Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-20156 State: PUBLISHED Published: 2022-12-31T09:07:33.450Z Last Updated: 2024-08-05T21:45:25.958Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Exciting Products: Printer Problem Types: CWE-77 Description: A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/prepare_page.rb of the component Argument Handler. The manipulation of the argument URL leads to command injection. The patch is named 5f8c715d6e2cc000f621a6833f0a86a673462136. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217139. A
. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217139. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217139 - https://vuldb.com/?ctiid.217139 - https://github.com/exciting-io/printer/issues/56 - https://github.com/exciting-io/printer/commit/5f8c715d6e2cc000f621a6833f0a86a673462136
CVE ID: CVE-2017-20157 State: PUBLISHED Published: 2022-12-31T09:10:11.321Z Last Updated: 2024-08-05T21:45:26.020Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Ariadne Products: Component Library Problem Types: CWE-918 Description: A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217140. Additional Analyst Notes: - CVE Program Container: R
cted component. The identifier of this vulnerability is VDB-217140. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217140 - https://vuldb.com/?ctiid.217140 - https://github.com/Ariadne-CMS/arc-web/commit/1feb1cc11e6c9f218408f15f53f537ea0d788656 - https://github.com/Ariadne-CMS/arc-web/releases/tag/3.0
CVE ID: CVE-2017-20158 State: PUBLISHED Published: 2022-12-31T10:00:26.281Z Last Updated: 2024-08-05T21:45:25.988Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: vova07 Products: Yii2 FileAPI Widget Problem Types: CWE-79 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in vova07 Yii2 FileAPI Widget up to 0.1.8. It has been declared as problematic. Affected by this vulnerability is the function run of the file actions/UploadAction.php. The manipulation of the argument file leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.1.9 is able to address this issue. The identifier of the patch is c00d1e4fc912257fca1fce66d7a163bd
pgrading to version 0.1.9 is able to address this issue. The identifier of the patch is c00d1e4fc912257fca1fce66d7a163bdbb4c8222. It is recommended to upgrade the affected component. The identifier VDB-217141 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217141 - https://vuldb.com/?ctiid.217141 - https://github.com/vova07/yii2-fileapi-widget/commit/c00d1e4fc912257fca1fce66d7a163bdbb4c8222 - https://github.com/vova07/yii2-fileapi-widget/releases/tag/0.1.9
CVE ID: CVE-2017-20159 State: PUBLISHED Published: 2022-12-31T10:04:03.163Z Last Updated: 2024-10-15T17:12:48.863Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: rf Products: Keynote Problem Types: CWE-79 Description: A vulnerability was found in rf Keynote up to 0.x on Rails. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/keynote/rumble.rb. The manipulation of the argument value leads to cross site scripting. The attack may be launched remotely. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as 05be4356b0a6ca7de48da926a9b997beb5ffeb4a. It is recommended to upgrade the affected component. V
patch is identified as 05be4356b0a6ca7de48da926a9b997beb5ffeb4a. It is recommended to upgrade the affected component. VDB-217142 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217142 - https://vuldb.com/?ctiid.217142 - https://github.com/rf-/keynote/commit/05be4356b0a6ca7de48da926a9b997beb5ffeb4a - https://github.com/rf-/keynote/releases/tag/v1.0.0
CVE ID: CVE-2017-20160 State: PUBLISHED Published: 2022-12-31T19:15:12.396Z Last Updated: 2024-08-05T21:45:26.033Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: flitto Products: express-param Problem Types: CWE-235 Description: A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attack remotely. Upgrading to version 1.0.0 is able to address this issue. The identifier of the patch is db94f7391ad0a16dcfcba8b9be1af385b25c42db. It is recommended to upgrade the affected component. Th
tifier of the patch is db94f7391ad0a16dcfcba8b9be1af385b25c42db. It is recommended to upgrade the affected component. The identifier VDB-217149 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217149 - https://vuldb.com/?ctiid.217149 - https://github.com/flitto/express-param/pull/19 - https://github.com/flitto/express-param/commit/db94f7391ad0a16dcfcba8b9be1af385b25c42db - https://github.com/flitto/express-param/releases/tag/1.0.0
CVE ID: CVE-2017-20161 State: PUBLISHED Published: 2023-01-02T15:48:38.108Z Last Updated: 2024-08-05T21:45:25.980Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: rofl0r Products: MacGeiger Problem Types: CWE-74 Description: A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c of the component ESSID Handler. The manipulation leads to injection. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. It is rec
The exploitability is told to be difficult. The name of the patch is 57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217188. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217188 - https://vuldb.com/?ctiid.217188 - https://github.com/rofl0r/MacGeiger/commit/57f1dd50a4821b8c8e676e8020006ae4bfd3c9cb
CVE ID: CVE-2017-20162 State: PUBLISHED Published: 2023-01-05T11:49:24.249Z Last Updated: 2025-11-03T21:44:01.250Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: vercel Products: ms Problem Types: CWE-1333 Description: A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is named caae2988ba2a37765d055c4eee6
nd may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is named caae2988ba2a37765d055c4eee63d383320ee662. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217451. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217451 - https://vuldb.com/?ctiid.217451 - https://github.com/vercel/ms/pull/89 - https://github.com/vercel/ms/commit/caae2988ba2a37765d055c4eee63d383320ee662 - https://github.com/vercel/ms/releases/tag/2.0.0
CVE ID: CVE-2017-20163 State: PUBLISHED Published: 2023-01-05T19:18:21.263Z Last Updated: 2024-08-05T21:45:26.070Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Snapper Products: NView Problem Types: CWE-89 Description: A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file src/Session.php. The manipulation of the argument session leads to sql injection. The name of the patch is cbd255f55d476b29e5680f66f48c73ddb3d416a8. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217516. Additional Analyst Notes: - CVE Program Contai
ch to fix this issue. The identifier of this vulnerability is VDB-217516. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217516 - https://vuldb.com/?ctiid.217516 - https://github.com/RedSnapper/NView/commit/cbd255f55d476b29e5680f66f48c73ddb3d416a8
CVE ID: CVE-2017-20164 State: PUBLISHED Published: 2023-01-07T19:25:53.074Z Last Updated: 2025-04-08T20:28:58.762Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Symbiote Products: Seed Problem Types: CWE-601 Description: A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin of the file code/extensions/SecurityLoginExtension.php of the component Login. The manipulation of the argument URL leads to open redirect. It is possible to launch the attack remotely. Upgrading to version 6.0.3 is able to address this issue. The patch is identified as b065ebd82da53009d273aa7e989191f701485244. It is recomm
n 6.0.3 is able to address this issue. The patch is identified as b065ebd82da53009d273aa7e989191f701485244. It is recommended to upgrade the affected component. VDB-217626 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217626 - https://vuldb.com/?ctiid.217626 - https://github.com/symbiote/silverstripe-seed/commit/b065ebd82da53009d273aa7e989191f701485244 - https://github.com/symbiote/silverstripe-seed/releases/tag/6.0.3
CVE ID: CVE-2017-20165 State: PUBLISHED Published: 2023-01-09T09:33:18.561Z Last Updated: 2024-08-05T21:45:26.031Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: debug-js Products: debug Problem Types: CWE-1333 Description: A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The identifier of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217
is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217665 - https://vuldb.com/?ctiid.217665 - https://github.com/debug-js/debug/pull/504 - https://github.com/debug-js/debug/commit/c38a0166c266a679c8de012d4eaccec3f944e685 - https://github.com/debug-js/debug/releases/tag/3.1.0
CVE ID: CVE-2017-20166 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-04-09T17:30:12.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/advisories/GHSA-2xxx-fhc8-9qvq - https://github.com/elixir-ecto/ecto/pull/2125 - https://github.com/elixir-ecto/ecto/commit/db55b0cba6525c24ebddc88ef9ae0c1c00620250 - https://groups.google.com/forum/#%21topic/elixir-ecto/0m4NPfg_MMU
CVE ID: CVE-2017-20167 State: PUBLISHED Published: 2023-01-14T19:47:46.417Z Last Updated: 2024-08-05T21:45:26.052Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Minichan Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manipulation of the argument headline leads to cross site scripting. It is possible to initiate the attack remotely. The identifier of the patch is fc0e732e58630cba318d6bf49d1388a7aa9d390e. It is recommended to apply a patch to fix this issue. The identifier VDB-217785 was assigned to this vulnerability. Additional Analyst Notes: -
ply a patch to fix this issue. The identifier VDB-217785 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217785 - https://vuldb.com/?ctiid.217785 - https://github.com/Minichan/Minichan/pull/54 - https://github.com/Minichan/Minichan/commit/fc0e732e58630cba318d6bf49d1388a7aa9d390e
CVE ID: CVE-2017-20168 State: PUBLISHED Published: 2023-01-11T14:54:54.495Z Last Updated: 2025-04-09T13:51:25.061Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: jfm-so Products: piWallet Problem Types: CWE-89 Description: A vulnerability was found in jfm-so piWallet. It has been rated as critical. Affected by this issue is some unknown functionality of the file api.php. The manipulation of the argument key leads to sql injection. The patch is identified as b420f8c4cbe7f06a34d1b05e90ee5cdfe0aa83bb. It is recommended to apply a patch to fix this issue. VDB-218006 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Contai
this issue. VDB-218006 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218006 - https://vuldb.com/?ctiid.218006 - https://github.com/jfm-so/piWallet/pull/23 - https://github.com/jfm-so/piWallet/commit/b420f8c4cbe7f06a34d1b05e90ee5cdfe0aa83bb
CVE ID: CVE-2017-20169 State: PUBLISHED Published: 2023-01-13T20:43:49.637Z Last Updated: 2024-08-05T21:45:25.999Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: GGGGGGGG Products: ToN-MasterServer Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in GGGGGGGG ToN-MasterServer. Affected by this issue is some unknown functionality of the file public_html/irc_updater/svr_request_pub.php. The manipulation leads to sql injection. The patch is identified as 3a4c7e6d51bf95760820e3245e06c6e321a7168a. It is recommended to apply a patch to fix this issue. VDB-218306 is the identifier assigned to this vulnerability. A
8a. It is recommended to apply a patch to fix this issue. VDB-218306 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218306 - https://vuldb.com/?ctiid.218306 - https://github.com/GGGGGGGG/ToN-MasterServer/commit/3a4c7e6d51bf95760820e3245e06c6e321a7168a
CVE ID: CVE-2017-20170 State: PUBLISHED Published: 2023-01-17T13:58:03.233Z Last Updated: 2025-04-04T17:37:36.264Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ollpu Products: parontalli Problem Types: CWE-89 Description: A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of the file httpdocs/index.php. The manipulation of the argument s leads to sql injection. The patch is identified as 6891bb2dec57dca6daabc15a6d2808c8896620e5. It is recommended to apply a patch to fix this issue. VDB-218418 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container:
issue. VDB-218418 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218418 - https://vuldb.com/?ctiid.218418 - https://github.com/ollpu/parontalli/commit/6891bb2dec57dca6daabc15a6d2808c8896620e5
CVE ID: CVE-2017-20171 State: PUBLISHED Published: 2023-01-17T22:58:05.016Z Last Updated: 2024-08-05T21:45:25.989Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: PrivateSky Products: apersistence Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the file db/sql/mysqlUtils.js. The manipulation leads to sql injection. The identifier of the patch is 954425f61634b556fe644837a592a5b8fcfca068. It is recommended to apply a patch to fix this issue. The identifier VDB-218457 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Referenc
he identifier VDB-218457 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218457 - https://vuldb.com/?ctiid.218457 - https://github.com/PrivateSky/apersistence/commit/954425f61634b556fe644837a592a5b8fcfca068
CVE ID: CVE-2017-20172 State: PUBLISHED Published: 2023-01-18T14:58:02.936Z Last Updated: 2024-08-05T21:45:26.052Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: ridhoq Products: soundslike Problem Types: CWE-89 Description: A vulnerability was found in ridhoq soundslike. It has been classified as critical. Affected is the function get_song_relations of the file app/api/songs.py. The manipulation leads to sql injection. The patch is identified as 90bb4fb667d9253d497b619b9adaac83bf0ce0f8. It is recommended to apply a patch to fix this issue. VDB-218490 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Refere
