deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-36675
Published: 2023-06-26
Description: An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2UIVGYECQGTUC2LLPVCZBPDLCTOHL2F6/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CHRX6DSLAMVXCV2YMJEWOLTBEYSESE5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOAXEGYBOEM4JWB4J3BDH73NK2LCYC3O/
CVE: CVE-2023-28988
Published: 2023-06-26
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Direct checkout, Add to cart redirect, Quick purchase button, Buy now button, Quick View button for WooCommerce plugin <= 2.1.48 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/add-to-cart-direct-checkout-for-woocommerce/wordpress-direct-checkout-add-to-cart-redirect-for-woocommerce-plugin-2-1-48-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/add-to-cart-direct-checkout-for-woocommerce/wordpress-direct-checkout-add-to-cart-redirect-for-woocommerce-plugin-2-1-48-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-28991
Published: 2023-06-26
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Order date, Order pickup, Order date time, Pickup Location, delivery date for WooCommerce plugin <= 3.0.19 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/pi-woocommerce-order-date-time-and-type/wordpress-order-date-time-for-woocommerce-plugin-3-0-19-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/pi-woocommerce-order-date-time-and-type/wordpress-order-date-time-for-woocommerce-plugin-3-0-19-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-28992
Published: 2023-06-26
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin <= 5.4.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/woo-coupon-usage/wordpress-coupon-affiliates-plugin-5-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woo-coupon-usage/wordpress-coupon-affiliates-plugin-5-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29093
Published: 2023-06-26
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PI Websolution Conditional cart fee plugin <= 1.0.96 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/conditional-extra-fees-for-woocommerce/wordpress-conditional-extra-fees-for-woocommerce-plugin-1-0-96-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/conditional-extra-fees-for-woocommerce/wordpress-conditional-extra-fees-for-woocommerce-plugin-1-0-96-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-1150
Published: 2023-06-26
Description: Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://cert.vde.com/en/advisories/VDE-2023-005/; https://cert.vde.com/en/advisories/VDE-2023-005/
CVE: CVE-2023-1619
Published: 2023-06-26
Description: Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1288
References: https://cert.vde.com/en/advisories/VDE-2023-006/; https://cert.vde.com/en/advisories/VDE-2023-006/
CVE: CVE-2023-1620
Published: 2023-06-26
Description: Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1288
References: https://cert.vde.com/en/advisories/VDE-2023-006/; https://cert.vde.com/en/advisories/VDE-2023-006/
CVE: CVE-2023-22359
Published: 2023-06-26
Description: User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-203
References: https://checkmk.com/werk/15890; https://checkmk.com/werk/15890
CVE: CVE-2023-29423
Published: 2023-06-26
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin <= 1.3.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/cancel-order-request-woocommerce/wordpress-cancel-order-request-woocommerce-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cancel-order-request-woocommerce/wordpress-cancel-order-request-woocommerce-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29424
Published: 2023-06-26
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Plainware ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/shiftcontroller/wordpress-shiftcontroller-employee-shift-scheduling-plugin-4-9-23-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/shiftcontroller/wordpress-shiftcontroller-employee-shift-scheduling-plugin-4-9-23-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29427
Published: 2023-06-26
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/ameliabooking/wordpress-amelia-plugin-1-0-75-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ameliabooking/wordpress-amelia-plugin-1-0-75-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29430
Published: 2023-06-26
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/theroof/wordpress-theroof-theme-1-0-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/theroof/wordpress-theroof-theme-1-0-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29434
Published: 2023-06-26
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin <= 1.3.1 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/optin-forms/wordpress-optin-forms-plugin-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/optin-forms/wordpress-optin-forms-plugin-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29436
Published: 2023-06-26
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Flyn San IFrame Shortcode plugin <= 1.0.5 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/flynsarmy-iframe-shortcode/wordpress-iframe-shortcode-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/flynsarmy-iframe-shortcode/wordpress-iframe-shortcode-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-3398
Published: 2023-06-26
Description: Denial of Service in GitHub repository jgraph/drawio prior to 18.1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/jgraph/drawio/commit/064729fec4262f9373d9fdcafda0be47cd18dd50; https://huntr.dev/bounties/aa087215-80e1-433d-b[PII_REDACTED]30e69; https://github.com/jgraph/drawio/commit/064729fec4262f9373d9fdcafda0be47cd18dd50
CVE: CVE-2023-29435
Published: 2023-06-26
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Zwaply Cryptocurrency All-in-One plugin <= 3.0.19 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/cryptocurrency-prices/wordpress-cryptocurrency-all-in-one-plugin-3-0-19-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cryptocurrency-prices/wordpress-cryptocurrency-all-in-one-plugin-3-0-19-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-36631
Published: 2023-06-26
Description: Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."
CVSS Score: 7.8 (HIGH)
References: https://hackerone.com/reports/2000375; https://www.bencteux.fr/posts/malwarebytes_wfc/; https://hackerone.com/reports/2000375
CVE: CVE-2023-29437
Published: 2023-06-26
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Steven A. Zahm Connections Business Directory plugin <= 10.4.36 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/connections/wordpress-connections-business-directory-plugin-10-4-36-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/connections/wordpress-connections-business-directory-plugin-10-4-36-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29438
Published: 2023-06-26
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Martin SimpleModal Contact Form (SMCF) plugin <= 1.2.9 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/simplemodal-contact-form-smcf/wordpress-simplemodal-contact-form-smcf-plugin-1-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/simplemodal-contact-form-smcf/wordpress-simplemodal-contact-form-smcf-plugin-1-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-30261
Published: 2023-06-26
Description: Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://eldstal.se/advisories/230329-openwb.html; https://github.com/snaptec/openWB/issues/2672; https://github.com/snaptec/openWB/pull/2673
CVE: CVE-2023-25306
Published: 2023-06-26
Description: MultiMC Launcher <= 0.6.16 is vulnerable to Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/; https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/
CVE: CVE-2023-25307
Published: 2023-06-26
Description: nothub mrpack-install <= v0.16.2 is vulnerable to Directory Traversal.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://github.com/nothub/mrpack-install/security/advisories/GHSA-r887-gfxh-m9rr; https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/; https://github.com/nothub/mrpack-install/security/advisories/GHSA-r887-gfxh-m9rr
CVE: CVE-2023-36301
Published: 2023-06-26
Description: Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://help.talend.com/r/en-US/Talend-Products-CVEs/Talend-Products-CVEs; https://help.talend.com/r/en-US/Talend-Products-CVEs/Talend-Products-CVEs
CVE: CVE-2022-48331
Published: 2023-06-26
Description: Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://cyberintel.es/cve/CVE-2022-48331_Buffer_Overflow_in_Widevine_drm_save_keys_0x69b0/; https://cyberintel.es/cve/CVE-2022-48331_Buffer_Overflow_in_Widevine_drm_save_keys_0x69b0/
CVE: CVE-2023-28485
Published: 2023-06-26
Description: A stored cross-site scripting (Stored XSS) vulnerability in file preview in WeKan before 6.75 allows remote authenticated users to inject arbitrary web script or HTML via names of file attachments. Any user can obtain the privilege to rename within their own board (where they have BoardAdmin access), and renameAttachment does not block XSS payloads.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/172649/Wekan-6.74-Cross-Site-Scripting.html; https://wekan.github.io/; https://wekan.github.io/hall-of-fame/filebleed/
CVE: CVE-2023-29459
Published: 2023-06-26
Description: The laola.redbull application through 5.1.9-R for Android exposes the exported activity at.redbullsalzburg.android.AppMode.Default.Splash.SplashActivity, which accepts a data: URI. The target of this URI is subsequently loaded into the application's webview, thus allowing the loading of arbitrary content into the context of the application. This can occur via the fcrbs schema or an explicit intent invocation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/172701/FC-Red-Bull-Salzburg-App-5.1.9-R-Improper-Authorization.html; https://play.google.com/store/apps/details?id=laola.redbull; http://packetstormsecurity.com/files/172701/FC-Red-Bull-Salzburg-App-5.1.9-R-Improper-Authorization.html
CVE: CVE-2023-33580
Published: 2023-06-26
Description: Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" field on Admin Profile page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/173030/Student-Study-Center-Management-System-1.0-Cross-Site-Scripting.html; https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33580_exploit.md; https://phpgurukul.com/student-study-center-management-system-using-php-and-mysql/
CVE: CVE-2022-40010
Published: 2023-06-26
Description: Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter in the Parental Control module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/173029/Tenda-AC6-AC1200-15.03.06.50_multi-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/173029/Tenda-AC6-AC1200-15.03.06.50_multi-Cross-Site-Scripting.html
CVE: CVE-2022-48332
Published: 2023-06-26
Description: Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://cyberintel.es/cve/CVE-2022-48332_Buffer_Overflow_in_Widevine_drm_save_keys_0x6a18/; https://cyberintel.es/cve/CVE-2022-48332_Buffer_Overflow_in_Widevine_drm_save_keys_0x6a18/
CVE: CVE-2022-48333
Published: 2023-06-26
Description: Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://cyberintel.es/cve/CVE-2022-48333_Buffer_Overflow_in_Widevine_drm_verify_keys_0x730c/; https://cyberintel.es/cve/CVE-2022-48333_Buffer_Overflow_in_Widevine_drm_verify_keys_0x730c/
CVE: CVE-2022-48334
Published: 2023-06-26
Description: Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://cyberintel.es/cve/CVE-2022-48334_Buffer_Overflow_in_Widevine_drm_verify_keys_0x7370/; https://cyberintel.es/cve/CVE-2022-48334_Buffer_Overflow_in_Widevine_drm_verify_keys_0x7370/
CVE: CVE-2022-48335
Published: 2023-06-26
Description: Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://cyberintel.es/cve/CVE-2022-48335_Buffer_Overflow_in_Widevine_PRDiagVerifyProvisioning_0x5f90/; https://cyberintel.es/cve/CVE-2022-48335_Buffer_Overflow_in_Widevine_PRDiagVerifyProvisioning_0x5f90/
CVE: CVE-2022-48336
Published: 2023-06-26
Description: Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://cyberintel.es/cve/CVE-2022-48336_Buffer_Overflow_in_Widevine_PRDiagParseAndStoreData_0x5cc8/; https://cyberintel.es/cve/CVE-2022-48336_Buffer_Overflow_in_Widevine_PRDiagParseAndStoreData_0x5cc8/
CVE: CVE-2020-20210
Published: 2023-06-26
Description: Bludit 3.9.2 is vulnerable to Remote Code Execution (RCE) via /admin/ajax/upload-images.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/bludit/bludit/issues/1079; https://github.com/bludit/bludit/issues/1079
CVE: CVE-2023-2005
Published: 2023-06-26
Description: Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #[PII_REDACTED]02 ; Nessus: before Plugin Feed ID #[PII_REDACTED]02 ; Security Center: before Plugin Feed ID #[PII_REDACTED]02 .

This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.



CVSS Score: 6.3 (MEDIUM)
CWE: CWE-427
References: https://www.tenable.com/security/tns-2023-21; https://www.tenable.com/security/tns-2023-21
CVE: CVE-2020-23064
Published: 2023-06-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2020-23065
Published: 2023-06-26
Description: Cross Site Scripting vulnerabiltiy in eZ Systems AS eZPublish Platform v.5.4 and eZ Publish Legacy v.5.4 allows a remote authenticated attacker to execute arbitrary code via the video-js.swf.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://ezplatform.com/security-advisories/ezsa-2020-003-xss-in-demobundle-ezdemo-bundled-videojs; https://ezplatform.com/security-advisories/ezsa-2020-003-xss-in-demobundle-ezdemo-bundled-videojs
CVE: CVE-2020-23066
Published: 2023-06-26
Description: Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record.
CVE: CVE-2021-31635
Published: 2023-06-26
Description: Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the template function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/jfinal/jfinal/issues/187; https://github.com/jfinal/jfinal/issues/187
CVE: CVE-2023-36252
Published: 2023-06-26
Description: An issue in Ateme Flamingo XL v.3.6.20 and XS v.3.6.5 allows a remote authenticated attacker to execute arbitrary code and cause a denial of service via a the session expiration function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613
References: https://www.zeroscience.mk/en/vulnerabilities/; https://www.zeroscience.mk/en/vulnerabilities/
CVE: CVE-2023-27082
Published: 2023-06-26
Description: Cross Site Scripting (XSS) vulnerability in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev4 allows remote attackers to run arbitrary code via upload of crafted html file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40syed.pentester/authenticated-stored-cross-site-scripting-xss-d39aab69e58f; https://medium.com/%40syed.pentester/authenticated-stored-cross-site-scripting-xss-d39aab69e58f
CVE: CVE-2023-2290
Published: 2023-06-26
Description: A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://support.lenovo.com/us/en/product_security/LEN-106014; https://support.lenovo.com/us/en/product_security/LEN-106014
CVE: CVE-2023-2992
Published: 2023-06-26
Description: An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions.  Rebooting SMM or FPC will restore access to the management web server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-405
References: https://support.lenovo.com/us/en/product_security/LEN-127357; https://support.lenovo.com/us/en/product_security/LEN-127357
CVE: CVE-2023-2993
Published: 2023-06-26
Description: A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands on SMM v1, SMM v2, and FPC that the user does not normally have sufficient privileges to execute.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-281, CWE-281
References: https://support.lenovo.com/us/en/product_security/LEN-127357; https://support.lenovo.com/us/en/product_security/LEN-127357
CVE: CVE-2023-33176
Published: 2023-06-26
Description: BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery (SSRF) vulnerability. In an `insertDocument` API request the user is able to supply a URL from which the presentation should be downloaded. This URL was being used without having been successfully validated first. An update to the `followRedirect` method in the `PresentationUrlDownloadService` has been made to validate all URLs to be used for presentation download. Two new properties `presentationDownloadSupportedProtocols` and `presentationDownloadBlockedHosts` have also been added to `bigbluebutton.properties` to allow administrators to define what protocols a URL must use and to explicitly define hosts that a presentation cannot be downloaded from. All URLs passed to `insertDocument` must conform to the requirements of the two previously mentioned properties. Additionally, these URLs must resolve to valid addresses, and these addresses must not be local or loopback addresses. There are no workarounds. Users are advised to upgrade to a patched version of BigBlueButton.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-918
References: https://github.com/bigbluebutton/bigbluebutton/commit/43394dade595d0707384e[PII_REDACTED]537352415; https://github.com/bigbluebutton/bigbluebutton/commit/b18aff32e65a47f1eb2c800e86dcfc7a8fb05e71; https://github.com/bigbluebutton/bigbluebutton/pull/18045
CVE: CVE-2023-33404
Published: 2023-06-26
Description: An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/hacip/CVE-2023-33404; https://github.com/hacip/CVE-2023-33404
CVE: CVE-2023-34418
Published: 2023-06-26
Description: A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89, CWE-89
References: https://support.lenovo.com/us/en/product_security/LEN-98715; https://support.lenovo.com/us/en/product_security/LEN-98715