Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47712 State: PUBLISHED Published: 2024-05-11T13:15:25.413Z Last Updated: 2024-09-20T19:00:42.903Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Guardium Problem Types: CWE-732 Description: IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a local user to gain elevated privileges on the system due to improper permissions control. IBM X-Force ID: 271527. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7150840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271524
CVE ID: CVE-2023-47714 State: PUBLISHED Published: 2024-04-12T12:17:19.660Z Last Updated: 2024-08-02T21:16:43.653Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling File Gateway Problem Types: CWE-79 Description: IBM Sterling File Gateway 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271531. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
session. IBM X-Force ID: 271531. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271531
CVE ID: CVE-2023-47715 State: PUBLISHED Published: 2024-03-21T14:10:59.446Z Last Updated: 2024-08-02T21:16:43.664Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Storage Protect Plus Server Problem Types: CWE-269 Description: IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-only permissions to add or delete entries from an existing HyperVisor configuration. IBM X-Force ID: 271538. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7144861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271538
CVE ID: CVE-2023-47716 State: PUBLISHED Published: 2024-03-01T02:22:48.137Z Last Updated: 2024-09-20T19:02:50.139Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Filenet Content Manager Problem Types: CWE-863 Description: IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges of another user under unusual circumstances. IBM X-Force ID: 271656. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7078780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271656
CVE ID: CVE-2023-47717 State: PUBLISHED Published: 2024-05-16T17:22:21.688Z Last Updated: 2024-12-06T21:46:42.849Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Security Guardium Problem Types: CVE-770 Allocation of Resources Without Limits or Throttling Description: IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7152469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271690
CVE ID: CVE-2023-47718 State: PUBLISHED Published: 2024-01-19T01:14:42.543Z Last Updated: 2025-06-17T21:19:23.844Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: IBM Products: Maximo Asset Management, Maximo Asset Management Manage Component Problem Types: CWE-352 Description: IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 271843. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/p
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7107738 - https://www.ibm.com/support/pages/node/7107740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271843
CVE ID: CVE-2023-47722 State: PUBLISHED Published: 2023-12-09T02:32:57.775Z Last Updated: 2024-08-02T21:16:43.581Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: API Connect Problem Types: 256 Plaintext Storage of a Password Description: IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7087806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/271912
CVE ID: CVE-2023-47726 State: PUBLISHED Published: 2024-06-18T13:40:39.683Z Last Updated: 2024-08-02T21:16:43.641Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-1287 Description: IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation. IBM X-Force ID: 272087. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7157750 - https://exchange.x
ment: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7157750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/272087
CVE ID: CVE-2023-47727 State: PUBLISHED Published: 2024-05-02T14:43:57.748Z Last Updated: 2024-08-02T21:16:43.556Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Cloud Pak for Security, QRadar Suite Software Problem Types: CWE-1287 Description: IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation. IBM X-Force ID: 272089. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149968 - https://exchange.xforce.ibmcloud
- CVE Program Container: References: - https://www.ibm.com/support/pages/node/7149968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/272089
CVE ID: CVE-2023-47728 State: PUBLISHED Published: 2024-08-16T19:12:56.386Z Last Updated: 2024-09-21T09:52:15.365Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-209 Description: IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks against the system. IBM X-Force ID: 272201. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
acks against the system. IBM X-Force ID: 272201. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7161427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/272201
CVE ID: CVE-2023-47731 State: PUBLISHED Published: 2024-04-23T12:16:11.361Z Last Updated: 2024-08-02T21:16:43.610Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-79 Description: IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 272203. Additional Analyst Notes: - CISA
lly leading to credentials disclosure within a trusted session. IBM X-Force ID: 272203. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7148994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/272203
CVE ID: CVE-2023-47741 State: PUBLISHED Published: 2023-12-18T19:09:58.816Z Last Updated: 2024-09-16T18:43:12.063Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: i, Db2 Mirror for i Problem Types: 525 Information Exposure Through Browser Caching Description: IBM i 7.3, 7.4, 7.5, IBM i Db2 Mirror for i 7.4 and 7.5 web browser clients may leave clear-text passwords in browser memory that can be viewed using common browser tools before the memory is garbage collected. A malicious actor with access to the victim's PC could exploit this vulnerability to gain access to the IBM i operating system. IBM X-Force ID: 272532. Additional Analyst Notes: - C
t this vulnerability to gain access to the IBM i operating system. IBM X-Force ID: 272532. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7097785 - https://www.ibm.com/support/pages/node/7097801
CVE ID: CVE-2023-47742 State: PUBLISHED Published: 2024-03-03T12:18:58.199Z Last Updated: 2024-09-20T19:04:34.016Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar Suite Products, Cloud Pak for Security Problem Types: CWE-295 Description: IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances. IBM X-Force ID: 272533. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.c
ID: 272533. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7129328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/272533
CVE ID: CVE-2023-47745 State: PUBLISHED Published: 2024-03-03T11:56:00.503Z Last Updated: 2024-08-02T21:16:43.673Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MQ Operator Problem Types: CWE-319 Description: IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command. IBM X-Force ID: 272638. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7126571 - https://exchange.x
Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7126571 - https://exchange.xforce.ibmcloud.com/vulnerabilities/272638
CVE ID: CVE-2023-47746 State: PUBLISHED Published: 2024-01-22T18:42:37.101Z Last Updated: 2025-02-13T17:18:07.244Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105505 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ent: References: - https://www.ibm.com/support/pages/node/7105505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/272644 - https://security.netapp.com/advisory/ntap-20240307-0003/
CVE ID: CVE-2023-47747 State: PUBLISHED Published: 2024-01-22T19:57:30.941Z Last Updated: 2025-02-13T17:18:08.163Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105502 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ent: References: - https://www.ibm.com/support/pages/node/7105502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/272646 - https://security.netapp.com/advisory/ntap-20240307-0002/
CVE ID: CVE-2023-47754 State: PUBLISHED Published: 2023-12-18T23:49:12.603Z Last Updated: 2024-08-02T21:16:43.657Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Clever plugins Products: Delete Duplicate Posts Problem Types: CWE-862 Description: Missing Authorization vulnerability in Clever plugins Delete Duplicate Posts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Delete Duplicate Posts: from n/a through 4.8.9. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/delete-duplicate-posts/wordpress-delete-duplicate-posts-plugin-4-8-9-broken-access-control-vulnerabi
abase/vulnerability/delete-duplicate-posts/wordpress-delete-duplicate-posts-plugin-4-8-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47755 State: PUBLISHED Published: 2023-11-22T18:07:36.236Z Last Updated: 2024-08-02T21:16:43.594Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: AazzTech Products: WooCommerce Product Carousel Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AazzTech WooCommerce Product Carousel Slider plugin <= 3.3.5 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/product-carousel-slider-for-woocommerce/wordpress-woocommerce-product-carousel-slider-plugin-3-3-5-cross-site-scripting-xss-vulne
arousel-slider-for-woocommerce/wordpress-woocommerce-product-carousel-slider-plugin-3-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47756 State: PUBLISHED Published: 2024-12-09T11:30:52.559Z Last Updated: 2024-12-09T13:49:56.723Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: David Vongries Products: Welcome Email Editor Problem Types: CWE-862 Description: Missing Authorization vulnerability in David Vongries Welcome Email Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcome Email Editor: from n/a through 5.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/welcome-email-editor/vulnerability/wordpress-welcome-email-editor-plugin-5-0-5-broken-access-co
atabase/wordpress/plugin/welcome-email-editor/vulnerability/wordpress-welcome-email-editor-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47757 State: PUBLISHED Published: 2023-11-17T08:52:18.658Z Last Updated: 2024-08-28T14:36:43.297Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: AWeber Products: AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth Problem Types: CWE-862, CWE-352 Description: Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in AWeber AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth allows Accessing Functionality Not Properly Constrained by ACLs, Cross-Site Request Forgery.This issue affects AWeber – Free Sign Up Form and Land
