Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41597 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:57:02.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?active_t. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emlog/emlog/issues/238
CVE ID: CVE-2023-41599 State: PUBLISHED Published: 2023-09-19T00:00:00 Last Updated: 2024-09-25T15:33:56.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.so1lupus.ltd/2023/08/28/Directory-traversal-in-JFinalCMS/
CVE ID: CVE-2023-41601 State: PUBLISHED Published: 2023-09-06T00:00:00 Last Updated: 2024-09-26T20:48:10.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cszcms.com/ - https://github.com/al3zx/csz_cms_1_3_0_xss_in_install_page/blob/main/README.md
CVE ID: CVE-2023-41603 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-17T16:08:04.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10347
CVE ID: CVE-2023-41605 State: REJECTED Published: N/A Last Updated: 2023-10-30T13:33:11.439882 Description: No description available.
CVE ID: CVE-2023-41609 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T17:37:33.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CouchCMS/CouchCMS/issues/190
CVE ID: CVE-2023-41610 State: PUBLISHED Published: 2024-09-18T00:00:00 Last Updated: 2024-09-18T19:09:32.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.trevorkems.com/operation-big-brother-iot-camera/
CVE ID: CVE-2023-41611 State: PUBLISHED Published: 2024-09-18T00:00:00 Last Updated: 2024-11-21T16:56:27.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.trevorkems.com/operation-big-brother-iot-camera/
CVE ID: CVE-2023-41612 State: PUBLISHED Published: 2024-09-18T00:00:00 Last Updated: 2024-09-20T14:03:45.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.trevorkems.com/operation-big-brother-iot-camera/
CVE ID: CVE-2023-41613 State: PUBLISHED Published: 2023-12-04T00:00:00 Last Updated: 2024-08-28T19:57:30.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: EzViz Studio v2.2.0 is vulnerable to DLL hijacking. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/175684/EzViz-Studio-2.2.0-DLL-Hijacking.html
CVE ID: CVE-2023-41614 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-08-02T19:01:35.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of Animal parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40guravtushar231/stored-xss-in-admin-panel-a38d1feb9ec4
CVE ID: CVE-2023-41615 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-08-02T19:01:35.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields. Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/web-security/sql-injection - https://phpgurukul.com/student-management-system-using-php-and-mysql/ - https://medium.com/%40guravtushar231/sql-injection-in-login-field-a9073780f7e8
CVE ID: CVE-2023-41616 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T16:48:27.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40guravtushar231/reflected-xss-in-admin-panel-7a459dcb9476
CVE ID: CVE-2023-41618 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-11-26T15:16:13.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin/article.php?active_savedraft. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41618
CVE ID: CVE-2023-41619 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-17T16:05:51.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emlog Pro v2.1.14 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/article.php?action=write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emlog/emlog - https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41619
CVE ID: CVE-2023-41621 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-11-26T15:22:06.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41621
CVE ID: CVE-2023-41623 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T19:01:35.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41623
CVE ID: CVE-2023-41626 State: PUBLISHED Published: 2023-09-15T00:00:00 Last Updated: 2024-09-25T15:30:12.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/impose1/590472eb0544ef1ec36c8a5a40122adb
CVE ID: CVE-2023-41627 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-08-02T19:01:35.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device. Additional Analyst Notes: - CVE Program Container: References: - https://jira.o-ran-sc.org/browse/RIC-1001 - https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html
CVE ID: CVE-2023-41628 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-09-30T20:25:37.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Term components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jira.o-ran-sc.org/browse/RIC-1002
CVE ID: CVE-2023-41629 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-16T15:09:47.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2023-41629-eSST-Path-Traversal.pdf
CVE ID: CVE-2023-41630 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-16T18:02:27.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the Gii code generator component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2023-41630-eSST-Preauth-RCE.pdf
CVE ID: CVE-2023-41631 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-16T18:00:52.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the file upload function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2023-41631-eSST-RCE.pdf
CVE ID: CVE-2023-41633 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T13:15:18.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rycbar77.github.io/2023/08/29/catdoc-0-95-nullptr-dereference/ - https://gist.github.com/rycbar77/3da455382f88cfb6d6798572f34378bd
CVE ID: CVE-2023-41635 State: PUBLISHED Published: 2023-08-31T00:00:00 Last Updated: 2024-10-01T18:09:00.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via supplying a crafted XML file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-ID%20%7C%20RealGimm%20-%20XML%20External%20Entity%20Injection.md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/
Entity%20Injection.md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41635%20%7C%20RealGimm%20-%20XML%20External%20Entity%20Injection.md
CVE ID: CVE-2023-41636 State: PUBLISHED Published: 2023-08-31T00:00:00 Last Updated: 2024-10-01T18:08:27.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-ID%20%7C%20RealGimm%20-%20SQL%20Injection%281%29.md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41
- https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41636%20%7C%20RealGimm%20-%20SQL%20Injection%281%29.md
CVE ID: CVE-2023-41637 State: PUBLISHED Published: 2023-08-31T00:00:00 Last Updated: 2024-10-01T17:05:31.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-ID%20%7C%20RealGimm%20-%20Stored%20Cross-site%20Scripting.md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41637%2
