Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47543 State: PUBLISHED Published: 2024-11-12T18:53:51.096Z Last Updated: 2024-11-13T18:28:05.032Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiPortal Problem Types: CWE-639 Description: An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacker to interact with ressources of other organizations via HTTP or HTTPS requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-448
CVE ID: CVE-2023-47544 State: PUBLISHED Published: 2023-11-14T21:01:23.100Z Last Updated: 2025-01-07T19:04:45.952Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Atarim Products: Visual Website Collaboration, Feedback & Project Management – Atarim Problem Types: CWE-79 Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/atarim-visual-collaboration/wordpress-atarim-plugin-3-11-unauthenticated-cross-site-scri
tack.com/database/vulnerability/atarim-visual-collaboration/wordpress-atarim-plugin-3-11-unauthenticated-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47545 State: PUBLISHED Published: 2023-11-14T20:55:34.768Z Last Updated: 2025-01-07T19:06:02.271Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Fatcat Apps Products: Forms for Mailchimp by Optin Cat – Grow Your MailChimp List Problem Types: CWE-79 Description: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin <= 2.5.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mailchimp-wp/wordpress-forms-for-mailchimp-by-optin-cat-plugin-2-5-4-cross-site-scrip
chstack.com/database/vulnerability/mailchimp-wp/wordpress-forms-for-mailchimp-by-optin-cat-plugin-2-5-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47546 State: PUBLISHED Published: 2023-11-14T20:50:26.596Z Last Updated: 2025-01-07T19:25:24.491Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Walter Pinem Products: OneClick Chat to Order Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Walter Pinem OneClick Chat to Order plugin <= 1.0.4.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/oneclick-whatsapp-order/wordpress-oneclick-chat-to-order-plugin-1-0-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47547 State: PUBLISHED Published: 2023-11-14T20:45:10.146Z Last Updated: 2025-01-07T19:26:19.741Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFactory Products: Products, Order & Customers Export for WooCommerce Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Products, Order & Customers Export for WooCommerce plugin <= 2.0.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/export-woocommerce/wordpress-products-order-customers-export-for-woocommerce-plugin-2-0-7-reflected-cross-site-scr
ility/export-woocommerce/wordpress-products-order-customers-export-for-woocommerce-plugin-2-0-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47548 State: PUBLISHED Published: 2023-12-07T12:15:06.883Z Last Updated: 2024-08-02T21:09:37.384Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: SoftLab Products: Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Ga
es Into Your WordPress Site.This issue affects Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site: from n/a through 1.3.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/integrate-google-drive/wordpress-integrate-google-drive-plugin-1-3-0-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-47549 State: PUBLISHED Published: 2023-11-14T20:39:52.613Z Last Updated: 2025-01-07T19:32:48.403Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: spider-themes Products: EazyDocs – Most Powerful Knowledge base, wiki, Documentation Builder Plugin (easy docs, knowledgebase) Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability on 302 response page in spider-themes EazyDocs plugin <= 2.3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/eazydocs/wordpress-eazydocs-plugin-2-3-3-cross-site-scripting-xss-vulnera
https://patchstack.com/database/vulnerability/eazydocs/wordpress-eazydocs-plugin-2-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47550 State: PUBLISHED Published: 2023-11-14T20:03:38.080Z Last Updated: 2024-08-28T15:09:59.857Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: RedNao Products: Donations Made Easy – Smart Donations Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/smart-donations/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-cross
/patchstack.com/database/vulnerability/smart-donations/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-47551 State: PUBLISHED Published: 2023-11-18T21:50:45.264Z Last Updated: 2024-08-28T14:31:02.634Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: RedNao Products: Donations Made Easy – Smart Donations Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/smart-donations/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-cross-site-request-fo
database/vulnerability/smart-donations/wordpress-donations-made-easy-smart-donations-plugin-4-0-12-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47552 State: PUBLISHED Published: 2023-11-18T21:45:38.151Z Last Updated: 2024-08-02T21:09:37.361Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Labib Ahmed Products: Image Hover Effects – WordPress Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Labib Ahmed Image Hover Effects – WordPress Plugin.This issue affects Image Hover Effects – WordPress Plugin: from n/a through 5.5. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/image-hover-effects/wordpress-image-hover-effects-plugin-5-5-cross-site-request-forgery-csrf-vulnerability?_s_id
ability/image-hover-effects/wordpress-image-hover-effects-plugin-5-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47553 State: PUBLISHED Published: 2023-11-18T21:41:57.713Z Last Updated: 2024-08-28T14:31:32.553Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: User Local Inc Products: UserHeat Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/userheat/wordpress-userheat-plugin-plugin-1-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47554 State: PUBLISHED Published: 2023-11-14T19:59:32.052Z Last Updated: 2025-01-07T19:56:31.155Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: DenK BV Products: Actueel Financieel Nieuws – Denk Internet Solutions Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solutions plugin <= 5.1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/denk-internet-solutions/wordpress-actueel-financieel-nieuws-denk-internet-solutions-plugin-5-1-0-cross-site-sc
erability/denk-internet-solutions/wordpress-actueel-financieel-nieuws-denk-internet-solutions-plugin-5-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47556 State: PUBLISHED Published: 2023-11-18T21:35:29.138Z Last Updated: 2024-08-28T14:32:06.022Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: James Mehorter Products: Device Theme Switcher Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in James Mehorter Device Theme Switcher.This issue affects Device Theme Switcher: from n/a through 3.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/device-theme-switcher/wordpress-plugin-name-device-theme-switcher-plugin-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id
me-switcher/wordpress-plugin-name-device-theme-switcher-plugin-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-47557 State: PUBLISHED Published: 2025-01-02T12:00:35.158Z Last Updated: 2025-01-02T14:52:07.529Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: wp-buy Products: Visitors Traffic Real Time Statistics Problem Types: CWE-862 Description: Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visitors Traffic Real Time Statistics: from n/a through 7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/visitors-traffic-real-time-statistics/vulnerability/wordpress-
ences: - https://patchstack.com/database/wordpress/plugin/visitors-traffic-real-time-statistics/vulnerability/wordpress-visitor-traffic-real-time-statistics-plugin-7-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47558 State: PUBLISHED Published: 2023-12-18T22:53:51.597Z Last Updated: 2024-08-02T21:09:37.469Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Mahlamusa Products: Who Hit The Page – Hit Counter Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit The Page – Hit Counter allows SQL Injection.This issue affects Who Hit The Page – Hit Counter: from n/a through 1.4.14.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/who-hit-the-page-hit-counter/wordpress-who-hit-the-page-hit-counte
nces: - https://patchstack.com/database/vulnerability/who-hit-the-page-hit-counter/wordpress-who-hit-the-page-hit-counter-plugin-1-4-14-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-47559 State: PUBLISHED Published: 2024-01-05T16:18:24.533Z Last Updated: 2025-06-03T14:41:30.597Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QuMagie Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-23
CVE ID: CVE-2023-47560 State: PUBLISHED Published: 2024-01-05T16:18:17.856Z Last Updated: 2025-06-17T20:29:12.638Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QuMagie Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-23
CVE ID: CVE-2023-47561 State: PUBLISHED Published: 2024-02-02T16:05:42.663Z Last Updated: 2024-08-02T21:09:37.392Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: Photo Station Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 ( 2023/12/15 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-ad
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-08
CVE ID: CVE-2023-47562 State: PUBLISHED Published: 2024-02-02T16:05:48.610Z Last Updated: 2025-05-07T20:07:46.277Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: Photo Station Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Photo Station 6.4.2 ( 2023/12/15 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-adviso
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-08
CVE ID: CVE-2023-47563 State: PUBLISHED Published: 2024-09-06T16:26:50.074Z Last Updated: 2024-09-06T17:47:03.791Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: Video Station Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-24
CVE ID: CVE-2023-47564 State: PUBLISHED Published: 2024-02-02T16:05:54.662Z Last Updated: 2024-08-29T19:48:47.318Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-732 Description: An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later Additional Analyst Notes: - CVE Program Co
0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-03
CVE ID: CVE-2023-47565 State: PUBLISHED Published: 2023-12-08T16:06:29.861Z Last Updated: 2025-10-21T23:05:29.811Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: VioStor NVR Problem Types: CWE-78 Description: An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QVR Firmware 5.0.0 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/sec
er Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-48
CVE ID: CVE-2023-47566 State: PUBLISHED Published: 2024-02-02T16:05:59.833Z Last Updated: 2025-06-16T19:36:40.669Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTScloud c5.1.5.2651 and later Additional Ana
5 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-04
CVE ID: CVE-2023-47567 State: PUBLISHED Published: 2024-02-02T16:06:05.095Z Last Updated: 2024-11-07T21:13:10.959Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS h
5 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-05
CVE ID: CVE-2023-47568 State: PUBLISHED Published: 2024-02-02T16:06:10.742Z Last Updated: 2024-08-27T16:38:49.138Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-89 Description: A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.262
16 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-05
CVE ID: CVE-2023-47573 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-11-26T16:22:14.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/
CVE ID: CVE-2023-47574 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:09:37.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. There is a Weak SMB configuration with signing disabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.relyum.com/web/support/vulnerability-report/
CVE ID: CVE-2023-47575 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:09:37.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. The web interfaces of the Relyum devices are susceptible to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.relyum.com/web/support/vulnerability-report/
CVE ID: CVE-2023-47576 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:09:37.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.relyum.com/web/support/vulnerability-report/
CVE ID: CVE-2023-47577 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:09:37.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current password. Additional Analyst Notes: - CVE Program Container: References: - https://www.relyum.com/web/support/vulnerability-report/
CVE ID: CVE-2023-47578 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-10-08T14:33:22.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/
CVE ID: CVE-2023-47579 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-28T14:36:03.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central password hash file of the operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.relyum.com/web/support/vulnerability-report/