deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-38619
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `msb` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38620
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `lsb` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38621
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `flags` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38622
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `len` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38623
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `vindex_offset` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38648
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write perfomed by the prefix copy loop.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1813; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38649
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write perfomed by the string copy loop.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1813; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38650
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is not zero.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1814; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38651
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is zero.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1814; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38652
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is not zero.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1815; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38653
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is zero.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1815; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38657
Published: 2024-01-08
Description: An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1823; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39234
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when looping over `lt->numrealfacs`.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1817; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39235
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when looping over `lt->num_time_ticks`.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1817; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39270
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `rows` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39271
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `msb` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39272
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `lsb` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39273
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `flags` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39274
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `len` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39275
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `value` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39316
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `string_pointers` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1820; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39317
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `string_lens` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1820; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39413
Published: 2024-01-08
Description: Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer underflow when performing the left shift operation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-191, CWE-191
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1824; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39414
Published: 2024-01-08
Description: Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer underflow when performing the right shift operation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-191, CWE-191
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1824; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39443
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115. A specially-crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write perfomed by the prefix copy loop.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1826; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-39444
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115. A specially-crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write perfomed by the string copy loop.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1826; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-47211
Published: 2024-01-08
Description: A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851; https://www.manageengine.com/itom/advisory/cve-2023-47211.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851
CVE: CVE-2024-21650
Published: 2024-01-08
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution (RCE) attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user registration enabled for guests. This vulnerability has been patched in XWiki 14.10.17, 15.5.3 and 15.8 RC1.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-95, CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/b290bfd573c6f7db6cc15a88dd4111d9fcad0d31; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rj7p-xjv7-7229; https://jira.xwiki.org/browse/XWIKI-21173
CVE: CVE-2024-21744
Published: 2024-01-08
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mapster Technology Inc. Mapster WP Maps allows Stored XSS.This issue affects Mapster WP Maps: from n/a through 1.2.38.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/mapster-wp-maps/wordpress-mapster-wp-maps-plugin-1-2-38-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/mapster-wp-maps/wordpress-mapster-wp-maps-plugin-1-2-38-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-21745
Published: 2024-01-08
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Stored XSS.This issue affects Laybuy Payment Extension for WooCommerce: from n/a through 5.3.9.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/laybuy-gateway-for-woocommerce/wordpress-laybuy-payment-extension-for-woocommerce-plugin-5-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/laybuy-gateway-for-woocommerce/wordpress-laybuy-payment-extension-for-woocommerce-plugin-5-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-21747
Published: 2024-01-08
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting.This issue affects WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting: from n/a through 1.12.8.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/erp/wordpress-wp-erp-plugin-1-12-8-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/erp/wordpress-wp-erp-plugin-1-12-8-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2022-2585
Published: 2024-01-08
Description: It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2585; https://lore.kernel.org/lkml/[PII_REDACTED]0751.164716-1-cascardo@canonical.com/T/#u; https://ubuntu.com/security/notices/USN-5564-1
CVE: CVE-2022-2586
Published: 2024-01-08
Description: It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586; https://lore.kernel.org/netfilter-devel/[PII_REDACTED]0148.164591-1-cascardo@canonical.com/T/#t; https://ubuntu.com/security/notices/USN-5557-1
CVE: CVE-2022-2588
Published: 2024-01-08
Description: It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-415
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2588; https://github.com/Markakd/CVE-2022-2588; https://lore.kernel.org/netdev/[PII_REDACTED]0518.164662-1-cascardo@canonical.com/T/#u
CVE: CVE-2022-2602
Published: 2024-01-08
Description: io_uring UAF, Unix SCM garbage collection
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/176533/Linux-Broken-Unix-GC-Interaction-Use-After-Free.html; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2602; https://ubuntu.com/security/notices/USN-5691-1
CVE: CVE-2022-3328
Published: 2024-01-08
Description: Race condition in snap-confine's must_mkdir_and_open_with_perms()
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-362
References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3328; https://ubuntu.com/security/notices/USN-5753-1; https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3328
CVE: CVE-2023-52215
Published: 2024-01-08
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.This issue affects Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce: from n/a through 1.5.1.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-89
References: https://patchstack.com/database/vulnerability/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/wordpress-barcode-scanner-with-inventory-order-manager-plugin-1-5-1-unauthenticated-sql-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/wordpress-barcode-scanner-with-inventory-order-manager-plugin-1-5-1-unauthenticated-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2023-52218
Published: 2024-01-08
Description: Deserialization of Untrusted Data vulnerability in Anton Bond Woocommerce Tranzila Payment Gateway.This issue affects Woocommerce Tranzila Payment Gateway: from n/a through 1.0.8.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/woo-tranzila-gateway/wordpress-woocommerce-tranzila-gateway-plugin-1-0-8-unauthenticated-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woo-tranzila-gateway/wordpress-woocommerce-tranzila-gateway-plugin-1-0-8-unauthenticated-php-object-injection-vulnerability?_s_id=cve