Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
T/ES, MELSEC iQ-F Series CPU module FX5UJ-60MT/ES, MELSEC iQ-F Series CPU module FX5UJ-24MR/ES, MELSEC iQ-F Series CPU module FX5UJ-40MR/ES, MELSEC iQ-F Series CPU module FX5UJ-60MR/ES, MELSEC iQ-F Series CPU module FX5UJ-24MT/DS, MELSEC iQ-F Series CPU module FX5UJ-40MT/DS, MELSEC iQ-F Series CPU module FX5UJ-60MT/DS, MELSEC iQ-F Series CPU module FX5UJ-24MR/DS, MELSEC iQ-F Series CPU module FX5UJ-40MR/DS, MELSEC iQ-F Series CPU module FX5UJ-60MR/DS, MELSEC iQ-F Series CPU module FX5UJ-24MT/ESS, MELSEC iQ-F Series CPU module FX5UJ-40MT/ESS, MELSEC iQ-F Series CPU module FX5UJ-60MT/ESS, MELSEC iQ-F Series CPU module FX5UJ-24MT/DSS, MELSEC iQ-F Series CPU module FX5UJ-40MT/DSS, MELSEC iQ-F Se
5UJ-60MT/ESS, MELSEC iQ-F Series CPU module FX5UJ-24MT/DSS, MELSEC iQ-F Series CPU module FX5UJ-40MT/DSS, MELSEC iQ-F Series CPU module FX5UJ-60MT/DSS, MELSEC iQ-F Series CPU module FX5UJ-24MT/ES-A, MELSEC iQ-F Series CPU module FX5UJ-40MT/ES-A, MELSEC iQ-F Series CPU module FX5UJ-60MT/ES-A, MELSEC iQ-F Series CPU module FX5UJ-24MR/ES-A, MELSEC iQ-F Series CPU module FX5UJ-40MR/ES-A, MELSEC iQ-F Series CPU module FX5UJ-60MR/ES-A, MELSEC iQ-F Series CPU module FX5S-30MT/ES, MELSEC iQ-F Series CPU module FX5S-40MT/ES, MELSEC iQ-F Series CPU module FX5S-60MT/ES, MELSEC iQ-F Series CPU module FX5S-80MT/ES, MELSEC iQ-F Series CPU module FX5S-30MR/ES, MELSEC iQ-F Series CPU module FX5S-40MR/ES, ME
ries CPU module FX5S-80MT/ES, MELSEC iQ-F Series CPU module FX5S-30MR/ES, MELSEC iQ-F Series CPU module FX5S-40MR/ES, MELSEC iQ-F Series CPU module FX5S-60MR/ES, MELSEC iQ-F Series CPU module FX5S-80MR/ES, MELSEC iQ-F Series CPU module FX5S-30MT/ESS, MELSEC iQ-F Series CPU module FX5S-40MT/ESS, MELSEC iQ-F Series CPU module FX5S-60MT/ESS, MELSEC iQ-F Series CPU module FX5S-80MT/ESS, MELSEC iQ-F Series Ethernet module FX5-ENET, MELSEC iQ-F Series Ethernet/IP module FX5-ENET/IP, MELSEC iQ-F Series OPC UA Module FX5-OPC, MELSEC iQ-F Series CC-Link IE TSN master/local module FX5-CCLGN-MS, GOT2000 Series CC-Link IE TSN Communication Unit GT25-J71GN13-T2, FR-A800-E series inverters FR-A800-E serie
5-CCLGN-MS, GOT2000 Series CC-Link IE TSN Communication Unit GT25-J71GN13-T2, FR-A800-E series inverters FR-A800-E series, FR-F800-E series inverters FR-F800-E series, FR-E800-E series inverters FR-E800-E series, INVERTER CC-Link IE TSN Plug-in option FR-A8NCG, INVERTER CC-Link IE TSN Safety Plug-in option FR-A8NCG-S, INVERTER CC-Link IE TSN communication function built-in type FR-A800-GN, MR-J5 series AC Servos MELSERVO MR-J5-A series, MR-J5 series AC Servos MELSERVO MR-J5-G series, MR-J5 series AC Servos MELSERVO MR-J5W-G series, MR-J5 series AC Servos MELSERVO MR-J5D-G series, MR-JET series AC Servos MELSERVO MR-JET-G series, MR-MD333G series AC Servos MELSERVO MR-MD333G series, MR-JE ser
eries, MR-JET series AC Servos MELSERVO MR-JET-G series, MR-MD333G series AC Servos MELSERVO MR-MD333G series, MR-JE series AC Servos MELSERVO MR-JE-C series, MELSERVO-J4 AC Servos MELSERVO MR-J4-GF series, Embedded Type Servo System Controller MR-EM441G series Problem Types: CWE-410 Description: Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local Module, CC-Link IE TSN Remote I/O Module, CC-Link IE TSN Analog-Digital Converter Module, CC-Link IE TSN Digital-Analog Converter Module, CC-Link IE TSN - CC-Link I
-Link IE TSN Analog-Digital Converter Module, CC-Link IE TSN Digital-Analog Converter Module, CC-Link IE TSN - CC-Link IE Field Network Bridge Module, CC-Link IE TSN - AnyWireASLINK Bridge Module, CC-Link IE TSN FPGA Module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Motion Module, MELSEC iQ-L Motion Module, MELSEC iQ-F FX5 Motion Module, MELSEC iQ-F Series CPU module, MELSEC iQ-F Series Ethernet module, MELSEC iQ-F Series Ethernet/IP module, MELSEC iQ-F Series OPC UA Module, MELSEC iQ-F Series CC-Link IE TSN master/local module, GOT2000 Series CC-Link IE TSN Communication Unit, FR-A800-E series inverters, FR-F800-E series inverters, FR-E800-E series inve
Series CC-Link IE TSN Communication Unit, FR-A800-E series inverters, FR-F800-E series inverters, FR-E800-E series inverters, INVERTER CC-Link IE TSN Plug-in option, INVERTER CC-Link IE TSN Safety Plug-in option, INVERTER CC-Link IE TSN communication function built-in type, MR-J5 series AC Servos MELSERVO, MR-JET series AC Servos MELSERVO, MR-MD333G series AC Servos MELSERVO, MR-JE series AC Servos MELSERVO, MELSERVO-J4 AC Servos MELSERVO and Embedded Type Servo System Controller allow a remote attacker to cause a temporary Denial of Service condition for a certain period of time in Ethernet communication of the products by performing TCP SYN Flood attack. Additional Analyst Notes: - CISA A
