rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-38431 
An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, leading to an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-17T00:00:00.000Z
CVE-2023-38432 
An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-17T00:00:00.000Z
CVE-2023-38433 
Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions V01L001 to V01L053, IP-HE950D firmware versions V01L001 to V01L053, IP-HE900E firmware versions V01L001 to V01L010, IP-HE900D firmware versions V01L001 to V01L004, IP-900E / IP-920E firmware versions V01L001 to V02L061, IP-900D / IP-900ⅡD / IP-920D firmware versions V01L001 to V02L061, IP-90 firmware versions V01L001 to V01L013, and IP-9610 firmware versions V01L001 to V02L007.
Problem types: description: Use of Hard-coded Credentials
Affected products: vendor: Fujitsu Limited 
product: IP-HE950E
vendor: Fujitsu Limited 
product: IP-HE950D
vendor: Fujitsu Limited 
product: IP-HE900E
vendor: Fujitsu Limited 
product: IP-HE900D
vendor: Fujitsu Limited 
product: IP-900E / IP-920E
vendor: Fujitsu Limited 
product: IP-900D / IP-900ⅡD / IP-920D
vendor: Fujitsu Limited 
product: IP-90
vendor: Fujitsu Limited 
product: IP-9610
Published: 2023-07-26T07:44:04.302Z
CVE-2023-38434 
xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-18T00:00:00.000Z
CVE-2023-38435 Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack.

Upgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Apache Software Foundation
product: Apache Felix Healthcheck Webconsole Plugin
default_status: unaffected
Credits: lang: en
value: This vulnerability was found by xray web vulnerability scanner (github.com/chaitin/xray)
Published: 2023-07-25T15:40:05.363Z
CVE-2023-38436 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:01.826Z
CVE-2023-38437 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:02.104Z
CVE-2023-38438 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:02.381Z
CVE-2023-38439 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:02.676Z
CVE-2023-38440 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:02.966Z
CVE-2023-38441 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:03.270Z
CVE-2023-38442 
In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:03.572Z
CVE-2023-38443 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:03.873Z
CVE-2023-38444 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:04.144Z
CVE-2023-38445 
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:04.417Z
CVE-2023-38446 
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:04.688Z
CVE-2023-38447 
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:04.962Z
CVE-2023-38448 
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:05.233Z
CVE-2023-38449 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:05.502Z
CVE-2023-38450 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:05.855Z
CVE-2023-38451 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:06.158Z
CVE-2023-38452 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:06.450Z
CVE-2023-38453 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:06.759Z
CVE-2023-38454 
In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:07.068Z
CVE-2023-38455 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:07.334Z
CVE-2023-38456 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:07.608Z
CVE-2023-38457 
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:07.884Z
CVE-2023-38458 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:08.169Z
CVE-2023-38459 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:08.448Z
CVE-2023-38460 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:08.728Z
CVE-2023-38461 
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:08.997Z
CVE-2023-38462 
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:09.279Z
CVE-2023-38463 
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:09.557Z
CVE-2023-38464 
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
default_status: unaffected
Published: 2023-09-04T01:16:09.835Z
CVE-2023-38465 
In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-09-04T01:16:10.114Z
CVE-2023-38466 
In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-09-04T01:16:10.383Z
CVE-2023-38467 
In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-09-04T01:16:10.678Z
CVE-2023-38468 
In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-09-04T01:16:10.949Z
CVE-2023-38469 Reachable assertion in avahi_dns_packet_append_record
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
Problem types: cwe_id: CWE-617
description: Reachable Assertion
Affected products: vendor: n/a
product: avahi
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
vendor: Fedora
product: Fedora
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2023-11-02T14:49:26.283Z
CVE-2023-38470 Reachable assertion in avahi_escape_label
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
Problem types: cwe_id: CWE-617
description: Reachable Assertion
Affected products: vendor: n/a
product: avahi
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
vendor: Fedora
product: Fedora
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2023-11-02T14:57:28.872Z
CVE-2023-38471 Reachable assertion in dbus_set_host_name
A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
Problem types: cwe_id: CWE-617
description: Reachable Assertion
Affected products: vendor: n/a
product: avahi
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
vendor: Fedora
product: Fedora
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2023-11-02T14:58:22.628Z
CVE-2023-38472 Reachable assertion in avahi_rdata_parse
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
Problem types: cwe_id: CWE-617
description: Reachable Assertion
Affected products: vendor: n/a
product: avahi
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
vendor: Fedora
product: Fedora
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2023-11-02T14:59:24.996Z
CVE-2023-38473 Reachable assertion in avahi_alternative_host_name
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
Problem types: cwe_id: CWE-617
description: Reachable Assertion
Affected products: vendor: n/a
product: avahi
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unknown
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: affected
vendor: Fedora
product: Fedora
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2023-11-02T15:00:19.576Z
CVE-2023-38474 WordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Reflected XSS.This issue affects Campaign Monitor for WordPress: from n/a through 2.8.12.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Campaign Monitor
product: Campaign Monitor for WordPress
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Phd (Patchstack Alliance)
Published: 2023-11-30T12:26:53.497Z
CVE-2023-38475 WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in RedNao Donations Made Easy – Smart Donations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: RedNao
product: Donations Made Easy – Smart Donations
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Abdi Pranata (Patchstack Alliance)
Published: 2024-12-13T14:23:54.895Z
CVE-2023-38476 WordPress Client Portal : SuiteDash Direct Login Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direct Login plugin <= 1.7.6 versions.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: SuiteDash :: ONE Dashboard®
product: Client Portal : SuiteDash Direct Login
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Rio Darmawan (Patchstack Alliance)
Published: 2023-09-03T11:43:03.581Z
CVE-2023-38477 WordPress QR code MeCard/vCard generator plugin <= 1.6.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Stanislav Kuznetsov QR code MeCard/vCard generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QR code MeCard/vCard generator: from n/a through 1.6.0.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Stanislav Kuznetsov
product: QR code MeCard/vCard generator
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Credits: lang: en
value: Abdi Pranata (Patchstack Alliance)
Published: 2024-12-13T14:23:55.523Z