Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32758 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:38:56.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: giturlparse (aka git-url-parse) through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing untrusted URLs. This might be relevant if Semgrep is analyzing an untrusted package (for example, to check whether it accesses any Git repository at an http:// URL), and that package's author placed a ReDoS attack payload in a URL used by the package. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/coal
ckage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/coala/git-url-parse/blob/master/giturlparse/parser.py#L53 - https://pypi.org/project/git-url-parse - https://github.com/returntocorp/semgrep/pull/7611 - https://github.com/returntocorp/semgrep/pull/7955 - https://github.com/returntocorp/semgrep/pull/7943
CVE ID: CVE-2023-32759 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:53:08.615Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain sensitive information via a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.archerirm.community/t5/product-advisories/archer-announces-availability-of-archer-release-6-13/ta-p/697821 - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerab
er-release-6-13/ta-p/697821 - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362
CVE ID: CVE-2023-32760 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:52:09.798Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.archerirm.community/t5/product-advisories/archer-announces-availability-of-archer-release-6-13/ta-p/697821 - https://www.archerirm.community/t5/security-advisor
s/archer-announces-availability-of-archer-release-6-13/ta-p/697821 - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362
CVE ID: CVE-2023-32761 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:51:31.552Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.archerirm.community/t5/product-advisories/archer-announces-availability-of-archer-release-6-13/ta-p/697821 - https://www.archerirm.community/t5/security-advis
ies/archer-announces-availability-of-archer-release-6-13/ta-p/697821 - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362
CVE ID: CVE-2023-32762 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2024-08-19T16:42:12.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codereview.qt-project.org/c/qt/qtbase/+/476140 - https://github.com/qt/qtbase/commit/1b
nrichment: References: - https://codereview.qt-project.org/c/qt/qtbase/+/476140 - https://github.com/qt/qtbase/commit/1b736a815be0222f4b24289cf17575fc15707305 - https://lists.qt-project.org/pipermail/announce/2023-May/000414.html - https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
CVE ID: CVE-2023-32763 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2024-08-02T15:25:36.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file with an image inside it is rendered, a QTextLayout buffer overflow can be triggered. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.qt-project.org/c/qt/qtbase/+/476125 - https://lists.qt-project.org/pipermail/announce/2023-May/000413.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html - https://security.gentoo.org/glsa/202402-03 - https://lists.debian.
ebian.org/debian-lts-announce/2023/08/msg00028.html - https://security.gentoo.org/glsa/202402-03 - https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
CVE ID: CVE-2023-32764 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T19:50:49.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt - https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614-
CVE ID: CVE-2023-32766 State: PUBLISHED Published: 2023-06-05T00:00:00.000Z Last Updated: 2025-01-31T17:27:56.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gateway:). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gitpod.io - https://github.com/gitpod-io/gitpod/commit/6771283c3406586e352337675b79ff2ca50f191b - https://github.com/gitpod-io/gitpod/compare/release-2022.11.2...2022.11.3 - https://github.com/gitpod-io/gitpod/releases/tag/2022.11.3 - https://github.com/git
pare/release-2022.11.2...2022.11.3 - https://github.com/gitpod-io/gitpod/releases/tag/2022.11.3 - https://github.com/gitpod-io/gitpod/pull/17559 - https://app.safebase.io/portal/71ccd717-aa2d-4a1e-942e-c768d37e9e0c/preview?product=default&tcuUid=1d505bda-9a38-4ca5-8724-052e6337f34d
CVE ID: CVE-2023-32767 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T16:56:30.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface of Symcon IP-Symcon before 6.3 (i.e., before 2023-05-12) allows a remote attacker to read sensitive files via .. directory-traversal sequences in the URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-014.txt - https://community.symcon.de/t/ip-symcon-6-3-stable-changelog/40276/87
CVE ID: CVE-2023-32781 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-08-02T15:25:37.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Additional Analyst Notes: - CVE Program Container: References: - https://www.paessler.com/prtg/history/stable - https://kb.paessler.com/en/topic/
- CVE Program Container: References: - https://www.paessler.com/prtg/history/stable - https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520 - http://packetstormsecurity.com/files/176677/PRTG-Authenticated-Remote-Code-Execution.html
CVE ID: CVE-2023-32782 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T16:16:00.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug option to write new files that could potentially get executed by the EXE/Script sensor. The severity of this vulnerability is high and received a score of 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.paessler.com/prtg/history/stable - https://kb.pa
E Program Container: - CISA ADP Vulnrichment: References: - https://www.paessler.com/prtg/history/stable - https://kb.paessler.com/en/topic/91845-multiple-vulnerabilites-fixed-in-paessler-prtg-network-monitor-23-3-86-1520
CVE ID: CVE-2023-32783 State: PUBLISHED Published: 2023-08-07T00:00:00 Last Updated: 2024-10-15T20:44:37.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a "$" symbol suffix. NOTE: the vendor states "We do not consider this as a security bug and it's an expected behaviour." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.peteslade.com/post/manageengine-adauditplus-cve-2023-32783
CVE ID: CVE-2023-32784 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:29:40.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gith
n for mitigation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vdohney/keepass-password-dumper - https://sourceforge.net/p/keepass/discussion/329220/thread/f3438e6283/ - https://github.com/keepassxreboot/keepassxc/discussions/9433
CVE ID: CVE-2023-32785 State: REJECTED Published: N/A Last Updated: 2023-12-26T17:39:27.392862 Description: No description available.
CVE ID: CVE-2023-32786 State: PUBLISHED Published: 2023-10-20T00:00:00 Last Updated: 2024-09-12T17:54:54.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/rharang/d265f46fc3161b31ac2e81db44d662e1
CVE ID: CVE-2023-32787 State: PUBLISHED Published: 2023-05-15T00:00:00 Last Updated: 2024-08-02T15:25:37.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption so that they can no longer serve client applications. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OPCFoundation/UA-Java-Legacy - https://github.com/OPCFoundation/UA-Java-Legacy/commit/6f176f2b445a27c157f1a32f225accc9ce8873c0 - https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2023-32787.pdf
CVE ID: CVE-2023-32788 State: PUBLISHED Published: 2023-07-12T08:32:04.753Z Last Updated: 2024-12-04T15:08:32.377Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1676902764208259073
CVE ID: CVE-2023-32789 State: PUBLISHED Published: 2023-07-12T08:32:06.757Z Last Updated: 2024-12-03T17:08:48.285Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1676902764208259073
CVE ID: CVE-2023-32790 State: PUBLISHED Published: 2023-10-03T12:40:23.607Z Last Updated: 2024-09-05T18:16:20.555Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L) Vendors: NXLog Products: NXLog Manager Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-nxlog-manager
CVE ID: CVE-2023-32791 State: PUBLISHED Published: 2023-10-03T12:43:01.043Z Last Updated: 2024-09-06T14:09:28.930Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: NXLog Products: NXLog Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to manipulate and delete user accounts within the platform by sending a specifically crafted query to the server. The vulnerability is based on the lack of proper validation of the origin of incoming requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inci
ing requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-nxlog-manager
CVE ID: CVE-2023-32792 State: PUBLISHED Published: 2023-10-03T12:47:49.496Z Last Updated: 2024-09-05T18:16:01.681Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: NXLog Products: NXLog Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to eliminate roles within the platform by sending a specifically crafted query to the server. The vulnerability is based on the absence of proper validation of the origin of incoming requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-c
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-nxlog-manager