. VDB-218490 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218490 - https://vuldb.com/?ctiid.218490 - https://github.com/ridhoq/soundslike/pull/5 - https://github.com/ridhoq/soundslike/commit/90bb4fb667d9253d497b619b9adaac83bf0ce0f8
CVE ID: CVE-2017-20173 State: PUBLISHED Published: 2023-01-18T15:58:06.207Z Last Updated: 2024-08-05T21:45:25.991Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: AlexRed Products: contentmap Problem Types: CWE-89 Description: A vulnerability was found in AlexRed contentmap. It has been rated as critical. Affected by this issue is the function Load of the file contentmap.php. The manipulation of the argument contentid leads to sql injection. The name of the patch is dd265d23ff4abac97422835002c6a47f45ae2a66. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218492. Additional Analyst Notes: - CVE Program Contain
h to fix this issue. The identifier of this vulnerability is VDB-218492. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218492 - https://vuldb.com/?ctiid.218492 - https://github.com/AlexRed/contentmap/commit/dd265d23ff4abac97422835002c6a47f45ae2a66
CVE ID: CVE-2017-20174 State: PUBLISHED Published: 2023-01-19T07:58:06.717Z Last Updated: 2025-04-03T17:01:19.204Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: bastianallgeier Products: Kirby Webmentions Plugin Problem Types: CWE-74 Description: A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The patch is identified as 55bedea78ae9af916a9a41497bd9996417851502. It is recommended to apply a pat
n to be difficult. The patch is identified as 55bedea78ae9af916a9a41497bd9996417851502. It is recommended to apply a patch to fix this issue. VDB-218894 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.218894 - https://vuldb.com/?ctiid.218894 - https://github.com/bastianallgeier/kirby-webmentions/commit/55bedea78ae9af916a9a41497bd9996417851502
CVE ID: CVE-2017-20175 State: PUBLISHED Published: 2023-02-05T19:57:03.275Z Last Updated: 2024-08-05T21:45:25.969Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: DaSchTour Products: matomo-mediawiki-extension Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in DaSchTour matomo-mediawiki-extension up to 2.4.2 on MediaWiki. This affects an unknown part of the file Piwik.hooks.php of the component Username Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disc
otely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.4.3 is able to address this issue. The patch is named 681324e4f518a8af4bd1f93867074c728eb9923d. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220203. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220203 - https://vuldb.com/?ctiid.220203 - https://github.com/DaSchTour/matomo-mediawiki-extension/pull/17 - https://github.com/DaSchTour/matomo-mediawiki-extension/commit/681324e4f518a8af4bd1f93867074c728eb9923d - https:
ll/17 - https://github.com/DaSchTour/matomo-mediawiki-extension/commit/681324e4f518a8af4bd1f93867074c728eb9923d - https://github.com/DaSchTour/matomo-mediawiki-extension/releases/tag/v2.4.3
CVE ID: CVE-2017-20176 State: PUBLISHED Published: 2023-02-06T03:57:03.742Z Last Updated: 2025-03-25T18:17:45.467Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: ciubotaru Products: share-on-diaspora Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is fb6fae2f8a9b146471450b5b0281046a17d1ac8d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-220204. Additional
8d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-220204. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220204 - https://vuldb.com/?ctiid.220204 - https://github.com/ciubotaru/share-on-diaspora/commit/fb6fae2f8a9b146471450b5b0281046a17d1ac8d
CVE ID: CVE-2017-20177 State: PUBLISHED Published: 2023-02-06T20:00:06.083Z Last Updated: 2025-03-05T19:27:18.880Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: WangGuard Plugin Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in WangGuard Plugin 1.8.0 on WordPress. Affected by this issue is the function wangguard_users_info of the file wangguard-user-info.php of the component WGG User List Handler. The manipulation of the argument userIP leads to cross site scripting. The attack may be launched remotely. The patch is identified as 88414951e30773c8d2ec13b99642688284bf3189. It is recommended to apply a patch to
ed remotely. The patch is identified as 88414951e30773c8d2ec13b99642688284bf3189. It is recommended to apply a patch to fix this issue. VDB-220214 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220214 - https://vuldb.com/?ctiid.220214 - https://github.com/joseconti/WangGuard/pull/14 - https://github.com/joseconti/WangGuard/commit/88414951e30773c8d2ec13b99642688284bf3189