lity Not Properly Constrained by ACLs, Cross-Site Request Forgery.This issue affects AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth: from n/a through 7.3.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/aweber-web-form-widget/wordpress-aweber-plugin-7-3-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47758 State: PUBLISHED Published: 2023-11-22T18:09:51.607Z Last Updated: 2024-08-02T21:16:43.801Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Mondula GmbH Products: Multi Step Form Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form plugin <= 1.7.11 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/multi-step-form/wordpress-multi-step-form-plugin-1-7-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47759 State: PUBLISHED Published: 2023-11-22T19:49:29.305Z Last Updated: 2024-10-01T15:49:13.420Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Premio Products: Chaty Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premio Chaty plugin <= 3.1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/chaty/wordpress-chaty-plugin-3-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47760 State: PUBLISHED Published: 2024-12-09T11:30:51.617Z Last Updated: 2024-12-09T18:46:41.265Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WPDeveloper Products: Essential Blocks for Gutenberg Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/essential-blocks/vulnerability/wordpress-essential-blocks-plugin-4-2-0-
https://patchstack.com/database/wordpress/plugin/essential-blocks/vulnerability/wordpress-essential-blocks-plugin-4-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47761 State: PUBLISHED Published: 2024-12-09T11:30:50.790Z Last Updated: 2024-12-09T18:46:48.838Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WPDeveloper Products: Simple 301 Redirects by BetterLinks Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through 2.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-301-redirects/vulnerability/wordpress-simple-301-
References: - https://patchstack.com/database/wordpress/plugin/simple-301-redirects/vulnerability/wordpress-simple-301-redirects-by-betterlinks-plugin-2-0-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47762 State: PUBLISHED Published: 2024-12-09T11:30:49.970Z Last Updated: 2024-12-09T18:46:55.838Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WPDeveloper Products: BetterDocs Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPDeveloper BetterDocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterDocs: from n/a through 2.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/betterdocs/vulnerability/wordpress-betterdocs-plugin-2-5-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47763 State: PUBLISHED Published: 2024-12-09T11:30:49.126Z Last Updated: 2024-12-09T18:47:07.729Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Martin Gibson Products: WP Custom Admin Interface Problem Types: CWE-862 Description: Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through 7.31. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-custom-admin-interface/vulnerability/wordpress-wp-custom-admin-interface-plugin-
hstack.com/database/wordpress/plugin/wp-custom-admin-interface/vulnerability/wordpress-wp-custom-admin-interface-plugin-7-31-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47764 State: PUBLISHED Published: 2024-12-09T11:30:48.258Z Last Updated: 2024-12-09T18:47:15.328Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Metaphor Creations Products: Ditty Problem Types: CWE-862 Description: Missing Authorization vulnerability in Metaphor Creations Ditty allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ditty: from n/a through 3.1.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ditty-news-ticker/vulnerability/wordpress-ditty-plugin-3-1-24-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47765 State: PUBLISHED Published: 2023-11-22T18:12:35.206Z Last Updated: 2024-08-02T21:16:43.578Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CodeBard Products: CodeBard's Patron Button and Widgets for Patreon Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <= 2.1.9 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/patron-button-and-widgets-by-codebard/wordpress-codebard-s-patron-button-and-widgets-for-patreon-plugin-2-1-9-cross-site-request-forgery-csrf-vulnerabili
bard/wordpress-codebard-s-patron-button-and-widgets-for-patreon-plugin-2-1-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47766 State: PUBLISHED Published: 2023-11-22T21:56:10.974Z Last Updated: 2024-08-02T21:16:43.656Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Timo Reith Products: Post Status Notifier Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timo Reith Post Status Notifier Lite plugin <= 1.11.0 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/post-status-notifier-lite/wordpress-post-status-notifier-lite-plugin-1-11-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47767 State: PUBLISHED Published: 2023-11-22T21:59:57.023Z Last Updated: 2024-08-02T21:16:43.669Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Fla-shop.com Products: Interactive World Map Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fla-shop.Com Interactive World Map plugin <= 3.2.0 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/interactive-world-map/wordpress-interactive-world-map-plugin-3-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve