Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1626 State: PUBLISHED Published: 2023-03-25T10:31:03.515Z Last Updated: 2024-08-02T05:57:24.788Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Jianming Products: Antivirus Problem Types: CWE-119 Description: A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224008. Additional Analyst Notes: - CVE Program C
he public and may be used. The identifier of this vulnerability is VDB-224008. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224008 - https://vuldb.com/?ctiid.224008 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned31 - https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/view
CVE ID: CVE-2023-1627 State: PUBLISHED Published: 2023-03-25T10:31:04.462Z Last Updated: 2024-08-02T05:57:24.855Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Jianming Products: Antivirus Problem Types: CWE-404 Description: A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier VDB-224009 was assigned to this vulnerability. Additiona
as been disclosed to the public and may be used. The identifier VDB-224009 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224009 - https://vuldb.com/?ctiid.224009 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned29 - https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view
CVE ID: CVE-2023-1628 State: PUBLISHED Published: 2023-03-25T11:00:04.340Z Last Updated: 2025-02-19T20:29:17.536Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Jianming Products: Antivirus Problem Types: CWE-476 Description: A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability. Additional Analyst Notes: - C
o the public and may be used. VDB-224010 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224010 - https://vuldb.com/?ctiid.224010 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30 - https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view
CVE ID: CVE-2023-1629 State: PUBLISHED Published: 2023-03-25T11:00:05.644Z Last Updated: 2024-08-02T05:57:25.061Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: JiangMin Products: Antivirus Problem Types: CWE-119 Description: A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224011. Additional Analyst Notes: - C
the public and may be used. The associated identifier of this vulnerability is VDB-224011. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224011 - https://vuldb.com/?ctiid.224011 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1629 - https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/view
CVE ID: CVE-2023-1630 State: PUBLISHED Published: 2023-03-25T11:31:03.145Z Last Updated: 2024-08-02T05:57:24.712Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: JiangMin Products: Antivirus Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012. Additional Analyst
has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224012 - https://vuldb.com/?ctiid.224012 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1630 - https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view
CVE ID: CVE-2023-1631 State: PUBLISHED Published: 2023-03-25T12:00:04.318Z Last Updated: 2024-11-22T16:50:43.535Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: JiangMin Products: Antivirus Problem Types: CWE-476 Description: A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224013 was assigned to this vulnerability. Additional Analyst Notes: - CVE P
public and may be used. The identifier VDB-224013 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224013 - https://vuldb.com/?ctiid.224013 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1631 - https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view
CVE ID: CVE-2023-1632 State: REJECTED Published: 2023-03-25T16:31:03.330Z Last Updated: 2023-10-09T07:19:22.430Z Description: No description available.
CVE ID: CVE-2023-1633 State: PUBLISHED Published: 2023-09-24T00:09:50.215Z Last Updated: 2024-09-24T15:00:33.599Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: n/a, Red Hat, RDO Products: openstack-barbican, Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.0, OpenStack RDO Problem Types: CWE-200 Description: A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
cess to sensitive credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-1633 - https://bugzilla.redhat.com/show_bug.cgi?id=2181761
CVE ID: CVE-2023-1634 State: PUBLISHED Published: 2023-03-25T18:31:03.362Z Last Updated: 2024-08-02T05:57:24.427Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: OTCMS Problem Types: CWE-918 Description: A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224016. Additional Analyst Notes: - CVE Program Container: References: - https:
identifier of this vulnerability is VDB-224016. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224016 - https://vuldb.com/?ctiid.224016 - https://github.com/BigTiger2020/2023-1/blob/main/ssrf/ssrf.md
CVE ID: CVE-2023-1635 State: PUBLISHED Published: 2023-03-25T19:00:05.453Z Last Updated: 2025-02-14T16:09:51.822Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: OTCMS Problem Types: CWE-79 Description: A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the file apiRun.php. The manipulation of the argument mode leads to cross site scripting. The attack can be launched remotely. The identifier VDB-224017 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224017 - https://vuldb.com/?ctiid.2
CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224017 - https://vuldb.com/?ctiid.224017 - https://github.com/BigTiger2020/2023/blob/main/XSS.md
CVE ID: CVE-2023-1636 State: PUBLISHED Published: 2023-09-24T00:09:03.770Z Last Updated: 2024-09-24T15:00:07.823Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: n/a, Red Hat, RDO Products: openstack-barbican, Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.0, OpenStack RDO Problem Types: CWE-653 Description: A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack servic
tion. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-1636 - https://bugzilla.redhat.com/show_bug.cgi?id=2181765
CVE ID: CVE-2023-1637 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T21:06:46.291Z Vendors: n/a Products: Kernel Problem Types: CWE-226 Description: A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/gi
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e2a1256b17b16f9b9adf1b6fea56819e7b68e463 - https://sourceware.org/bugzilla/show_bug.cgi?id=27398
CVE ID: CVE-2023-1638 State: PUBLISHED Published: 2023-03-26T20:31:03.608Z Last Updated: 2025-02-19T20:15:00.560Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IObit Products: Malware Fighter Problem Types: CWE-404 Description: A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue is the function 0x8001E024/0x8001E040 in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-224018 is the identifier assigned to this vulnerability. Additi
it has been disclosed to the public and may be used. VDB-224018 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224018 - https://vuldb.com/?ctiid.224018 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1638 - https://drive.google.com/file/d/1_jYlCkQMNaUwGV5QJtyz4zhdTqaGCv6Z/view
CVE ID: CVE-2023-1639 State: PUBLISHED Published: 2023-03-26T20:31:04.595Z Last Updated: 2025-02-19T20:23:55.000Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IObit Products: Malware Fighter Problem Types: CWE-404 Description: A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224019. Additional A
een disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224019. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224019 - https://vuldb.com/?ctiid.224019 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1639 - https://drive.google.com/file/d/1hWgHhboaekq4hGIj2kNgEI54rM-u_rvV/view
CVE ID: CVE-2023-1640 State: PUBLISHED Published: 2023-03-26T21:00:04.960Z Last Updated: 2024-08-02T05:57:24.485Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IObit Products: Malware Fighter Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224020. Additional Analyst Notes: -
isclosed to the public and may be used. The identifier of this vulnerability is VDB-224020. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224020 - https://vuldb.com/?ctiid.224020 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1640 - https://drive.google.com/file/d/1AcwSxTA0_zh7mmxU5J8WphRqg_mQsO-g/view
CVE ID: CVE-2023-1641 State: PUBLISHED Published: 2023-03-26T21:00:06.025Z Last Updated: 2024-08-02T05:57:24.689Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IObit Products: Malware Fighter Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affects the function 0x222018 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224021 was assigned to this vulnerability. Additional A
been disclosed to the public and may be used. The identifier VDB-224021 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224021 - https://vuldb.com/?ctiid.224021 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1641 - https://drive.google.com/file/d/1ncqfaxSdeu-mGVAOnYxqxYtyyFZClHBF/view
CVE ID: CVE-2023-1642 State: PUBLISHED Published: 2023-03-26T21:31:03.521Z Last Updated: 2024-08-02T05:57:24.556Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IObit Products: Malware Fighter Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the function 0x222034/0x222038/0x22203C/0x222040 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-224022 is the identifier assigned to this vul
attack. The exploit has been disclosed to the public and may be used. VDB-224022 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224022 - https://vuldb.com/?ctiid.224022 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1642 - https://drive.google.com/file/d/1iWdqJ9PsBp1W5xINpUdQ28xbx_tB9xxf/view
CVE ID: CVE-2023-1643 State: PUBLISHED Published: 2023-03-26T21:31:04.496Z Last Updated: 2024-08-02T05:57:24.678Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IObit Products: Malware Fighter Problem Types: CWE-404 Description: A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulnerability is the function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated id
ice. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224023. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224023 - https://vuldb.com/?ctiid.224023 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1643 - https://drive.google.com/file/d/1dHdltwenfMdwAPeb3JPex0fHxfK_iLYh/view
CVE ID: CVE-2023-1644 State: PUBLISHED Published: 2023-03-26T22:00:04.658Z Last Updated: 2024-11-22T20:57:51.357Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IObit Products: Malware Fighter Problem Types: CWE-404 Description: A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is the function 0x8018E010 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224024. Additional A
ploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224024. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224024 - https://vuldb.com/?ctiid.224024 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1644 - https://drive.google.com/file/d/1TVezyDiS9Kyw7ttNlLBCstpEUqxozha0/view
CVE ID: CVE-2023-1645 State: PUBLISHED Published: 2023-03-26T22:00:05.829Z Last Updated: 2025-02-13T21:01:55.475Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IObit Products: Malware Fighter Problem Types: CWE-404 Description: A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224025 was assigned to this vulnerability. Additional Analyst
isclosed to the public and may be used. The identifier VDB-224025 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224025 - https://vuldb.com/?ctiid.224025 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1645 - https://drive.google.com/file/d/1RmFSm1sQWwQXPXjkeZtgf8q51hGD8tTf/view
CVE ID: CVE-2023-1646 State: PUBLISHED Published: 2023-03-26T22:31:03.470Z Last Updated: 2024-08-02T05:57:24.210Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IObit Products: Malware Fighter Problem Types: CWE-121 Description: A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224026 is the identifier assigned to this vulnera
lly. The exploit has been disclosed to the public and may be used. VDB-224026 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224026 - https://vuldb.com/?ctiid.224026 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646 - https://drive.google.com/file/d/1GITWzh29cRcycVqVJgMJuX6emE_f1KPV/view
CVE ID: CVE-2023-1647 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:32:10.521Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: calcom Products: calcom/cal.com Problem Types: CWE-284 Description: Improper Access Control in GitHub repository calcom/cal.com prior to 2.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d6de3d6e-9551-47d1-b28c-7e965c1b82b6 - https://github.com/sbs20/scanservjs/pull/606/commits/d51fd52c1569813990b8f74e64ae6979c665dca1
CVE ID: CVE-2023-1648 State: REJECTED Published: N/A Last Updated: 2023-04-05T00:00:00 Description: No description available.
CVE ID: CVE-2023-1649 State: PUBLISHED Published: 2023-05-08T13:58:15.256Z Last Updated: 2025-02-04T20:23:37.241Z Vendors: Unknown Products: AI ChatBot Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ea806115-14ab-4bc4-a272-2141cb14454a
CVE ID: CVE-2023-1650 State: PUBLISHED Published: 2023-05-08T13:58:12.709Z Last Updated: 2025-02-04T20:19:33.256Z Vendors: Unknown Products: AI ChatBot Problem Types: CWE-502 Deserialization of Untrusted Data Description: The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP Object Injection when a suitable gadget is present on the blog Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7d7fe498-0aa3-4fa7-b560-610b42b2abed
CVE ID: CVE-2023-1651 State: PUBLISHED Published: 2023-05-08T13:58:09.550Z Last Updated: 2025-05-05T16:06:41.487Z Vendors: Unknown Products: AI ChatBot Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users, such as subscriber to update them. Furthermore, due to the lack of escaping of the settings, this could also lead to Stored XSS Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c88b22ba-4fc2-
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c88b22ba-4fc2-49ad-a457-224157521bad