alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2023-48256 (published 2024-01-10)
The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
Weakness: CWE-113
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48257 (published 2024-01-10)
The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device. The vulnerability can be exploited directly by authenticated users, via crafted HTTP requests, or indirectly by unauthenticated users, by accessing already-exported backup packages, or crafting an import package and inducing an authenticated victim into sending the HTTP upload request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1391
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48258 (published 2024-01-10)
The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP
request through a victim’s session.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
Weakness: CWE-352
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48259 (published 2024-01-10)
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-4826 (published 2024-02-23)
The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: socialdriver
Affected products: socialdriver
CVE-2023-48260 (published 2024-01-10)
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48261 (published 2024-01-10)
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48262 (published 2024-01-10)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48263 (published 2024-01-10)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48264 (published 2024-01-10)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48265 (published 2024-01-10)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48266 (published 2024-01-10)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: bosch
Affected products: nexo-os, nexo_cordless_nutrunner_nxa011s-36v-b_\(0608842012\), nexo_cordless_nutrunner_nxa011s-36v_\(0608842011\), nexo_cordless_nutrunner_nxa015s-36v-b_\(0608842006\), nexo_cordless_nutrunner_nxa015s-36v_\(0608842001\), nexo_cordless_nutrunner_nxa030s-36v-b_\(0608842007\), nexo_cordless_nutrunner_nxa030s-36v_\(0608842002\), nexo_cordless_nutrunner_nxa050s-36v-b_\(0608842008\), nexo_cordless_nutrunner_nxa050s-36v_\(0608842003\), nexo_cordless_nutrunner_nxa065s-36v-b_\(0608842014\), nexo_cordless_nutrunner_nxa065s-36v_\(0608842013\), nexo_cordless_nutrunner_nxp012qd-36v-b_\(0608842010\), nexo_cordless_nutrunner_nxp012qd-36v_\(0608842005\), nexo_cordless_nutrunner_nxv012t-36v-b_\(0608842016\), nexo_cordless_nutrunner_nxv012t-36v_\(0608842015\), nexo_special_cordless_nutrunner_\(0608pe2272\), nexo_special_cordless_nutrunner_\(0608pe2301\), nexo_special_cordless_nutrunner_\(0608pe2514\), nexo_special_cordless_nutrunner_\(0608pe2515\), nexo_special_cordless_nutrunner_\(0608pe2666\), nexo_special_cordless_nutrunner_\(0608pe2673\)
CVE-2023-48268 (published 2023-11-27)
Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards allowing an attacker to consume excessive resources, possibly leading to Denial of Service, by importing a board using a specially crafted zip (zip bomb).


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: mattermost
Affected products: mattermost
CVE-2023-4827 (published 2023-10-16)
The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using GET requests, such as uploading a web shell.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected vendors: ninjateam
Affected products: filester
CVE-2023-48270 (published 2024-07-08)
A stack-based buffer overflow vulnerability exists in the boa formDnsv6 functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: level1, realtek
Affected products: rtl819x_jungle_software_development_kit, wbr-6013, wbr-6013_firmware
CVE-2023-48271 (published 2024-06-04)
Authentication Bypass by Spoofing vulnerability in yonifre Maspik – Spam blacklist allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maspik – Spam blacklist: from n/a through 0.10.3.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-290
CVE-2023-48272 (published 2023-11-30)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik – Spam Blacklist allows Stored XSS.This issue affects Maspik – Spam Blacklist: from n/a through 0.9.2.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: wpmaspik
Affected products: maspik
CVE-2023-48273 (published 2024-06-11)
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2.2.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-862
CVE-2023-48274 (published 2024-12-09)
Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCMultiShipping: from n/a through 2.3.5.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-862
CVE-2023-48275 (published 2024-03-26)
Unrestricted Upload of File with Dangerous Type vulnerability in Trustindex.Io Widgets for Google Reviews.This issue affects Widgets for Google Reviews: from n/a through 11.0.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-434
CVE-2023-48276 (published 2024-06-04)
Improper Restriction of Excessive Authentication Attempts vulnerability in Nitin Rathod WP Forms Puzzle Captcha allows Functionality Bypass.This issue affects WP Forms Puzzle Captcha: from n/a through 4.1.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-307
CVE-2023-48277 (published 2024-12-09)
Missing Authorization vulnerability in SuperPWA Super Progressive Web Apps super-progressive-web-apps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Progressive Web Apps: from n/a through <= 2.2.21.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Weakness: CWE-862
CVE-2023-48278 (published 2023-11-30)
Cross-Site Request Forgery (CSRF) vulnerability in Nitin Rathod WP Forms Puzzle Captcha allows Stored XSS.This issue affects WP Forms Puzzle Captcha: from n/a through 4.1.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-352
Affected vendors: nitinrathod
Affected products: wp_forms_puzzle_captcha
CVE-2023-48279 (published 2023-11-30)
Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: s-sols
Affected products: seraphinite_post_.docx_source
CVE-2023-4828 (published 2023-09-13)
An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure of sensitive data events from the agent about the personally identifiable information (PII) and intellectual property it monitors, and all such data could be altered or deleted before reaching the ITM Server. An attacker must first successfully obtain valid agent credentials and agent hostname. All versions prior to 7.14.3.69 are affected.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-754
Affected vendors: proofpoint
Affected products: insider_threat_management
CVE-2023-48280 (published 2024-06-12)
Missing Authorization vulnerability in Consensu.IO Consensu.Io.This issue affects Consensu.Io: from n/a through 1.0.1.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-862
CVE-2023-48281 (published 2023-11-30)
Cross-Site Request Forgery (CSRF) vulnerability in Super Blog Me Broken Link Checker for YouTube allows Cross Site Request Forgery.This issue affects Broken Link Checker for YouTube: from n/a through 1.3.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: superblogme
Affected products: broken_link_checker_for_youtube
CVE-2023-48282 (published 2023-11-30)
Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio Taxonomy filter allows Cross Site Request Forgery.This issue affects Taxonomy filter: from n/a through 2.2.9.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: andrealandonio
Affected products: taxonomy_filter
CVE-2023-48283 (published 2023-11-30)
Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: presstigers
Affected products: simple_testimonials_showcase
CVE-2023-48284 (published 2023-11-30)
Cross-Site Request Forgery (CSRF) vulnerability in WebToffee Decorator – WooCommerce Email Customizer allows Cross Site Request Forgery.This issue affects Decorator – WooCommerce Email Customizer: from n/a through 1.2.7.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: webtoffee
Affected products: decorator
CVE-2023-48285 (published 2024-06-04)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Tips and Tricks HQ Stripe Payments allows Code Injection.This issue affects Stripe Payments: from n/a through 2.0.79.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-80
CVE-2023-48286 (published 2024-12-09)
Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stripe Payments: from n/a through <= 2.0.79.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L)
Weakness: CWE-862
CVE-2023-48287 (published 2024-12-09)
Missing Authorization vulnerability in Matat Technologies TextMe SMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through 1.9.0.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Weakness: CWE-862
CVE-2023-48288 (published 2023-12-21)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.1.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-200
Affected vendors: hmplugin
Affected products: jobwp
CVE-2023-48289 (published 2023-11-30)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Stored XSS.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.3.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: spreadsheetconverter
Affected products: import_spreadsheets
CVE-2023-4829 (published 2023-10-13)
Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: froxlor
Affected products: froxlor
CVE-2023-48290 (published 2024-06-04)
Improper Restriction of Excessive Authentication Attempts vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Functionality Bypass.This issue affects Form Maker by 10Web: from n/a through 1.15.20.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-307
Affected vendors: 10web
Affected products: form_maker
CVE-2023-48291 (published 2023-12-21)
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn't.

This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2 

Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-668
Affected vendors: apache
Affected products: airflow
CVE-2023-48292 (published 2023-11-20)
The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacker to execute arbitrary shell commands by tricking an admin into loading the URL with the shell command. A very simple possibility for an attack are comments. When the attacker can leave a comment on any page in the wiki it is sufficient to include an image with an URL like  `/xwiki/bin/view/Admin/RunShellCommand?command=touch%20/tmp/attacked` in the comment. When an admin views the comment, the file `/tmp/attacked` will be created on the server. The output of the command is also vulnerable to XWiki syntax injection which offers a simple way to execute Groovy in the context of the XWiki installation and thus an even easier way to compromise the integrity and confidentiality of the whole XWiki installation. This has been patched by adding a form token check in version 4.5.1 of the admin tools. Some workarounds are available. The patch can be applied manually to the affected wiki pages. Alternatively, the document `Admin.RunShellCommand` can also be deleted if the possibility to run shell commands isn't needed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: xwiki
Affected products: admin_tools
CVE-2023-48293 (published 2023-11-20)
The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerability in the query on XWiki tool allows executing arbitrary database queries on the database of the XWiki installation. Among other things, this allows modifying and deleting all data of the wiki. This could be both used to damage the wiki and to create an account with elevated privileges for the attacker, thus impacting the confidentiality, integrity and availability of the whole XWiki instance. A possible attack vector are comments on the wiki, by embedding an image with wiki syntax like `[[image:path:/xwiki/bin/view/Admin/QueryOnXWiki?query=DELETE%20FROM%20xwikidoc]]`, all documents would be deleted from the database when an admin user views this comment. This has been patched in Admin Tools Application 4.5.1 by adding form token checks. Some workarounds are available. The patch can also be applied manually to the affected pages. Alternatively, if the query tool is not needed, by deleting the document `Admin.SQLToolsGroovy`, all database query tools can be deactivated.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: xwiki
Affected products: xwiki
CVE-2023-48294 (published 2023-11-17)
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions of LibreNMS when a user accesses their device dashboard, one request is sent to `graph.php` to access graphs generated on the particular Device. This request can be accessed by a low privilege user and they can enumerate devices on librenms with their id or hostname. Leveraging this vulnerability a low privilege user can see all devices registered by admin users. This vulnerability has been addressed in commit `489978a923` which has been included in release version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: librenms
Affected products: librenms
CVE-2023-48295 (published 2023-11-17)
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. Affected versions are subject to a cross site scripting (XSS) vulnerability in the device group popups. This issue has been addressed in commit `faf66035ea` which has been included in release version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: librenms
Affected products: librenms
CVE-2023-48296 (published 2024-03-25)
OroPlatform is a PHP Business Application Platform (BAP).  Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user. This vulnerability is fixed in 5.1.4.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-200
Affected vendors: oroinc
Affected products: oroplatform
CVE-2023-48297 (published 2024-01-12)
Discourse is a platform for community discussion. The message serializer uses the full list of expanded chat mentions (@all and @here) which can lead to a very long array of users. This issue was patched in versions 3.1.4 and beta 3.2.0.beta5.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: discourse
Affected products: discourse
CVE-2023-48298 (published 2023-12-21)
ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an unauthenticated attacker. The vulnerability is very similar to CVE-2023-47118 with how the vulnerable function can be exploited.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-191
Affected vendors: clickhouse
Affected products: clickhouse, clickhouse_cloud
CVE-2023-48299 (published 2023-11-21)
TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to version 0.9.0, using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are extracted to any location on the filesystem that is within the process permissions. Leveraging this issue could aid third-party actors in hiding harmful code in open-source/public models, which can be downloaded from the internet, and take advantage of machines running Torchserve. The ZipSlip issue in TorchServe has been fixed by validating the paths of files contained within a zip archive before extracting them. TorchServe release 0.9.0 includes fixes to address the ZipSlip vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-22
Affected vendors: pytorch
Affected products: torchserve
CVE-2023-4830 (published 2023-09-15)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tura Signalix allows SQL Injection.

This issue affects Signalix: 7T_0228.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: turaconsulting
Affected products: signalix
CVE-2023-48300 (published 2023-11-20)
The `Embed Privacy` plugin for WordPress that prevents the loading of embedded external content is vulnerable to Stored Cross-Site Scripting via `embed_privacy_opt_out` shortcode in versions up to, and including, 1.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Version 1.8.1 contains a patch for this issue.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: epiph
Affected products: embed_privacy
CVE-2023-48301 (published 2023-11-21)
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: nextcloud
Affected products: nextcloud_server
CVE-2023-48302 (published 2023-11-21)
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, when a user is tricked into copy pasting HTML code without markup (Ctrl+Shift+V) the markup will actually render. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app text.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: nextcloud
Affected products: nextcloud_server
CVE-2023-48303 (published 2023-11-21)
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud Enterprise Server, admins can change authentication details of user configured external storage. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.11, 26.0.6, and 27.1.0 contain a patch for this issue. No known workarounds are available.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-284
Affected vendors: nextcloud
Affected products: nextcloud_server
CVE-2023-48304 (published 2023-11-21)
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in version 22.0.0 and prior to versions 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Enterprise Server, an attacker could enable and disable the birthday calendar for any user on the same server. Nextcloud Server 25.0.11, 26.0.6, and 27.1.0 and Nextcloud Enterprise Server 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0 contain patches for this issue. No known workarounds are available.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-639
Affected vendors: nextcloud
Affected products: nextcloud_server
CVE-2023-48305 (published 2023-11-21)
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud Enterprise Server, when the log level was set to debug, the user_ldap app logged user passwords in plaintext into the log file. If the log file was then leaked or shared in any way the users' passwords would be leaked. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.11, 26.0.6, and 27.1.0 contain a patch for this issue. As a workaround, change config setting `loglevel` to `1` or higher (should always be higher than 1 in production environments).
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: nextcloud
Affected products: nextcloud_server
CVE-2023-48306 (published 2023-11-21)
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in version 22.0.0 and prior to versions 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Enterprise Server, the DNS pin middleware was vulnerable to DNS rebinding allowing an attacker to perform SSRF as a final result. Nextcloud Server 25.0.11, 26.0.6, and 27.1.0 and Nextcloud Enterprise Server 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0 contain patches for this issue. No known workarounds are available.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-918
Affected vendors: nextcloud
Affected products: nextcloud_server
CVE-2023-48307 (published 2023-11-21)
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an attacker can use an unprotected endpoint in the Mail app to perform a SSRF attack. Nextcloud Mail app versions 2.2.8 and 3.3.0 contain a patch for this issue. As a workaround, disable the mail app.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-918
Affected vendors: nextcloud
Affected products: mail
CVE-2023-48308 (published 2023-12-22)
Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an exception while editing a calendar appointment. It is recommended that the Nextcloud Calendar app is upgraded to 4.5.3

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-1258
Affected vendors: nextcloud
Affected products: calendar
CVE-2023-48309 (published 2023-11-20)
NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization are affected by a vulnerability. A bad actor could create an empty/mock user, by getting hold of a NextAuth.js-issued JWT from an interrupted OAuth sign-in flow (state, PKCE or nonce). Manually overriding the `next-auth.session-token` cookie value with this non-related JWT would let the user simulate a logged in user, albeit having no user information associated with it. (The only property on this user is an opaque randomly generated string). This vulnerability does not give access to other users' data, neither to resources that require proper authorization via scopes or other means. The created mock user has no information associated with it (ie. no name, email, access_token, etc.) This vulnerability can be exploited by bad actors to peek at logged in user states (e.g. dashboard layout). `next-auth` `v4.24.5` contains a patch for the vulnerability. As a workaround, using a custom authorization callback for Middleware, developers can manually do a basic authentication.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-285
Affected vendors: nextauth.js
Affected products: next-auth
CVE-2023-4831 (published 2023-09-15)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncode Ncep allows SQL Injection.This issue affects Ncep: before 20230914 .


Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: weather
Affected products: ncode_ncep
CVE-2023-48310 (published 2023-11-20)
TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted. In this particular case, the option to create log files is accepted in addition to a host name (and even without). A log file is created at the location specified. These files are created as root. If the file exists, the existing file is being rendered useless. This can result in denial of service. Additionally, input for scanning can be any CIDR blocks passed to nmap. An attacker can scan 0.0.0.0/0 or even local networks. Version 2.1.1 contains a patch for this issue.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: nc3
Affected products: testing_platform
CVE-2023-48311 (published 2023-12-08)
dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers. Users of JupyterHub deployments running DockerSpawner starting with 0.11.0 without specifying `DockerSpawner.allowed_images` configuration allow users to launch _any_ pullable docker image, instead of restricting to only the single configured image, as intended. This issue has been addressed in commit `3ba4b665b` which has been included in dockerspawner release version 13. Users are advised to upgrade. Users unable to upgrade should explicitly set `DockerSpawner.allowed_images` to a non-empty list containing only the default image will result in the intended default behavior.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-20
Affected vendors: jupyter
Affected products: dockerspawner
CVE-2023-48312 (published 2023-11-24)
capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running with the `anonymous-auth` Kubernetes API Server setting disable (set to `false`) are affected since it would be possible to bypass the token review mechanism, interacting with the upper Kubernetes API Server. This privilege escalation cannot be exploited if you're relying only on client certificates (SSL/TLS). This vulnerability has been addressed in version 0.4.6. Users are advised to upgrade.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: clastix
Affected products: capsule-proxy
CVE-2023-48313 (published 2023-12-12)
Umbraco is an ASP.NET content management system (CMS).  Starting in 10.0.0 and prior to versions 10.8.1 and 12.3.4, Umbraco contains a cross-site scripting (XSS) vulnerability enabling attackers to bring malicious content into a website or application. Versions 10.8.1 and 12.3.4 contain a patch for this issue.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: umbraco
Affected products: umbraco_cms
CVE-2023-48314 (published 2023-12-01)
Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with Collabora Online Built-in CODE Server app can be vulnerable to attack via proxy.php. This vulnerability has been fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.403. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: collaboraoffice
Affected products: collabora_online
CVE-2023-48315 (published 2023-12-05)
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to ftp and sntp in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: microsoft
Affected products: azure_rtos_netx_duo
CVE-2023-48316 (published 2023-12-05)
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to snmp, smtp, ftp and dtls in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: microsoft
Affected products: azure_rtos_netx_duo
CVE-2023-48317 (published 2023-11-30)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Vatsa Display Custom Post allows Stored XSS.This issue affects Display Custom Post: from n/a through 2.2.1.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: vikasvatsa
Affected products: display_custom_post
CVE-2023-48318 (published 2024-06-04)
Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Contact Form Email allows Functionality Bypass.This issue affects Contact Form Email: from n/a through 1.3.41.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-307
Affected vendors: codepeople
Affected products: contact_form_email
CVE-2023-48319 (published 2024-05-17)
Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 8.6.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: salonbookingsystem
Affected products: salon_booking_system
CVE-2023-4832 (published 2023-09-14)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aceka Company Management allows SQL Injection.

This issue affects Company Management: before 3072 .
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: acekaholding
Affected products: company_management
CVE-2023-48320 (published 2023-11-30)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: web-dorado
Affected products: spidervplayer