Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-38453 State: PUBLISHED Published: 2023-09-04T01:16:06.759Z Last Updated: 2024-10-11T15:52:01.459Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38454 State: PUBLISHED Published: 2023-09-04T01:16:07.068Z Last Updated: 2024-10-02T14:36:14.978Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38455 State: PUBLISHED Published: 2023-09-04T01:16:07.334Z Last Updated: 2024-08-02T17:39:13.571Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38456 State: PUBLISHED Published: 2023-09-04T01:16:07.608Z Last Updated: 2024-10-02T14:34:19.692Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38457 State: PUBLISHED Published: 2023-09-04T01:16:07.884Z Last Updated: 2024-10-02T14:19:17.841Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38458 State: PUBLISHED Published: 2023-09-04T01:16:08.169Z Last Updated: 2024-10-03T13:29:39.540Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38459 State: PUBLISHED Published: 2023-09-04T01:16:08.448Z Last Updated: 2024-10-03T13:22:21.513Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38460 State: PUBLISHED Published: 2023-09-04T01:16:08.728Z Last Updated: 2024-10-02T18:03:06.947Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38461 State: PUBLISHED Published: 2023-09-04T01:16:08.997Z Last Updated: 2024-10-01T20:47:19.978Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38462 State: PUBLISHED Published: 2023-09-04T01:16:09.279Z Last Updated: 2024-10-02T14:17:27.766Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38463 State: PUBLISHED Published: 2023-09-04T01:16:09.557Z Last Updated: 2024-10-02T14:16:08.826Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38464 State: PUBLISHED Published: 2023-09-04T01:16:09.835Z Last Updated: 2024-10-02T17:59:23.677Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38465 State: PUBLISHED Published: 2023-09-04T01:16:10.114Z Last Updated: 2024-10-02T14:14:39.522Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38466 State: PUBLISHED Published: 2023-09-04T01:16:10.383Z Last Updated: 2024-10-02T14:12:53.582Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38467 State: PUBLISHED Published: 2023-09-04T01:16:10.678Z Last Updated: 2024-10-01T19:02:47.297Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38468 State: PUBLISHED Published: 2023-09-04T01:16:10.949Z Last Updated: 2024-09-30T19:02:24.565Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38469 State: PUBLISHED Published: 2023-11-02T14:49:26.283Z Last Updated: 2025-11-03T21:49:05.912Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: avahi, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-617 Description: A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-38469 - https://bugzilla.redhat.com/show_bug.cgi?id=2191687
CVE ID: CVE-2023-38470 State: PUBLISHED Published: 2023-11-02T14:57:28.872Z Last Updated: 2025-11-03T21:49:07.373Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: avahi, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-617 Description: A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-38470 - https://bugzilla.redhat.com/show_bug.cgi?id=2191690
CVE ID: CVE-2023-38471 State: PUBLISHED Published: 2023-11-02T14:58:22.628Z Last Updated: 2025-11-03T21:49:08.851Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: avahi, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-617 Description: A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-38471 - https://bugzilla.redhat.com/show_bug.cgi?id=2191691
CVE ID: CVE-2023-38472 State: PUBLISHED Published: 2023-11-02T14:59:24.996Z Last Updated: 2025-11-03T21:49:10.298Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: avahi, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-617 Description: A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-38472 - https://bugzilla.redhat.com/show_bug.cgi?id=2191692
CVE ID: CVE-2023-38473 State: PUBLISHED Published: 2023-11-02T15:00:19.576Z Last Updated: 2025-11-03T21:49:11.746Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: avahi, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-617 Description: A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-38473 - https://bugzilla.redhat.com/show_bug.cgi?id=2191694
CVE ID: CVE-2023-38474 State: PUBLISHED Published: 2023-11-30T12:26:53.497Z Last Updated: 2024-11-20T21:08:45.825Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Campaign Monitor Products: Campaign Monitor for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Reflected XSS.This issue affects Campaign Monitor for WordPress: from n/a through 2.8.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/forms-for-campaign-monitor/wo
iner: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/forms-for-campaign-monitor/wordpress-campaign-monitor-for-wordpress-plugin-2-8-12-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-38475 State: PUBLISHED Published: 2024-12-13T14:23:54.895Z Last Updated: 2024-12-13T18:29:32.182Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: RedNao Products: Donations Made Easy – Smart Donations Problem Types: CWE-862 Description: Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smart-donations/vulnerability/wordpress-donations-made-easy
ferences: - https://patchstack.com/database/wordpress/plugin/smart-donations/vulnerability/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-38476 State: PUBLISHED Published: 2023-09-03T11:43:03.581Z Last Updated: 2024-09-24T18:56:00.760Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: SuiteDash :: ONE Dashboard® Products: Client Portal : SuiteDash Direct Login Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login plugin <= 1.7.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/client-portal-suitedash-login/wordpress-client-portal-suitedash-direct-login-plugin-1-7-3-cross-
/database/vulnerability/client-portal-suitedash-login/wordpress-client-portal-suitedash-direct-login-plugin-1-7-3-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-38477 State: PUBLISHED Published: 2024-12-13T14:23:55.523Z Last Updated: 2024-12-13T18:28:35.049Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Stanislav Kuznetsov Products: QR code MeCard/vCard generator Problem Types: CWE-862 Description: Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-qrcode-me-v-card/vulnerability/wordpress-qr-code-mec
: References: - https://patchstack.com/database/wordpress/plugin/wp-qrcode-me-v-card/vulnerability/wordpress-qr-code-mecard-vcard-generator-plugin-1-5-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-38478 State: PUBLISHED Published: 2023-12-19T20:03:31.587Z Last Updated: 2024-08-02T17:39:13.610Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: CRM Perks Products: Integration for WooCommerce and QuickBooks Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.2.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-woocommerce-quickbooks/wordpress-integration-for-woocommerce-and-quickbooks-plugi
tchstack.com/database/vulnerability/wp-woocommerce-quickbooks/wordpress-integration-for-woocommerce-and-quickbooks-plugin-1-2-3-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-38479 State: PUBLISHED Published: 2024-12-13T14:23:56.122Z Last Updated: 2024-12-13T18:27:02.775Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Codents Products: Simple Googlebot Visit Problem Types: CWE-862 Description: Missing Authorization vulnerability in Codents Simple Googlebot Visit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Googlebot Visit: from n/a through 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-googlebot-visit/vulnerability/wordpress-simple-googlebot-visit-plugin-1-2-4-broken-access-contro
wordpress/plugin/simple-googlebot-visit/vulnerability/wordpress-simple-googlebot-visit-plugin-1-2-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-38480 State: PUBLISHED Published: 2024-12-13T14:23:56.674Z Last Updated: 2024-12-13T18:26:08.988Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Certain Dev Products: Booster Elementor Addons Problem Types: CWE-862 Description: Missing Authorization vulnerability in Certain Dev Booster Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster Elementor Addons: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/booster-for-elementor/vulnerability/wordpress-booster-elementor-addons-plugin-1-4-9-broke
.com/database/wordpress/plugin/booster-for-elementor/vulnerability/wordpress-booster-elementor-addons-plugin-1-4-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-38481 State: PUBLISHED Published: 2023-12-19T20:00:45.781Z Last Updated: 2024-08-02T17:39:13.625Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: CRM Perks Products: Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vul
m n/a before 1.3.7. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woo-zoho/wordpress-integration-for-woocommerce-and-zoho-crm-plugin-1-3-7-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-38482 State: PUBLISHED Published: 2023-09-03T11:38:11.941Z Last Updated: 2024-09-24T18:56:14.477Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: QualityUnit Products: Post Affiliate Pro Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QualityUnit Post Affiliate Pro plugin <= 1.25.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/postaffiliatepro/wordpress-post-affiliate-pro-plugin-1-24-9-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-38483 State: PUBLISHED Published: 2024-12-13T14:23:57.228Z Last Updated: 2024-12-13T18:25:26.825Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dylan Blokhuis Products: Instant CSS Problem Types: CWE-862 Description: Missing Authorization vulnerability in Dylan Blokhuis Instant CSS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Instant CSS: from n/a through 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/instant-css/vulnerability/wordpress-instant-css-plugin-1-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-38484 State: PUBLISHED Published: 2023-09-06T17:47:18.689Z Last Updated: 2024-09-30T16:07:54.517Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: 9200 Series Mobility Controllers and SD-WAN Gateways, 9000 Series Mobility Controllers and SD-WAN Gateways Description: Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain access to and change underlying sensitive information in the affected controller leading to complete sys
ability to gain access to and change underlying sensitive information in the affected controller leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-014.txt
CVE ID: CVE-2023-38485 State: PUBLISHED Published: 2023-09-06T17:47:29.963Z Last Updated: 2024-09-30T16:18:23.308Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: 9200 Series Mobility Controllers and SD-WAN Gateways, 9000 Series Mobility Controllers and SD-WAN Gateways Description: Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain access to and change underlying sensitive information in the affected controller leading to complete sys
CVE ID: CVE-2023-38486 State: PUBLISHED Published: 2023-09-06T17:48:38.025Z Last Updated: 2024-09-26T19:51:05.849Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: 9200 Series Mobility Controllers and SD-WAN Gateways, 9000 Series Mobility Controllers and SD-WAN Gateways Description: A vulnerability in the secure boot implementation on affected Aruba 9200 and 9000 Series Controllers and Gateways allows an attacker to bypass security controls which would normally prohibit unsigned kernel images from executing. An attacker can use this vulnerability to execute arbitrary runtime operating systems, including unverified and
cuting. An attacker can use this vulnerability to execute arbitrary runtime operating systems, including unverified and unsigned OS images. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-014.txt