2023-11-06T09:56:40.785Z Last Updated: 2024-09-05T13:56:57.528Z Vendors: Proper Fraction LLC. Products: Admin Bar & Dashboard Access Control Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar & Dashboard Access Control plugin <= 1.2.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/admin-bar-dashboard-control/wordpress-admin-bar-dashboard-access-control-plugin-1-2-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47185 State: PUBLISHED Published: 2023-11-06T10:56:34.042Z Last Updated: 2024-09-05T15:18:17.035Z Vendors: gVectors Team Products: Comments — wpDiscuz Problem Types: CWE-79 Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team Comments — wpDiscuz plugin <= 7.6.11 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpdiscuz/wordpress-wpdiscuz-plugin-7-6-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47186 State: PUBLISHED Published: 2023-11-06T11:25:23.860Z Last Updated: 2024-09-05T13:54:47.811Z Vendors: Kadence WP Products: Kadence WooCommerce Email Designer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin <= 1.5.11 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/kadence-woocommerce-email-designer/wordpress-kadence-woocommerce-email-designer-plugin-1-5-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47187 State: PUBLISHED Published: 2025-01-02T12:00:30.933Z Last Updated: 2025-01-03T19:00:38.796Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Labib Ahmed Products: Animated Rotating Words Problem Types: CWE-862 Description: Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Rotating Words: from n/a through 5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/css3-rotating-words/vulnerability/wordpress-animated-rotating-words-plugin-5-4-broken-access-c
database/wordpress/plugin/css3-rotating-words/vulnerability/wordpress-animated-rotating-words-plugin-5-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47188 State: PUBLISHED Published: 2025-01-02T12:00:31.504Z Last Updated: 2025-01-03T19:00:32.185Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: PressTigers Products: Simple Job Board Problem Types: CWE-862 Description: Missing Authorization vulnerability in PressTigers Simple Job Board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Job Board: from n/a through 2.10.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-job-board/vulnerability/wordpress-simple-job-board-plugin-2-10-5-broken-access-control-vulnerability?_s_i
/plugin/simple-job-board/vulnerability/wordpress-simple-job-board-plugin-2-10-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47189 State: PUBLISHED Published: 2024-06-04T09:31:14.044Z Last Updated: 2024-08-09T19:52:15.701Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WPMU DEV Products: Defender Security Problem Types: CWE-287 Description: Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/defender-security/wordpress-defender-securit-plugin-4-2-0-masked-login-area-view-bypass-vulnerabilit
abase/vulnerability/defender-security/wordpress-defender-securit-plugin-4-2-0-masked-login-area-view-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2023-47190 State: PUBLISHED Published: 2023-11-08T18:21:48.534Z Last Updated: 2024-09-04T13:50:17.488Z Vendors: Apollo13Themes Products: Apollo13 Framework Extensions Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Apollo13Themes Apollo13 Framework Extensions plugin <= 1.9.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/apollo13-framework-extensions/wordpress-apollo13-framework-extensions-plugin-1-9-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47191 State: PUBLISHED Published: 2023-12-21T18:26:53.447Z Last Updated: 2024-08-02T21:01:22.813Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: KaineLabs Products: Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in KaineLabs Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress.This issue affects Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress: from n/a through 1.2.2. Additional Analyst Notes: - CVE Program Co
le, Social Network & Membership Plugin for WordPress: from n/a through 1.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/youzify/wordpress-youzify-plugin-1-2-2-insecure-direct-object-reference-idor-vulnerability?_s_id=cve
CVE ID: CVE-2023-47192 State: PUBLISHED Published: 2024-01-23T20:36:34.790Z Last Updated: 2025-06-17T16:13:44.095Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zeroday
Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1611/
CVE ID: CVE-2023-47193 State: PUBLISHED Published: 2024-01-23T20:36:54.947Z Last Updated: 2025-06-20T18:52:21.175Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47194. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succe
CVE-2023-47194. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1612/
CVE ID: CVE-2023-47194 State: PUBLISHED Published: 2024-01-23T20:37:06.848Z Last Updated: 2025-05-30T14:18:44.154Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47195. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succe
CVE-2023-47195. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1614/
CVE ID: CVE-2023-47195 State: PUBLISHED Published: 2024-01-23T20:37:17.620Z Last Updated: 2025-06-20T18:53:03.126Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47196. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succe
CVE-2023-47196. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1615/
CVE ID: CVE-2023-47196 State: PUBLISHED Published: 2024-01-23T20:37:29.810Z Last Updated: 2025-06-17T16:17:42.969Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47197. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succe
CVE-2023-47197. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1617/
CVE ID: CVE-2023-47197 State: PUBLISHED Published: 2024-01-23T20:37:43.898Z Last Updated: 2025-06-17T16:58:34.823Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47198. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succe
CVE-2023-47198. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1616/
CVE ID: CVE-2023-47198 State: PUBLISHED Published: 2024-01-23T20:37:56.639Z Last Updated: 2025-06-13T19:08:30.949Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47199. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succe
CVE-2023-47199. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1619/
CVE ID: CVE-2023-47199 State: PUBLISHED Published: 2024-01-23T20:38:09.676Z Last Updated: 2025-05-30T14:18:38.288Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47193. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succe
CVE-2023-47193. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1620/
CVE ID: CVE-2023-47200 State: PUBLISHED Published: 2024-01-23T20:38:25.058Z Last Updated: 2025-05-30T14:18:32.666Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47201. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
t identical to, CVE-2023-47201. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1618/
CVE ID: CVE-2023-47201 State: PUBLISHED Published: 2024-01-23T20:38:38.453Z Last Updated: 2024-08-29T19:55:32.397Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47200. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
t identical to, CVE-2023-47200. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1613/
CVE ID: CVE-2023-47202 State: PUBLISHED Published: 2024-01-23T20:38:51.693Z Last Updated: 2025-06-17T16:14:47.687Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https:/
- CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-1621/
CVE ID: CVE-2023-47204 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-06T14:01:52.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/toumorokoshi/transmute-core/releases/tag/v1.13.5 - https://github.com/toumorokoshi/transmute-core/pull/58
CVE ID: CVE-2023-47207 State: PUBLISHED Published: 2023-11-30T22:09:36.687Z Last Updated: 2024-08-02T21:01:22.837Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-502 Description: In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-331-01
CVE ID: CVE-2023-47209 State: PUBLISHED Published: 2024-02-06T16:20:14.973Z Last Updated: 2025-11-04T18:19:02.658Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Tp-Link Products: ER7206 Omada Gigabit VPN Router Problem Types: CWE-78 Description: A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
igger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1854
CVE ID: CVE-2023-47210 State: PUBLISHED Published: 2024-05-16T20:47:15.546Z Last Updated: 2024-08-02T21:01:22.830Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi software for linux Problem Types: denial of service, CWE-20 Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html