Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-46009 State: PUBLISHED Published: 2023-10-18T00:00:00.000Z Last Updated: 2025-11-04T18:18:32.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream at src/xform.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kohler/gifsicle/issues/196 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WLTXJS6AIKPGVOAJ7EYC4HL3NEG6CGF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3I6Z7VAHUYX3Q4DULJ76NFD2CIFZJYH5/
CVE ID: CVE-2023-46010 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:13:52.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seacms.com - https://blog.csdn.net/DGS666/article/details/133795200?spm=1001.2014.3001.5501
CVE ID: CVE-2023-46012 State: PUBLISHED Published: 2024-05-07T00:00:00.000Z Last Updated: 2025-03-14T00:52:40.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/dest-3/CVE-2023-46012/tree/main
CVE ID: CVE-2023-46014 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T17:16:02.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46014-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability
CVE ID: CVE-2023-46015 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T17:14:22.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability
CVE ID: CVE-2023-46016 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T17:12:58.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability
CVE ID: CVE-2023-46017 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T17:11:46.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability
CVE ID: CVE-2023-46018 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T17:07:18.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability
CVE ID: CVE-2023-46019 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T16:10:11.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability
CVE ID: CVE-2023-46020 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T16:07:17.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability
CVE ID: CVE-2023-46021 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T18:47:08.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability
CVE ID: CVE-2023-46022 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T14:44:44.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability
CVE ID: CVE-2023-46023 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T14:41:00.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/Code-Projects-Simple-Task-List-1.0/blob/main/CVE-2023-46023-Code-Projects-Simple-Task-List-1.0-SQL-Injection-Vulnerability.md
CVE ID: CVE-2023-46024 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:29:32.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46024-phpgurukul-Teacher-Subject-Allocation-Management-System-1.0-SQL-Injection-Vulnerability.md
CVE ID: CVE-2023-46025 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:10:03.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46025-phpgurukul-Teacher-Subject-Allocation-Management-System-1.0-SQL-Injection-Vulnerability.md
CVE ID: CVE-2023-46026 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T14:58:04.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ersinerenler/phpgurukul-Teacher-Subject-Allocation-Management-System-1.0/blob/main/CVE-2023-46026-PHPGurukul-Teacher-Subject-Allocation-Management-System-1.0-Stored-Cross-Site-Scripting-Vulnerability.md
CVE ID: CVE-2023-46033 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T18:20:33.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/products/dsl-2750u-wireless-n-300-adsl2-modem-router - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10357 - https://www.dlink.com/en/products/dsl-2730u-wire
announcement.us.dlink.com/announcement/publication.aspx?name=SAP10357 - https://www.dlink.com/en/products/dsl-2730u-wireless-n150-adsl2-router
CVE ID: CVE-2023-46040 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T19:10:17.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Num-Nine/CVE/wiki/GetSimplecms-exists-to-store-xss
CVE ID: CVE-2023-46042 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T18:12:05.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Num-Nine/CVE/wiki/A-file-write-vulnerability-exists-in-GetSimpleCMS
CVE ID: CVE-2023-46045 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-11-04T18:18:36.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/graphviz/graphviz/-/issues/2441 - https://seclists.org/fulldisclosure/2024/Jan/73 - https://www.openwall.com/lists/oss-security/2024/02/01/2 - http://seclists.org/fulldisclosure/2024/Feb/24 - https://seclists.org/fulldisclosure/2024/Feb/
s-security/2024/02/01/2 - http://seclists.org/fulldisclosure/2024/Feb/24 - https://seclists.org/fulldisclosure/2024/Feb/24
CVE ID: CVE-2023-46046 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:37.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/MiniZinc/libminizinc/issues/730 - http://seclists.org/fulldisclosure/2024/Jan/63 - https://www.minizinc.org/doc-2.8.3/en/changel
/libminizinc/issues/730 - http://seclists.org/fulldisclosure/2024/Jan/63 - https://www.minizinc.org/doc-2.8.3/en/changelog.html - https://github.com/MiniZinc/libminizinc/commit/afe67acc20898e4308044b54c4acf7a08df544f0
CVE ID: CVE-2023-46047 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:38.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/sane-project/backends/-/issues/708 - http://seclists.org/fulldisclosure/2024/Jan/64
CVE ID: CVE-2023-46048 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:39.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tug.org/pipermail/tex-live/2023-August/049400.html - http://seclists.org/fulldisclosure/2024/Jan/65
CVE ID: CVE-2023-46049 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:40.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/llvm/llvm-project/issues/67388 - http://seclists.o
lnrichment: - CVE Program Container: References: - https://github.com/llvm/llvm-project/issues/67388 - http://seclists.org/fulldisclosure/2024/Jan/66 - https://llvm.org/docs/Security.html
CVE ID: CVE-2023-46050 State: REJECTED Published: N/A Last Updated: 2024-01-29T09:09:42.308138 Description: No description available.
CVE ID: CVE-2023-46051 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:45.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because it should be categorized as a usability problem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://tug.org/pipermail/tex-live/2023-August/049406.html - http://seclists.org/fulldisclosure/2024/Jan/68
CVE ID: CVE-2023-46052 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:18:46.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/sane-project/backends/-/issues/709 - http://seclists.org/fulldisclosure/2024/Jan/69
CVE ID: CVE-2023-46054 State: PUBLISHED Published: 2023-10-21T00:00:00 Last Updated: 2024-09-16T13:13:29.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script to the website_footer parameter in the admin/settings/save.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aaanz/aaanz.github.io/blob/master/XSS.md
CVE ID: CVE-2023-46055 State: PUBLISHED Published: 2023-10-21T00:00:00 Last Updated: 2024-09-16T19:54:40.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/GroundCTL2MajorTom/eef0d55f5df77cc911d84392acdbf625
CVE ID: CVE-2023-46058 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-17T14:22:37.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grp_desc parameter of the admin/group.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CrownZTX/vulnerabilities/blob/main/geeklog/Stored_XSS_in_group.php.md
CVE ID: CVE-2023-46059 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-17T14:22:12.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the Service, and website URL to Ping parameters of the admin/trackback.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CrownZTX/vulnerabilities/blob/main/geeklog/reflected_XSS_in_editservice.md
CVE ID: CVE-2023-46060 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-03-27T19:07:07.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the port parameter at the goform/setVlanInfo component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/peris-navince/founded-0-days/blob/main/Tenda/ac500/fromSetVlanInfo/1.md
CVE ID: CVE-2023-46066 State: PUBLISHED Published: 2023-10-16T11:54:07.900Z Last Updated: 2024-09-16T14:34:40.426Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Codedrafty Products: Mediabay – Media Library Folders Problem Types: CWE-79 Description: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Codedrafty Mediabay – Media Library Folders plugin <= 1.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mediabay-lite/wordpress-mediabay-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-46067 State: PUBLISHED Published: 2023-10-21T20:28:24.666Z Last Updated: 2024-09-11T20:08:15.587Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Qwerty23 Products: Rocket Font Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rocket Font plugin <= 1.2.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rocket-font/wordpress-rocket-font-plugin-1-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-46068 State: PUBLISHED Published: 2023-10-24T12:54:10.628Z Last Updated: 2024-08-02T20:37:39.561Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: XQueue GmbH Products: Maileon for WordPress Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XQueue GmbH Maileon for WordPress plugin <= 2.16.0 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/xqueue-maileon/wordpress-maileon-plugin-2-16-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-46069 State: PUBLISHED Published: 2023-10-24T12:58:45.990Z Last Updated: 2024-09-09T14:42:57.231Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Osmansorkar Products: Ajax Archive Calendar Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Osmansorkar Ajax Archive Calendar plugin <= 2.6.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ajax-archive-calendar/wordpress-ajax-archive-calendar-plugin-2-6-7-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-46070 State: PUBLISHED Published: 2023-10-24T13:02:27.507Z Last Updated: 2024-09-09T14:42:10.575Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Emmanuel GEORJON Products: EG-Attachments Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Emmanuel GEORJON EG-Attachments plugin <= 2.1.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/eg-attachments/wordpress-eg-attachments-plugin-2-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-46071 State: PUBLISHED Published: 2023-10-24T13:05:41.970Z Last Updated: 2024-09-09T14:40:55.842Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ClickDatos Products: Protección de Datos RGPD Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ClickDatos Protección de Datos RGPD plugin <= 3.1.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/click-datos-lopd/wordpress-proteccion-de-datos-rgpd-plugin-3-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-46072 State: PUBLISHED Published: 2023-10-26T11:39:32.042Z Last Updated: 2024-09-09T14:40:38.955Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Michael Simpson Products: Add Shortcodes Actions And Filters Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <= 2.0.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/add-actions-and-filters/wordpress-add-shortcodes-actions-and-filters-plugin-2-0-9-reflected-cross-site-scripting-xss-vulnerability?_s_
d-filters/wordpress-add-shortcodes-actions-and-filters-plugin-2-0-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-46073 State: PUBLISHED Published: 2025-01-02T11:59:56.618Z Last Updated: 2025-01-03T19:10:20.418Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: nofearinc Products: DX Delete Attached Media Problem Types: CWE-862 Description: Missing Authorization vulnerability in nofearinc DX Delete Attached Media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through 2.0.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dx-delete-attached-media/vulnerability/wordpress-dx-delete-attached-media-plugin-2-0-5-1-br
om/database/wordpress/plugin/dx-delete-attached-media/vulnerability/wordpress-dx-delete-attached-media-plugin-2-0-5-1-broken-access-control-vulnerability-csrf?_s_id=cve