deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-34238
Published: 2023-09-11
Description: Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 20.005.30334 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb22-32.html; https://helpx.adobe.com/security/products/acrobat/apsb22-32.html
CVE: CVE-2023-36980
Published: 2023-09-11
Description: An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-682
References: https://etherscan.io/; https://github.com/WayneLi12/CVEs/tree/master/CVE-2023-36980; https://etherscan.io/
CVE: CVE-2023-40786
Published: 2023-09-11
Description: HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/Hk_Cms/HkCms/issues/I7S3VC; https://www.hkcms.cn/index/index/uplogs.html; https://gitee.com/Hk_Cms/HkCms/issues/I7S3VC
CVE: CVE-2023-4630
Published: 2023-09-11
Description: An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which any user can read limited information about any project's imports.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-862
References: https://gitlab.com/gitlab-org/gitlab/-/issues/415117; https://about.gitlab.com/releases/2023/08/31/security-release-gitlab-16-3-1-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/415117
CVE: CVE-2020-24088
Published: 2023-09-11
Description: An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges.
CVSS Score: 7.8 (HIGH)
References: http://blog.rewolf.pl/blog/?p=1630; http://dronesec.pw/blog/2018/05/17/dell-supportassist-local-privilege-escalation/; https://github.com/rjt-gupta/CVE-2020-24088
CVE: CVE-2022-23382
Published: 2023-09-11
Description: Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network.
CVSS Score: 8.1 (HIGH)
CWE: CWE-400
References: http://lackylab.pl/articles/CVE-2022-23382.html; http://lackylab.pl/articles/CVE-2022-23382.html
CVE: CVE-2023-27470
Published: 2023-09-11
Description: BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSupportService_N-Central\PushUpdates, leading to arbitrary file deletion.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0011.md; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0011.md
CVE: CVE-2023-36140
Published: 2023-09-11
Description: In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb; https://www.phpjabbers.com/cleaning-business-software/; https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb
CVE: CVE-2023-41000
Published: 2023-09-11
Description: GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/gpac/gpac/issues/2550; https://github.com/gpac/gpac/issues/2550
CVE: CVE-2023-30058
Published: 2023-09-11
Description: novel-plus 3.6.2 is vulnerable to SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/201206030/novel-plus; https://github.com/Rabb1tQ/HillstoneCVEs/blob/main/CVE-2023-30058/CVE-2023-30058.md; https://github.com/Rabb1tQ/HillstoneCVEs/tree/main/CVE-2023-30058
CVE: CVE-2023-4881
Published: 2023-09-11
Description: Rejected reason: CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.
CVE: CVE-2020-19318
Published: 2023-09-11
Description: Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbitrary code via sending crafted data to the webserver service program.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/hhhhu8045759/dir_605L-stack-overflow/blob/master/README.md; https://github.com/hhhhu8045759/dir_605L-stack-overflow/blob/master/README.md
CVE: CVE-2023-39067
Published: 2023-09-11
Description: Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Yao-ruo/CVE-FIND/blob/main/CVE-2023-39067; https://github.com/Yao-ruo/CVE-ZLMediaKit/blob/main/README.md; https://github.com/Yao-ruo/CVE-FIND/blob/main/CVE-2023-39067
CVE: CVE-2023-41593
Published: 2023-09-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute arbitrary web scripts and HTML via a crafted payload injected into the Category and Category Field parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MATRIXDEVIL/CVE/blob/main/CVE-2023-41593; https://portswigger.net/web-security/cross-site-scripting; https://www.acunetix.com/websitesecurity/cross-site-scripting/
CVE: CVE-2023-41609
Published: 2023-09-11
Description: An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/CouchCMS/CouchCMS/issues/190; https://github.com/CouchCMS/CouchCMS/issues/190
CVE: CVE-2020-19319
Published: 2023-09-11
Description: Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/hhhhu8045759/dir_619l-buffer-overflow; https://github.com/hhhhu8045759/dir_619l-buffer-overflow
CVE: CVE-2020-19320
Published: 2023-09-11
Description: Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/hhhhu8045759/dlink-619l-buffer_overflow; https://www.dlink.com/en/security-bulletin/; https://github.com/hhhhu8045759/dlink-619l-buffer_overflow
CVE: CVE-2020-19323
Published: 2023-09-11
Description: An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart router via the M-search request ST parameter. No authentication required
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/hhhhu8045759/619L_upnpd_heapoverflow; https://www.dlink.com/en/security-bulletin/; https://github.com/hhhhu8045759/619L_upnpd_heapoverflow
CVE: CVE-2020-19559
Published: 2023-09-11
Description: An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveMethod() parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://medium.com/nightst0rm/t%E1%BA%A3n-m%E1%BA%A1n-v%E1%BB%81-l%E1%BB%97-h%E1%BB%95ng-trong-atm-diebold-f1040a70f2c9; https://medium.com/nightst0rm/t%E1%BA%A3n-m%E1%BA%A1n-v%E1%BB%81-l%E1%BB%97-h%E1%BB%95ng-trong-atm-diebold-f1040a70f2c9
CVE: CVE-2023-31067
Published: 2023-09-11
Description: An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: http://packetstormsecurity.com/files/174275/TSPlus-16.0.2.14-Insecure-Permissions.html; https://www.exploit-db.com/exploits/51679; http://packetstormsecurity.com/files/174275/TSPlus-16.0.2.14-Insecure-Permissions.html
CVE: CVE-2023-31068
Published: 2023-09-11
Description: An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: http://packetstormsecurity.com/files/174272/TSPlus-16.0.0.0-Insecure-Permissions.html; https://www.exploit-db.com/exploits/51680; http://packetstormsecurity.com/files/174272/TSPlus-16.0.0.0-Insecure-Permissions.html
CVE: CVE-2023-31069
Published: 2023-09-11
Description: An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312
References: http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html; https://www.exploit-db.com/exploits/51681; http://packetstormsecurity.com/files/174271/TSPlus-16.0.0.0-Insecure-Credential-Storage.html
CVE: CVE-2023-31468
Published: 2023-09-11
Description: An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\INOSOFT GmbH" folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as SYSTEM. 2024-1 is a fixed version.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: http://packetstormsecurity.com/files/174268/Inosoft-VisiWin-7-2022-2.1-Insecure-Permissions-Privilege-Escalation.html; https://cwe.mitre.org/data/definitions/276.html; https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-03
CVE: CVE-2023-38743
Published: 2023-09-11
Description: Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.
CVSS Score: 7.2 (HIGH)
References: https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38743.html; https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38743.html
CVE: CVE-2023-38829
Published: 2023-09-11
Description: An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E; https://github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E
CVE: CVE-2023-39063
Published: 2023-09-11
Description: Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/AndreGNogueira/CVE-2023-39063; https://github.com/AndreGNogueira/CVE-2023-39063
CVE: CVE-2023-39068
Published: 2023-09-11
Description: Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.03.R11.7601.Nat.OnvifC.20220120.bin allows a remote attacker to casue a denial of service via a crafted request to the service.XM component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.xiongmaitech.com/en/index.php/service/notice_info/51/3; https://www.xiongmaitech.com/en/index.php/service/notice_info/51/3
CVE: CVE-2023-39070
Published: 2023-09-11
Description: An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://sourceforge.net/p/cppcheck/discussion/general/thread/fa43fb8ab1/; https://sourceforge.net/p/cppcheck/discussion/general/thread/fa43fb8ab1/
CVE: CVE-2023-39780
Published: 2023-09-11
Description: On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the similar "check token module" issue, see CVE-2023-41347; and for the similar "code-authentication module" issue, see CVE-2023-41348.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md; https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md; https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md
CVE: CVE-2023-40032
Published: 2023-09-11
Description: libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/libvips/libvips/commit/e091d65835966ef56d53a4105a7362cafdb1582b; https://github.com/libvips/libvips/pull/3604; https://github.com/libvips/libvips/security/advisories/GHSA-33qp-9pq7-9584
CVE: CVE-2023-41103
Published: 2023-09-11
Description: Interact 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in several locations, allowing an attacker to store a JavaScript payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-41103; https://excellium-services.com/cert-xlm-advisory/CVE-2023-41103; https://www.interactsoftware.com/
CVE: CVE-2023-41256
Published: 2023-09-11
Description: 
Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access.


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-288
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01
CVE: CVE-2023-2705
Published: 2023-09-11
Description: The gAppointments WordPress plugin before 1.10.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against admin
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/0b3c83ad-d490-4ca3-8589-39163ea5e24b; https://wpscan.com/vulnerability/0b3c83ad-d490-4ca3-8589-39163ea5e24b
CVE: CVE-2023-36497
Published: 2023-09-11
Description: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 

could allow a guest user to elevate to admin privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-305
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01
CVE: CVE-2023-38256
Published: 2023-09-11
Description: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 

vulnerable to a path traversal attack, which could allow an attacker to access files stored on the system.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01
CVE: CVE-2023-39227
Published: 2023-09-11
Description: ​Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-256
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-248-01; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-248-01
CVE: CVE-2023-3169
Published: 2023-09-11
Description: The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not have authorisation in a REST route and does not validate as well as escape some parameters when outputting them back, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/e6d8216d-ace4-48ba-afca-74da0dc5abb5; https://wpscan.com/vulnerability/e6d8216d-ace4-48ba-afca-74da0dc5abb5
CVE: CVE-2023-3170
Published: 2023-09-11
Description: The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not validate and escape some settings, which could allow users with Admin privileges to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e95ff3c6-283b-4e5e-bea0-1f1375da08da; https://wpscan.com/vulnerability/e95ff3c6-283b-4e5e-bea0-1f1375da08da
CVE: CVE-2023-3510
Published: 2023-09-11
Description: The FTP Access WordPress plugin through 1.0 does not have authorisation and CSRF checks when updating its settings and is missing sanitisation as well as escaping in them, allowing any authenticated users, such as subscriber to update them with XSS payloads, which will be triggered when an admin will view the settings of the plugin. The attack could also be perform via CSRF against any authenticated user.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/76abf4ac-5cc1-41a0-84c3-dff42c659581; https://wpscan.com/vulnerability/76abf4ac-5cc1-41a0-84c3-dff42c659581
CVE: CVE-2023-40150
Published: 2023-09-11
Description: 
Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-749
References: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-248-01; https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-248-01
CVE: CVE-2023-40944
Published: 2023-09-11
Description: Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/KLSEHB/vulnerability-report/blob/main/Schoolmate_CVE-2023-40944; https://github.com/KLSEHB/vulnerability-report/blob/main/Schoolmate_CVE-2023-40944
CVE: CVE-2023-40945
Published: 2023-09-11
Description: Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/KLSEHB/vulnerability-report/blob/main/Doctormms_CVE-2023-40945; https://github.com/KLSEHB/vulnerability-report/blob/main/Doctormms_CVE-2023-40945
CVE: CVE-2023-40946
Published: 2023-09-11
Description: Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/KLSEHB/vulnerability-report/blob/main/Schoolmate_CVE-2023-40946; https://github.com/KLSEHB/vulnerability-report/blob/main/Schoolmate_CVE-2023-40946
CVE: CVE-2023-41336
Published: 2023-09-11
Description: ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an `EntityType` that is *not* part of the valid choices. The problem has been fixed in `symfony/ux-autocomplete` version 2.11.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/ux-autocomplete/CVE-2023-41336.yaml; https://github.com/symfony/ux-autocomplete/commit/fabcb2eee14b9e84a45b276711853a560b5d770c; https://github.com/symfony/ux-autocomplete/security/advisories/GHSA-4cpv-669c-r79x
CVE: CVE-2023-4022
Published: 2023-09-11
Description: The Herd Effects WordPress plugin before 5.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/c4ac0b19-58b1-4620-b3b7-fbe6dd6c8dd5; https://wpscan.com/vulnerability/c4ac0b19-58b1-4620-b3b7-fbe6dd6c8dd5
CVE: CVE-2023-4060
Published: 2023-09-11
Description: The WP Adminify WordPress plugin before 3.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/88745c9b-1c20-4004-89f6-d9ee223651f2; https://wpscan.com/vulnerability/88745c9b-1c20-4004-89f6-d9ee223651f2
CVE: CVE-2023-4270
Published: 2023-09-11
Description: The Min Max Control WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/04560bf1-676b-46fb-9[PII_REDACTED]f2686; https://wpscan.com/vulnerability/04560bf1-676b-46fb-9[PII_REDACTED]f2686
CVE: CVE-2023-4278
Published: 2023-09-11
Description: The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/175007/WordPress-Masterstudy-LMS-3.0.17-Account-Creation.html; https://wpscan.com/vulnerability/cb3173ec-9891-4bd8-9d05-24fe805b5235; http://packetstormsecurity.com/files/175007/WordPress-Masterstudy-LMS-3.0.17-Account-Creation.html
CVE: CVE-2023-4294
Published: 2023-09-11
Description: The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/1fc71fc7-861a-46cc-a147-1c7ece9a7776; https://wpscan.com/vulnerability/1fc71fc7-861a-46cc-a147-1c7ece9a7776
CVE: CVE-2023-4307
Published: 2023-09-11
Description: The Lock User Account WordPress plugin through 1.0.3 does not have CSRF check when bulk locking and unlocking accounts, which could allow attackers to make logged in admins lock and unlock arbitrary users via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/06f7aa45-b5d0-4afb-95cc-8f1c82f6f8b3; https://wpscan.com/vulnerability/06f7aa45-b5d0-4afb-95cc-8f1c82f6f8b3
CVE: CVE-2023-4314
Published: 2023-09-11
Description: The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data. This allows admins to deserialize arbitrary data which may lead to remote code execution if a suitable gadget chain is present on the server. This is impactful in environments where admin users should not be allowed to execute arbitrary code, such as multisite.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/1ab192d7-72ac-4f12-8a51-f28ee4db91bc; https://wpscan.com/vulnerability/1ab192d7-72ac-4f12-8a51-f28ee4db91bc
CVE: CVE-2023-4318
Published: 2023-09-11
Description: The Herd Effects WordPress plugin before 5.2.4 does not have CSRF when deleting its items, which could allow attackers to make logged in admins delete arbitrary effects via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/93b40030-3706-4063-bf59-4ec983afdbb6; https://wpscan.com/vulnerability/93b40030-3706-4063-bf59-4ec983afdbb6