Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle the shutdown or reboot request, which could lead to the clean up of certain resources. This could allow a remote attacker with elevated privileges to cause a denial of service condition in the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-423808.html
CVE ID: CVE-2023-30756 State: PUBLISHED Published: 2024-09-10T09:33:40.640Z Last Updated: 2024-09-10T15:10:00.273Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC CP 1242-7 V2 (incl. SIPLUS variants), SIMATIC CP 1243-1 (incl. SIPLUS variants), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants), SIMATIC CP 1243-7 LTE, SIMATIC CP 1243-8 IRC, SIMATIC HMI Comfort Panels (incl. SIPLUS variants), SIMATIC IPC DiagBase, SIMATIC IPC DiagMonitor, SIMATIC WinCC Runtime Advanced, SIPLUS TIM 1531 IRC, TIM 1531 IRC Problem Types: CWE-476 Description: A vulnerability has been identified in S
ions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain errors when using the Expect HTTP request header, resulting in NULL dereference. This could allow a remote attacker with no privileges to cause a denial of service condition in the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-423808.html
CVE ID: CVE-2023-30757 State: PUBLISHED Published: 2023-06-13T08:17:10.136Z Last Updated: 2024-12-10T13:53:26.912Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:T/RC:C) Vendors: Siemens Products: Totally Integrated Automation Portal (TIA Portal) V14, Totally Integrated Automation Portal (TIA Portal) V15, Totally Integrated Automation Portal (TIA Portal) V15.1, Totally Integrated Automation Portal (TIA Portal) V16, Totally Integrated Automation Portal (TIA Portal) V17, Totally Integrated Automation Portal (TIA Portal) V18, Totally Integrated Automation Portal (TIA Portal) V19, Totally Integrated Automation Portal (TIA Portal) V20 Problem Types: CWE-693 Descrip
Automation Portal (TIA Portal) V19, Totally Integrated Automation Portal (TIA Portal) V20 Problem Types: CWE-693 Description: A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA P
ions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions), Totally Integrated Automation Portal (TIA Portal) V20 (All versions). The know-how protection feature in affected products does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previous - yet unprotected - versions of the project without the knowledge of the know-how protection password. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-042050.pdf - https://cert-portal.siemens.com/productcert/html/ssa-042050.html
CVE ID: CVE-2023-30758 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T17:53:24.139Z Vendors: Implem Inc. Products: Pleasanter Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Pleasanter 1.3.38.1 and earlier allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pleasanter.org/archives/vulnerability-update-202305 - https://github.com/Implem/Implem.Pleasanter/issues/474 - https://jvn.jp/en/jp/JVN62111727/
CVE ID: CVE-2023-30759 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-12T20:28:30.715Z Vendors: Ricoh Company, Ltd. Products: Printer Driver Packager NX Problem Types: Insufficient Verification of Data Authenticity Description: The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an arbitrary program may be executed with the administrative privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
with the administrative privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 - https://jvn.jp/en/vu/JVNVU92207133/
CVE ID: CVE-2023-30760 State: PUBLISHED Published: 2023-08-11T02:37:26.895Z Last Updated: 2024-10-03T20:29:48.626Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA Problem Types: information disclosure, CWE-125 Description: Out-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/
ogram Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html
CVE ID: CVE-2023-30762 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T17:58:23.336Z Vendors: KbDevice,Inc. Products: KB-AHR series and KB-IRIP series Problem Types: Improper authentication Description: Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions pri
KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kbdevice.com/news/%e3%83%ac%e3%82%b3%e3%83%bc%e3%83%80%e3%83%bc%e3%81%ae%e3%83%8d%e3%83%83%e3%83%88%e3%83%af%e3%83%bc%e3%82%af%e6%94%bb%e6%92%83%e3%81%ab%e5%af%be%e3%81%99%e3%82%8b%e3%82%a2%e3%83%83%e3%83%97%e3%83%87/ - https://jvn.jp/en/vu/JVNVU90812349/
CVE ID: CVE-2023-30763 State: PUBLISHED Published: 2023-05-12T14:01:47.469Z Last Updated: 2025-01-24T15:24:32.923Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) SoC Watch based software Problem Types: escalation of privilege, CWE-122 Description: Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00547.html
CVE ID: CVE-2023-30764 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T17:56:11.152Z Vendors: KbDevice,Inc. Products: KB-AHR series and KB-IRIP series Problem Types: OS command injection Description: OS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to
R16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kbdevice.com/news/%e3%83%ac%e3%82%b3%e3%83%bc%e3%83%80%e3%83%bc%e3%81%ae%e3%83%8d%e3%83%83%e3%83%88%e3%83%af%e3%83%bc%e3%82%af%e6%94%bb%e6%92%83%e3%81%ab%e5%af%be%e3%81%99%e3%82%8b%e3%82%a2%e3%83%83%e3%83%97%e3%83%87/ - https://jvn.jp/en/vu/JVNVU90812349/
CVE ID: CVE-2023-30765 State: PUBLISHED Published: 2023-07-10T19:04:41.114Z Last Updated: 2025-01-27T16:19:08.718Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: Infrasuite Device Master Problem Types: CWE-269 Description: ​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01
CVE ID: CVE-2023-30766 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-06T15:11:10.929Z Vendors: KbDevice,Inc. Products: KB-AHR series and KB-IRIP series Problem Types: Hidden functionality Description: Hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.
sions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kbdevice.com/news/%e3%83%ac%e3%82%b3%e3%83%bc%e3%83%80%e3%83%bc%e3%81%ae%e3%83%8d%e3%83%83%e3%83%88%e3%83%af%e3%83%bc%e3%82%af%e6%94%bb%e6%92%83%e3%81%ab%e5%af%be%e3%81%99%e3%82%8b%e3%82%a2%e3%83%83%e3%83%97%e3%83%87/ - https://jvn.jp/en/vu/JVNVU90812349/
CVE ID: CVE-2023-30767 State: PUBLISHED Published: 2024-02-14T13:37:50.498Z Last Updated: 2024-08-14T19:16:55.856Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: n/a Products: TensorFlow Problem Types: escalation of privilege, CWE-92 Description: Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00903.html
CVE ID: CVE-2023-30768 State: PUBLISHED Published: 2023-05-12T14:01:48.723Z Last Updated: 2025-01-24T16:44:07.029Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family Problem Types: escalation of privilege, CWE-284 Description: Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.co
l access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00056.html
CVE ID: CVE-2023-30769 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-03-03T19:29:40.739Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Dogecoin Products: Node Problem Types: CWE-400 Description: Vulnerability discovered is related to the peer-to-peer (p2p) communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.halborn.com/blog/post/halborn-discovers-zero-day-impacting-dogecoin-and-280-
ADP Vulnrichment: References: - https://www.halborn.com/blog/post/halborn-discovers-zero-day-impacting-dogecoin-and-280-networks - https://www.halborn.com/disclosures
CVE ID: CVE-2023-30770 State: PUBLISHED Published: 2023-04-17T06:32:05.965Z Last Updated: 2025-02-05T21:22:25.410Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: ASUSTOR Products: ADM Problem Types: CWE-787 Description: A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.asustor.com/security/security_advisory_detail?id=21
CVE ID: CVE-2023-30771 State: PUBLISHED Published: 2023-04-17T07:26:12.996Z Last Updated: 2025-02-13T16:49:35.515Z Vendors: Apache Software Foundation Products: Apache IoTDB Workbench Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/08nc3dr6lshfppx0pzmz5vbggdnzpojb - http://w
iner: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/08nc3dr6lshfppx0pzmz5vbggdnzpojb - http://www.openwall.com/lists/oss-security/2023/04/18/7
CVE ID: CVE-2023-30772 State: PUBLISHED Published: 2023-04-16T00:00:00.000Z Last Updated: 2025-05-05T15:58:09.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=06615d11cc78162dfd5116efb71f29eb29502d37 - https://bugzilla.suse.com/show_bug.cgi?id=1210329 - https://lists.debian.org/d
6615d11cc78162dfd5116efb71f29eb29502d37 - https://bugzilla.suse.com/show_bug.cgi?id=1210329 - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2023-30774 State: PUBLISHED Published: 2023-05-19T00:00:00 Last Updated: 2024-08-02T14:37:15.327Z Vendors: n/a Products: libtiff Problem Types: CWE-119 Description: A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/libtiff/libtiff/-/issues/463 - https://access.redhat.com/security/cve/CVE-2023-30774 - https://bugzilla.redhat.com/show_bug.cgi?id=2187139 - https://security.netapp.com/advisory/ntap-20230703-0002/ - https://support.apple.com/kb/HT213984 - http://seclists.org/fulldisclosure/2023/Oct/2
com/advisory/ntap-20230703-0002/ - https://support.apple.com/kb/HT213984 - http://seclists.org/fulldisclosure/2023/Oct/24
CVE ID: CVE-2023-30775 State: PUBLISHED Published: 2023-05-19T00:00:00 Last Updated: 2025-01-21T17:30:59.637Z Vendors: n/a Products: libtiff Problem Types: CWE-119 Description: A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/464 - https://access.redhat.com/security/cve/CVE-2023-30775 - https://bugzilla.redhat.com/show_bug.cgi?id=2187141 - https://security.netapp.com/advisory/ntap-20230703-0002/
CVE ID: CVE-2023-30776 State: PUBLISHED Published: 2023-04-24T15:29:53.498Z Last Updated: 2024-10-21T15:08:55.113Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-522 Description: An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific REST API. This issue affects Apache Superset version 1.3.0 up to 2.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/s9w9w10mt2sngk3solwnmq5k7md53tsz - http://www.openwall.com/lists/oss-security/2023/04/24/3
CVE ID: CVE-2023-30777 State: PUBLISHED Published: 2023-05-10T05:50:04.023Z Last Updated: 2025-01-09T15:22:00.542Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Engine Products: Advanced Custom Fields Pro, Advanced Custom Fields Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/advanced-custom-fields-pro/wordpress-advanced-custom-fields-pro-plugin-6-1-5-reflected-cross-site-scrip
se/vulnerability/advanced-custom-fields-pro/wordpress-advanced-custom-fields-pro-plugin-6-1-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - https://patchstack.com/database/vulnerability/advanced-custom-fields/wordpress-advanced-custom-fields-plugin-6-1-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve - https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites?_s_id=cve
CVE ID: CVE-2023-30778 State: PUBLISHED Published: 2023-08-15T12:40:26.988Z Last Updated: 2024-09-25T15:02:22.317Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Blubrry Products: PowerPress Podcasting plugin by Blubrry Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry plugin <= 10.0.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/powerpress/wordpress-powerpress-podcasting-plugin-by-blubrry-plugin-10-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30779 State: PUBLISHED Published: 2023-08-16T10:05:00.575Z Last Updated: 2024-09-25T14:49:34.983Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jonathan Daggerhart Products: Query Wrangler Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jonathan Daggerhart Query Wrangler plugin <= 1.5.51 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/query-wrangler/wordpress-query-wrangler-plugin-1-5-51-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30780 State: PUBLISHED Published: 2023-05-18T10:02:58.593Z Last Updated: 2025-01-09T15:13:56.524Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: TheGuideX Products: User IP and Location Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TheGuideX User IP and Location plugin <= 2.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/user-ip-and-location/wordpress-user-ip-and-location-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30781 State: PUBLISHED Published: 2023-10-18T13:38:54.594Z Last Updated: 2024-09-12T18:04:59.126Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Theme Blvd Products: Tweeple Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Theme Blvd Tweeple plugin <= 0.9.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/tweeple/wordpress-tweeple-plugin-0-9-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30782 State: PUBLISHED Published: 2023-08-16T09:43:38.596Z Last Updated: 2024-09-25T15:02:03.688Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Andy Moyle Products: Church Admin Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/church-admin/wordpress-church-admin-plugin-3-7-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-30783 State: PUBLISHED Published: 2024-12-09T11:31:02.987Z Last Updated: 2024-12-09T18:46:33.989Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: YummyWP Products: Smart WooCommerce Search Problem Types: CWE-862 Description: Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WooCommerce Search: from n/a through 2.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smart-woocommerce-search/vulnerability/wordpress-smart-woocommerce-search-plugin-2-5-0-broken-acc
abase/wordpress/plugin/smart-woocommerce-search/vulnerability/wordpress-smart-woocommerce-search-plugin-2-5-0-broken-access-control?_s_id=cve
CVE ID: CVE-2023-30784 State: PUBLISHED Published: 2023-08-16T09:56:19.581Z Last Updated: 2024-09-25T15:01:31.475Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Kaya Studio Products: Kaya QR Code Generator Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kaya Studio Kaya QR Code Generator plugin <= 1.5.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/kaya-qr-code-generator/wordpress-kaya-qr-code-generator-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve