Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/60374 - https://go.dev/cl/506996 - https://groups.google.com/g/golang-announce/c/2q13H6LEEx0 - https://pkg.go.dev/vuln/GO-2023-1878 - https://security.netapp.com/advisory/ntap-20230814-0002/ - https://security.gentoo.org/glsa/202311-09
CVE ID: CVE-2023-29407 State: PUBLISHED Published: 2023-08-02T19:52:53.482Z Last Updated: 2025-02-13T16:49:15.196Z Vendors: golang.org/x/image Products: golang.org/x/image/tiff Problem Types: CWE-834: Excessive Iteration Description: A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/61581 - https://go.dev/cl/514897 - https://pkg.go.dev/vuln/GO-2023-1990 - https://security.netapp.com/advisory/ntap-2023083
81 - https://go.dev/cl/514897 - https://pkg.go.dev/vuln/GO-2023-1990 - https://security.netapp.com/advisory/ntap-20230831-0009/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KO54NBDUJXKAZNGCFOEYL2LKK2RQP6K6/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWH6Q7NVM4MV3GWFEU4PA67AWZHVFJQ2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XZTEP6JYILRBNDTNWTEQ5D4QUUVQBESK/
CVE ID: CVE-2023-29408 State: PUBLISHED Published: 2023-08-02T19:52:48.613Z Last Updated: 2025-02-13T16:49:15.755Z Vendors: golang.org/x/image Products: golang.org/x/image/tiff Problem Types: CWE-770: Allocation of Resources Without Limits or Throttling Description: The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/61582 - https://go.dev/c
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/61582 - https://go.dev/cl/514897 - https://pkg.go.dev/vuln/GO-2023-1989 - https://security.netapp.com/advisory/ntap-20230831-0009/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KO54NBDUJXKAZNGCFOEYL2LKK2RQP6K6/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWH6Q7NVM4MV3GWFEU4PA67AWZHVFJQ2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XZTEP6JYILRBNDTNWTEQ5D4QUUVQBESK/
CVE ID: CVE-2023-29409 State: PUBLISHED Published: 2023-08-02T19:47:23.829Z Last Updated: 2025-02-13T16:49:16.368Z Vendors: Go standard library Products: crypto/tls Problem Types: CWE-400: Uncontrolled Resource Consumption Description: Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger ke
an this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://go.dev/issue/61460 - https://go.dev/cl/515257 - https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ - https://pkg.go.dev/vuln/GO-2023-1987 - https://security.netapp.com/advisory/ntap-20230831-0010/ - https://security.gentoo.org/glsa/202311-09
CVE ID: CVE-2023-29410 State: PUBLISHED Published: 2023-04-18T21:13:55.322Z Last Updated: 2025-02-05T20:58:23.274Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: InsightHome, InsightFacility, Conext Gateway Problem Types: CWE-20 Description: A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-02
ntainer: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-02.pdf
CVE ID: CVE-2023-29411 State: PUBLISHED Published: 2023-04-18T20:49:34.059Z Last Updated: 2025-02-05T21:22:08.895Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022), Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) Problem Types: CWE-306 Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.
edentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf
CVE ID: CVE-2023-29412 State: PUBLISHED Published: 2023-04-18T20:50:08.288Z Last Updated: 2025-02-05T21:00:38.906Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022), Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) Problem Types: CWE-78 Description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface. Additional Analyst No
t could cause remote code execution when manipulating internal methods through Java RMI interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf
CVE ID: CVE-2023-29413 State: PUBLISHED Published: 2023-04-18T20:50:53.336Z Last Updated: 2025-02-05T20:59:20.742Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Schneider Electric Products: APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022), Schneider Electric Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022) Problem Types: CWE-306 Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitor service. Additional Analyst Notes: - CVE Program Container: - CI
by an unauthenticated user on the Schneider UPS Monitor service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-04.pdf
CVE ID: CVE-2023-29414 State: PUBLISHED Published: 2023-07-12T08:18:01.709Z Last Updated: 2024-11-07T14:44:09.486Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: Accutech Manager Problem Types: CWE-120 Description: A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user sends specific string input to a local function call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-192-03&p_enDocType=Security+and+Safety+Notice&p_File_
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-192-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-192-03.pdf
CVE ID: CVE-2023-29415 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-13T21:00:13.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kspalaiologos/bzip3/issues/95 - https://github.com/kspalaiologos/bzip3/compare/1.2.3...1.3.0 - https://security-tracker.debian.org/tracker/CVE-2023-29415 - https://lists.fedoraproject.org/archives/list/pac
..1.3.0 - https://security-tracker.debian.org/tracker/CVE-2023-29415 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/
CVE ID: CVE-2023-29416 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-13T20:58:32.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3_decode_block out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kspalaiologos/bzip3/compare/1.2.3...1.3.0 - https://github.com/kspalaiologos/bzip3/issues/92 - https://github.com/kspalaiologos/bzip3/commit/bfa5bf82b53715dfedf048e5859a46cf248668ff - https://lists.fed
3/issues/92 - https://github.com/kspalaiologos/bzip3/commit/bfa5bf82b53715dfedf048e5859a46cf248668ff - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/
CVE ID: CVE-2023-29417 State: PUBLISHED Published: 2023-04-06T00:00:00 Last Updated: 2024-08-02T14:07:46.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libbzip3.a in bzip3 1.2.2. There is a bz3_decompress out-of-bounds read in certain situations where buffers passed to bzip3 do not contain enough space to be filled with decompressed data. NOTE: the vendor's perspective is that the observed behavior can only occur for a contract violation, and thus the report is invalid. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/kspalaiologos/bzip3/issues/97 - https://lists.fedoraproject.org/archives
ram Container: References: - https://github.com/kspalaiologos/bzip3/issues/97 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/
CVE ID: CVE-2023-29418 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-03-05T19:11:01.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an xwrite out-of-bounds read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kspalaiologos/bzip3/issues/92 - https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3 - https://github.com/kspalaiologos/bzip3/commit/aae16d107f804f69000c09cd92027a140968cc9d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ -
.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/
CVE ID: CVE-2023-29419 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-03-05T19:08:28.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a bz3_decode_block out-of-bounds read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kspalaiologos/bzip3/issues/92 - https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3 - https://github.com/kspalaiologos/bzip3/commit/8ec8ce7d3d58bf42dabc47e4cc53aa27051bd602 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DY
s://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/
CVE ID: CVE-2023-29420 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-03-05T19:00:53.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kspalaiologos/bzip3/issues/92 - https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3 - https://github.com/kspalaiologos/bzip3/commit/bb06deb85f1c249838eb938e0dab271d4194f8fa - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDU
271d4194f8fa - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/
CVE ID: CVE-2023-29421 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-12T16:25:40.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3 - https://github.com/kspalaiologos/bzip3/issues/94 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW/
CVE ID: CVE-2023-29422 State: PUBLISHED Published: 2024-12-09T11:31:10.411Z Last Updated: 2024-12-09T18:45:24.567Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: AlexaCRM Products: Dynamics 365 Integration Problem Types: CWE-862 Description: Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamics 365 Integration: from n/a through 1.3.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/integration-dynamics/vulnerability/wordpress-dynamics-365-integration-plugin-1-3-13-broken-acc
database/wordpress/plugin/integration-dynamics/vulnerability/wordpress-dynamics-365-integration-plugin-1-3-13-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-29423 State: PUBLISHED Published: 2023-06-26T07:13:11.884Z Last Updated: 2024-10-10T17:11:20.528Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PI Websolution Products: Cancel order request / Return order / Repeat Order / Reorder for WooCommerce Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin <= 1.3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cancel-order-request-woocommerce/wordpress-can
Vulnrichment: References: - https://patchstack.com/database/vulnerability/cancel-order-request-woocommerce/wordpress-cancel-order-request-woocommerce-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29424 State: PUBLISHED Published: 2023-06-26T07:17:51.221Z Last Updated: 2024-10-10T17:11:04.754Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Plainware Products: ShiftController Employee Shift Scheduling Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Plainware ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shiftcontroller/wordpress-shiftcontroller-employee-shift-scheduling-plugin-4-9-23-cross-site-scripting-xss-vulnerability?_s_id=
ntroller/wordpress-shiftcontroller-employee-shift-scheduling-plugin-4-9-23-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29425 State: PUBLISHED Published: 2023-11-12T21:16:12.394Z Last Updated: 2024-09-03T13:33:52.752Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: plainware.com Products: ShiftController Employee Shift Scheduling Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/shiftcontroller/wordpress-shiftcontroller-employee-shift-scheduling-plugin-4-9-23-cross-site-request-forgery-csrf-vulnerability?_s_
ller/wordpress-shiftcontroller-employee-shift-scheduling-plugin-4-9-23-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-29426 State: PUBLISHED Published: 2023-11-10T13:54:55.990Z Last Updated: 2024-09-03T17:53:34.684Z Vendors: Robert Schulz (sprd.net AG) Products: Spreadshop Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Robert Schulz (sprd.Net AG) Spreadshop plugin <= 1.6.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/spreadshop/wordpress-spreadshop-plugin-plugin-1-6-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-29427 State: PUBLISHED Published: 2023-06-26T08:32:55.825Z Last Updated: 2024-10-10T17:10:47.584Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: TMS Products: Booking for Appointments and Events Calendar – Amelia Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ameliabooking/wordpress-amelia-plugin-1-0-75-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-29428 State: PUBLISHED Published: 2023-11-10T13:51:01.916Z Last Updated: 2025-02-19T21:18:05.858Z Vendors: SuPlugins Products: Superb Social Media Share Buttons and Follow Buttons for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SuPlugins Superb Social Media Share Buttons and Follow Buttons for WordPress plugin <= 1.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/superb-social-share-and-follow-buttons/wordpress-superb-social-media-share-buttons-and-follow-buttons-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s
press-superb-social-media-share-buttons-and-follow-buttons-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-29429 State: PUBLISHED Published: 2024-12-09T11:31:09.569Z Last Updated: 2024-12-09T18:45:33.080Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WPEverest Products: User Registration Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPEverest User Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 2.3.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-2-3-2-1-broken-access-control-vulnerability?_
/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-2-3-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-29430 State: PUBLISHED Published: 2023-06-26T09:26:50.254Z Last Updated: 2024-08-02T14:48:32.053Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CTHthemes Products: TheRoof Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/theroof/wordpress-theroof-theme-1-0-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve