Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-50327 State: PUBLISHED Published: 2024-02-02T01:00:10.988Z Last Updated: 2024-08-02T22:16:46.253Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: PowerSC Problem Types: CWE-650 Description: IBM PowerSC 1.3, 2.0, and 2.1 uses insecure HTTP methods which could allow a remote attacker to perform unauthorized file request modification. IBM X-Force ID: 275109. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7113759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/275109
CVE ID: CVE-2023-50328 State: PUBLISHED Published: 2024-02-02T01:16:00.900Z Last Updated: 2024-08-02T22:16:46.323Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: PowerSC Problem Types: CWE-598 Description: IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM X-Force ID: 275110. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7113759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/275110
CVE ID: CVE-2023-50329 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:19:06.427Z Description: No description available.
CVE ID: CVE-2023-50330 State: PUBLISHED Published: 2024-07-08T15:22:22.982Z Last Updated: 2025-11-04T17:13:30.081Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: LevelOne, Realtek Products: WBR-6013, rtl819x Jungle SDK Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the boa getInfo functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can send a series of HTTP requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerabilit
nalyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1903
CVE ID: CVE-2023-50332 State: PUBLISHED Published: 2023-12-26T07:21:24.393Z Last Updated: 2024-08-02T22:16:46.265Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Improper authorization Description: Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is exploited, a user may delete or suspend its own account without the user's intention. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/ - https://jvn.jp/en/jp/JVN18715935/
CVE ID: CVE-2023-50333 State: PUBLISHED Published: 2024-01-02T09:53:01.990Z Last Updated: 2025-06-17T13:35:30.706Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-50335 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:19:22.581Z Description: No description available.
CVE ID: CVE-2023-50336 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:19:23.210Z Description: No description available.
CVE ID: CVE-2023-50337 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:19:23.783Z Description: No description available.
CVE ID: CVE-2023-50338 State: REJECTED Published: N/A Last Updated: 2025-05-28T21:32:35.236Z Description: No description available.
CVE ID: CVE-2023-50339 State: PUBLISHED Published: 2023-12-26T07:20:31.556Z Last Updated: 2024-09-09T18:00:25.425Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting (XSS) Description: Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.1.11. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/ - https://jvn.jp/en/jp/JVN18715935/
CVE ID: CVE-2023-50341 State: PUBLISHED Published: 2024-01-03T02:42:20.178Z Last Updated: 2025-06-18T15:30:37.179Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability. Discovery of outdated and accessible web pages, reflects a "Missing Access Control" vulnerability, which could lead to inadvertent exposure of sensitive information and/or exposing a vulnerable endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_arti
E Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50342 State: PUBLISHED Published: 2024-01-03T02:39:45.432Z Last Updated: 2025-06-03T18:56:50.702Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability. A user can obtain certain details about another user as a result of improper access control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50343 State: PUBLISHED Published: 2024-01-03T02:37:22.668Z Last Updated: 2025-06-18T15:31:13.364Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50344 State: PUBLISHED Published: 2024-01-03T02:25:23.360Z Last Updated: 2025-06-18T15:31:39.929Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. An unauthenticated user can download certain files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50345 State: PUBLISHED Published: 2024-01-03T02:01:57.575Z Last Updated: 2025-06-03T14:44:29.399Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50346 State: PUBLISHED Published: 2024-01-03T01:59:00.314Z Last Updated: 2025-06-18T15:32:15.637Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50347 State: PUBLISHED Published: 2024-04-10T01:17:11.128Z Last Updated: 2024-10-28T19:01:15.218Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries. A malicious user can run arbitrary SQL commands including changing system configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112318
CVE ID: CVE-2023-50348 State: PUBLISHED Published: 2024-01-03T01:52:28.258Z Last Updated: 2025-06-18T15:32:54.854Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50349 State: PUBLISHED Published: 2024-02-09T20:15:03.715Z Last Updated: 2025-06-17T20:06:40.334Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: HCL Software Products: HCL Sametime Description: Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an attacker to perform malicious actions on the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109082
CVE ID: CVE-2023-50350 State: PUBLISHED Published: 2024-01-03T01:50:00.848Z Last Updated: 2025-06-18T15:33:25.930Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50351 State: PUBLISHED Published: 2024-01-03T01:45:45.358Z Last Updated: 2025-06-18T15:34:30.921Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: HCL Software Products: DRYiCE MyXalytics Description: HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
CVE ID: CVE-2023-50355 State: PUBLISHED Published: 2024-10-23T22:17:52.737Z Last Updated: 2024-10-24T14:14:50.538Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: HCL Software Products: Sametime Problem Types: CWE-209 Description: HCL Sametime is impacted by the error messages containing sensitive information. An attacker can use this information to launch another, more focused attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0115627
CVE ID: CVE-2023-50356 State: PUBLISHED Published: 2024-01-31T10:15:36.765Z Last Updated: 2025-06-17T21:29:19.399Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: AREAL SAS Products: Topkapi Vision (Server) Problem Types: CWE-295 Description: SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server). This allows a remote unauthenticated attacker to gather sensitive information and prevent valid users from login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.areal-topkapi.com/en/services/security-bulletins
CVE ID: CVE-2023-50357 State: PUBLISHED Published: 2024-01-31T10:16:05.385Z Last Updated: 2024-08-23T18:19:01.072Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: AREAL SAS Products: Webserv1 Problem Types: CWE-79 Description: A cross site scripting vulnerability in the AREAL SAS Websrv1 ASP website allows a remote low-privileged attacker to gain escalated privileges of other non-admin users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.areal-topkapi.com/en/services/security-bulletins
CVE ID: CVE-2023-50358 State: PUBLISHED Published: 2024-02-13T02:45:22.351Z Last Updated: 2025-05-09T18:16:31.828Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QTS 4.3.6.2665 build 20240131 and later QTS 4.3.4.2675 build 20240131 and la
ter QTS 4.5.4.2627 build 20231225 and later QTS 4.3.6.2665 build 20240131 and later QTS 4.3.4.2675 build 20240131 and later QTS 4.3.3.2644 build 20240131 and later QTS 4.2.6 build 20240131 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-57 - https://unit42.paloaltonetworks.com/qnap-qts-firmware-cve-2023-50358/ - https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2024/2024-213941-1032
CVE ID: CVE-2023-50359 State: PUBLISHED Published: 2024-02-02T16:06:16.972Z Last Updated: 2024-08-02T22:16:46.521Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-252 Description: An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.264
already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-07
CVE ID: CVE-2023-50360 State: PUBLISHED Published: 2024-09-06T16:26:55.405Z Last Updated: 2024-09-06T17:46:27.496Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: Video Station Problem Types: CWE-89 Description: A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.1 ( 2024/02/26 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-24
CVE ID: CVE-2023-50361 State: PUBLISHED Published: 2024-04-26T15:01:23.907Z Last Updated: 2024-08-02T22:16:46.330Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP Vuln
6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-20
CVE ID: CVE-2023-50362 State: PUBLISHED Published: 2024-04-26T15:01:20.310Z Last Updated: 2024-08-02T22:16:46.740Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP Vuln
CVE ID: CVE-2023-50363 State: PUBLISHED Published: 2024-04-26T15:01:16.523Z Last Updated: 2024-08-02T22:16:46.611Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-863, CWE-285 Description: An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP
5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-20
CVE ID: CVE-2023-50364 State: PUBLISHED Published: 2024-04-26T15:01:12.216Z Last Updated: 2024-08-02T22:16:46.326Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120, CWE-122 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP Vu
1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-20
CVE ID: CVE-2023-50366 State: PUBLISHED Published: 2024-09-06T16:25:57.242Z Last Updated: 2024-09-06T17:40:59.844Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP Vulnrichme
build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-20
CVE ID: CVE-2023-50368 State: PUBLISHED Published: 2023-12-14T13:56:07.422Z Last Updated: 2024-08-02T22:16:46.542Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Averta Products: Shortcodes and extra features for Phlox theme Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Shortcodes and extra features for Phlox theme allows Stored XSS.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/auxin-elements/wordpress-short
tes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/auxin-elements/wordpress-shortcodes-and-extra-features-for-phlox-theme-plugin-2-15-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50369 State: PUBLISHED Published: 2023-12-14T13:50:39.339Z Last Updated: 2024-08-02T22:16:46.685Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Alma Products: Alma – Pay in installments or later for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alma Alma – Pay in installments or later for WooCommerce allows Stored XSS.This issue affects Alma – Pay in installments or later for WooCommerce: from n/a through 5.1.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/alma-gateway-for-
al Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/alma-gateway-for-woocommerce/wordpress-alma-plugin-5-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50370 State: PUBLISHED Published: 2023-12-14T13:42:59.541Z Last Updated: 2024-08-02T22:16:46.889Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Livemesh Products: WPBakery Page Builder Addons by Livemesh Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh WPBakery Page Builder Addons by Livemesh allows Stored XSS.This issue affects WPBakery Page Builder Addons by Livemesh: from n/a through 3.5. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/addons-for-visual-composer/wordpress-livemes
gram Container: References: - https://patchstack.com/database/vulnerability/addons-for-visual-composer/wordpress-livemesh-addons-for-wpbakery-page-builder-plugin-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50371 State: PUBLISHED Published: 2023-12-14T12:57:08.454Z Last Updated: 2024-08-02T22:16:46.676Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Page Visit Counter Products: Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress allows Stored XSS.This issue affects Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress: from n/a through 8.0.6. Additional Analyst Notes: - CVE Progr
isit Counter – Most Wanted Analytics Plugin for WordPress: from n/a through 8.0.6. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/advanced-page-visit-counter/wordpress-advanced-page-visit-counter-plugin-8-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve