Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3666 State: PUBLISHED Published: 2025-09-03T06:00:04.025Z Last Updated: 2025-09-03T19:47:05.988Z Vendors: Unknown Products: Sticky Side Buttons Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Sticky Side Buttons WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c37f1708-c154-41dc-9079-3230827eed1b/
CVE ID: CVE-2023-3667 State: PUBLISHED Published: 2023-08-21T12:29:48.158Z Last Updated: 2025-05-05T15:54:20.661Z Vendors: Unknown Products: Chat Button: WhatsApp Chat, Facebook Messenger, Telegram Chat, WeChat, Line Chat, Discord Chat for Customer Support Chat with floating Chat Widget Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
bility is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9f2f3f85-6812-46b5-9175-c56f6852afd7
CVE ID: CVE-2023-3668 State: PUBLISHED Published: 2023-07-14T00:00:19.815Z Last Updated: 2024-10-28T20:36:00.527Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: froxlor Products: froxlor/froxlor Problem Types: CWE-116 Description: Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/df8cccf4-a340-440e-a7e0-1b42e757d66e - https://github.com/froxlor/froxlor/commit/03b5a921ff308eeab21bf9d240f27783c8591965
CVE ID: CVE-2023-3669 State: PUBLISHED Published: 2023-08-03T11:11:05.068Z Last Updated: 2025-02-27T21:11:19.916Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: CODESYS Products: CODESYS Development System Problem Types: CWE-307 Description: A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialog. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-023
CVE ID: CVE-2023-3670 State: PUBLISHED Published: 2023-07-28T07:52:33.639Z Last Updated: 2024-10-21T17:43:52.386Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: CODESYS Products: CODESYS Development System, CODESYS Scripting Problem Types: CWE-668 Description: In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-024
CVE ID: CVE-2023-3671 State: PUBLISHED Published: 2023-08-07T14:31:22.330Z Last Updated: 2025-05-05T15:54:08.735Z Vendors: Unknown Products: MultiParcels Shipping For WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8b765f39-38e0-49c7-843a-a5b9375a32e7
CVE ID: CVE-2023-3672 State: PUBLISHED Published: 2023-07-14T09:27:32.135Z Last Updated: 2024-10-22T15:11:30.190Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: plaidweb Products: plaidweb/webmention.js Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - DOM in GitHub repository plaidweb/webmention.js prior to 0.5.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/75cfb7ad-a75f-45ff-8688-32a9c55179aa - https://github.com/plaidweb/webmention.js/commit/3551b66b3e40da37fee89ecf72930c5efdc53011
CVE ID: CVE-2023-3673 State: PUBLISHED Published: 2023-07-14T12:19:04.063Z Last Updated: 2024-10-22T15:16:48.909Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-89 Description: SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/46ca0934-5260-477b-9e86-7b16bb18d0a9 - https://github.com/pimcore/pimcore/commit/a06ce0abdba19ae0eefc38b035e677f8f0c2bce9
CVE ID: CVE-2023-3674 State: PUBLISHED Published: 2023-07-19T18:25:28.581Z Last Updated: 2025-11-21T05:59:49.417Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 9 Problem Types: CWE-1283 Description: A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1139 - https://access.redh
Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1139 - https://access.redhat.com/security/cve/CVE-2023-3674 - https://bugzilla.redhat.com/show_bug.cgi?id=2222903 - https://github.com/keylime/keylime/commit/95ce3d86bd2c53009108ffda2dcf553312d733db
CVE ID: CVE-2023-3675 State: PUBLISHED Published: 2024-04-18T10:41:25.088Z Last Updated: 2024-08-21T14:08:41.868Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Secomea GateManager (Web GUI) allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.secomea.com/support/cybersecurity-advisory
CVE ID: CVE-2023-3676 State: PUBLISHED Published: 2023-10-31T20:22:53.620Z Last Updated: 2025-02-27T20:38:37.768Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: kubelet Problem Types: CWE-20 Description: A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kubernetes/kubernetes/issues/119339 - https://groups.google.com/g/kubernetes-security-announce/c/d_fvHZ9a5z
//github.com/kubernetes/kubernetes/issues/119339 - https://groups.google.com/g/kubernetes-security-announce/c/d_fvHZ9a5zc - https://security.netapp.com/advisory/ntap-20231130-0007/
CVE ID: CVE-2023-3677 State: PUBLISHED Published: 2023-08-31T05:33:06.690Z Last Updated: 2025-02-05T19:33:41.460Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: edgarrojas Products: WooCommerce PDF Invoice Builder, Create invoices, packing slips and more Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to SQL Injection via the pageId parameter in versions up to, and including, 1.2.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it po
t escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for subscribers or higher to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4336d597-7e87-46eb-8abd-9fafd6cd25d9?source=cve - https://plugins.trac.wordpress.org/browser/woo-pdf-invoice-builder/trunk/woocommerce-pdf-invoice-ajax.php?rev=2935371#L712 - https://plugins.trac.wordpress.org/changeset/2949518/woo-pdf-invoice-builder/trunk/woocommer
ajax.php?rev=2935371#L712 - https://plugins.trac.wordpress.org/changeset/2949518/woo-pdf-invoice-builder/trunk/woocommerce-pdf-invoice-ajax.php?contextall=1&old=2935371&old_path=%2Fwoo-pdf-invoice-builder%2Ftrunk%2Fwoocommerce-pdf-invoice-ajax.php
CVE ID: CVE-2023-3678 State: PUBLISHED Published: 2023-07-15T08:00:04.152Z Last Updated: 2024-08-02T07:01:57.365Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_inquiry of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-234223. Additional
njection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-234223. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234223 - https://vuldb.com/?ctiid.234223
CVE ID: CVE-2023-3679 State: PUBLISHED Published: 2023-07-15T08:31:03.079Z Last Updated: 2024-08-02T07:01:57.366Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Lost and Found Information System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_inquiry of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-234224. Additional Analyst Notes
ction. The attack may be launched remotely. The identifier of this vulnerability is VDB-234224. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234224 - https://vuldb.com/?ctiid.234224
CVE ID: CVE-2023-3680 State: PUBLISHED Published: 2023-07-15T09:00:05.039Z Last Updated: 2024-08-02T07:01:57.516Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Lost and Found Information System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=save_item of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-234225 was assigned to this vulnerability. Additional Analyst Notes: - CVE P
ate the attack remotely. The identifier VDB-234225 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234225 - https://vuldb.com/?ctiid.234225
CVE ID: CVE-2023-3681 State: PUBLISHED Published: 2023-07-15T09:31:03.424Z Last Updated: 2024-10-28T20:28:20.720Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Retro Cellphone Online Store Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Campcodes Retro Cellphone Online Store 1.0. This vulnerability affects unknown code of the file /admin/modal_add_product.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-234226 is the identifier assigned to this vulnerability. Additional Analyst Notes:
ed to the public and may be used. VDB-234226 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234226 - https://vuldb.com/?ctiid.234226 - https://github.com/E1CHO/cve_hub/blob/main/Retro%20Cellphone%20Online%20Store%20-%20vlun%208.pdf
CVE ID: CVE-2023-3682 State: PUBLISHED Published: 2023-07-15T16:31:03.234Z Last Updated: 2024-08-02T07:01:57.360Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Nesote Products: Inout Blockchain EasyPayments Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Nesote Inout Blockchain EasyPayments 1.0. Affected is an unknown function of the file /index.php/payment/getcoinaddress of the component POST Parameter Handler. The manipulation of the argument coinid leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-234228. NOTE: The vendor was contacted early about this disclosu
k remotely. The identifier of this vulnerability is VDB-234228. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234228 - https://vuldb.com/?ctiid.234228
CVE ID: CVE-2023-3683 State: PUBLISHED Published: 2023-07-16T08:00:05.329Z Last Updated: 2024-10-23T13:32:37.745Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: LivelyWorks Products: Articart Problem Types: CWE-79 Description: A vulnerability has been found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /items/search. The manipulation of the argument search_term leads to cross site scripting. The attack can be launched remotely. The identifier VDB-234229 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analys
nerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234229 - https://vuldb.com/?ctiid.234229
CVE ID: CVE-2023-3684 State: PUBLISHED Published: 2023-07-16T10:31:03.666Z Last Updated: 2024-11-21T15:56:03.958Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: LivelyWorks Products: Articart Problem Types: CWE-601 Description: A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change-language/de_DE of the component Base64 Encoding Handler. The manipulation of the argument redirectTo leads to open redirect. The attack may be launched remotely. VDB-234230 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respon
identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234230 - https://vuldb.com/?ctiid.234230
CVE ID: CVE-2023-3685 State: PUBLISHED Published: 2023-07-16T11:00:04.669Z Last Updated: 2024-08-02T07:01:57.397Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Nesote Products: Inout Search Engine AI Edition Problem Types: CWE-79 Description: A vulnerability was found in Nesote Inout Search Engine AI Edition 1.1. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-234231. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additiona
lity is VDB-234231. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234231 - https://vuldb.com/?ctiid.234231
CVE ID: CVE-2023-3686 State: PUBLISHED Published: 2023-07-16T13:00:05.529Z Last Updated: 2024-08-02T07:01:57.376Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bylancer Products: QuickAI OpenAI Problem Types: CWE-89 Description: A vulnerability was found in Bylancer QuickAI OpenAI 3.8.1. It has been declared as critical. This vulnerability affects unknown code of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-234232. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes
232. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234232 - https://vuldb.com/?ctiid.234232
CVE ID: CVE-2023-3687 State: PUBLISHED Published: 2023-07-16T13:31:03.418Z Last Updated: 2024-08-02T07:01:57.526Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bylancer Products: QuickVCard Problem Types: CWE-89 Description: A vulnerability was found in Bylancer QuickVCard 2.1. It has been rated as critical. This issue affects some unknown processing of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may be initiated remotely. The identifier VDB-234233 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes
ity. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234233 - https://vuldb.com/?ctiid.234233
CVE ID: CVE-2023-3688 State: PUBLISHED Published: 2023-07-16T14:31:02.872Z Last Updated: 2024-08-02T07:01:57.377Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bylancer Products: QuickJob Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the component GET Parameter Handler. The manipulation of the argument keywords/gender leads to sql injection. It is possible to launch the attack remotely. VDB-234234 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program
vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234234 - https://vuldb.com/?ctiid.234234
CVE ID: CVE-2023-3689 State: PUBLISHED Published: 2023-07-16T15:31:03.673Z Last Updated: 2024-08-02T07:01:57.376Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bylancer Products: QuickQR Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7. Affected by this vulnerability is an unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-234235. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst N
-234235. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234235 - https://vuldb.com/?ctiid.234235
CVE ID: CVE-2023-3690 State: PUBLISHED Published: 2023-07-16T16:00:04.841Z Last Updated: 2024-08-02T07:01:57.517Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bylancer Products: QuickOrder Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-234236. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Ana
is VDB-234236. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234236 - https://vuldb.com/?ctiid.234236
CVE ID: CVE-2023-3691 State: PUBLISHED Published: 2023-07-16T16:31:02.909Z Last Updated: 2024-10-23T13:32:23.255Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: layui Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16. This affects an unknown part of the component HTML Attribute Handler. The manipulation of the argument title leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.8.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-234237 was assigned to this vulnerability. Additional Analyst
nded to upgrade the affected component. The identifier VDB-234237 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234237 - https://vuldb.com/?ctiid.234237 - https://gitee.com/layui/layui/issues/I7HDXZ - https://gitee.com/layui/layui/tree/v2.8.0
CVE ID: CVE-2023-3692 State: PUBLISHED Published: 2023-07-16T00:00:20.410Z Last Updated: 2024-10-28T20:07:05.935Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: admidio Products: admidio/admidio Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/be6616eb-384d-40d6-b1fd-0ec9e4973f12 - https://github.com/admidio/admidio/commit/d66585d14b1160712a8a9bfaf9769dd3da0e9a83
CVE ID: CVE-2023-3693 State: PUBLISHED Published: 2023-07-16T21:31:03.045Z Last Updated: 2024-08-02T07:01:57.391Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Life Insurance Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Life Insurance Management System 1.0. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-234244. Additional Analyst Notes: - CVE Program Contai