Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3319 State: PUBLISHED Published: 2023-07-13T07:52:43.858Z Last Updated: 2024-10-22T16:27:51.622Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: iDisplay Products: PlatPlay DS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iDisplay PlatPlay DS allows Stored XSS.This issue affects PlatPlay DS: before 3.14. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0402
CVE ID: CVE-2023-3320 State: PUBLISHED Published: 2023-06-20T02:52:14.413Z Last Updated: 2025-02-13T16:55:05.279Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: musilda Products: WP Sticky Social Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing nonce validation in the ~/admin/views/admin.php file. This makes it possible for unauthenticated attackers to modify the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into perform
settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a272e12b-97a2-421a-a703-3acce2ed8313?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2926150%40wp-sticky-social&new=2926150%40wp-sticky-social - http://packetstormsecurity.com/files/173048/WordPress-WP-Sticky-Social-1.0.1-CSRF-Cross-Site-Scripting.html
CVE ID: CVE-2023-3321 State: PUBLISHED Published: 2023-07-24T17:06:31.093Z Last Updated: 2024-10-24T15:59:10.846Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: ABB Ability™ zenon Problem Types: CWE-15 Description: A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
Ability™ zenon: from 11 build through 11 build 106404. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001801&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.194142766.2067879716.1690216773-1911411808.1686627590
CVE ID: CVE-2023-3322 State: PUBLISHED Published: 2023-07-24T17:12:37.224Z Last Updated: 2024-10-24T16:02:00.550Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: ABB Ability™ zenon Problem Types: CWE-732 Description: A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
B Ability™ zenon: from 11 build through 11 build 106404. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001801&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.194142766.2067879716.1690216773-1911411808.1686627590
CVE ID: CVE-2023-3323 State: PUBLISHED Published: 2023-07-24T17:17:09.348Z Last Updated: 2024-10-18T13:02:35.402Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: ABB Products: ABB Ability™ zenon Problem Types: CWE-276 Description: A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404. Additional Analyst Notes: - CVE Program Container: - CISA A
s ABB Ability™ zenon: from 11 build through 11 build 106404. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=2NGA001801&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.194142766.2067879716.1690216773-1911411808.1686627590
CVE ID: CVE-2023-3324 State: PUBLISHED Published: 2023-07-24T17:20:49.522Z Last Updated: 2024-10-18T13:02:53.261Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: ABB Products: ABB Ability™ zenon Problem Types: CWE-502 Description: A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially crafted programs to exploit the vulnerabilities by allowing them to run on the zenon installed hosts. This issue affects ABB Ability™ zenon: from 11 build through 11 build 106404. Additional Analyst Notes: - CVE Program Container: - CISA A
CVE ID: CVE-2023-3325 State: PUBLISHED Published: 2023-06-20T04:27:34.647Z Last Updated: 2024-12-03T16:22:24.851Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thoefter Products: CMS Commander – Manage Multiple Sites Problem Types: CWE-345 Insufficient Verification of Data Authenticity Description: The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated attackers to the plugin to change the '_cmsc_public_key' in the plugin config, providing access to the plu
authenticated attackers to the plugin to change the '_cmsc_public_key' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation. This can only be exploited if the plugin has not been configured yet, however, if combined with another arbitrary plugin installation and activation vulnerability, the impact can be severe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ca37d453-9f9a-46b2-a17f-65a16e3e2ed1?source=cve - https://plugins.trac.wordpress.org/browser/cms-commander-client/tags/2.2
37d453-9f9a-46b2-a17f-65a16e3e2ed1?source=cve - https://plugins.trac.wordpress.org/browser/cms-commander-client/tags/2.287/init.php#L88 - https://plugins.trac.wordpress.org/changeset/2927811/cms-commander-client
CVE ID: CVE-2023-3326 State: PUBLISHED Published: 2023-06-22T16:37:51.360Z Last Updated: 2024-12-05T17:45:19.729Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-303 Description: pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the network, as a way to verify the password. However, if a keytab is not provisioned on the system, pam_krb5 has no way to validate the response from the KDC, and essentially trusts the tgt provided over the network as being valid. In a non-default FreeBSD installation that leverages pam_krb5 for authentication and does not have a keytab prov
valid. In a non-default FreeBSD installation that leverages pam_krb5 for authentication and does not have a keytab provisioned, an attacker that is able to control both the password and the KDC responses can return a valid tgt, allowing authentication to occur for any user on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-23:04.pam_krb5.asc - https://security.netapp.com/advisory/ntap-20230714-0005/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-23:09.pam_krb5.asc
CVE ID: CVE-2023-3327 State: REJECTED Published: N/A Last Updated: 2023-06-27T00:00:00 Description: No description available.
CVE ID: CVE-2023-3328 State: PUBLISHED Published: 2023-08-14T19:10:22.342Z Last Updated: 2024-10-09T16:06:44.603Z Vendors: Unknown Products: Custom Field For WP Job Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Custom Field For WP Job Manager WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d8b76875-cf7f-43a9-b88b-d8aefefab131
CVE ID: CVE-2023-3329 State: PUBLISHED Published: 2023-08-02T22:26:07.157Z Last Updated: 2024-10-29T17:48:43.098Z Vendors: iniNet Products: SCADAWebServer Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative privileges could overwrite files on the webserver using the HMI's upload file feature. This could create size zero files anywhere on the webserver, potentially overwriting system files and creating a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
eating a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-173-03
CVE ID: CVE-2023-3330 State: PUBLISHED Published: 2023-06-28T01:13:03.181Z Last Updated: 2024-12-04T21:42:54.798Z Vendors: NEC Corporation Products: Aterm WG2600HP2, Aterm WG2600HP, Aterm WG2200HP, Aterm WG1800HP2, Aterm WG1800HP, Aterm WG1400HP, Aterm WG600HP, Aterm WG300HP, Aterm WF300HP, Aterm WR9500N, Aterm WR9300N, Aterm WR8750N, Aterm WR8700N, Aterm WR8600N, Aterm WR8370N, Aterm WR8175N, Aterm WR8170N Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and
00HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jpn.nec.com/security-info/secinfo/nv23-007_en.html
CVE ID: CVE-2023-3331 State: PUBLISHED Published: 2023-06-28T01:19:45.378Z Last Updated: 2024-12-04T20:49:51.994Z Vendors: NEC Corporation Products: Aterm WG2600HP2, Aterm WG2600HP, Aterm WG2200HP, Aterm WG1800HP2, Aterm WG1800HP, Aterm WG1400HP, Aterm WG600HP, Aterm WG300HP, Aterm WF300HP, Aterm WR9500N, Aterm WR9300N, Aterm WR8750N, Aterm WR8700N, Aterm WR8600N, Aterm WR8370N, Aterm WR8175N, Aterm WR8170N Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175
, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete specific files in the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html
CVE ID: CVE-2023-3332 State: PUBLISHED Published: 2023-06-28T01:25:03.905Z Last Updated: 2024-12-04T20:52:34.092Z Vendors: NEC Corporation Products: Aterm WG2600HP2, Aterm WG2600HP, Aterm WG2200HP, Aterm WG1800HP2, Aterm WG1800HP, Aterm WG1400HP, Aterm WG600HP, Aterm WG300HP, Aterm WF300HP, Aterm WR9500N, Aterm WR9300N, Aterm WR8750N, Aterm WR8700N, Aterm WR8600N, Aterm WR8370N, Aterm WR8175N, Aterm WR8170N Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175
, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html
CVE ID: CVE-2023-3333 State: PUBLISHED Published: 2023-06-28T01:33:27.976Z Last Updated: 2024-12-04T20:54:19.552Z Vendors: NEC Corporation Products: Aterm WG2600HP2, Aterm WG2600HP, Aterm WG2200HP, Aterm WG1800HP2, Aterm WG1800HP, Aterm WG1400HP, Aterm WG600HP, Aterm WG300HP, Aterm WF300HP, Aterm WR9500N, Aterm WR9300N, Aterm WR8750N, Aterm WR8700N, Aterm WR8600N, Aterm WR8370N, Aterm WR8175N, Aterm WR8170N Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175
, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://jpn.nec.com/security-info/secinfo/nv23-007_en.html
CVE ID: CVE-2023-3335 State: PUBLISHED Published: 2023-10-03T01:02:47.466Z Last Updated: 2024-08-02T06:55:02.617Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Hitachi Products: Hitachi Ops Center Administrator Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-140/index.html
CVE ID: CVE-2023-3336 State: PUBLISHED Published: 2023-07-05T09:11:54.255Z Last Updated: 2024-11-20T21:22:45.372Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Moxa Products: TN-5900 Series Problem Types: CWE-204 Description: TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mp
m Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230401-tn-5900-series-user-enumeration-vulnerability
CVE ID: CVE-2023-3337 State: PUBLISHED Published: 2023-06-20T12:00:04.541Z Last Updated: 2024-08-02T06:55:03.174Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PuneethReddyHC Products: Online Shopping System Advanced Problem Types: CWE-287 Description: A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The attack can be launched remotely. The identifier VDB-232009 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Cont
hed remotely. The identifier VDB-232009 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.232009 - https://vuldb.com/?ctiid.232009
CVE ID: CVE-2023-3338 State: PUBLISHED Published: 2023-06-30T00:00:00.000Z Last Updated: 2025-03-05T18:55:11.038Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-476 Description: A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-3338 - https://bugzill
Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-3338 - https://bugzilla.redhat.com/show_bug.cgi?id=2218618 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://seclists.org/oss-sec/2023/q2/276 - https://security.netapp.com/advisory/ntap-20230824-0005/ - https://www.debian.org/security/2023/dsa-5480
CVE ID: CVE-2023-3339 State: PUBLISHED Published: 2023-06-21T06:31:03.287Z Last Updated: 2024-08-02T06:55:03.167Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Agro-School Management System Problem Types: CWE-89 Description: A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232015. Additional
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232015. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.232015 - https://vuldb.com/?ctiid.232015 - https://github.com/6rignard/CveReport/blob/main/Agro-School%20Management%20System%20exam-delete.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-3340 State: PUBLISHED Published: 2023-06-20T15:31:03.370Z Last Updated: 2024-08-02T06:55:03.477Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online School Fees System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online School Fees System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajx.php of the component GET Parameter Handler. The manipulation of the argument name_startsWith leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232016.
tely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232016. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.232016 - https://vuldb.com/?ctiid.232016 - https://github.com/M9KJ-TEAM/CVEReport/blob/main/SQL.md
CVE ID: CVE-2023-3341 State: PUBLISHED Published: 2023-09-20T12:32:03.073Z Last Updated: 2025-02-13T16:55:07.169Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Description: The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not
h incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/docs/cve-2023-3341 - http://www.openwall.com/lists/oss-security/2023/09/20/2 - https://www.debian.org/security/2023/dsa-5504 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedor
tps://www.debian.org/security/2023/dsa-5504 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPJLLTJCSDJJII7IIZPLTBQNWP7MZH7F/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U35OARLQCPMVCBBPHWBXY5M6XJLD2TZ5/ - https://security.netapp.com/advisory/ntap-20231013-0003/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSK5V4W4OHPM3JTJGWAQD6CZW7SFD75B/ - https://lists.debian.org/debian-lts-announce/2024/01/msg00021.html
CVE ID: CVE-2023-3342 State: PUBLISHED Published: 2023-07-13T02:04:15.320Z Last Updated: 2025-02-13T16:55:07.765Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: wpeverest Products: User Registration – Custom Registration Form, Login Form And User Profile For WordPress Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with subscriber-level capabi
in versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with subscriber-level capabilities or above to upload arbitrary files on the affected site's server which may make remote code execution possible. This was partially patched in version 3.0.2 and fully patched in version 3.0.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a979e885-f7dd-4616-a881-64f3d97c309d?source=cve - https://plugins.trac.wordpress.org/browser/user-registration/tags/3.0.1/includes/functions-ur-core.php#L3156 - https://lana.codes/lanavdb/c0a58dff-7a5b-4cc0-82d6-2255e61d801c/ - htt
tags/3.0.1/includes/functions-ur-core.php#L3156 - https://lana.codes/lanavdb/c0a58dff-7a5b-4cc0-82d6-2255e61d801c/ - https://plugins.trac.wordpress.org/changeset/2933689/user-registration/trunk/includes/functions-ur-core.php - http://packetstormsecurity.com/files/173434/WordPress-User-Registration-3.0.2-Arbitrary-File-Upload.html