deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-1656
Published: 2023-03-29
Description: Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14; https://backstage.forgerock.com/knowledge/kb/article/a14149722; https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14
CVE: CVE-2023-22705
Published: 2023-03-29
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Collne Inc. Welcart e-Commerce plugin <= 2.8.10 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/usc-e-shop/wordpress-welcart-e-commerce-plugin-2-8-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-28501
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-190
References: https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE: CVE-2017-6894
Published: 2023-03-29
Description: A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventory gathering components and can be exploited by local users to perform certain actions with elevated privileges on the local system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/A-vulnerability-exists-in-FlexNet-Manager-Suite-release-2015-R2/ta-p/1891; https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/A-vulnerability-exists-in-FlexNet-Manager-Suite-release-2015-R2/ta-p/1891
CVE: CVE-2019-8963
Published: 2023-03-29
Description: A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool.
CVSS Score: 7.5 (HIGH)
References: https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8963-Remediated-in-FlexNet-Publisher/ta-p/148768; https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8963-Remediated-in-FlexNet-Publisher/ta-p/148768
CVE: CVE-2021-41526
Published: 2023-03-29
Description: A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when invoked ‘repair’ of the MSI which has an InstallScript custom action.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2024/Apr/24; https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2021-41526-Privilege-escalation-vulnerability-during-MSI/ta-p/218137/jump-to/first-unread-message; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0011/MNDT-2021-0011.md
CVE: CVE-2022-1274
Published: 2023-03-29
Description: A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=2073157; https://github.com/keycloak/keycloak/security/advisories/GHSA-m4fv-gm5m-4725; https://herolab.usd.de/security-advisories/usd-2021-0033/
CVE: CVE-2022-3787
Published: 2023-03-29
Description: A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This issue occurs because an attacker can repeat a keyword, which is mishandled when arithmetic ADD is used instead of bitwise OR. This could lead to local privilege escalation to root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-285
References: https://bugzilla.redhat.com/show_bug.cgi?id=2138959; https://bugzilla.redhat.com/show_bug.cgi?id=2138959
CVE: CVE-2023-0836
Published: 2023-03-29
Description: An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-459, CWE-459
References: https://git.haproxy.org/?p=haproxy.git%3Ba=commitdiff%3Bh=2e6bf0a; https://www.debian.org/security/2023/dsa-5388; https://git.haproxy.org/?p=haproxy.git%3Ba=commitdiff%3Bh=2e6bf0a
CVE: CVE-2023-1652
Published: 2023-03-29
Description: A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.
CVSS Score: 7.1 (HIGH)
CWE: CWE-416, CWE-416, CWE-416
References: https://access.redhat.com/security/cve/cve-2023-1652; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://access.redhat.com/security/cve/cve-2023-1652
CVE: CVE-2023-28502
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: http://packetstormsecurity.com/files/171853/Rocket-Software-Unidata-8.2.4-Build-3003-Buffer-Overflow.html; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; http://packetstormsecurity.com/files/171853/Rocket-Software-Unidata-8.2.4-Build-3003-Buffer-Overflow.html
CVE: CVE-2023-28503
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass vulnerability, where a special username with a deterministic password can be leveraged to bypass authentication checks and execute OS commands as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-287
References: http://packetstormsecurity.com/files/171854/Rocket-Software-Unidata-udadmin_server-Authentication-Bypass.html; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; http://packetstormsecurity.com/files/171854/Rocket-Software-Unidata-udadmin_server-Authentication-Bypass.html
CVE: CVE-2023-28504
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow that can lead to remote code execution as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE: CVE-2023-28505
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow in an API function, where a string is copied into a caller-provided buffer without checking the length. This requires a valid login to exploit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120, CWE-120
References: https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE: CVE-2023-28506
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow, where a string is copied into a buffer using a memcpy-like function and a user-provided length. This requires a valid login to exploit.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-787, CWE-120
References: https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE: CVE-2023-28507
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a memory-exhaustion issue, where a decompression routine will allocate increasing amounts of memory until all system memory is exhausted and the forked process crashes.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400, CWE-400, CWE-400
References: https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE: CVE-2023-28508
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based overflow vulnerability, where certain input can corrupt the heap and crash the forked process.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE: CVE-2023-28509
Published: 2023-03-29
Description: Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 use weak encryption for packet-level security and passwords transferred on the wire.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-327, CWE-327
References: https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/; https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/
CVE: CVE-2023-0620
Published: 2023-03-30
Description: HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command.

This issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://discuss.hashicorp.com/t/hcsec-2023-12-vault-s-microsoft-sql-database-storage-backend-vulnerable-to-sql-injection-via-configuration-file/52080/1; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.hashicorp.com/t/hcsec-2023-12-vault-s-microsoft-sql-database-storage-backend-vulnerable-to-sql-injection-via-configuration-file/52080/1
CVE: CVE-2023-0665
Published: 2023-03-30
Description: HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://discuss.hashicorp.com/t/hcsec-2023-11-vault-s-pki-issuer-endpoint-did-not-correctly-authorize-access-to-issuer-metadata/52079/1; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.hashicorp.com/t/hcsec-2023-11-vault-s-pki-issuer-endpoint-did-not-correctly-authorize-access-to-issuer-metadata/52079/1
CVE: CVE-2023-25000
Published: 2023-03-30
Description: HashiCorp Vault's implementation of Shamir's secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-208, CWE-203
References: https://discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078
CVE: CVE-2023-26116
Published: 2023-03-30
Description: Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333, CWE-1333, CWE-1333
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/; https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406320
CVE: CVE-2023-26117
Published: 2023-03-30
Description: Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333, CWE-1333, CWE-1333
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/; https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406323
CVE: CVE-2023-26118
Published: 2023-03-30
Description: Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the <input type="url"> element due to the usage of an insecure regular expression in the input[url] functionality. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in catastrophic backtracking.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333, CWE-1333, CWE-1333
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQWJLE5WE33WNMA54XSJIDXBRK2KL3XJ/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDKFLKJ6VZKL52AFVW2OVZRMJWHMW55K/; https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-5406326
CVE: CVE-2023-1013
Published: 2023-03-30
Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Virames Vira-Investing allows Cross-Site Scripting (XSS).This issue affects Vira-Investing: before 1.0.84.86.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80
References: https://www.usom.gov.tr/bildirim/tr-23-0183; https://www.usom.gov.tr/bildirim/tr-23-0183
CVE: CVE-2023-1014
Published: 2023-03-30
Description: Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.This issue affects Vira-Investing: before 1.0.84.86.


CVSS Score: 7.5 (HIGH)
CWE: CWE-1320
References: https://www.usom.gov.tr/bildirim/tr-23-0183; https://www.usom.gov.tr/bildirim/tr-23-0183
CVE: CVE-2023-1699
Published: 2023-03-30
Description: Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability.  This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187.  
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-425, CWE-425
References: https://docs.rapid7.com/release-notes/nexpose/20230329/; https://docs.rapid7.com/release-notes/nexpose/20230329/
CVE: CVE-2023-1712
Published: 2023-03-30
Description: Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-547
References: https://github.com/deepset-ai/haystack/commit/5fc84904f198de661d5b933fde756aa922bf09f1; https://huntr.dev/bounties/9a6b1fb4-ec9b-4cfa-af1e-9ce304924829; https://github.com/deepset-ai/haystack/commit/5fc84904f198de661d5b933fde756aa922bf09f1
CVE: CVE-2023-28935
Published: 2023-03-30
Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache UIMA DUCC.


When using the "Distributed UIMA Cluster Computing" (DUCC) module of Apache UIMA, an authenticated user that has the permissions to modify core entities can cause command execution as the system user that runs the web process.


As the "Distributed UIMA Cluster Computing" module for UIMA is retired, we do not plan to release a fix for this issue.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.


CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://lists.apache.org/thread/r19z14b9rrfxv72r93q5trq5tyffo75g; https://lists.apache.org/thread/r19z14b9rrfxv72r93q5trq5tyffo75g
CVE: CVE-2023-23670
Published: 2023-03-30
Description: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin <= 1.2.10 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/fancy-facebook-comments/wordpress-fancy-comments-wordpress-plugin-1-2-10-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fancy-facebook-comments/wordpress-fancy-comments-wordpress-plugin-1-2-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23675
Published: 2023-03-30
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catchsquare WP Smart Preloader plugin <= 1.15 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-smart-preloader/wordpress-wp-smart-preloader-plugin-1-15-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-smart-preloader/wordpress-wp-smart-preloader-plugin-1-15-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23677
Published: 2023-03-30
Description: Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions.
CVSS Score: 3.8 (LOW)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/gtmetrix-for-wordpress/wordpress-gtmetrix-for-wordpress-plugin-0-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gtmetrix-for-wordpress/wordpress-gtmetrix-for-wordpress-plugin-0-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23681
Published: 2023-03-30
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Labib Ahmed Image Hover Effects For WPBakery Page Builder plugin <= 4.0 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/image-hover-effects-visual-composer-extension/wordpress-image-hover-effects-for-wpbakery-page-builder-plugin-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/image-hover-effects-visual-composer-extension/wordpress-image-hover-effects-for-wpbakery-page-builder-plugin-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-24399
Published: 2023-03-30
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.2 versions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/ocean-extra/wordpress-ocean-extra-plugin-2-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/ocean-extra/wordpress-ocean-extra-plugin-2-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-25040
Published: 2023-03-30
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vova Anokhin WordPress Shortcodes Plugin — Shortcodes Ultimate plugin <= 5.12.6 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-28731
Published: 2023-03-30
Description: AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file upload allowing PHP code to be injected. 



This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0. 











CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-434, CWE-434
References: https://www.acymailing.com/change-log/; https://www.bugbounty.ch/advisories/CVE-2023-28731; https://www.acymailing.com/change-log/
CVE: CVE-2023-28732
Published: 2023-03-30
Description: Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system files via path traversal, when being granted access to the campaign's creation on front-office. 

This issue affects AnyMailing Joomla Plugin in versions below 8.3.0. 






CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-200, CWE-22
References: https://github.com/acyba/acymailing/releases/tag/v8.3.0; https://www.acymailing.com/change-log/; https://www.bugbounty.ch/advisories/CVE-2023-28732
CVE: CVE-2023-28733
Published: 2023-03-30
Description: AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. 

This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0. 









CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-116, CWE-79
References: https://www.acymailing.com/change-log/; https://www.bugbounty.ch/advisories/CVE-2023-28733; https://www.acymailing.com/change-log/
CVE: CVE-2023-1725
Published: 2023-03-30
Description: Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forgery.This issue affects Project Management System: before 4.09.31.125.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://www.usom.gov.tr/bildirim/tr-23-0187; https://www.usom.gov.tr/bildirim/tr-23-0187