Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e-9.6 - https://www.openwall.com/lists/oss-security/2023/12/18/2 - https://github.com/openssh/openssh-portable/commit/7ef3787c84b6b524501211b11a26c742f829af1a - https://www.debian.org/security/2023/dsa-5586 - https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html - http://www.openwall.com/lists/oss-security/2023/12/26/4 - https://security.gentoo.org/glsa/202312-17 - https://security.netapp.com/advisory/ntap-20240105-0005/ - https://support.apple.com/kb/HT214084 - http://seclists.org/fulldisclosure/2024/Mar/21
CVE ID: CVE-2023-51386 State: PUBLISHED Published: 2023-12-22T21:58:58.714Z Last Updated: 2024-08-02T22:32:09.383Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: awslabs Products: sandbox-accounts-for-events Problem Types: CWE-269 Description: Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially read data from the events table by sending request payloads to the events API, collecting information on planned events, timeframes, budgets and owner email addresses. This data access may allow users to get insights into upcoming events an
timeframes, budgets and owner email addresses. This data access may allow users to get insights into upcoming events and join events which they have not been invited to. This issue has been patched in version 1.10.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/awslabs/sandbox-accounts-for-events/security/advisories/GHSA-p7w3-j66h-m7mx - https://github.com/awslabs/sandbox-accounts-for-events/commit/f30a0662f0a28734eb33c5868cccc1c319eb6e79
CVE ID: CVE-2023-51387 State: PUBLISHED Published: 2023-12-22T20:46:29.236Z Last Updated: 2024-08-02T22:32:09.067Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: dromara Products: hertzbeat Problem Types: CWE-94 Description: Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a crafted alert expression to execute any command on hertzbeat server. A malicious user who has access to alert define function can execute any co
to execute any command on hertzbeat server. A malicious user who has access to alert define function can execute any command in hertzbeat instance. This issue is fixed in version 1.4.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dromara/hertzbeat/security/advisories/GHSA-4576-m8px-w9qj - https://github.com/dromara/hertzbeat/commit/8dcf050e27ca95d15460a7ba98a3df8a9cd1d3d2 - https://github.com/dromara/hertzbeat/blob/6b599495763120ad1df6f4ed4b6713bb4885d8e2/home/blog/2023-09-26-hertzbeat-v1.4.1.md
CVE ID: CVE-2023-51388 State: PUBLISHED Published: 2024-02-22T15:53:46.458Z Last Updated: 2024-08-14T19:09:04.986Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: dromara Products: hertzbeat Problem Types: CWE-74 Description: Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the expression function, and no security policy is configured, resulting in AviatorScript (which can execute any static method by default) script injection. Version 1.4.1 fixes this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hertzbe
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hertzbeat/security/advisories/GHSA-mcqg-gqxr-hqgj - https://github.com/dromara/hertzbeat/commit/8dcf050e27ca95d15460a7ba98a3df8a9cd1d3d2
CVE ID: CVE-2023-51389 State: PUBLISHED Published: 2024-02-22T15:59:29.842Z Last Updated: 2024-08-22T17:54:37.971Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: dromara Products: hertzbeat Problem Types: CWE-502 Description: Hertzbeat is a real-time monitoring system. At the interface of `/define/yml`, SnakeYAML is used as a parser to parse yml content, but no security configuration is used, resulting in a YAML deserialization vulnerability. Version 1.4.1 fixes this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hertzbeat/security/advisories/GHSA-rmvr-9p5x-mm96 - https:/
A ADP Vulnrichment: References: - https://github.com/dromara/hertzbeat/security/advisories/GHSA-rmvr-9p5x-mm96 - https://github.com/dromara/hertzbeat/commit/97c3f14446d1c96d1fc993df111684926b6cce17
CVE ID: CVE-2023-51390 State: PUBLISHED Published: 2023-12-20T23:27:10.958Z Last Updated: 2024-08-02T22:32:09.162Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Aiven-Open Products: journalpump Problem Types: CWE-284, CWE-215 Description: journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including credential information contained in the configuration if any. The problem has been patched in journalpump 2.5.0. Additional Analyst Notes: - CVE Program Container: R
guration if any. The problem has been patched in journalpump 2.5.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Aiven-Open/journalpump/security/advisories/GHSA-738v-v386-8r6g - https://github.com/Aiven-Open/journalpump/commit/390e69bc909ba16ad5f7b577010b4afc303361da
CVE ID: CVE-2023-51391 State: PUBLISHED Published: 2024-04-16T19:19:26.502Z Last Updated: 2025-02-13T17:19:44.183Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: silabs.com Problem Types: CWE-476, CWE-125 Description: A bug in Micrium OS Network HTTP Server permits an invalid pointer dereference during header processing - potentially allowing a device crash and Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.silabs.com/068Vm000004688g - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1945
CVE ID: CVE-2023-51392 State: PUBLISHED Published: 2024-02-23T16:12:41.261Z Last Updated: 2025-04-22T16:15:25.335Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: silabs.com Products: Ember ZNet SDK Problem Types: CWE-1240 Description: Ember ZNet between v7.2.0 and v7.4.0 used software AES-CCM instead of integrated hardware cryptographic accelerators, potentially increasing risk of electromagnetic and differential power analysis sidechannel attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.silabs.com/068Vm000001BKm6
CVE ID: CVE-2023-51393 State: PUBLISHED Published: 2024-02-23T19:14:23.817Z Last Updated: 2025-04-22T16:15:09.433Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: silabs.com Products: Ember ZNet SDK Problem Types: CWE-770 Description: Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon Labs Ember ZNet SDK prior to v7.4.0.0 (delivered as part of Silicon Labs Gecko SDK v4.4.0) which may enable attackers to trigger a bus fault and crash of the device, requiring a reboot in order to rejoin the network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https
r to rejoin the network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.silabs.com/068Vm000001NaAM
CVE ID: CVE-2023-51394 State: PUBLISHED Published: 2024-02-23T19:13:37.199Z Last Updated: 2024-08-16T19:31:32.322Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: silabs.com Products: Ember ZNet SDK Problem Types: CWE-476 Description: High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v7.4.0, causing a system crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.silabs.com/068Vm000001NL4u
CVE ID: CVE-2023-51395 State: PUBLISHED Published: 2024-03-07T04:50:54.651Z Last Updated: 2024-09-25T16:03:46.409Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Silicon Labs Products: Z-Wave SDK Problem Types: CWE-787, CWE-125 Description: The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.silabs.com/068Vm0000029Xq5
CVE ID: CVE-2023-51396 State: PUBLISHED Published: 2023-12-29T10:27:12.202Z Last Updated: 2024-08-02T22:32:09.196Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Brizy.io Products: Brizy – Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy.Io Brizy – Page Builder allows Stored XSS.This issue affects Brizy – Page Builder: from n/a through 2.4.29. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/brizy/wordpress-brizy-page-builder-plugin-2-4-29-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-51397 State: PUBLISHED Published: 2023-12-29T10:23:43.091Z Last Updated: 2024-08-02T22:32:09.363Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Brainstorm Force Products: WP Remote Site Search Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force WP Remote Site Search allows Stored XSS.This issue affects WP Remote Site Search: from n/a through 1.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-remote-site-search/wordpress-wp-remote-site-search-plugin-1-0-4-cross-site-scrip
atchstack.com/database/vulnerability/wp-remote-site-search/wordpress-wp-remote-site-search-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-51398 State: PUBLISHED Published: 2024-05-17T08:40:03.185Z Last Updated: 2024-08-02T22:32:09.378Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Brainstorm Force Products: Ultimate Addons for Beaver Builder Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Privilege Escalation.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.14. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bb-ultimate-addon/wordpress-ultimate-addons-for-beaver-builder-
erences: - https://patchstack.com/database/vulnerability/bb-ultimate-addon/wordpress-ultimate-addons-for-beaver-builder-premium-plugin-1-35-14-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2023-51399 State: PUBLISHED Published: 2023-12-29T10:20:21.296Z Last Updated: 2024-09-09T17:40:02.528Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFactory Products: Back Button Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget allows Stored XSS.This issue affects Back Button Widget: from n/a through 1.6.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/back-button-widget/wordpress-back-button-widget-plugin-1-6-3-cross-site-scripting
/patchstack.com/database/vulnerability/back-button-widget/wordpress-back-button-widget-plugin-1-6-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-51401 State: PUBLISHED Published: 2024-05-17T08:40:24.915Z Last Updated: 2024-08-02T22:32:09.226Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Brainstorm Force Products: Ultimate Addons for Beaver Builder Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Relative Path Traversal.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.13. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bb-ultimat
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bb-ultimate-addon/wordpress-ultimate-addons-for-beaver-builder-premium-plugin-1-35-13-limited-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2023-51402 State: PUBLISHED Published: 2023-12-29T12:05:57.941Z Last Updated: 2025-04-17T20:18:06.346Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Brain Storm Force Products: Ultimate Addons for WPBakery Page Builder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.17. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ultimate_vc_addons/wordpress-ultimate-addons-for-wpbakery-page
ferences: - https://patchstack.com/database/vulnerability/ultimate_vc_addons/wordpress-ultimate-addons-for-wpbakery-page-builder-plugin-3-19-17-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-51403 State: PUBLISHED Published: 2024-02-12T06:17:40.326Z Last Updated: 2024-08-02T22:32:09.499Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Nicdark Products: Restaurant Reservations Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nicdark Restaurant Reservations allows Stored XSS.This issue affects Restaurant Reservations: from n/a through 1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/nd-restaurant-reservations/wordpress-restaurant-reservations-plugin-1-8-
- https://patchstack.com/database/vulnerability/nd-restaurant-reservations/wordpress-restaurant-reservations-plugin-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-51404 State: PUBLISHED Published: 2024-02-10T08:42:14.082Z Last Updated: 2024-08-02T22:32:09.162Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: MyAgilePrivacy Products: My Agile Privacy – The only GDPR solution for WordPress that you can truly trust Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyAgilePrivacy My Agile Privacy – The only GDPR solution for WordPress that you can truly trust allows Stored XSS.This issue affects My Agile Privacy – The only GDPR solution for WordPress that you can truly trust: from n/a through 2.1.7. Additional Analyst No
e Privacy – The only GDPR solution for WordPress that you can truly trust: from n/a through 2.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/myagileprivacy/wordpress-my-agile-privacy-plugin-2-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-51405 State: PUBLISHED Published: 2024-04-24T16:03:05.373Z Last Updated: 2024-08-02T22:32:09.205Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Repute Infosystems Products: BookingPress Problem Types: CWE-287 Description: Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BookingPress: from n/a through 1.0.74. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bookingpress-appointment-booking/wordpress-bookingpress-plugin-1-0-74-booking-price-manipulati
om/database/vulnerability/bookingpress-appointment-booking/wordpress-bookingpress-plugin-1-0-74-booking-price-manipulation-vulnerability?_s_id=cve
CVE ID: CVE-2023-51406 State: PUBLISHED Published: 2024-01-08T20:41:36.337Z Last Updated: 2025-06-17T20:39:13.069Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Ninja Team Products: FastDup – Fastest WordPress Migration & Duplicator Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FastDup – Fastest WordPress Migration & Duplicator.This issue affects FastDup – Fastest WordPress Migration & Duplicator: from n/a through 2.1.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fastdup/wordpress-fastdup-
ntainer: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fastdup/wordpress-fastdup-plugin-2-1-7-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE ID: CVE-2023-51407 State: PUBLISHED Published: 2024-03-16T00:41:33.831Z Last Updated: 2025-04-10T20:26:53.269Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Rocket Elements Products: Split Test For Elementor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rocket Elements Split Test For Elementor.This issue affects Split Test For Elementor: from n/a through 1.6.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/split-test-for-elementor/wordpress-split-test-for-elementor-plugin-1-6-9-cross-site-request-forgery-csrf-vulnerability?
/split-test-for-elementor/wordpress-split-test-for-elementor-plugin-1-6-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-51408 State: PUBLISHED Published: 2024-01-08T20:36:04.132Z Last Updated: 2025-05-23T16:02:21.942Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: StudioWombat Products: WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce Problem Types: CWE-532 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StudioWombat WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce.This issue affects WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce: from n/a through 1.4.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP
ol for WordPress and WooCommerce: from n/a through 1.4.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-optin-wheel/wordpress-wp-optin-wheel-plugin-1-4-3-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
CVE ID: CVE-2023-51409 State: PUBLISHED Published: 2024-04-12T13:15:12.184Z Last Updated: 2024-09-16T22:06:02.311Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Jordy Meow Products: AI Engine: ChatGPT Chatbot Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ai-engine/wordpress-ai-engine-plugin-1-9-98-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-51410 State: PUBLISHED Published: 2023-12-29T13:53:24.643Z Last Updated: 2024-11-20T18:58:07.683Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: WPVibes Products: WP Mail Log Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-mail-log/wordpress-wp-mail-log-plugin-1-1-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-51411 State: PUBLISHED Published: 2023-12-29T13:50:21.393Z Last Updated: 2024-08-02T22:32:09.432Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Shabti Kaplan Products: Frontend Admin by DynamiApps Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Shabti Kaplan Frontend Admin by DynamiApps.This issue affects Frontend Admin by DynamiApps: from n/a through 3.18.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/acf-frontend-form-element/wordpress-frontend-admin-by-dynamiapps-plugin-3-18-3-unauthenticated-arbitrary-file-upload-vul
acf-frontend-form-element/wordpress-frontend-admin-by-dynamiapps-plugin-3-18-3-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-51412 State: PUBLISHED Published: 2023-12-29T13:47:39.376Z Last Updated: 2024-08-02T22:32:09.196Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Piotnet Products: Piotnet Forms Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/piotnetforms/wordpress-piotnetforms-plugin-1-0-25-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-51413 State: PUBLISHED Published: 2024-06-12T09:13:56.582Z Last Updated: 2024-08-02T22:32:09.195Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Products: Piotnet Forms Problem Types: CWE-862 Description: Missing Authorization vulnerability in Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.29. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/piotnetforms/wordpress-piotnet-forms-plugin-1-0-25-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-51414 State: PUBLISHED Published: 2023-12-29T13:02:27.732Z Last Updated: 2024-08-02T22:32:09.462Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: EnvialoSimple Products: EnvíaloSimple: Email Marketing y Newsletters Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/envialosimple-email-marketing-y-newsletters-gratis/wordpress-envialosimple-plugin-2-1-un
tack.com/database/vulnerability/envialosimple-email-marketing-y-newsletters-gratis/wordpress-envialosimple-plugin-2-1-unauthenticated-php-object-injection-vulnerability?_s_id=cve