of time in Ethernet communication of the products by performing TCP SYN Flood attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-023_en.pdf - https://jvn.jp/vu/JVNVU96145466/index.html - https://www.cisa.gov/news-events/ics-advisories/icsa-24-058-01
CVE ID: CVE-2023-7035 State: PUBLISHED Published: 2023-12-21T14:31:04.796Z Last Updated: 2025-06-15T18:16:23.079Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: automad Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in automad up to 1.10.9 and classified as problematic. Affected by this issue is some unknown functionality of the file packages\standard\templates\post.php of the component Setting Handler. The manipulation of the argument sitename leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure
ely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248684 - https://vuldb.com/?ctiid.248684 - https://vuldb.com/?submit.249813 - https://vuldb.com/?submit.249814 - https://vuldb.com/?submit.597122 - https://github.com/screetsec/VDD/tree/main/Automad%20CMS/Stored%20Cross%20Site%20Scripting%20(XSS)
CVE ID: CVE-2023-7036 State: PUBLISHED Published: 2023-12-21T16:00:04.741Z Last Updated: 2024-08-02T08:50:07.883Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: automad Problem Types: CWE-434 Description: A vulnerability was found in automad up to 1.10.9. It has been classified as problematic. This affects the function upload of the file FileCollectionController.php of the component Content Type Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248685 was assigned to this vulnerability. NOTE: The vendor was contacted early about th
may be used. The identifier VDB-248685 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248685 - https://vuldb.com/?ctiid.248685 - https://github.com/screetsec/VDD/tree/main/Automad%20CMS/Unrestricted%20File%20Upload
CVE ID: CVE-2023-7037 State: PUBLISHED Published: 2023-12-21T17:00:05.727Z Last Updated: 2024-08-02T08:50:07.882Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: automad Problem Types: CWE-918 Description: A vulnerability was found in automad up to 1.10.9. It has been declared as critical. This vulnerability affects the function import of the file FileController.php. The manipulation of the argument importUrl leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-248686 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure bu
B-248686 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248686 - https://vuldb.com/?ctiid.248686 - https://github.com/screetsec/VDD/tree/main/Automad%20CMS/Authenticated%20Blind%20SSRF
CVE ID: CVE-2023-7038 State: PUBLISHED Published: 2023-12-21T17:31:04.314Z Last Updated: 2024-08-02T08:50:07.623Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: automad Problem Types: CWE-352 Description: A vulnerability was found in automad up to 1.10.9. It has been rated as problematic. This issue affects some unknown processing of the file /dashboard?controller=UserCollection::createUser of the component User Creation Handler. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248687. NOTE: The vendor was co
ed to the public and may be used. The associated identifier of this vulnerability is VDB-248687. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248687 - https://vuldb.com/?ctiid.248687 - https://github.com/screetsec/VDD/tree/main/Automad%20CMS/Cross-Site%20Request%20Forgery%20(CSRF)
CVE ID: CVE-2023-7039 State: PUBLISHED Published: 2023-12-21T18:31:04.269Z Last Updated: 2025-04-24T14:49:10.048Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Byzoro Products: S210 Problem Types: CWE-74 Description: A vulnerability classified as critical has been found in Byzoro S210 up to 20231210. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248688. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb
y is VDB-248688. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.248688 - https://vuldb.com/?ctiid.248688 - https://vuldb.com/?submit.250043 - https://github.com/Stitch3612/cve/blob/main/rce.md
CVE ID: CVE-2023-7040 State: PUBLISHED Published: 2023-12-21T19:31:03.921Z Last Updated: 2024-08-02T08:50:07.559Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: codelyfe Products: Stupid Simple CMS Problem Types: CWE-24 Description: A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this vulnerability is an unknown functionality of the file /file-manager/rename.php. The manipulation of the argument oldName leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248689 was assigned to this vulnerability.
