Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
onal Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-41812 State: PUBLISHED Published: 2023-11-23T14:58:44.103Z Last Updated: 2024-08-02T19:09:49.062Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allowed PHP executable files to be uploaded through the file manager. This issue affects Pandora FMS: from 700 through 773. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-41813 State: PUBLISHED Published: 2023-12-29T11:42:59.506Z Last Updated: 2024-08-02T19:09:49.039Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Allows you to edit the Web Console user notification options. This issue affects Pandora FMS: from 700 through 774. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-41814 State: PUBLISHED Published: 2023-12-29T11:45:23.493Z Last Updated: 2024-08-02T19:09:49.103Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Through an HTML payload (iframe tag) it is possible to carry out XSS attacks when the user receiving the messages opens their notifications. This issue affects Pandora FMS: from 700 through 774. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.co
andora FMS: from 700 through 774. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-41815 State: PUBLISHED Published: 2023-12-29T11:46:46.235Z Last Updated: 2024-08-02T19:09:48.531Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Malicious code could be executed in the File Manager section. This issue affects Pandora FMS: from 700 through 774. Additional Analyst Notes: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-41816 State: PUBLISHED Published: 2024-05-03T14:02:07.034Z Last Updated: 2024-08-02T19:09:48.438Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-926 Description: An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178874
CVE ID: CVE-2023-41817 State: PUBLISHED Published: 2024-05-03T14:03:45.713Z Last Updated: 2024-08-15T15:38:41.026Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-927 Description: An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178875
CVE ID: CVE-2023-41818 State: PUBLISHED Published: 2024-05-03T14:03:55.892Z Last Updated: 2024-08-02T19:09:48.543Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-921 Description: An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178876
CVE ID: CVE-2023-41819 State: PUBLISHED Published: 2024-05-03T14:04:05.479Z Last Updated: 2024-08-22T19:02:34.849Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-285 Description: A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178877
CVE ID: CVE-2023-41820 State: PUBLISHED Published: 2024-05-03T14:04:16.223Z Last Updated: 2024-08-08T14:57:57.828Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-927 Description: An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178878
CVE ID: CVE-2023-41821 State: PUBLISHED Published: 2024-05-03T14:04:39.799Z Last Updated: 2024-08-23T15:10:12.183Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-926 Description: A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178879
CVE ID: CVE-2023-41822 State: PUBLISHED Published: 2024-05-03T14:04:49.598Z Last Updated: 2024-08-02T19:09:48.515Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Motorola Products: Phones Problem Types: CWE-926 Description: An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS commands. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178704
CVE ID: CVE-2023-41823 State: PUBLISHED Published: 2024-05-03T14:05:00.995Z Last Updated: 2024-08-02T19:09:48.480Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Motorola Products: Phones Problem Types: CWE-926 Description: An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178705
CVE ID: CVE-2023-41824 State: PUBLISHED Published: 2024-05-03T14:06:04.301Z Last Updated: 2024-08-02T19:09:49.377Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-927 Description: An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178865
CVE ID: CVE-2023-41825 State: PUBLISHED Published: 2024-05-03T14:06:13.480Z Last Updated: 2024-08-20T18:49:18.722Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-22 Description: A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178866
CVE ID: CVE-2023-41826 State: PUBLISHED Published: 2024-05-03T14:06:27.487Z Last Updated: 2024-08-02T19:09:49.175Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-927 Description: A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permission. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178703
CVE ID: CVE-2023-41827 State: PUBLISHED Published: 2024-03-04T21:44:58.075Z Last Updated: 2024-08-23T20:19:05.312Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-926 Description: An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178273
CVE ID: CVE-2023-41828 State: PUBLISHED Published: 2024-05-03T14:06:34.898Z Last Updated: 2024-08-02T19:09:49.329Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Motorola Products: Phones Problem Types: CWE-927 Description: An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178701
CVE ID: CVE-2023-41829 State: PUBLISHED Published: 2024-03-04T21:45:18.389Z Last Updated: 2025-04-16T16:02:16.876Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-926 Description: An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178272
CVE ID: CVE-2023-41830 State: PUBLISHED Published: 2024-05-03T14:06:45.335Z Last Updated: 2024-08-15T15:41:58.427Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Motorola Products: Phones Problem Types: CWE-36 Description: An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en-us.support.motorola.com/app/answers/detail/a_id/178702
CVE ID: CVE-2023-41833 State: PUBLISHED Published: 2024-09-16T16:38:44.388Z Last Updated: 2025-11-03T21:49:30.808Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: UEFI firmware for some Intel(R) processors Problem Types: escalation of privilege, CWE-362 Description: A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
CVE ID: CVE-2023-41834 State: PUBLISHED Published: 2023-09-19T12:34:16.970Z Last Updated: 2025-02-13T17:09:03.658Z Vendors: Apache Software Foundation Products: Apache Flink Stateful Functions Problem Types: CWE-113, CWE-74 Description: Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content into the HTTP response that is sent to the user's browser. Users should upgrade to Apache Flink Stateful Functions version 3.3.0. Additional Analyst Notes: - CVE Prog
r's browser. Users should upgrade to Apache Flink Stateful Functions version 3.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/cvxcsdyjqc3lysj1tz7s06zwm36zvwrm - http://www.openwall.com/lists/oss-security/2023/09/19/3
CVE ID: CVE-2023-41835 State: PUBLISHED Published: 2023-12-05T08:37:31.602Z Last Updated: 2025-11-04T19:21:09.564Z Vendors: Apache Software Foundation Products: Apache Struts Problem Types: CWE-459 Description: When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in struts.multipart.saveDir even if the request has been denied. Users are recommended to upgrade to versions Struts 2.5.32 or 6.1.2.2 or Struts 6.3.0.1 or greater, which fixe this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/6wj530kh3ono8phr642y9sqkl67ys2ft - https://www.openwall
ADP Vulnrichment: References: - https://lists.apache.org/thread/6wj530kh3ono8phr642y9sqkl67ys2ft - https://www.openwall.com/lists/oss-security/2023/12/09/1
CVE ID: CVE-2023-41836 State: PUBLISHED Published: 2023-10-13T14:51:22.277Z Last Updated: 2024-09-16T20:36:25.932Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-79 Description: An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox version 4.4.0 and 4.2.0 through 4.2.4, and 4.0.0 through 4.0.4 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.4 through 3.0.7 allows attacker to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-215
CVE ID: CVE-2023-41838 State: PUBLISHED Published: 2023-10-10T16:49:27.173Z Last Updated: 2024-09-18T19:03:47.798Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiAnalyzer, FortiManager Problem Types: CWE-78 Description: An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-169
CVE ID: CVE-2023-41839 State: REJECTED Published: N/A Last Updated: 2025-05-28T02:55:10.011Z Description: No description available.
