deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-18131
Published: 2023-05-08
Description: Cross Site Request Forgery (CSRF) vulnerability in Bluethrust Clan Scripts v4 allows attackers to escilate privledges to an arbitrary account via a crafted request to /members/console.php?cID=5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/bluethrust/clanscripts; https://github.com/bluethrust/clanscripts/issues/27; https://github.com/bluethrust/clanscripts
CVE: CVE-2020-18132
Published: 2023-05-08
Description: Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/sansanyun/mipcms; https://github.com/sansanyun/mipcms/issues/4; https://github.com/sansanyun/mipcms
CVE: CVE-2020-18282
Published: 2023-05-08
Description: Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTML via feedback feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nangge/noneCms; https://github.com/nangge/noneCms/issues/23; https://github.com/nangge/noneCms
CVE: CVE-2020-19660
Published: 2023-05-08
Description: Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url values.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/pandao/editor.md; https://github.com/pandao/editor.md/issues/697; https://github.com/pandao/editor.md
CVE: CVE-2020-21038
Published: 2023-05-08
Description: Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/typecho/typecho; https://github.com/typecho/typecho/issues/952; https://github.com/typecho/typecho
CVE: CVE-2020-22334
Published: 2023-05-08
Description: Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/admin_admin.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/source-trace/beescms; https://github.com/source-trace/beescms/issues/5; https://github.com/source-trace/beescms
CVE: CVE-2020-22755
Published: 2023-05-08
Description: File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/ming-soft/MCMS; https://github.com/ming-soft/MCMS/issues/42; https://github.com/ming-soft/MCMS
CVE: CVE-2020-23966
Published: 2023-05-08
Description: SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/VictorAlagwu/CMSsite/; https://github.com/VictorAlagwu/CMSsite/issues/15; https://github.com/VictorAlagwu/CMSsite/
CVE: CVE-2020-36065
Published: 2023-05-08
Description: Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/sunkaifei/FlyCms; https://github.com/sunkaifei/FlyCms/issues/8; https://github.com/sunkaifei/FlyCms
CVE: CVE-2021-27280
Published: 2023-05-08
Description: OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/langhsu/mblog/; https://github.com/langhsu/mblog/issues/44; https://github.com/langhsu/mblog/
CVE: CVE-2021-28998
Published: 2023-05-08
Description: File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/file_upload_RCE/File_upload_to_RCE.md; https://seclists.org/fulldisclosure/2021/Mar/50; https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/file_upload_RCE/File_upload_to_RCE.md
CVE: CVE-2021-28999
Published: 2023-05-08
Description: SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1_sortby parameter to modules/News/function.admin_articlestab.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/sqli_order_by/CMS-MS-SQLi-report.md; https://seclists.org/fulldisclosure/2021/Mar/49; https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/sqli_order_by/CMS-MS-SQLi-report.md
CVE: CVE-2022-4118
Published: 2023-05-08
Description: The Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop WordPress plugin through 1.7.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by authenticated users
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/2839ff82-7d37-4392-8fa3-d490680d42c4; https://wpscan.com/vulnerability/2839ff82-7d37-4392-8fa3-d490680d42c4
CVE: CVE-2023-0267
Published: 2023-05-08
Description: The Ultimate Carousel For WPBakery Page Builder WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/7ba7849d-e07b-465a-bfb7-10c8186be140; https://wpscan.com/vulnerability/7ba7849d-e07b-465a-bfb7-10c8186be140
CVE: CVE-2023-0268
Published: 2023-05-08
Description: The Mega Addons For WPBakery Page Builder WordPress plugin before 4.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/99389641-ad1e-45c1-a42f-2a010ee22d76; https://wpscan.com/vulnerability/99389641-ad1e-45c1-a42f-2a010ee22d76
CVE: CVE-2023-0280
Published: 2023-05-08