exploit has been disclosed to the public and may be used. The identifier VDB-248689 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248689 - https://vuldb.com/?ctiid.248689 - https://github.com/g1an123/POC/blob/main/Unauthorized%20file%20read.md
CVE ID: CVE-2023-7041 State: PUBLISHED Published: 2023-12-21T20:00:06.529Z Last Updated: 2024-08-02T08:50:07.704Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: codelyfe Products: Stupid Simple CMS Problem Types: CWE-24 Description: A vulnerability, which was classified as critical, has been found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this issue is some unknown functionality of the file /file-manager/rename.php. The manipulation of the argument newName leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248690 is the identifier assigned to this vulnerability. Additional An
been disclosed to the public and may be used. VDB-248690 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248690 - https://vuldb.com/?ctiid.248690 - https://github.com/g1an123/POC/blob/main/Unauthorized%20file%20overwrite.md
CVE ID: CVE-2023-7042 State: PUBLISHED Published: 2023-12-21T20:02:16.249Z Last Updated: 2025-11-21T06:23:46.282Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-476 Description: A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/ath/ath10k/wmi-tlv.c in the Linux kernel. This issue could be exploited to trigger a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com
ice. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-7042 - https://bugzilla.redhat.com/show_bug.cgi?id=2255497 - https://patchwork.kernel.org/project/linux-wireless/patch/20231208043433.271449-1-hdthky0@gmail.com/
CVE ID: CVE-2023-7043 State: PUBLISHED Published: 2024-01-31T12:51:38.253Z Last Updated: 2024-10-17T17:54:28.120Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ESET, spol. s r.o. Products: ESET Endpoint Security, ESET Endpoint Antivirus, ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Mail Security for Microsoft Exchange Server Problem Types: CWE-428 Description: Unquoted service path in ESET products allows to drop a prepared program to a specific location and run on boot with the NT AUTHORITY\NetworkService permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.e
permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.eset.com/en/ca8602
CVE ID: CVE-2023-7044 State: PUBLISHED Published: 2024-01-04T09:31:03.919Z Last Updated: 2024-11-14T18:21:51.743Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpdevteam Products: Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom ID in all versions up to, and including, 5.9.2 due to insufficient input sanitization and o
ss-Site Scripting via custom ID in all versions up to, and including, 5.9.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access and higher to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6e770e98-3c13-4e37-b51b-4c39bce2cb42?source=cve - https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Extensions/Wrapper_Link.php#L65 - https://plugins.trac.wordpress.org/changeset/30137
s-for-elementor-lite/trunk/includes/Extensions/Wrapper_Link.php#L65 - https://plugins.trac.wordpress.org/changeset/3013774/essential-addons-for-elementor-lite/trunk/includes/Extensions/Wrapper_Link.php
CVE ID: CVE-2023-7045 State: PUBLISHED Published: 2024-05-23T11:02:26.796Z Last Updated: 2024-09-18T13:11:01.842Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-352 Description: A CSRF vulnerability exists within GitLab CE/EE from versions 13.11 before 16.10.6, from 16.11 before 16.11.3, from 17.0 before 17.0.1. By leveraging this vulnerability, an attacker could exfiltrate anti-CSRF tokens via the Kubernetes Agent Server (KAS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/436358 - https://hackerone.com/reports/2286823
CVE ID: CVE-2023-7046 State: PUBLISHED Published: 2024-04-09T18:59:01.029Z Last Updated: 2024-08-02T08:50:07.978Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: gowebsmarty Products: WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, Security+ Problem Types: CWE-200 Information Exposure Description: The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0 via exposed Private key files. This makes it possible for unauthenticated attackers to extract sensitive data including
via exposed Private key files. This makes it possible for unauthenticated attackers to extract sensitive data including TLS Certificate Private Keys Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7ab99751-24b7-41db-8a27-d86eda3eeee5?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3066915%40wp-letsencrypt-ssl&new=3066915%40wp-letsencrypt-ssl&sfp_email=&sfph_mail=
CVE ID: CVE-2023-7047 State: PUBLISHED Published: 2023-12-21T14:42:58.084Z Last Updated: 2024-10-29T16:29:32.671Z Vendors: Devolutions Products: Remote Desktop Manager Description: Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager versions 2023.3.31 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature. This affects only SQL data sources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0024/
CVE ID: CVE-2023-7048 State: PUBLISHED Published: 2024-01-11T08:32:55.514Z Last Updated: 2025-06-03T14:08:52.351Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: galdub Products: Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme – My Sticky Bar (formerly myStickymenu) Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The My Sticky Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.6. This is due to missing or incorrect nonce validation in mystickymenu-contact-leads.php. This makes it possible for unauthenticated attackers to trigg
orrect nonce validation in mystickymenu-contact-leads.php. This makes it possible for unauthenticated attackers to trigger the export of a CSV file containing contact leads via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Because the CSV file is exported to a public location, it can be downloaded during a very short window of time before it is automatically deleted by the export function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be0ab40f-cff7-48bd-8dae-cc50af047151?source=cve - https://plugins.trac.wordpress.org/chang
reat-intel/vulnerabilities/id/be0ab40f-cff7-48bd-8dae-cc50af047151?source=cve - https://plugins.trac.wordpress.org/changeset/3016780/mystickymenu
CVE ID: CVE-2023-7049 State: PUBLISHED Published: 2024-08-16T01:59:58.583Z Last Updated: 2024-08-28T21:02:56.454Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: gravitymaster97 Products: Custom Field For WP Job Manager Problem Types: CWE-639 Description: The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2 via the the 'cm_fieldshow' shortcode due to missing validation on the 'job_id' user controlled key. This makes it possible for authenticated attackers, with contributor-level access and above, to expose potentially sensitive post metadata. Additional Analyst No
attackers, with contributor-level access and above, to expose potentially sensitive post metadata. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9891587b-2a63-41be-b79d-afe407dd57fa?source=cve - https://plugins.trac.wordpress.org/changeset/3134344/custom-field-for-wp-job-manager/trunk/includes/CFWJM_Shortcode.php
CVE ID: CVE-2023-7050 State: PUBLISHED Published: 2023-12-21T21:31:03.984Z Last Updated: 2024-08-02T08:50:07.781Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Notes Sharing System Problem Types: CWE-79 Description: A vulnerability has been found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file user/profile.php. The manipulation of the argument name/email leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-248737 was assigned to this vulnerability. Additional
s been disclosed to the public and may be used. The identifier VDB-248737 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248737 - https://vuldb.com/?ctiid.248737 - https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/note_sharing_storedxss..md
CVE ID: CVE-2023-7051 State: PUBLISHED Published: 2023-12-21T22:00:05.628Z Last Updated: 2024-08-02T08:50:07.660Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Notes Sharing System Problem Types: CWE-352 Description: A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/manage-notes.php of the component Notes Handler. The manipulation of the argument delid leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-248738 is the identifier assigned to thi
hed remotely. The exploit has been disclosed to the public and may be used. VDB-248738 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.248738 - https://vuldb.com/?ctiid.248738 - https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/csrf_delete_notes.md
CVE ID: CVE-2023-7052 State: PUBLISHED Published: 2023-12-22T01:00:05.458Z Last Updated: 2024-08-02T08:50:07.686Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHPGurukul Products: Online Notes Sharing System Problem Types: CWE-352 Description: A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This affects an unknown part of the file /user/profile.php. The manipulation of the argument name leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248739. Additional Analyst Not