deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-0274
Published: 2023-08-16
Description: The URL Params WordPress plugin before 2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4f6197b6-6d4c-4986-b54c-453b17e94812; https://wpscan.com/vulnerability/4f6197b6-6d4c-4986-b54c-453b17e94812
CVE: CVE-2023-0551
Published: 2023-08-16
Description: The REST API TO MiniProgram WordPress plugin through 4.6.1 does not have authorisation and CSRF checks in an AJAX action, allowing ay authenticated users, such as subscriber to call and delete arbitrary attachments
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/de162a46-1fdb-47b9-9a61-f12a2c655a7d; https://wpscan.com/vulnerability/de162a46-1fdb-47b9-9a61-f12a2c655a7d
CVE: CVE-2023-0579
Published: 2023-08-16
Description: The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/574f7607-96d8-4ef8-b96c-0425ad7e7690; https://wpscan.com/vulnerability/574f7607-96d8-4ef8-b96c-0425ad7e7690
CVE: CVE-2023-1110
Published: 2023-08-16
Description: The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/1830e829-4a43-4d98-8214-eecec6bef694; https://wpscan.com/vulnerability/1830e829-4a43-4d98-8214-eecec6bef694
CVE: CVE-2023-1465
Published: 2023-08-16
Description: The WP EasyPay WordPress plugin before 4.1 does not escape some generated URLs before outputting them back in pages, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/13f59eb4-0744-4fdb-94b5-886ee6bdd867; https://wpscan.com/vulnerability/13f59eb4-0744-4fdb-94b5-886ee6bdd867
CVE: CVE-2023-1977
Published: 2023-08-16
Description: The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/842f3b1f-395a-4ea2-b7df-a36f70e8c790; https://wpscan.com/vulnerability/842f3b1f-395a-4ea2-b7df-a36f70e8c790
CVE: CVE-2023-2122
Published: 2023-08-16
Description: The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitise and escape the iowd_tabs_active parameter before rendering it in the plugin admin panel, leading to a reflected Cross-Site Scripting vulnerability, allowing an attacker to trick a logged in admin to execute arbitrary javascript by clicking a link.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/936fd93a-428d-4744-a4fc-c8da78dcbe78; https://wpscan.com/vulnerability/936fd93a-428d-4744-a4fc-c8da78dcbe78
CVE: CVE-2023-2123
Published: 2023-08-16
Description: The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
References: https://github.com/daniloalbuqrque/poc-cve-xss-encoded-wp-inventory-manager-plugin; https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1; https://github.com/daniloalbuqrque/poc-cve-xss-encoded-wp-inventory-manager-plugin
CVE: CVE-2023-2225
Published: 2023-08-16
Description: The SEO ALert WordPress plugin through 1.59 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/0af475ba-5c02-4f62-876d-6235a745bbd6; https://wpscan.com/vulnerability/0af475ba-5c02-4f62-876d-6235a745bbd6
CVE: CVE-2023-2254
Published: 2023-08-16
Description: The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability is disallowed (for example in multisite setup), and we consider it a low risk.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8886ec5f-8465-448f-adbd-68a3e84c5dec; https://wpscan.com/vulnerability/8886ec5f-8465-448f-adbd-68a3e84c5dec
CVE: CVE-2023-2271
Published: 2023-08-16
Description: The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when deleting its shortcode, which could allow attackers to make logged in admins delete arbitrary shortcode via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/31512f33-c310-4b36-b[PII_REDACTED]7cc8b; https://wpscan.com/vulnerability/31512f33-c310-4b36-b[PII_REDACTED]7cc8b
CVE: CVE-2023-2272
Published: 2023-08-16
Description: The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/dba60216-2753-40b7-8f2b-6caeba684b2e; https://wpscan.com/vulnerability/dba60216-2753-40b7-8f2b-6caeba684b2e
CVE: CVE-2023-4381
Published: 2023-08-16
Description: Unverified Password Change in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-620
References: https://github.com/instantsoft/icms2/commit/58f8b9941b53b606a1b15a4364005cd2b1965507; https://huntr.dev/bounties/666c2617-e3e9-4955-9c97-2f8ed5262cc3; https://github.com/instantsoft/icms2/commit/58f8b9941b53b606a1b15a4364005cd2b1965507
CVE: CVE-2020-26037
Published: 2023-08-16
Description: Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://even.com; http://punkbuster.com; https://medium.com/%40prizmant/hacking-punkbuster-e22e6cf2f36e
CVE: CVE-2023-32494
Published: 2023-08-16
Description: 
Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient privileges vulnerability. A local  privileged attacker could potentially exploit this vulnerability, leading to elevation of privilege and affect in compliance mode also.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-274
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32486
Published: 2023-08-16
Description: 
Dell PowerScale OneFS 9.5.x version contain a privilege escalation vulnerability. A low privilege local attacker could potentially exploit this vulnerability, leading to escalation of privileges.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-250
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32487
Published: 2023-08-16
Description: 
Dell PowerScale OneFS, 8.2.x - 9.5.0.x, contains an elevation of privilege vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to denial of service, code execution and information disclosure. 


CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32488
Published: 2023-08-16
Description: 
Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A low privileged attacker could potentially exploit this vulnerability, leading to information disclosure.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1230
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32489
Published: 2023-08-16
Description: 
Dell PowerScale OneFS 8.2x -9.5x contains a privilege escalation vulnerability. A local attacker with high privileges could potentially exploit this vulnerability, to bypass mode protections and gain elevated privileges.  


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-280
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32490
Published: 2023-08-16
Description: 
Dell PowerScale OneFS 8.2x -9.5x contains an improper privilege management vulnerability. A high privilege local attacker could potentially exploit this vulnerability, leading to system takeover. 


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32491
Published: 2023-08-16
Description: 
Dell PowerScale OneFS 9.5.0.x, contains an insertion of sensitive information into log file vulnerability in SNMPv3. A low privileges user could potentially exploit this vulnerability, leading to information disclosure.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-532
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32492
Published: 2023-08-16
Description: 
Dell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to information disclosure or allowing to modify files.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32493
Published: 2023-08-16
Description: 
Dell PowerScale OneFS, 9.5.0.x, contains a protection mechanism bypass vulnerability. An unprivileged, remote attacker could potentially exploit this vulnerability, leading to denial of service, information disclosure and remote execution.


CVSS Score: 7.3 (HIGH)
CWE: CWE-693
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-32495
Published: 2023-08-16
Description: 
Dell PowerScale OneFS, 8.2.x-9.5.x, contains a exposure of sensitive information to an unauthorized Actor vulnerability. An authorized local attacker could potentially exploit this vulnerability, leading to escalation of privileges.


CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216717/dsa-2023-269-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
CVE: CVE-2023-33663
Published: 2023-08-16
Description: In the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for PrestaShop, an attacker can perform SQL injection up to 0.2.0. Release 0.2.1 fixed this security issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/08/16/aicustomfee.html; https://www.boutique.ai-dev.fr/en/customization/62-customization-fee.html; https://security.friendsofpresta.org/modules/2023/08/16/aicustomfee.html
CVE: CVE-2023-38904
Published: 2023-08-16
Description: A Cross Site Scripting (XSS) vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to execute arbitrary code via a crafted payload to the body parameter of the new post function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/51576; https://www.exploit-db.com/exploits/51576
CVE: CVE-2023-39115
Published: 2023-08-16
Description: install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/173950/Campcodes-Online-Matrimonial-Website-System-3.3-Cross-Site-Scripting.html; https://github.com/Raj789-sec/CVE-2023-39115; https://www.campcodes.com/projects/php/online-matrimonial-website-system-script-in-php/
CVE: CVE-2023-39975
Published: 2023-08-16
Description: kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user can trigger an authorization-data handling failure. Incorrect data is copied from one ticket to another.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415, CWE-415
References: https://github.com/krb5/krb5/commit/88a1701b423c13991a8064feeb26952d3641d840; https://github.com/krb5/krb5/compare/krb5-1.21.1-final...krb5-1.21.2-final; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-40336
Published: 2023-08-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3106; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40337
Published: 2023-08-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3105; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40338
Published: 2023-08-16
Description: Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier displays an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available, exposing information about the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3109; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40339
Published: 2023-08-16
Description: Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40340
Published: 2023-08-16
Description: Jenkins NodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3196; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40341
Published: 2023-08-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3116; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40342
Published: 2023-08-16
Description: Jenkins Flaky Test Handler Plugin 1.2.2 and earlier does not escape JUnit test contents when showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control JUnit report file contents.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3223; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40343
Published: 2023-08-16
Description: Jenkins Tuleap Authentication Plugin 1.1.20 and earlier uses a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3229; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40344
Published: 2023-08-16
Description: A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://support.delphix.com/Support_Policies_and_Technical_Bulletins/Technical_Bulletins/TB111_Delphix_Plugin_for_Jenkins_Vulnerable_to_Credential_Enumeration_and_Capture; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3214%20(1)
CVE: CVE-2023-40345
Published: 2023-08-16
Description: Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://support.delphix.com/Support_Policies_and_Technical_Bulletins/Technical_Bulletins/TB111_Delphix_Plugin_for_Jenkins_Vulnerable_to_Credential_Enumeration_and_Capture; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3214%20(2)
CVE: CVE-2023-40346
Published: 2023-08-16
Description: Jenkins Shortcut Job Plugin 0.4 and earlier does not escape the shortcut redirection URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure shortcut jobs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3071; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40347
Published: 2023-08-16
Description: Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3153; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40348
Published: 2023-08-16
Description: The webhook endpoint in Jenkins Gogs Plugin 1.0.15 and earlier provides unauthenticated attackers information about the existence of jobs in its output.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-2894; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40349
Published: 2023-08-16
Description: Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-665
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-2894; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40350
Published: 2023-08-16
Description: Jenkins Docker Swarm Plugin 1.11 and earlier does not escape values returned from Docker before inserting them into the Docker Swarm Dashboard view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control responses from Docker.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-2811; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-40351
Published: 2023-08-16
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Favorite View Plugin 5.v77a_37f62782d and earlier allows attackers to add or remove views from another user's favorite views tab bar.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2023/08/16/3; https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3201; http://www.openwall.com/lists/oss-security/2023/08/16/3
CVE: CVE-2023-2737
Published: 2023-08-16
Description: Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.

CVSS Score: 5.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=08f460ba47bba550c0e42e61e36d432f&sysparm_article=KB0027485; https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=08f460ba47bba550c0e42e61e36d432f&sysparm_article=KB0027485
CVE: CVE-2023-39250
Published: 2023-08-16
Description: 


Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manager for VMware (RMSV) versions prior to 3.1.2 contain an information disclosure vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to retrieve an encryption key that could aid in further attacks. 




CVSS Score: 7.8 (HIGH)
CWE: CWE-540, CWE-668
References: https://www.dell.com/support/kbdoc/en-us/000216615/dsa-2023-282-security-update-for-dell-storage-integration-tools-for-vmware-dsitv-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216615/dsa-2023-282-security-update-for-dell-storage-integration-tools-for-vmware-dsitv-vulnerabilities