tps://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41637%20%7C%20RealGimm%20-%20Stored%20Cross-site%20Scripting.md
CVE ID: CVE-2023-41638 State: PUBLISHED Published: 2023-08-31T00:00:00 Last Updated: 2024-10-01T17:04:58.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-ID%20%7C%20RealGimm%20-%20RCE%20via%20Unrestricted%20File%20Upload.md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-
md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41638%20%7C%20RealGimm%20-%20RCE%20via%20Unrestricted%20File%20Upload.md
CVE ID: CVE-2023-41640 State: PUBLISHED Published: 2023-08-31T00:00:00 Last Updated: 2024-10-01T17:04:27.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-ID%20%7C%20RealGimm%20-%20Information%20disclosure.md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023
.md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41640%20%7C%20RealGimm%20-%20Information%20disclosure.md
CVE ID: CVE-2023-41642 State: PUBLISHED Published: 2023-08-31T00:00:00 Last Updated: 2024-10-01T18:07:34.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-ID%20%7C%20RealGimm%20%20-%20Reflected%20Cross-site%20Scripting.md - https://githu
am/Disclosure/blob/main/CVE%20PoC/CVE-ID%20%7C%20RealGimm%20%20-%20Reflected%20Cross-site%20Scripting.md - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/f7aafa9fcd4efa30071c7f77d3e9e6b14e92302b/CVE%20PoC/CVE-2023-41642%20%7C%20RealGimm%20%20-%20Reflected%20Cross-site%20Scripting.md
CVE ID: CVE-2023-41646 State: PUBLISHED Published: 2023-09-07T00:00:00 Last Updated: 2024-09-26T19:51:19.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://buttercup.pw/ - https://github.com/tristao-marinho/CVE-2023-41646/
CVE ID: CVE-2023-41648 State: PUBLISHED Published: 2023-12-19T19:51:40.648Z Last Updated: 2024-09-16T18:29:22.332Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Swapnil V. Patil Products: Login and Logout Redirect Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Swapnil V. Patil Login and Logout Redirect.This issue affects Login and Logout Redirect: from n/a through 2.0.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/login-and-logout-redirect/wordpress-login-and-logout-redirect-plugin-2-0-2-open-redirection-vuln
/database/vulnerability/login-and-logout-redirect/wordpress-login-and-logout-redirect-plugin-2-0-2-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-41649 State: PUBLISHED Published: 2024-12-13T14:24:10.970Z Last Updated: 2024-12-13T18:17:52.519Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Ovic Team Products: Ovic Product Bundle Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ovic Team Ovic Product Bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovic Product Bundle: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ovic-product-bundle/vulnerability/wordpress-ovic-product-bundle-plugin-1-1-2-broken-access-control-vulnerabi
ress/plugin/ovic-product-bundle/vulnerability/wordpress-ovic-product-bundle-plugin-1-1-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41650 State: PUBLISHED Published: 2023-10-06T14:33:20.379Z Last Updated: 2024-09-19T14:46:28.619Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Venugopal Products: Remove/hide Author, Date, Category Like Entry-Meta Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Venugopal Remove/hide Author, Date, Category Like Entry-Meta plugin <= 2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/removehide-author-date-category-like-entry-meta/wordpress-remove-hide-author-date-category-like-entry-meta-plugin-2-1-cross-
vehide-author-date-category-like-entry-meta/wordpress-remove-hide-author-date-category-like-entry-meta-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41651 State: PUBLISHED Published: 2024-05-08T08:56:58.103Z Last Updated: 2024-08-02T19:01:35.462Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Multi-column Tag Map Products: Multi-column Tag Map Problem Types: CWE-862 Description: Missing Authorization vulnerability in Multi-column Tag Map.This issue affects Multi-column Tag Map: from n/a through 17.0.26. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/multi-column-tag-map/wordpress-multi-column-tag-map-plugin-17-0-26-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41652 State: PUBLISHED Published: 2023-11-03T11:06:26.432Z Last Updated: 2024-09-05T15:12:05.373Z Vendors: David F. Carr Products: RSVPMaker Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rsvpmaker/wordpress-rsvpmaker-plugin-10-6-6-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-41653 State: PUBLISHED Published: 2023-09-27T12:38:59.268Z Last Updated: 2024-09-20T19:53:28.855Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Beplus Products: Sermon'e – Sermons Online Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Beplus Sermon'e – Sermons Online plugin <= 1.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sermone-online-sermons-management/wordpress-sermon-e-sermons-online-plugin-1-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41654 State: PUBLISHED Published: 2023-10-06T14:36:19.318Z Last Updated: 2024-09-19T14:46:11.900Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Andreas Heigl Products: authLdap Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Andreas Heigl authLdap plugin <= 2.5.8 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/authldap/wordpress-authldap-plugin-2-5-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41655 State: PUBLISHED Published: 2023-09-29T13:24:57.407Z Last Updated: 2024-09-20T16:01:17.550Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Andreas Heigl Products: authLdap Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Andreas Heigl authLdap plugin <= 2.5.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/authldap/wordpress-authldap-plugin-2-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41657 State: PUBLISHED Published: 2023-09-29T13:29:16.030Z Last Updated: 2024-09-20T16:01:02.652Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Groundhogg Inc. Products: HollerBox Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. HollerBox plugin <= 2.3.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/holler-box/wordpress-hollerbox-plugin-2-3-2-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-41658 State: PUBLISHED Published: 2023-09-29T13:33:01.861Z Last Updated: 2024-09-20T15:42:39.370Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: I Thirteen Web Solution Products: Photo Gallery Slideshow & Masonry Tiled Gallery Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.13 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-responsive-photo-gallery/wordpress-photo-gallery-slideshow-masonry-tiled-gallery-plugin-
k.com/database/vulnerability/wp-responsive-photo-gallery/wordpress-photo-gallery-slideshow-masonry-tiled-gallery-plugin-1-0-13-cross-site-scripting-xss-vulnerability?_s_id=cve