deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-49043
Published: 2023-11-27
Description: Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function fromSetWirelessRepeat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/fromSetWirelessRepeat.md; https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/fromSetWirelessRepeat.md
CVE: CVE-2023-49046
Published: 2023-11-27
Description: Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function formAddMacfilterRule.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/formAddMacfilterRule.md; https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/formAddMacfilterRule.md
CVE: CVE-2023-2707
Published: 2023-11-27
Description: The gAppointments WordPress plugin through 1.9.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e5664da4-5b78-4e42-be6b-e0d7b73a85b0; https://wpscan.com/vulnerability/e5664da4-5b78-4e42-be6b-e0d7b73a85b0
CVE: CVE-2023-41998
Published: 2023-11-27
Description: Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.tenable.com/security/research/tra-2023-37; https://www.tenable.com/security/research/tra-2023-37
CVE: CVE-2023-41999
Published: 2023-11-27
Description: An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that allows them to authenticate to the management console and perform tasks that require authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.tenable.com/security/research/tra-2023-37; https://www.tenable.com/security/research/tra-2023-37
CVE: CVE-2023-42000
Published: 2023-11-27
Description: Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://www.tenable.com/security/research/tra-2023-37; https://www.tenable.com/security/research/tra-2023-37
CVE: CVE-2023-49028
Published: 2023-11-27
Description: Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/Chiaki2333/d132c4b169b55bd7cd50e73dbe20c410; https://github.com/Chiaki2333/vulnerability/blob/main/smpn1smg-absis-XSS-lock.php-user.md; https://github.com/smpn1smg/absis
CVE: CVE-2023-49040
Published: 2023-11-27
Description: An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/form_fast_setting_internet_set.md; https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/form_fast_setting_internet_set.md
CVE: CVE-2023-49042
Published: 2023-11-27
Description: Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the function setSchedWifi.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/setSchedWifi.md; https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/setSchedWifi.md
CVE: CVE-2023-49047
Published: 2023-11-27
Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/formSetDeviceName.md; https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/formSetDeviceName.md
CVE: CVE-2023-4252
Published: 2023-11-27
Description: The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/d2019e59-db6c-4014-8057-0644c9a00665; https://wpscan.com/vulnerability/d2019e59-db6c-4014-8057-0644c9a00665
CVE: CVE-2023-4297
Published: 2023-11-27
Description: The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/9ff85b06-819c-459e-90a9-6151bfd70978; https://wpscan.com/vulnerability/9ff85b06-819c-459e-90a9-6151bfd70978
CVE: CVE-2023-4514
Published: 2023-11-27
Description: The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/365b15e6-3755-4ed5-badd-c9dd962bd9fa; https://wpscan.com/vulnerability/365b15e6-3755-4ed5-badd-c9dd962bd9fa
CVE: CVE-2023-4642
Published: 2023-11-27
Description: The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://wpscan.com/vulnerability/6f481d34-6feb-4af2-914c-1f3288f69207; https://wpscan.com/vulnerability/6f481d34-6feb-4af2-914c-1f3288f69207
CVE: CVE-2023-4922
Published: 2023-11-27
Description: The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/968d87c0-af60-45ea-b34e-8551313cc8df; https://wpscan.com/vulnerability/968d87c0-af60-45ea-b34e-8551313cc8df
CVE: CVE-2023-5209
Published: 2023-11-27
Description: The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/dea6077a-81ee-451f-b049-3749a2252c88; https://wpscan.com/vulnerability/dea6077a-81ee-451f-b049-3749a2252c88
CVE: CVE-2023-5239
Published: 2023-11-27
Description: The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/1d748f91-773b-49d6-8f68-a27d397713c3; https://wpscan.com/vulnerability/1d748f91-773b-49d6-8f68-a27d397713c3
CVE: CVE-2023-5325
Published: 2023-11-27
Description: The Woocommerce Vietnam Checkout WordPress plugin before 2.0.6 does not escape the custom shipping phone field no the checkout form leading to XSS
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e93841ef-e113-41d3-9fa1-b21af85bd812; https://wpscan.com/vulnerability/e93841ef-e113-41d3-9fa1-b21af85bd812
CVE: CVE-2023-5525
Published: 2023-11-27
Description: The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a valid nonce to toggle the auto-update status of the plugin.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/654bad15-1c88-446a-b28b-5a412cc0399d; https://wpscan.com/vulnerability/654bad15-1c88-446a-b28b-5a412cc0399d
CVE: CVE-2023-5559
Published: 2023-11-27
Description: The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from the database, leading to denial of service.
CVSS Score: 9.1 (CRITICAL)
References: https://wpscan.com/vulnerability/eba46f7d-e4db-400c-8032-015f21087bbf; https://wpscan.com/vulnerability/eba46f7d-e4db-400c-8032-015f21087bbf
CVE: CVE-2023-5560
Published: 2023-11-27
Description: The WP-UserOnline WordPress plugin before 2.88.3 does not sanitise and escape the X-Forwarded-For header before outputting its content on the page, which allows unauthenticated users to perform Cross-Site Scripting attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/55d23184-fc5a-4090-b079-142407b59b05; https://wpscan.com/vulnerability/55d23184-fc5a-4090-b079-142407b59b05
CVE: CVE-2023-5604
Published: 2023-11-27
Description: The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthenticated users to upload dangerous files (e.g. .php, .phtml), potentially leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-434
References: https://wpscan.com/vulnerability/4ce69d71-87bf-4d95-90f2-63d558c78b69; https://wpscan.com/vulnerability/4ce69d71-87bf-4d95-90f2-63d558c78b69
CVE: CVE-2023-5611
Published: 2023-11-27
Description: The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d; https://wpscan.com/vulnerability/8cb8a5e9-2ab6-4d9b-9ffc-ef530e346f8d
CVE: CVE-2023-5620
Published: 2023-11-27
Description: The Web Push Notifications WordPress plugin before 4.35.0 does not prevent visitors on the site from changing some of the plugin options, some of which may be used to conduct Stored XSS attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a03330c2-3ae0-404d-a114-33b18cc47666; https://wpscan.com/vulnerability/a03330c2-3ae0-404d-a114-33b18cc47666
CVE: CVE-2023-5641
Published: 2023-11-27
Description: The Martins Free & Easy SEO BackLink Link Building Network WordPress plugin before 1.2.30 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c0a6c253-71f2-415d-a6ec-022f2eafc13b; https://wpscan.com/vulnerability/c0a6c253-71f2-415d-a6ec-022f2eafc13b
CVE: CVE-2023-5653
Published: 2023-11-27
Description: The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS attacks against logged in admins
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/76[PII_REDACTED]-44ea-83e5-6ca884bdd1c0; https://wpscan.com/vulnerability/76[PII_REDACTED]-44ea-83e5-6ca884bdd1c0
CVE: CVE-2023-5737
Published: 2023-11-27
Description: The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update some plugin settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/c761c67c-eab8-4e1b-a332-c9a45e22bb13; https://wpscan.com/vulnerability/c761c67c-eab8-4e1b-a332-c9a45e22bb13
CVE: CVE-2023-5738
Published: 2023-11-27
Description: The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subscriber to perform Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7f935916-9a1a-40c7-b6d8-efcc46eb8eaf; https://wpscan.com/vulnerability/7f935916-9a1a-40c7-b6d8-efcc46eb8eaf
CVE: CVE-2023-5845
Published: 2023-11-27
Description: The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta tags
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/d5b59e9e-85e5-4d26-aebe-64757c8495fa; https://wpscan.com/vulnerability/d5b59e9e-85e5-4d26-aebe-64757c8495fa
CVE: CVE-2023-5906
Published: 2023-11-27
Description: The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthorized user to view and download private files of other users. This vulnerability poses a serious security threat because it allows an attacker to gain access to confidential data and files of other users without their permission.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/911d495c-3867-4259-a73a-572cd4fccdde; https://wpscan.com/vulnerability/911d495c-3867-4259-a73a-572cd4fccdde
CVE: CVE-2023-5942
Published: 2023-11-27
Description: The Medialist WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/914559e1-eed5-4a69-8371-a[PII_REDACTED]3; https://wpscan.com/vulnerability/914559e1-eed5-4a69-8371-a[PII_REDACTED]3
CVE: CVE-2023-5958
Published: 2023-11-27
Description: The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attacker to perform XSS attacks against highly privileged users.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/22fa478d-e42e-488d-9b4b-a8720dec7cee; https://wpscan.com/vulnerability/22fa478d-e42e-488d-9b4b-a8720dec7cee
CVE: CVE-2023-5974
Published: 2023-11-27
Description: The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://wpscan.com/vulnerability/c0136057-f420-4fe7-a147-ecbec7e7a9b5; https://wpscan.com/vulnerability/c0136057-f420-4fe7-a147-ecbec7e7a9b5
CVE: CVE-2023-6329
Published: 2023-11-27
Description: An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://tenable.com/security/research/tra-2023-36; https://tenable.com/security/research/tra-2023-36
CVE: CVE-2023-49316
Published: 2023-11-27
Description: In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f; https://github.com/phpseclib/phpseclib/releases/tag/3.0.34; https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f
CVE: CVE-2022-41951
Published: 2023-11-27
Description: OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is possible in `Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName`. With this method, an attacker can pass the path to a non-existent file, which will allow writing the content to a new file that will be available during script execution. This vulnerability has been fixed in version 5.0.9.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22
References: https://github.com/oroinc/platform/security/advisories/GHSA-9v3j-4j64-p937; https://github.com/oroinc/platform/security/advisories/GHSA-9v3j-4j64-p937
CVE: CVE-2023-48034
Published: 2023-11-27
Description: An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-326
References: https://github.com/aprkr/CVE-2023-48034; https://github.com/aprkr/CVE-2023-48034
CVE: CVE-2023-49030
Published: 2023-11-27
Description: SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://gist.github.com/Chiaki2333/f09b47a39e175932d8a2360e439194d5; https://github.com/32ns/KLive; https://github.com/Chiaki2333/vulnerability/blob/main/32ns-KLive-SQL-user.php.md
CVE: CVE-2023-49044
Published: 2023-11-27
Description: Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_setting_wifi_set.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/form_fast_setting_wifi_set.md; https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1803/form_fast_setting_wifi_set.md
CVE: CVE-2023-32062
Published: 2023-11-27
Description: OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: https://github.com/oroinc/OroCalendarBundle/commit/460a8ffb63b10c76f2fa26d[PII_REDACTED]1c4909b; https://github.com/oroinc/OroCalendarBundle/commit/5f4734aa02088191c1c1d90ac0909f48610fe531; https://github.com/oroinc/crm/security/advisories/GHSA-x2xm-p6vq-482g
CVE: CVE-2023-42363
Published: 2023-11-27
Description: A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://bugs.busybox.net/show_bug.cgi?id=15865; https://bugs.busybox.net/show_bug.cgi?id=15865
CVE: CVE-2023-5773
Published: 2023-11-27
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-6136. Reason: This record is a reservation duplicate of CVE-20nn-nnnn. Notes: All CVE users should reference CVE-2023-6136 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-5885
Published: 2023-11-27
Description: The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-35, CWE-22
References: https://www.cisa.gov/news-events/ics-advisories/ICSA-23-331-02; https://www.franklinfueling.com/en/contact-us/; https://www.franklinfueling.com/en/landing-pages/firmware/colibri-firmware/
CVE: CVE-2023-42364
Published: 2023-11-27
Description: A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugs.busybox.net/show_bug.cgi?id=15868; https://bugs.busybox.net/show_bug.cgi?id=15868; https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html
CVE: CVE-2023-42365
Published: 2023-11-27
Description: A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://bugs.busybox.net/show_bug.cgi?id=15871; https://bugs.busybox.net/show_bug.cgi?id=15871; https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html
CVE: CVE-2023-42366
Published: 2023-11-27
Description: A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://bugs.busybox.net/show_bug.cgi?id=15874; https://bugs.busybox.net/show_bug.cgi?id=15874; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-46349
Published: 2023-11-27
Description: In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The method `productsUpdateModel::getExportIds()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/11/23/updateproducts.html; https://security.friendsofpresta.org/modules/2023/11/23/updateproducts.html
CVE: CVE-2023-46355
Published: 2023-11-27
Description: In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too permissive access control which does not force administrator to use password on feeds, a guest can access exports from the module which can lead to leaks of personal information from ps_customer / ps_order table such as name / surname / email / phone number / postal address.
CVSS Score: 5.3 (MEDIUM)
References: https://security.friendsofpresta.org/modules/2023/11/23/csvfeeds.html; https://security.friendsofpresta.org/modules/2023/11/23/csvfeeds.html
CVE: CVE-2023-46480
Published: 2023-11-27
Description: An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-94
References: https://github.com/owncast/owncast; https://github.com/shahzaibak96/CVE-2023-46480; https://github.com/owncast/owncast
CVE: CVE-2023-48188
Published: 2023-11-27
Description: SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script to the getModuleTranslation function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/11/23/opartdevis.html; https://security.friendsofpresta.org/modules/2023/11/23/opartdevis.html
CVE: CVE-2023-49145
Published: 2023-11-27
Description: Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-based cross-site scripting. If an authenticated user, who is authorized to configure a JoltTransformJSON Processor, visits a crafted URL, then arbitrary
JavaScript code can be executed within the session context of the authenticated user. Upgrading to Apache NiFi 1.24.0 or 2.0.0-M1 is the recommended mitigation.
CVSS Score: 7.9 (HIGH)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2023/11/27/5; https://lists.apache.org/thread/j8rd0qsvgoj0khqck5f49jfbp0fm8r1o; https://nifi.apache.org/security.html#CVE-2023-49145
CVE: CVE-2023-29770
Published: 2023-11-28
Description: In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/sapplica/sentrifugo; https://github.com/sapplica/sentrifugo/issues/384; https://github.com/sapplica/sentrifugo