Description: The Ultimate Carousel For Elementor WordPress plugin through 2.1.7 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/cb7ed9e6-0fa0-4ebb-9109-8f33defc8b32; https://wpscan.com/vulnerability/cb7ed9e6-0fa0-4ebb-9109-8f33defc8b32
CVE: CVE-2023-0421
Published: 2023-05-08
Description: The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/a356fea0-f143-4736-b2b2-c545c525335c; https://wpscan.com/vulnerability/a356fea0-f143-4736-b2b2-c545c525335c
CVE: CVE-2023-0514
Published: 2023-05-08
Description: The Membership Database WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c6cc400a-9bfb-417d-9206-5582a49d0f05; https://wpscan.com/vulnerability/c6cc400a-9bfb-417d-9206-5582a49d0f05
CVE: CVE-2023-0522
Published: 2023-05-08
Description: The Enable/Disable Auto Login when Register WordPress plugin through 1.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/c7984bfb-86a3-4530-90ae-17ab39af1c54; https://wpscan.com/vulnerability/c7984bfb-86a3-4530-90ae-17ab39af1c54
CVE: CVE-2023-0526
Published: 2023-05-08
Description: The Post Shortcode WordPress plugin through 2.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/0ec58310-243d-40c8-9fa6-8753947bfa89; https://wpscan.com/vulnerability/0ec58310-243d-40c8-9fa6-8753947bfa89
CVE: CVE-2023-0536
Published: 2023-05-08
Description: The Wp-D3 WordPress plugin through 2.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/7b19d792-8083-4c0c-a45e-a99c1f5f0df0; https://wpscan.com/vulnerability/7b19d792-8083-4c0c-a45e-a99c1f5f0df0
CVE: CVE-2023-0537
Published: 2023-05-08
Description: The Product Slider For WooCommerce Lite WordPress plugin through 1.1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/d7369f1d-d1a0-4576-a676-c70525a6c743; https://wpscan.com/vulnerability/d7369f1d-d1a0-4576-a676-c70525a6c743
CVE: CVE-2023-0542
Published: 2023-05-08
Description: The Custom Post Type List Shortcode WordPress plugin through 1.4.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/17de2f77-3e6c-4c22-9196-6e5577ee7fcf; https://wpscan.com/vulnerability/17de2f77-3e6c-4c22-9196-6e5577ee7fcf
CVE: CVE-2023-0544
Published: 2023-05-08
Description: The WP Login Box WordPress plugin through 2.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/8ef9585f-67d7-4651-977a-fcad113882bd; https://wpscan.com/vulnerability/8ef9585f-67d7-4651-977a-fcad113882bd
CVE: CVE-2023-0603
Published: 2023-05-08
Description: The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/1c93ea8f-4e68-4da1-994e-35a5873278ba; https://wpscan.com/vulnerability/1c93ea8f-4e68-4da1-994e-35a5873278ba
CVE: CVE-2023-0768
Published: 2023-05-08
Description: The Avirato hotels online booking engine WordPress plugin through 5.0.5 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/03d061b4-1b71-44f5-b3dc-f82a5fcd92eb; https://wpscan.com/vulnerability/03d061b4-1b71-44f5-b3dc-f82a5fcd92eb
CVE: CVE-2023-0894
Published: 2023-05-08
Description: The Pickup | Delivery | Dine-in date time WordPress plugin through 1.0.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/d42eff41-096f-401d-bbfb-dcd6e08faca5; https://wpscan.com/vulnerability/d42eff41-096f-401d-bbfb-dcd6e08faca5
CVE: CVE-2023-0948
Published: 2023-05-08
Description: The Japanized For WooCommerce WordPress plugin before 2.5.8 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/a78d75b2-85a0-41eb-9720-c726ca2e8718; https://wpscan.com/vulnerability/a78d75b2-85a0-41eb-9720-c726ca2e8718
CVE: CVE-2023-1011
Published: 2023-05-08
Description: The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing attackers to make a logged in admin set XSS payloads in them.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/d1784446-b3da-4175-9dac-20b030f19984; https://wpscan.com/vulnerability/d1784446-b3da-4175-9dac-20b030f19984
CVE: CVE-2023-1347
Published: 2023-05-08
Description: The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/356a5977-c90c-4fc6-98ed-032d5b27f272; https://wpscan.com/vulnerability/356a5977-c90c-4fc6-98ed-032d5b27f272
CVE: CVE-2023-1408
Published: 2023-05-08
Description: The Video List Manager WordPress plugin through 1.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/baf7ef4d-b2ba-48e0-9c17-74fa27e0c15b; https://wpscan.com/vulnerability/baf7ef4d-b2ba-48e0-9c17-74fa27e0c15b
CVE: CVE-2023-1649
Published: 2023-05-08
Description: The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ea806115-14ab-4bc4-a272-2141cb14454a; https://wpscan.com/vulnerability/ea806115-14ab-4bc4-a272-2141cb14454a
CVE: CVE-2023-1650
Published: 2023-05-08
Description: The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP Object Injection when a suitable gadget is present on the blog
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://wpscan.com/vulnerability/7d7fe498-0aa3-4fa7-b560-610b42b2abed; https://wpscan.com/vulnerability/7d7fe498-0aa3-4fa7-b560-610b42b2abed
CVE: CVE-2023-1651
Published: 2023-05-08
Description: The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users, such as subscriber to update them. Furthermore, due to the lack of escaping of the settings, this could also lead to Stored XSS
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/c88b22ba-4fc2-49ad-a[PII_REDACTED]21bad; https://wpscan.com/vulnerability/c88b22ba-4fc2-49ad-a[PII_REDACTED]21bad
CVE: CVE-2023-1660
Published: 2023-05-08
Description: The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to Stored XSS due to the lack of escaping when outputting them in the admin dashboard
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/1a5cbcfc-fa55-433a-a76b-3881b6c4bea2; https://wpscan.com/vulnerability/1a5cbcfc-fa55-433a-a76b-3881b6c4bea2
CVE: CVE-2023-1806
Published: 2023-05-08
Description: The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/38d99c7d-2d10-4910-b95a-1cb545b813c4; https://wpscan.com/vulnerability/38d99c7d-2d10-4910-b95a-1cb545b813c4
CVE: CVE-2023-1905
Published: 2023-05-08
Description: The WP Popups WordPress plugin before 2.1.5.1 does not properly escape the href attribute of its spu-facebook-page shortcode before outputting it back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. This is due to an insufficient fix of CVE-2023-24003
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/b6ac3e15-6f39-4514-a50d-cca7b9457736; https://wpscan.com/vulnerability/b6ac3e15-6f39-4514-a50d-cca7b9457736
CVE: CVE-2023-2114
Published: 2023-05-08
Description: The NEX-Forms WordPress plugin before 8.4 does not properly escape the `table` parameter, which is populated with user input, before concatenating it to an SQL query.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/SchmidAlex/nex-forms_SQL-Injection; https://wpscan.com/vulnerability/3d8ab3a5-1bf8-4216-91fa-e89541e5c43d; https://github.com/SchmidAlex/nex-forms_SQL-Injection
CVE: CVE-2022-45065
Published: 2023-05-08
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin <= 12.1.20 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-squirrly-seo-peaks-plugin-12-1-20-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/squirrly-seo/wordpress-squirrly-seo-peaks-plugin-12-1-20-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2022-47437
Published: 2023-05-08
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Branko Borilovic WSB Brands plugin <= 1.1.8 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wsb-brands/wordpress-wsb-brands-plugin-1-1-8-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/wsb-brands/wordpress-wsb-brands-plugin-1-1-8-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2022-47439
Published: 2023-05-08
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rocket Apps Open Graphite plugin <= 1.6.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/open-graphite/wordpress-open-graphite-plugin-1-5-1-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/open-graphite/wordpress-open-graphite-plugin-1-5-1-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-22779
Published: 2023-05-08
Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt
CVE: CVE-2023-22780
Published: 2023-05-08
Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt
CVE: CVE-2023-22781
Published: 2023-05-08
Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt
CVE: CVE-2023-22782
Published: 2023-05-08
Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt
CVE: CVE-2023-22783
Published: 2023-05-08
Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt
CVE: CVE-2023-22784
Published: 2023-05-08
Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt
CVE: CVE-2023-22785
Published: 2023-05-08
Description: There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-006.txt