CVE ID: CVE-2023-32793 State: PUBLISHED Published: 2023-08-30T11:34:54.709Z Last Updated: 2024-09-24T19:24:11.594Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WooCommerce Products: WooCommerce Pre-Orders Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 2.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-pre-orders/wordpress-woocommerce-pre-orders-plugin-2-0-0-contributor-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32794 State: PUBLISHED Published: 2023-11-09T20:35:33.202Z Last Updated: 2024-09-03T18:17:24.695Z Vendors: WooCommerce Products: Product Add-Ons Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Product Add-Ons plugin <= 6.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-product-addons/wordpress-woocommerce-product-add-ons-plugin-6-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32795 State: PUBLISHED Published: 2023-12-28T10:43:07.088Z Last Updated: 2025-04-17T20:28:44.262Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L) Vendors: WooCommerce Products: Product Add-Ons Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-product-addons/wordpress-woocommerce-product-add-ons-plugin-6-1-3-authenticated-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-32796 State: PUBLISHED Published: 2023-11-16T19:57:09.248Z Last Updated: 2024-08-02T15:25:37.063Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MingoCommerce Products: WooCommerce Product Enquiry Problem Types: CWE-79 Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in MingoCommerce WooCommerce Product Enquiry plugin <= 2.3.4 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woo-product-enquiry/wordpress-woocommerce-product-enquiry-plugin-2-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32797 State: PUBLISHED Published: 2023-08-25T11:28:33.922Z Last Updated: 2024-09-24T19:24:50.352Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: I Thirteen Web Solution Products: video carousel slider with lightbox Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution video carousel slider with lightbox plugin <= 1.0.22 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-responsive-video-gallery-with-lightbox/wordpress-video-carousel-slider-with-lightbox-plugin-1-0-22-cross-site-sc
lity/wp-responsive-video-gallery-with-lightbox/wordpress-video-carousel-slider-with-lightbox-plugin-1-0-22-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32798 State: PUBLISHED Published: 2024-12-13T14:23:27.692Z Last Updated: 2024-12-13T18:46:38.799Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: 10up Products: Simple Page Ordering Problem Types: CWE-862 Description: Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-page-ordering/vulnerability/wordpress-simple-page-ordering-plugin-2-5-0-broken-access-control-vulnerability?
ugin/simple-page-ordering/vulnerability/wordpress-simple-page-ordering-plugin-2-5-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32799 State: PUBLISHED Published: 2023-12-21T18:22:30.073Z Last Updated: 2024-08-02T15:25:37.053Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WooCommerce Products: Shipping Multiple Addresses Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue affects Shipping Multiple Addresses: from n/a through 3.8.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-3-insecure-direct-object-ref
rce-shipping-multiple-addresses/wordpress-woocommerce-ship-to-multiple-addresses-plugin-3-8-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2023-32800 State: PUBLISHED Published: 2023-05-28T18:39:33.339Z Last Updated: 2024-10-10T18:57:05.342Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: One Products: Rank Math SEO PRO Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in One Rank Math SEO PRO plugin <= 3.0.35 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/seo-by-rank-math-pro/wordpress-rank-math-seo-pro-plugin-3-0-35-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32801 State: PUBLISHED Published: 2023-08-30T11:25:12.575Z Last Updated: 2024-09-24T19:24:26.974Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WooCommerce Products: Composite Products Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Composite Products plugin <= 8.7.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-composite-products/wordpress-woocommerce-composite-products-plugin-8-7-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32802 State: PUBLISHED Published: 2023-08-30T11:29:34.356Z Last Updated: 2024-09-24T19:24:19.160Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WooCommerce Products: WooCommerce Pre-Orders Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Pre-Orders plugin <= 1.9.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-pre-orders/wordpress-woocommerce-pre-orders-plugin-1-9-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32804 State: PUBLISHED Published: 2023-12-04T11:54:52.044Z Last Updated: 2024-08-28T17:51:38.564Z Vendors: Arm Ltd Products: Midgard GPU Userspace Driver, Bifrost GPU Userspace Driver, Valhall GPU Userspace Driver, Arm 5th Gen GPU Architecture Userspace Driver Problem Types: CWE-787 Description: Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a local non-privileged user to write a constant pattern to a limited amount of memory not allocated by the user space driver.This issue affects Midgard GPU Userspace Driver: