deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-6602
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2020-6603
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2020-6604
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2020-6605
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2020-6606
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2020-6607
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2020-6608
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2021-26673
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2021-26674
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-0094
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-0095
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-23162
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-23164
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-24425
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-24427
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-24940
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-24941
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-24943
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-24944
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-26853
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-29086
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-29087
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-29088
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-29099
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-29100
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-29101
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-2331
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-31227
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-31242
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-32479
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-32494
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-32495
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-32496
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-32497
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-33933
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-34395
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-34461
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-37303
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-37304
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-46681
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-46753
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-46787
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-46788
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-46789
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-46790
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-46791
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-48187
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-4852
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2022-4853
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-0387
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-2185
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-2501
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-2502
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-2510
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-2511
Published: 2023-05-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-2667
Published: 2023-05-12
Description: A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228883.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2667.md; https://vuldb.com/?ctiid.228883; https://vuldb.com/?id.228883
CVE: CVE-2023-2668
Published: 2023-05-12
Description: A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this issue is the function manager_category of the file admin/?page=categories/manage_category of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228884.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2668.md; https://vuldb.com/?ctiid.228884; https://vuldb.com/?id.228884
CVE: CVE-2023-28936
Published: 2023-05-12
Description: Attacker can access arbitrary recording/room

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-697
References: https://lists.apache.org/thread/y6vng44c22ll221rtvsv208x1pbjmdoc; https://lists.apache.org/thread/y6vng44c22ll221rtvsv208x1pbjmdoc
CVE: CVE-2023-29032
Published: 2023-05-12
Description: An attacker that has gained access to certain private information can use this to act as other user.

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 3.1.3 before 7.1.0
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://lists.apache.org/thread/j2d6mg3rzcphfd8vvvk09d8p4o9lvnqp; https://lists.apache.org/thread/j2d6mg3rzcphfd8vvvk09d8p4o9lvnqp
CVE: CVE-2023-29246
Published: 2023-05-12
Description: An attacker who has gained access to an admin account can perform RCE via null-byte injection

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://lists.apache.org/thread/230plvhbdx26m43b0sy942wlwt6kkmmr; https://lists.apache.org/thread/230plvhbdx26m43b0sy942wlwt6kkmmr
CVE: CVE-2023-2669
Published: 2023-05-12
Description: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as critical. This affects an unknown part of the file admin/?page=categories/view_category of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228885 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2669.md; https://vuldb.com/?ctiid.228885; https://vuldb.com/?id.228885
CVE: CVE-2023-2670
Published: 2023-05-12
Description: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/?page=user/manage_user. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228886 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2670.md; https://vuldb.com/?ctiid.228886; https://vuldb.com/?id.228886
CVE: CVE-2023-2674
Published: 2023-05-12
Description: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/openemr/openemr/commit/bb4244c83a74628faafabc0598366f49863914a9; https://huntr.dev/bounties/af73e913-730c-4245-88ce-26fc908d3644; https://github.com/openemr/openemr/commit/bb4244c83a74628faafabc0598366f49863914a9
CVE: CVE-2023-32243
Published: 2023-05-12
Description: Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://packetstormsecurity.com/files/172457/WordPress-Elementor-Lite-5.7.1-Arbitrary-Password-Reset.html; https://patchstack.com/articles/critical-privilege-escalation-in-essential-addons-for-elementor-plugin-affecting-1-million-sites?_s_id=cve; https://patchstack.com/database/vulnerability/essential-addons-for-elementor-lite/wordpress-essential-addons-for-elementor-plugin-5-4-0-5-7-1-unauthenticated-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2023-2514
Published: 2023-05-12
Description: Mattermost Sever fails to redact the DB username and password before emitting an application log during server initialization. 

CVSS Score: 6.7 (MEDIUM)
CWE: CWE-200, CWE-532
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-2515
Published: 2023-05-12
Description: Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin

CVSS Score: 4.7 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2023-2671
Published: 2023-05-12
Description: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file classes/Master.php?f=save_inquiry of the component Contact Form. The manipulation of the argument fullname/contact/message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228887.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2671.md; https://vuldb.com/?ctiid.228887; https://vuldb.com/?id.228887
CVE: CVE-2023-2672
Published: 2023-05-12
Description: A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228888.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2672.md; https://vuldb.com/?ctiid.228888; https://vuldb.com/?id.228888
CVE: CVE-2023-2676
Published: 2023-05-12
Description: A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may be used. VDB-228890 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121
References: https://github.com/xinzhihen06/dxq-cve/blob/main/h3cr160.md; https://vuldb.com/?ctiid.228890; https://vuldb.com/?id.228890
CVE: CVE-2023-2677
Published: 2023-05-12
Description: A vulnerability, which was classified as critical, was found in SourceCodester Covid-19 Contact Tracing System 1.0. This affects an unknown part of the file admin/establishment/manage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228891.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BacteriaJun/cve/blob/main/SQL.md; https://vuldb.com/?ctiid.228891; https://vuldb.com/?id.228891
CVE: CVE-2023-2678
Published: 2023-05-12
Description: A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /file_manager/admin/save_user.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228892.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/csbsong/bug_report/blob/main/XSS.md; https://vuldb.com/?ctiid.228892; https://vuldb.com/?id.228892
CVE: CVE-2020-13377
Published: 2023-05-12
Description: The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancer-VA-MAX-v8.3.8-and-earlier.html; https://www.loadbalancer.org/products/virtual/enterprise-va-max/; https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancer-VA-MAX-v8.3.8-and-earlier.html
CVE: CVE-2023-23169
Published: 2023-05-12
Description: Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-918, CWE-22, CWE-918
References: http://support.synapsoft.co.kr:50000/skin/try_pdfocus/index.html; https://github.com/S4nshine/CVE-2023-23169; http://support.synapsoft.co.kr:50000/skin/try_pdfocus/index.html
CVE: CVE-2023-27237
Published: 2023-05-12
Description: LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://lavalite.com; https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27237; https://i.ibb.co/34DSW7B/1.png
CVE: CVE-2023-27238
Published: 2023-05-12
Description: LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-444
References: https://github.com/LavaLite/cms/blob/c0a36dd748c8f7ff53eb16eb572bdeebe72eb420/app/Http/Controllers/ResourceController.php#L8; https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27238; https://github.com/LavaLite/cms/blob/c0a36dd748c8f7ff53eb16eb572bdeebe72eb420/app/Http/Controllers/ResourceController.php#L8
CVE: CVE-2023-29657
Published: 2023-05-12
Description: eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: http://blog.tristaomarinho.com/extplorer-2-1-15-arbitrary-file-upload/; http://extplorer.net/; http://blog.tristaomarinho.com/extplorer-2-1-15-arbitrary-file-upload/
CVE: CVE-2023-29818
Published: 2023-05-12
Description: An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via the default allowlist feature being stored as non-admin.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: http://secureanywhere.com; http://webroot.com; https://www.spenceralessi.com/CVEs/2023-05-10-Webroot-SecureAnywhere/
CVE: CVE-2023-29819
Published: 2023-05-12
Description: An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via a crafted payload.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269, CWE-863
References: http://secureanywhere.com; http://webroot.com; https://www.spenceralessi.com/CVEs/2023-05-10-Webroot-SecureAnywhere/
CVE: CVE-2023-29820
Published: 2023-05-12
Description: An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668, CWE-552
References: http://secureanywhere.com; http://webroot.com; https://www.spenceralessi.com/CVEs/2023-05-10-Webroot-SecureAnywhere/
CVE: CVE-2023-29983
Published: 2023-05-12
Description: Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/vogtmh/cmaps; https://github.com/zPrototype/CVE-2023-29983; https://packetstormsecurity.com/files/172075/CompanyMaps-8.0-Cross-Site-Scripting.html