Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24279 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T15:31:11.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.edoardoottavianelli.it/ - https://www.youtube.com/watch?v=1mSXzzwcGMM - https://www.edoardoottavianelli.it/CVE-2023-24279
CVE ID: CVE-2023-24282 State: PUBLISHED Published: 2023-03-08T00:00:00.000Z Last Updated: 2025-03-05T19:02:07.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://polycom.com - https://www.cryptnetix.com/blog/2023/01/19/Polycom-Trio-Vulnerability-Disclosure.html
CVE ID: CVE-2023-24294 State: PUBLISHED Published: 2023-11-29T00:00:00 Last Updated: 2024-08-02T10:56:02.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification. Additional Analyst Notes: - CVE Program Container: References: - http://zumtobel.com - https://yoroi.company/en/research/cve-advisory-partial-disclosure-zumtobel-multiple-vulnerabilities/
CVE ID: CVE-2023-24295 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:29:32.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0 allows attackers to execute arbitrary code after opening a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sit.fraunhofer.de/CVE-2023-24295/
CVE ID: CVE-2023-24304 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-18T20:21:18.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sit.fraunhofer.de/CVE-2023-24304/
CVE ID: CVE-2023-24308 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T15:34:46.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sit.fraunhofer.de/cve-2023-24308/
CVE ID: CVE-2023-24317 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:26:08.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component edit_organizer.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sourcecodester.com - http://judging.com - https://packetstormsecurity.com/files/170205/Judging-Management-System-1.0-Shell-Upload.html
CVE ID: CVE-2023-24320 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-18T14:58:49.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Axcora POS #0~gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=1FhPL3erWd4 - https://yuyudhn.github.io/CVE-2023-24320/
CVE ID: CVE-2023-24322 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:58:55.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mojoportal.com/ - https://github.com/i7MEDIA/mojoportal/ - https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md
CVE ID: CVE-2023-24323 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:56:10.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoportal v2.7 was discovered to contain an authenticated XML external entity (XXE) injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mojoportal.com/ - https://github.com/i7MEDIA/mojoportal - https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md
CVE ID: CVE-2023-24329 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-11-03T21:47:22.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pointernull.com/security/python-url-parse-problem.html - https://github.com/python/cpython/pull/99421 - https://security.netapp.com/advisory/ntap-20230324-0004/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH
ap-20230324-0004/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/ - https://lists.f
org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/ - https://lists.fedoraproject.org/archives/list/package-announce%
aproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/ - https://github.com/python/cpython/issues/102153 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/ - https://lists.fedoraproject.org/archives/list/package-announc
oraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJH
KNGMOWW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/ - https://www.kb.cert.org/vuls/id/127587 - https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
CVE ID: CVE-2023-24330 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-02T10:56:03.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/caoyebo/CVE/tree/main/dlink%20882%20-%20CVE-2023-24330
CVE ID: CVE-2023-24331 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-29T15:14:09.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/caoyebo/CVE/tree/main/Dlink%20816%20-%20CVE-2023-24331
CVE ID: CVE-2023-24332 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-14T15:11:02.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/PowerSaveSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/caoyebo/CVE/tree/main/Tenda%20AC6%20-%20CVE-2023-24332
CVE ID: CVE-2023-24333 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-28T18:01:07.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/caoyebo/CVE/tree/main/TENDA%20AC21%20-%20CVE-2023-24333
CVE ID: CVE-2023-24334 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-02T10:56:03.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers to run arbitrary commands via schedStartTime parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/caoyebo/CVE/tree/main/TENDA%20AC23%20-%20CVE-2023-24334
CVE ID: CVE-2023-24343 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:19:25.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/01
CVE ID: CVE-2023-24344 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:19:56.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetup. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/01
CVE ID: CVE-2023-24345 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:20:32.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcpplus. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/03
CVE ID: CVE-2023-24346 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:20:58.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at /goform/formEasySetupWizard3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/02
CVE ID: CVE-2023-24347 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:21:25.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/02
CVE ID: CVE-2023-24348 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:21:44.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/02
CVE ID: CVE-2023-24349 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T16:23:06.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/curTime_Vuls/04
CVE ID: CVE-2023-24350 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T16:24:31.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject parameter at /goform/formSetEmail. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/03
CVE ID: CVE-2023-24351 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T16:27:27.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/01
CVE ID: CVE-2023-24352 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T15:21:59.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWPS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/1160300418/Vuls/tree/main/D-Link/DIR-605L/webpage_Vuls/03
CVE ID: CVE-2023-24364 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:25:43.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266
sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739
CVE ID: CVE-2023-24366 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T17:22:30.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mrojz/rconfig-exploit/blob/main/rconfigV6_Local_File_Disclosure.md - https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2023-24366.md
CVE ID: CVE-2023-24367 State: REJECTED Published: N/A Last Updated: 2023-04-07T00:00:00 Description: No description available.
CVE ID: CVE-2023-24368 State: REJECTED Published: N/A Last Updated: 2023-04-25T00:00:00 Description: No description available.
CVE ID: CVE-2023-24369 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T15:54:33.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ujcms/ujcms/issues/3
CVE ID: CVE-2023-24372 State: PUBLISHED Published: 2023-05-09T10:44:05.337Z Last Updated: 2025-01-09T15:23:03.627Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: USB Memory Direct Products: Simple Custom Author Profiles Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in USB Memory Direct Simple Custom Author Profiles plugin <= 1.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simple-custom-author-profiles/wordpress-simple-custom-author-profiles-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-24373 State: PUBLISHED Published: 2024-06-03T21:35:58.308Z Last Updated: 2024-08-02T10:56:03.888Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WpDevArt Products: Booking calendar, Appointment Booking System Problem Types: CWE-472 Description: External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/booking-calendar/wordpre
nrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/booking-calendar/wordpress-booking-calendar-appointment-booking-system-plugin-3-2-3-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2023-24374 State: PUBLISHED Published: 2023-04-06T13:33:07.522Z Last Updated: 2025-02-19T21:34:48.614Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Photon WP Products: Material Design Icons for Page Builders Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/material-design-icons-for-elementor/wordpress-material-design-icons-for-page-builders-plugin-1-4-2-cross-site-scripting-xss-
rial-design-icons-for-elementor/wordpress-material-design-icons-for-page-builders-plugin-1-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-24375 State: PUBLISHED Published: 2024-12-09T11:31:41.294Z Last Updated: 2024-12-09T18:42:09.738Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: miniOrange Products: WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Problem Types: CWE-862 Description: Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.5.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
rd, Google, Twitter, LinkedIn): from n/a through 7.5.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-discord-google-twitter-linkedin-plugin-7-5-14-broken-access-control?_s_id=cve
CVE ID: CVE-2023-24376 State: PUBLISHED Published: 2023-05-08T21:37:11.138Z Last Updated: 2025-02-19T21:31:36.240Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Nico Graff Products: WP Simple Events Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nico Graff WP Simple Events plugin <= 1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-simple-events/wordpress-wp-simple-events-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-24377 State: PUBLISHED Published: 2023-02-14T11:18:14.424Z Last Updated: 2025-01-13T15:56:59.071Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Ecwid Ecommerce Products: Ecwid Ecommerce Shopping Cart Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ecwid-shopping-cart/wordpress-ecwid-ecommerce-shopping-cart-plugin-6-11-3-cross-site-request-forgery-csrf?_s_id=cve