Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-28500 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-05-05T16:02:22.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operating system code execution by submitting specially crafted Java serialized objects to a specific URL. Adobe LiveCycle ES4 version 11.0.1 and later may be vulnerable if the application is installed with Java environment 7u21 and earlier. Exploitation of the vulnerability depends on two factors: insecure deserialization methods used in the Adobe LiveCycle application, and the us
lnerability depends on two factors: insecure deserialization methods used in the Adobe LiveCycle application, and the use of Java environments 7u21 and earlier. The code execution is performed in the context of the account that is running the Adobe LiveCycle application. If the account is privileged, exploitation provides privileged access to the operating system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://coastalsecurity.gitbook.io/critical-vulnerability-adobe-livecycle-es4v11.0/
CVE ID: CVE-2023-28501 State: PUBLISHED Published: 2023-03-29T19:54:45.523Z Last Updated: 2025-02-18T17:02:48.052Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-190 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution as the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE ID: CVE-2023-28502 State: PUBLISHED Published: 2023-03-29T20:03:33.713Z Last Updated: 2025-02-18T16:42:42.780Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-120 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/ - http://packetstormsecurity.com/files/17185
2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/ - http://packetstormsecurity.com/files/171853/Rocket-Software-Unidata-8.2.4-Build-3003-Buffer-Overflow.html
CVE ID: CVE-2023-28503 State: PUBLISHED Published: 2023-03-29T20:09:43.764Z Last Updated: 2025-02-18T16:05:42.549Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-798 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass vulnerability, where a special username with a deterministic password can be leveraged to bypass authentication checks and execute OS commands as the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-
: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/ - http://packetstormsecurity.com/files/171854/Rocket-Software-Unidata-udadmin_server-Authentication-Bypass.html
CVE ID: CVE-2023-28504 State: PUBLISHED Published: 2023-03-29T20:11:20.055Z Last Updated: 2025-02-18T15:52:55.918Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-120 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow that can lead to remote code execution as the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE ID: CVE-2023-28505 State: PUBLISHED Published: 2023-03-29T20:12:24.216Z Last Updated: 2025-02-18T15:31:34.282Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-120 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow in an API function, where a string is copied into a caller-provided buffer without checking the length. This requires a valid login to exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-f
t: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE ID: CVE-2023-28506 State: PUBLISHED Published: 2023-03-29T20:13:44.320Z Last Updated: 2025-02-18T15:15:42.182Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-120 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow, where a string is copied into a buffer using a memcpy-like function and a user-provided length. This requires a valid login to exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-ser
chment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE ID: CVE-2023-28507 State: PUBLISHED Published: 2023-03-29T20:15:41.119Z Last Updated: 2025-02-18T15:12:36.391Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-400 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a memory-exhaustion issue, where a decompression routine will allocate increasing amounts of memory until all system memory is exhausted and the forked process crashes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-s
richment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE ID: CVE-2023-28508 State: PUBLISHED Published: 2023-03-29T20:16:46.118Z Last Updated: 2025-02-18T16:56:34.707Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-120 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based overflow vulnerability, where certain input can corrupt the heap and crash the forked process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE ID: CVE-2023-28509 State: PUBLISHED Published: 2023-03-29T20:18:02.170Z Last Updated: 2025-02-18T16:29:00.334Z Vendors: Rocket Software Products: UniData, UniVerse Problem Types: CWE-327 Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 use weak encryption for packet-level security and passwords transferred on the wire. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE ID: CVE-2023-28512 State: PUBLISHED Published: 2024-03-03T15:44:29.358Z Last Updated: 2024-08-02T13:43:22.483Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Watson CP4D Data Stores Problem Types: CWE-472 Description: IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input validation. IBM X-Force ID: 250396. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6965456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/250396
CVE ID: CVE-2023-28513 State: PUBLISHED Published: 2023-07-19T01:49:14.604Z Last Updated: 2024-10-21T15:35:56.231Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ, MQ Appliance Problem Types: CWE-20 Description: IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7007421 - https://www.ibm.com/support/pages/node
ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7007421 - https://www.ibm.com/support/pages/node/7007731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/250397
CVE ID: CVE-2023-28514 State: PUBLISHED Published: 2023-05-19T14:43:45.786Z Last Updated: 2025-02-12T16:45:31.945Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: MQ Problem Types: CWE-209 Description: IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6985835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/250398
CVE ID: CVE-2023-28517 State: PUBLISHED Published: 2024-03-13T09:14:01.863Z Last Updated: 2024-08-02T20:22:53.663Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling Partner Engagement Manager Problem Types: CWE-79 Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 250421. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
BM X-Force ID: 250421. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7138575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/250421
CVE ID: CVE-2023-28520 State: PUBLISHED Published: 2023-05-12T01:11:55.961Z Last Updated: 2025-01-24T16:09:24.425Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Planning Analytics Local Problem Types: CWE-79 Description: IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 250454. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/698
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6986639 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/250454
CVE ID: CVE-2023-28522 State: PUBLISHED Published: 2023-05-12T01:22:58.543Z Last Updated: 2025-01-24T16:11:07.324Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: API Connect Problem Types: 284 Improper Access Control Description: IBM API Connect V10 could allow an authenticated user to perform actions that they should not have access to. IBM X-Force ID: 250585. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6965612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/250585
CVE ID: CVE-2023-28523 State: PUBLISHED Published: 2023-12-09T02:24:19.177Z Last Updated: 2025-05-27T15:11:52.865Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Informix Dynamic Server Problem Types: CWE-122 Description: IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 250753. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7070188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/250753
CVE ID: CVE-2023-28525 State: PUBLISHED Published: 2024-03-01T01:41:48.557Z Last Updated: 2024-08-02T13:43:23.134Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Engineering Requirements Management Problem Types: CWE-79 Description: IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251052. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/sup
51052. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7124058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/251052
CVE ID: CVE-2023-28526 State: PUBLISHED Published: 2023-12-09T02:22:19.624Z Last Updated: 2024-08-02T13:43:22.515Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Informix Dynamic Server Problem Types: CWE-122 Description: IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7070188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/251204
CVE ID: CVE-2023-28527 State: PUBLISHED Published: 2023-12-09T02:15:39.553Z Last Updated: 2024-09-16T18:39:06.527Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Informix Dynamic Server Problem Types: CWE-122 Description: IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7070188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/251206
CVE ID: CVE-2023-28528 State: PUBLISHED Published: 2023-04-28T02:06:06.829Z Last Updated: 2025-11-04T19:15:53.658Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: AIX Problem Types: CWE-78 Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 251207. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6983232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/251207 - http://packetstormsecurity.com/files/172458/IBM-AIX-7.2-inscout-Privi
hange.xforce.ibmcloud.com/vulnerabilities/251207 - http://packetstormsecurity.com/files/172458/IBM-AIX-7.2-inscout-Privilege-Escalation.html
CVE ID: CVE-2023-28529 State: PUBLISHED Published: 2023-05-19T15:44:16.928Z Last Updated: 2025-01-21T19:33:13.824Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251213. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pag
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6988675 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/251213
CVE ID: CVE-2023-28530 State: PUBLISHED Published: 2023-07-22T01:47:06.552Z Last Updated: 2025-02-13T16:48:45.655Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-79 Description: IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG Files in Custom Visualizations. A remote attacker could exploit this vulnerability to execute scripts in a victim's Web browser within the security context of the hosting Web site. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 251214. Additional
use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 251214. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7012621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/251214 - https://security.netapp.com/advisory/ntap-20230814-0005/
CVE ID: CVE-2023-28531 State: PUBLISHED Published: 2023-03-17T00:00:00.000Z Last Updated: 2025-11-04T18:14:27.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2023/03/15/8 - https://security.netapp.com/advisory/ntap-20230413-0008/ - https://security.gentoo.org/glsa/202307-01 - https://www.debian.org/security/2023/dsa-5586 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
security/2023/dsa-5586 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT/
CVE ID: CVE-2023-28532 State: PUBLISHED Published: 2024-12-09T11:31:17.001Z Last Updated: 2024-12-09T18:44:44.620Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wpdirectorykit.com Products: Real Estate Directory Problem Types: CWE-862 Description: Missing Authorization vulnerability in wpdirectorykit.com Real Estate Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Directory: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/real-estate-directory/vulnerability/wordpress-real-estate-directory-theme-1-0-5-authe
stack.com/database/wordpress/theme/real-estate-directory/vulnerability/wordpress-real-estate-directory-theme-1-0-5-authenticated-arbitrary-plugin-activation?_s_id=cve
CVE ID: CVE-2023-28533 State: PUBLISHED Published: 2023-08-17T08:04:50.410Z Last Updated: 2024-09-25T16:43:30.587Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: M Williams Products: Cab Grid Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in M Williams Cab Grid plugin <= 1.5.15 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cab-grid/wordpress-cab-grid-plugin-1-5-15-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-28534 State: PUBLISHED Published: 2023-06-22T08:28:56.333Z Last Updated: 2025-02-19T21:29:10.707Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Job Portal Products: WP Job Portal – A Complete Job Board Problem Types: CWE-79 Description: Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in WP Job Portal WP Job Portal – A Complete Job Board plugin <= 2.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-job-portal/wordpress-wp-job-portal-a-complete-job-board-plugin-1-1-9-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-28535 State: PUBLISHED Published: 2023-08-14T14:35:29.646Z Last Updated: 2024-09-25T16:46:51.417Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Paytm Products: Paytm Payment Donation Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <= 2.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/paytm-donation/wordpress-paytm-payment-donation-plugin-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-28536 State: PUBLISHED Published: 2024-12-09T11:31:16.170Z Last Updated: 2024-12-09T18:44:51.018Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Acato Products: Branded Social Images Problem Types: CWE-862 Description: Missing Authorization vulnerability in Acato Branded Social Images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Branded Social Images: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/branded-social-images/vulnerability/wordpress-branded-social-images-plugin-1-1-0-broken-access-control-vulnera
ss/plugin/branded-social-images/vulnerability/wordpress-branded-social-images-plugin-1-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-28537 State: PUBLISHED Published: 2023-08-08T09:15:01.370Z Last Updated: 2024-08-02T13:43:22.614Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption while allocating memory in COmxApeDec module in Audio. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE ID: CVE-2023-28538 State: PUBLISHED Published: 2023-09-05T06:24:05.510Z Last Updated: 2025-02-27T21:02:40.815Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-121 Description: Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/september-2023-bulletin