deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-36468
Published: 2023-06-29
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an XWiki installation is upgraded and that upgrade contains a fix for a bug in a document, just a new version of that document is added. In some cases, it's still possible to exploit the vulnerability that was fixed in the new version. The severity of this depends on the fixed vulnerability, for the purpose of this advisory take CVE-2022-36100/GHSA-2g5c-228j-p52x as example - it is easily exploitable with just view rights and critical. When XWiki is upgraded from a version before the fix for it (e.g., 14.3) to a version including the fix (e.g., 14.4), the vulnerability can still be reproduced by adding `rev=1.1` to the URL used in the reproduction steps so remote code execution is possible even after upgrading. Therefore, this affects the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability also affects manually added script macros that contained security vulnerabilities that were later fixed by changing the script macro without deleting the versions with the security vulnerability from the history. This vulnerability doesn't affect freshly installed versions of XWiki. Further, this vulnerability doesn't affect content that is only loaded from the current version of a document like the code of wiki macros or UI extensions. This vulnerability has been patched in XWiki 14.10.7 and 15.2RC1 by forcing old revisions to be executed in a restricted mode that disables all script macros. As a workaround, admins can manually delete old revisions of affected documents. A script could be used to identify all installed documents and delete the history for them. However, also manually added and later corrected code may be affected by this vulnerability so it is easy to miss documents.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-459, CWE-459
References: https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-2g5c-228j-p52x; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-8q9q-r9v2-644m
CVE: CVE-2023-36469
Published: 2023-06-29
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile and notification settings can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. This has been patched in XWiki 14.10.6 and 15.2RC1. Users are advised to update. As a workaround the main security fix can be manually applied by patching the affected document `XWiki.Notifications.Code.NotificationRSSService`. This will break the link to the differences, though as this requires additional changes to Velocity templates as shown in the patch. While the default template is available in the instance and can be easily patched, the template for mentions is contained in a `.jar`-file and thus cannot be fixed without replacing that jar.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-74
References: https://github.com/xwiki/xwiki-platform/commit/217e5bb7a657f2991b154a16ef4d5ae9c29ad39c; https://github.com/xwiki/xwiki-platform/commit/217e5bb7a657f2991b154a16ef4d5ae9c29ad39c#diff-7221a548809fa2ba34348556f4b5bd436463c559ebdf691197932ee7ce4478ca; https://github.com/xwiki/xwiki-platform/commit/217e5bb7a657f2991b154a16ef4d5ae9c29ad39c#diff-b261c6eac3108c3e6e734054c28a78f59d3439ab72fe8582dadf87670a0d15a4
CVE: CVE-2023-36470
Published: 2023-06-29
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with programming rights and thus allows remote code execution. There are different attack vectors, the simplest is the Velocity code in the icon set's HTML or XWiki syntax definition. The [icon picker](https://extensions.xwiki.org/xwiki/bin/view/Extension/Icon%20Theme%20Application#HIconPicker) can be used to trigger the rendering of any icon set. The XWiki syntax variant of the icon set is also used without any escaping in some documents, allowing to inject XWiki syntax including script macros into a document that might have programming right, for this the currently used icon theme needs to be edited. Further, the HTML output of the icon set is output as JSON in the icon picker and this JSON is interpreted as XWiki syntax, allowing again the injection of script macros into a document with programming right and thus allowing remote code execution. This impacts the confidentiality, integrity and availability of the whole XWiki instance. This issue has been patched in XWiki 14.10.6 and 15.1. Icon themes now require script right and the code in the icon theme is executed within the context of the icon theme, preventing any rights escalation. A macro for displaying icons has been introduced to avoid injecting the raw wiki syntax of an icon set into another document. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 9.9 (CRITICAL)
CWE: CWE-74
References: https://github.com/xwiki/xwiki-platform/commit/46b542854978e9caa687a5c2b8817b8b17877d94; https://github.com/xwiki/xwiki-platform/commit/79418dd92ca11941b46987ef881bf50424898ff4; https://github.com/xwiki/xwiki-platform/commit/b0cdfd893912baaa053d106a92e39fa1858843c7
CVE: CVE-2023-36607
Published: 2023-06-29
Description: The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03
CVE: CVE-2023-3464
Published: 2023-06-29
Description: A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation of the argument p leads to cross site scripting. It is possible to launch the attack remotely. It is recommended to upgrade the affected component. VDB-232710 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://simplephpscripts.com/guestbook-script-php/guestbook/preview.php; https://vuldb.com/?ctiid.232710; https://vuldb.com/?id.232710
CVE: CVE-2023-3465
Published: 2023-06-29
Description: A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-232711.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://simplephpscripts.com/guestbook-script-php/guestbook/preview.php; https://vuldb.com/?ctiid.232711; https://vuldb.com/?id.232711
CVE: CVE-2023-36143
Published: 2023-06-30
Description: Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://maxlink.com; https://github.com/leonardobg/CVE-2023-36143; http://maxlink.com
CVE: CVE-2023-36146
Published: 2023-06-30
Description: A Stored Cross-Site Scripting (XSS) vulnerability was found in Multilaser RE 170 using firmware 2.2.6733.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://multilaser.com; https://github.com/leonardobg/CVE-2023-36146/#readme; http://multilaser.com
CVE: CVE-2023-3469
Published: 2023-06-30
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/04a0183c25dd425f4c2bfb5f75b7650b932ae278; https://huntr.dev/bounties/3565cfc9-82c4-4db8-9b8f-494dd81b56ca; https://github.com/thorsten/phpmyfaq/commit/04a0183c25dd425f4c2bfb5f75b7650b932ae278
CVE: CVE-2020-18432
Published: 2023-06-30
Description: File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://vorders.me/2019/03/05/semcms-vulnerablity-before-php-v3-7/#admin-upload-webshell-in-SEMCMS-Upfile-php; https://github.com/advisories/GHSA-hg72-f8x2-chjh; https://vorders.me/2019/03/05/semcms-vulnerablity-before-php-v3-7/#admin-upload-webshell-in-SEMCMS-Upfile-php
CVE: CVE-2023-2834
Published: 2023-06-30
Description: The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is due to insufficient verification on the user being supplied during booking an appointment through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-306
References: https://lana.codes/lanavdb/0dea1346-fd60-4338-8af6-6f89c29075d4/; https://plugins.trac.wordpress.org/browser/bookit/tags/2.3.6/includes/classes/CustomerController.php#L27; https://plugins.trac.wordpress.org/browser/bookit/tags/2.3.6/includes/classes/database/Customers.php#L63
CVE: CVE-2023-33336
Published: 2023-06-30
Description: Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://inf0seq.github.io/cve/2023/04/30/Cross-site-scripting-%28XSS%29-in-Sophos-Web-Appliance-4.1.1-0.9.html; https://inf0seq.github.io/cve/2023/04/30/Cross-site-scripting-%28XSS%29-in-Sophos-Web-Appliance-4.1.1-0.9.html
CVE: CVE-2023-36347
Published: 2023-06-30
Description: A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.youtube.com/watch?v=7qaIeE2cyO4; https://yuyudhn.github.io/pos-codekop-vulnerability/; https://www.youtube.com/watch?v=7qaIeE2cyO4
CVE: CVE-2023-3063
Published: 2023-06-30
Description: The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 4.67. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers with subscriber privileges or above, to change user passwords and potentially take over administrator accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/sp-client-document-manager/trunk/classes/ajax.php#L149; https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc2e720-85d9-42d9-94ef-eb172425993d?source=cve; https://plugins.trac.wordpress.org/browser/sp-client-document-manager/trunk/classes/ajax.php#L149
CVE: CVE-2023-3249
Published: 2023-06-30
Description: The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.6.0. This is due to incorrect authentication checking in the 'hidden_form_data' function. This makes it possible for authenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://plugins.trac.wordpress.org/browser/web3-authentication/tags/2.6.0/classes/common/Web3/controller/class-moweb3flowhandler.php#L198; https://plugins.trac.wordpress.org/changeset/2933325/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e30b62de-7280-4c29-b882-dfa83e65966b?source=cve
CVE: CVE-2023-32607
Published: 2023-06-30
Description: Stored cross-site scripting vulnerability in Pleasanter (Community Edition and Enterprise Edition)  1.3.39.2 and earlier versions allows a remote authenticated attacker to inject an arbitrary script.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN97818024/; https://pleasanter.org/archives/vulnerability-update-202306; https://jvn.jp/en/jp/JVN97818024/
CVE: CVE-2023-32608
Published: 2023-06-30
Description: Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to alter an arbitrary file on the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN97818024/; https://pleasanter.org/archives/vulnerability-update-202306; https://jvn.jp/en/jp/JVN97818024/
CVE: CVE-2023-36539
Published: 2023-06-30
Description: Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-325, CWE-326
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-26135
Published: 2023-06-30
Description: All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321, CWE-1321
References: https://github.com/brycebaril/node-flatnest/blob/b7d97ec64a04632378db87fcf3577bd51ac3ee39/nest.js%23L43; https://github.com/brycebaril/node-flatnest/commit/27d569baf9d9d25677640edeaf2d13af165868d6; https://github.com/brycebaril/node-flatnest/issues/4
CVE: CVE-2023-2846
Published: 2023-06-30
Description: Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-294, CWE-294
References: https://jvn.jp/vu/JVNVU94519952; https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-04; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-005_en.pdf
CVE: CVE-2023-32612
Published: 2023-06-30
Description: Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege.
CVSS Score: 7.2 (HIGH)
CWE: CWE-565
References: https://jvn.jp/en/jp/JVN78634340/; https://www.wavlink.com/en_us/firmware/details/932108ffc5.html; https://jvn.jp/en/jp/JVN78634340/
CVE: CVE-2023-32613
Published: 2023-06-30
Description: Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in.
CVSS Score: 8.1 (HIGH)
CWE: CWE-668
References: https://jvn.jp/en/jp/JVN78634340/; https://www.wavlink.com/en_us/firmware/details/932108ffc5.html; https://jvn.jp/en/jp/JVN78634340/
CVE: CVE-2023-32620
Published: 2023-06-30
Description: Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://jvn.jp/en/jp/JVN78634340/; https://www.wavlink.com/en_us/firmware/details/932108ffc5.html; https://jvn.jp/en/jp/JVN78634340/
CVE: CVE-2023-32621
Published: 2023-06-30
Description: WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://jvn.jp/en/jp/JVN78634340/; https://www.wavlink.com/en_us/firmware/details/932108ffc5.html; https://jvn.jp/en/jp/JVN78634340/
CVE: CVE-2023-32622
Published: 2023-06-30
Description: Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN78634340/; https://www.wavlink.com/en_us/firmware/details/932108ffc5.html; https://jvn.jp/en/jp/JVN78634340/
CVE: CVE-2023-28387
Published: 2023-06-30
Description: "NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798
References: https://apps.apple.com/us/app/%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%BA%E3%83%94%E3%83%83%E3%82%AF%E3%82%B9-%E3%83%93%E3%82%B8%E3%83%8D%E3%82%B9%E3%81%AB%E5%BD%B9%E7%AB%8B%E3%81%A4%E7%B5%8C%E6%B8%88%E3%83%8B%E3%83%A5%E3%83%BC%E3%82%B9%E3%82%A2%E3%83%97%E3%83%AA/id640956497; https://jvn.jp/en/jp/JVN32739265/; https://play.google.com/store/apps/details?id=com.newspicks
CVE: CVE-2023-3473
Published: 2023-06-30
Description: A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/edit_product.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232752.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Retro%20Cellphone%20Online%20Store%20-%20vlun%204.pdf; https://vuldb.com/?ctiid.232752; https://vuldb.com/?id.232752
CVE: CVE-2023-3474
Published: 2023-06-30
Description: A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component. The identifier VDB-232753 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.232753; https://vuldb.com/?id.232753; https://vuldb.com/?ctiid.232753
CVE: CVE-2023-3475
Published: 2023-06-30
Description: A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. It is recommended to upgrade the affected component. VDB-232754 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?ctiid.232754; https://vuldb.com/?id.232754; https://vuldb.com/?ctiid.232754
CVE: CVE-2023-3476
Published: 2023-06-30
Description: A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. It has been classified as problematic. This affects an unknown part of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-232755.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.232755; https://vuldb.com/?id.232755; https://vuldb.com/?ctiid.232755
CVE: CVE-2023-3477
Published: 2023-06-30
Description: A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-232756.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.232756; https://vuldb.com/?id.232756; https://vuldb.com/?ctiid.232756
CVE: CVE-2023-3479
Published: 2023-06-30
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/hestiacp/hestiacp/commit/2326aa525a7ba14513af783f29cb5e62a476e67a; https://huntr.dev/bounties/6ac5cf87-6350-4645-8930-8f[PII_REDACTED]; https://github.com/hestiacp/hestiacp/commit/2326aa525a7ba14513af783f29cb5e62a476e67a
CVE: CVE-2023-3478
Published: 2023-06-30
Description: A vulnerability classified as critical was found in IBOS OA 4.5.5. Affected by this vulnerability is the function actionEdit of the file ?r=dashboard/roleadmin/edit&op=member of the component Add User Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232759. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/ShuangbiaoDai/CVE/blob/main/ibos%20oa.md; https://vuldb.com/?ctiid.232759; https://vuldb.com/?id.232759
CVE: CVE-2023-33276
Published: 2023-06-30
Description: The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.syss.de/en/responsible-disclosure-policy; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-016.txt; https://www.syss.de/en/responsible-disclosure-policy
CVE: CVE-2023-37298
Published: 2023-06-30
Description: Joplin before 2.11.5 allows XSS via a USE element in an SVG document.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/laurent22/joplin/commit/caf66068bfc474bbfd505013076ed173cd90ca83; https://github.com/laurent22/joplin/releases/tag/v2.11.5; https://vuln.ryotak.net/advisories/69
CVE: CVE-2023-37299
Published: 2023-06-30
Description: Joplin before 2.11.5 allows XSS via an AREA element of an image map.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/laurent22/joplin/commit/9e90d9016daf79b5414646a93fd369aedb035071; https://github.com/laurent22/joplin/releases/tag/v2.11.5; https://vuln.ryotak.net/advisories/68
CVE: CVE-2023-26299
Published: 2023-06-30
Description: A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://support.hp.com/us-en/document/ish_8[PII_REDACTED]746-16/hpsbhf03850; https://support.hp.com/us-en/document/ish_8[PII_REDACTED]746-16/hpsbhf03850
CVE: CVE-2023-34840
Published: 2023-06-30
Description: angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://alexcrack.com; https://github.com/Xh4H/CVE-2023-34840; https://github.com/alexcrack/angular-ui-notification
CVE: CVE-2023-35175
Published: 2023-06-30
Description: Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://support.hp.com/us-en/document/ish_8[PII_REDACTED]446-16/hpsbpi03851; https://support.hp.com/us-en/document/ish_8[PII_REDACTED]446-16/hpsbpi03851