CVE ID: CVE-2023-41840 State: PUBLISHED Published: 2023-11-14T18:04:55.737Z Last Updated: 2024-10-22T20:54:04.281Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X) Vendors: Fortinet Products: FortiClientWindows Problem Types: CWE-426 Description: A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-274
CVE ID: CVE-2023-41841 State: PUBLISHED Published: 2023-10-10T16:49:35.723Z Last Updated: 2024-10-22T20:58:28.350Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:X/RC:X) Vendors: Fortinet Products: FortiOS Problem Types: CWE-285 Description: An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-318
CVE ID: CVE-2023-41842 State: PUBLISHED Published: 2024-03-12T15:09:16.279Z Last Updated: 2024-08-12T18:09:17.558Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiManager, FortiAnalyzer, FortiPortal Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer-BigData before 7.2.5 and Fortinet FortiPortal version 6.0 all versions and version 5.3 all versions a
inet FortiAnalyzer-BigData before 7.2.5 and Fortinet FortiPortal version 6.0 all versions and version 5.3 all versions allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-304
CVE ID: CVE-2023-41843 State: PUBLISHED Published: 2023-10-13T14:51:17.295Z Last Updated: 2024-10-22T20:54:54.226Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-79 Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox version 4.4.1 and 4.4.0 and 4.2.0 through 4.2.5 and 4.0.0 through 4.0.3 allows attacker to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-273
CVE ID: CVE-2023-41844 State: PUBLISHED Published: 2023-12-13T06:42:02.427Z Last Updated: 2024-10-08T14:29:12.393Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-79 Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox version 4.4.1 and 4.4.0 and 4.2.0 through 4.2.5 and 4.0.0 through 4.0.3 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 and 3.0.0 through 3.0.4 allows attacker to execute unauthorized code or commands via crafted HTTP requests in capture traffic endpoint. Additional Analyst Notes: - CVE Program Container: - CISA
ommands via crafted HTTP requests in capture traffic endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-214
CVE ID: CVE-2023-41846 State: PUBLISHED Published: 2023-09-12T09:32:36.000Z Last Updated: 2024-09-26T14:12:24.575Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-119 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0002). The affected application is vulnerable to memory corruption while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. Additional Analy
crafted SPP files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-764801.pdf
CVE ID: CVE-2023-41847 State: PUBLISHED Published: 2023-10-02T08:36:12.325Z Last Updated: 2024-09-20T15:22:37.812Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WEN Solutions Products: Notice Bar Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WEN Solutions Notice Bar plugin <= 3.1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/notice-bar/wordpress-notice-bar-plugin-3-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41848 State: PUBLISHED Published: 2024-12-13T14:24:18.919Z Last Updated: 2024-12-13T19:09:10.534Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Majeed Raza Products: Carousel Slider Problem Types: CWE-862 Description: Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/carousel-slider/vulnerability/wordpress-carousel-slider-plugin-2-2-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41849 State: PUBLISHED Published: 2024-12-13T14:24:19.917Z Last Updated: 2024-12-13T19:08:50.395Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WP Happy Coders Products: Posts Like Dislike Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Like Dislike: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/posts-like-dislike/vulnerability/wordpress-posts-like-dislike-plugin-1-1-0-broken-access-control-vu
ase/wordpress/plugin/posts-like-dislike/vulnerability/wordpress-posts-like-dislike-plugin-1-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41850 State: PUBLISHED Published: 2023-10-10T08:26:28.036Z Last Updated: 2024-09-17T19:40:52.351Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Morris Bryant, Ruben Sargsyan Products: Outbound Link Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Morris Bryant, Ruben Sargsyan Outbound Link Manager plugin <= 1.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/outbound-link-manager/wordpress-outbound-link-manager-plugin-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41851 State: PUBLISHED Published: 2023-10-10T08:29:52.433Z Last Updated: 2024-09-17T19:40:30.838Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Dotsquares Products: WP Custom Post Template Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Dotsquares WP Custom Post Template <= 1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-custom-post-template/wordpress-wp-custom-post-template-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve