yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-47527: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5.
Key phrases: Stored XSS.This issue affects WP Edit Username:, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-47528: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sajjad Hossain Sagor WP Edit Username plugin <=1.0.5 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47529: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collection.This issue affects Cloud Templates & Patterns collection: from n/a through 1.2.2.
CVE-2023-4753: OpenHarmony v3.2.1 and prior version has a system call function usage error. Local attackers can crash kernel by the error input.
Key phrases: system call function usage error, crash kernel, error input
CVE-2023-47530: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Page with Logs: from n/a through 1.8.7.
Key phrases: Homepage or Custom Page with Logs: from, sql injection
CVE-2023-47531: Cross-Site Request Forgery (CSRF) vulnerability in DroitThemes Droit Dark Mode.This issue affects Droit Dark Mode: from n/a through 1.1.2.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47532: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themeum WP Crowdfunding plugin <=2.1.6 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47533: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Timer plugin <=1.8.2 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47534: A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets.
Key phrases: execute unauthorized code or commands via specially crafted
CVE-2023-47536: An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below may allow a remote unauthenticated attacker to bypass the firewall deny geolocalisation policy via timing the bypass with a GeoIP database update.
Key phrases: bypass the firewall deny geolocalisation policy, bypass with a GeoIP database update, bypass the firewall deny geolocalisation policy via timing, cwe-284, improper access control
CVE-2023-47537: An improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2.6 and 7.4.0 - 7.4.1 allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch.
Key phrases: perform a Man-in-the-, improper certificate validation, man-in-the-middle, man in the middle
CVE-2023-4754: Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.
Key phrases: out-of-bounds write
CVE-2023-47544: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management  Atarim plugin <=3.12 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47545: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat  Grow Your MailChimp List plugin <=2.5.4 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47546: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilityin Walter Pinem OneClick Chat to Order plugin <=1.0.4.2 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47547: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Products, Order & Customers Export for WooCommerce plugin <=2.0.7 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47548: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive  Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.This issue affects Integrate Google Drive  Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site: from n/a through 1.3.2.
Key phrases: url redirection, open redirect
CVE-2023-47549: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability on302 response page in spider-themes EazyDocsplugin <=2.3.3 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-4755: Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.
Key phrases: use after free
CVE-2023-47550: Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy  Smart Donations allows Stored XSS.This issue affects Donations Made Easy  Smart Donations: from n/a through 4.0.12.
Key phrases: Stored XSS.This issue affects Donations Made Easy  , cross-site request forgery (csrf), stored xss
CVE-2023-47551: Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy  Smart Donations.This issue affects Donations Made Easy  Smart Donations: from n/a through 4.0.12.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47552: Cross-Site Request Forgery (CSRF) vulnerability in Labib Ahmed Image Hover Effects  WordPress Plugin.This issue affects Image Hover Effects  WordPress Plugin: from n/a through 5.5.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47553: Cross-Site Request Forgery (CSRF) vulnerability in User Local Inc UserHeat Plugin.This issue affects UserHeat Plugin: from n/a through 1.1.6.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47554: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DenK BV Actueel Financieel Nieuws  Denk Internet Solutions plugin <=5.1.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47556: Cross-Site Request Forgery (CSRF) vulnerability in James Mehorter Device Theme Switcher.This issue affects Device Theme Switcher: from n/a through 3.0.2.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47558: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit The Page  Hit Counter allows SQL Injection.This issue affects Who Hit The Page  Hit Counter: from n/a through 1.4.14.3.
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-47559: A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.We have already fixed the vulnerability in the following version:QuMagie 2.2.1 and later
Key phrases: inject malicious code via a network, cross-site scripting (xss)
CVE-2023-4756: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
Key phrases: stack-based buffer overflow
CVE-2023-47560: An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network.We have already fixed the vulnerability in the following version:QuMagie 2.2.1 and later
Key phrases: execute commands via a network, os command injection
CVE-2023-47561: A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.We have already fixed the vulnerability in the following version:Photo Station 6.4.2 ( 2023/12/15 ) and later
Key phrases: inject malicious code via a network, cross-site scripting (xss)
CVE-2023-47562: An OS command injection vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network.We have already fixed the vulnerability in the following version:Photo Station 6.4.2 ( 2023/12/15 ) and later
Key phrases: execute commands via a network, os command injection
CVE-2023-47564: An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.We have already fixed the vulnerability in the following versions:Qsync Central 4.4.0.15 ( 2024/01/04 ) and laterQsync Central 4.3.0.11 ( 2024/01/11 ) and later
Key phrases: read or modify the resource via a network, critical resource
CVE-2023-47565: An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.We have already fixed the vulnerability in the following versions:QVR Firmware 5.0.0and later
Key phrases: execute commands via a network, os command injection
CVE-2023-47566: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.We have already fixed the vulnerability in the following versions:QTS 5.1.5.2645 build 20240116 and laterQuTS hero h5.1.5.2647 build 20240118 and laterQuTScloud c5.1.5.2651 and later
Key phrases: execute commands via a network, os command injection
CVE-2023-47567: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.We have already fixed the vulnerability in the following versions:QTS 5.1.5.2645 build 20240116 and laterQTS4.5.4.2627 build 20231225 and laterQuTS hero h5.1.5.2647 build 20240118 and laterQuTS heroh4.5.4.2626 build 20231225 and laterQuTScloud c5.1.5.2651 and later
Key phrases: execute commands via a network, os command injection
CVE-2023-47568: A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.We have already fixed the vulnerability in the following versions:QTS 5.1.5.2645 build 20240116 and laterQTS 4.5.4.2627 build 20231225 and laterQuTS hero h5.1.5.2647 build 20240118 and laterQuTS hero h4.5.4.2626 build 20231225 and laterQuTScloud c5.1.5.2651 and later
Key phrases: inject malicious code via a network, sql injection
CVE-2023-4757: The Staff / Employee Business Directory for Active Directory WordPress plugin before 1.2.3 does not sanitize and escape data returned from the LDAP server before rendering it in the page, allowing users who can control their entries in the LDAP directory to inject malicious javascript which could be used against high-privilege users such as a site admin.
Key phrases: inject malicious javascript which could be used against
CVE-2023-47573: An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface, allowing a low-privileged user to execute administrative functions.
Key phrases: execute administrative functions
CVE-2023-47574: An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. There is a Weak SMB configuration with signing disabled.
Key phrases: weak smb configuration
CVE-2023-47575: An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. The web interfaces of the Relyum devices are susceptible to reflected XSS.
Key phrases: reflected xss
CVE-2023-47576: An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web interface.
Key phrases: authenticated command injection through the web interface
CVE-2023-47577: An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current password.
Key phrases: no check for current password, unauthorized password changes
CVE-2023-47578: Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface.
Key phrases: cross site request forgery (csrf), csrf protection
CVE-2023-47579: Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central password hash file of the operating system.
Key phrases: the central password hash file of the operating, system group misconfiguration
CVE-2023-4758: Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.
Key phrases: buffer over-read
CVE-2023-47580: Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.
Key phrases: arbitrary code, out of bounds memory
CVE-2023-47581: Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.
Key phrases: out-of-bounds read, arbitrary code, out of bounds read
CVE-2023-47582: Access of uninitialized pointer vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.
Key phrases: uninitialized pointer, arbitrary code
CVE-2023-47583: Multiple out-of-bounds read vulnerabilities exist in TELLUS Simulator V4.0.17.0 and earlier. If a user opens a specially crafted file (X1 or V9 file), information may be disclosed and/or arbitrary code may be executed.
Key phrases: out-of-bounds read, information, arbitrary code, out of bounds read
CVE-2023-47584: Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
Key phrases: out-of-bounds write, arbitrary code, out of bounds write
CVE-2023-47585: Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
Key phrases: out-of-bounds read, arbitrary code, out of bounds read
CVE-2023-47586: Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
Key phrases: heap-based buffer overflow, arbitrary code, heap based buffer overflow
CVE-2023-4759: Arbitrary File Overwrite in Eclipse JGit <= 6.6.0In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.This can happen on checkout (DirCacheCheckout), merge (ResolveMergervia its WorkingTreeUpdater), pull (PullCommandusing merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.Setting git configuration option core.symlinks = falsebefore checking out avoids the problem.The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via  Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and  repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from  5.13.3.202401111512-r.The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
Key phrases: arbitrary file overwrite, remote code execution (rce), to write files, file write
CVE-2023-4760: In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component.The reason for this is a not completely secure extraction of the file name in the FileUploadProcessor.stripFileName(String name) method. As soon as this finds a / in the path, everything before it is removed, but potentially \\\\ (backslashes) coming further back are kept.For example, a file name such as /..\\\\..\\\\webapps\\\\shell.war can be used to upload a file to a Tomcat server under Windows, which is then saved as ..\\\\..\\\\webapps\\\\shell.war in its webapps directory and can then be executed.
Key phrases: remote code execution
CVE-2023-47609: SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.
Key phrases: execute arbitrary code, obtain and/or alter the information, execute arbitrary code or obtain and/or alter the, sql injection
CVE-2023-4761: Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
Key phrases: out of bounds memory access, out of bounds memory read
CVE-2023-47610: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a remote unauthenticated attacker to execute arbitrary code on the targeted system by sending a specially crafted SMS message.
Key phrases: execute arbitrary code, execute arbitrary code on the targeted system by, cwe-120: buffer copy without checking size of input
CVE-2023-47611: A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to elevate privileges to "manufacturer" level on the targeted system.
Key phrases: elevate privileges to "manufacturer" level on, cwe-269
CVE-2023-47612: A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to obtain a read/write access to any files and directories on the targeted system, including hidden files and directories.
Key phrases: obtain a read/write access, the target system to obtain a read/, cwe-552
CVE-2023-47613: A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to escape from virtual directories and get read/write access to protected files on the targeted system.
Key phrases: escape from virtual directories and get read/, cwe-23: relative path traversal
CVE-2023-47614: A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to disclose hidden virtual paths and file names on the targeted system.
Key phrases: disclose hidden virtual paths and file names on, cwe-200
CVE-2023-47615: A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow a local, low privileged attacker to get access to a sensitive data on the targeted system.
Key phrases: get access to a sensitive data on the, cwe-526: exposure of sensitive information through environmental variables
CVE-2023-47616: A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to get access to a sensitive data on the targeted system.
Key phrases: the target system to get access to a, cwe-200
CVE-2023-47617: A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Key phrases: post authentication command injection, arbitrary command injection, arbitrary commands
CVE-2023-47618: A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Key phrases: post authentication command execution, arbitrary command execution, arbitrary commands
CVE-2023-47619: Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, users with the update permission are able to read arbitrary files, delete arbitrary files and send a GET request to arbitrary URLs and read the response. This issue may lead to Information Disclosure. As of time of publication, no patches are available.
Key phrases: read arbitrary files, information disclosure
CVE-2023-4762: Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Key phrases: execute arbitrary code, type confusion
CVE-2023-47620: Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the plugin-http.ts file via the `owner' and 'pkg` parameters. An attacker can run arbitrary JavaScript code.
Key phrases: run arbitrary JavaScript code, reflected cross-site scripting
CVE-2023-47621: Guest Entries is a php library which allows users to create, update & delete entries from the front-end of a site. In affected versions the file uploads feature did not prevent the upload of PHP files. This may lead to code execution on the server by authenticated users. This vulnerability is fixed in v3.1.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: create, code execution, file upload
CVE-2023-47623: Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the login page via the `redirect_uri` parameter. By specifying a url with the javascript scheme (`javascript:`), an attacker can run arbitrary JavaScript code after the login.
Key phrases: run arbitrary JavaScript code, cross-site scripting
CVE-2023-47624: Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, any user (regardless of their permissions) may be able to read files from the local file system due to a path traversal in the `/hls` endpoint. This issue may lead to Information Disclosure. As of time of publication, no patches are available.
Key phrases: path traversal, information disclosure
CVE-2023-47625: PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParser_TryParseCrsfPacket function in /src/drivers/rc/crsf_rc/CrsfParser.cpp:298 due to the invalid size check. A malicious user may create an RC packet remotely and that packet goes into the device where the _rcs_buf reads. The global buffer overflow vulnerability will be triggered and the drone can behave unexpectedly. This issue has been addressed in version 1.14.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: global buffer overflow, behave unexpectedly
CVE-2023-47627: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTP_NO_EXTENSIONS is enabled (or not using a prebuilt wheel). These bugs have been addressed in commit `d5c12ba89` which has been included in release version 3.8.6. Users are advised to upgrade. There are no known workarounds for these issues.
Key phrases: request smuggling
CVE-2023-47628: DataHub is an open-source metadata platform. DataHub Frontend's sessions are configured using Play Framework's default settings for stateless session which do not set an expiration time for a cookie. Due to this, if a session cookie were ever leaked, it would be valid forever. DataHub uses a stateless session cookie that is not invalidated on logout, it is just removed from the browser forcing the user to login again. However, if an attacker extracted a cookie from an authenticated user it would continue to be valid as there is no validation on a time window the session token is valid for due to a combination of the usage of LegacyCookiesModule from Play Framework and using default settings which do not set an expiration time. All DataHub instances prior to the patch that have removed the datahub user, but not the default policies applying to that user are affected. Users are advised to update to version 0.12.1 which addresses the issue. There are no known workarounds for this vulnerability.
Key phrases: leaked
CVE-2023-47629: DataHub is an open-source metadata platform. In affected versions sign-up through an invite link does not properly restrict users from signing up as privileged accounts. If a user is given an email sign-up link they can potentially create an admin account given certain preconditions. If the default datahub user has been removed, then the user can sign up for an account that leverages the default policies giving admin privileges to the datahub user. All DataHub instances prior to the patch that have removed the datahub user, but not the default policies applying to that user are affected. Users are advised to update to version 0.12.1 which addresses the issue. There are no known workarounds for this vulnerability.
CVE-2023-4763: Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: use after free, heap corruption
CVE-2023-47630: Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would require the attacker to compromise the registry that the Kyverno users fetch their images from. The attacker could then return an vulnerable image to the the user and leverage that to further escalate their position. As such, the attacker would need to know which images the Kyverno user consumes and know of one of multiple exploitable vulnerabilities in previous digests of the images. Alternatively, if the attacker has compromised the registry, they could craft a malicious image with a different digest with intentionally placed vulnerabilities and deliver the image to the user.  Users pulling their images by digests and from trusted registries are not impacted by this vulnerability. There is no evidence of this being exploited in the wild. The issue has been patched in 1.10.5. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: vulnerable image, exploitable, malicious image
CVE-2023-47631: vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). In affected versions a node does not check if an image is allowed to run if a `parent_id` is set. A malicious party that breaches the server may modify it to set a fake `parent_id` and send a task of a non-whitelisted algorithm. The node will then execute it because the `parent_id` that is set prevents checks from being run. This impacts all servers that are breached by an expert user. This vulnerability has been patched in version 4.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-47633: Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions 2.10.6 and 3.0.0-beta5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-47634: Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race condition in the endorsement of resources (for instance, a proposal) allows a user to make more than once endorsement. To exploit this vulnerability, the request to set an endorsement must be sent several times in parallel. Versions 0.26.9, 0.27.5, and 0.28.0 contain a patch for this issue. As a workaround, disable the Endorsement feature in the components. 
Key phrases: make more than once endorsement, race condition
CVE-2023-47635: Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity token check is disabled for the questionnaire templates preview. The issue does not imply a serious security thread as you need to have access also to the session cookie in order to see this resource. This URL does not allow modifying the resource but it may allow attackers to gain access to information which was not meant to be public. The issue is fixed in version 0.27.5 and 0.28.0. As a workaround, disable the templates functionality or remove all available templates.
Key phrases: gain access, gain access to information which was not meant, security thread
CVE-2023-47636: The Pimcore Admin Classic Bundle provides a Backend UI for Pimcore. Full Path Disclosure (FPD) vulnerabilities enable the attacker to see the path to the webroot/file. e.g.: /home/omg/htdocs/file/. Certain vulnerabilities, such as using the load_file() (within a SQL Injection) query to view the page source, require the attacker to have the full path to the file they wish to view. In the case of pimcore, the fopen() function here doesn't have an error handle when the file doesn't exist on the server so the server response raises the full path "fopen(/var/www/html/var/tmp/export-{ uniqe id}.csv)". This issue has been patched in commit `10d178ef771` which has been included in release version 1.2.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: full path disclosure (fpd), sql injection
CVE-2023-47637: Pimcore is an Open Source Data & Experience Management Platform. In affected versions the `/admin/object/grid-proxy` endpoint calls `getFilterCondition()` on fields of classes to be filtered for, passing input from the request, and later executes the returned SQL.  One implementation of `getFilterCondition()` is in `Multiselect`, which does not normalize/escape/validate the passed value. Any backend user with very basic permissions can execute arbitrary SQL statements and thus alter any data or escalate their privileges to at least admin level. This vulnerability has been addressed in version 11.1.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: execute arbitrary SQL statements, arbitrary sql statements, escalate privilege
CVE-2023-4764: Incorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)
Key phrases: spoofing
CVE-2023-47640: DataHub is an open-source metadata platform. The HMAC signature for DataHub Frontend sessions was being signed using a SHA-1 HMAC with the frontend secret key. SHA1 with a 10 byte key can be brute forced using sufficient resources (i.e. state level actors with large computational capabilities). DataHub Frontend was utilizing the Play LegacyCookiesModule with default settings which utilizes a SHA1 HMAC for signing. This is compounded by using a shorter key length than recommended by default for the signing key for the randomized secret value. An authenticated attacker (or attacker who has otherwise obtained a session token) could crack the signing key for DataHub and obtain escalated privileges by generating a privileged session cookie. Due to key length being a part of the risk, deployments should update to the latest helm chart and rotate their session signing secret. All deployments using the default helm chart configurations for generating the Play secret key used for signing are affected by this vulnerability. Version 0.11.1 resolves this vulnerability. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: obtain escalated privileges, escalate privilege
CVE-2023-47641: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol, if both Content-Length(CL) and Transfer-Encoding(TE) header values are present it can lead to incorrect interpretation of two entities that parse the HTTP and we can poison other sockets with this incorrect interpretation. A possible Proof-of-Concept (POC) would be a configuration with a reverse proxy(frontend) that accepts both CL and TE headers and aiohttp as backend. As aiohttp parses anything with chunked, we can pass a chunked123 as TE, the frontend entity will ignore this header and will parse Content-Length. The impact of this vulnerability is that it is possible to bypass any proxy rule, poisoning sockets to other users like passing Authentication Headers, also if it is present an Open Redirect an attacker could combine it to redirect random users to another website and log the request. This vulnerability has been addressed in release 3.8.0 of aiohttp. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: bypass any proxy rule
CVE-2023-47642: Zulip is an open-source team collaboration tool. It was discovered by the Zulip development team that active users who had previously been subscribed to a stream incorrectly continued being able to use the Zulip API to access metadata for that stream. As a result, users who had been removed from a stream, but still had an account in the organization, could still view metadata for that stream (including the stream name, description, settings, and an email address used to send emails into the stream via the incoming email integration). This potentially allowed users to see changes to a streams metadata after they had lost access to the stream. This vulnerability has been addressed in version 7.5 and all users are advised to upgrade. There are no known workarounds for this issue.
CVE-2023-47643: SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. An attacker can obtain the GraphQL schema and understand the entire attack surface of the API, including sensitive fields such as UserHash. This issue is patched in version 8.4.2. There are no known workarounds.
Key phrases: obtain the GraphQL schema and understand the entire attack surface
CVE-2023-47644: Cross-Site Request Forgery (CSRF) vulnerability in profilegrid ProfileGrid  User Profiles, Memberships, Groups and Communities.This issue affects ProfileGrid  User Profiles, Memberships, Groups and Communities: from n/a through 5.6.6.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47645: Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic RegistrationMagic  Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic  Custom Registration Forms, User Registration, Payment, and User Login: from n/a through 5.2.2.6.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf)
CVE-2023-47646: Auth. (Shop Manager+) Stored Cross-Site Scripting (XSS) vulnerability in CedCommerce Recently viewed and most viewed products plugin <=1.1.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47649: Cross-Site Request Forgery (CSRF) vulnerability in PriceListo Best Restaurant Menu by PriceListo.This issue affects Best Restaurant Menu by PriceListo: from n/a through 1.3.1.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47650: Cross-Site Request Forgery (CSRF) vulnerability in Peter Sterling Add Local Avatar.This issue affects Add Local Avatar: from n/a through 12.1.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47651: Cross-Site Request Forgery (CSRF) vulnerability in Robert Macchi WP Links Page.This issue affects WP Links Page: from n/a through 4.9.4.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47652: Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links allows Stored XSS.This issue affects Auto Affiliate Links: from n/a through 6.4.2.4.
Key phrases: Stored XSS.This issue affects Auto Affiliate Links:, cross-site request forgery (csrf), stored xss
CVE-2023-47653: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abu Bakar TWB Woocommerce Reviews plugin <=1.7.5 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47654: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in livescore.Bz BZScore  Live Score plugin <=1.03 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47655: Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi ANAC XML Bandi di Gara.This issue affects ANAC XML Bandi di Gara: from n/a through 7.5.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47656: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <=7.5 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47657: Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in GrandPlugins Direct Checkout  Quick View  Buy Now For WooCommerce plugin <=1.5.8 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47658: Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in actpro Extra Product Options for WooCommerce plugin <=3.0.3 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47659: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <=1.1.34 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-4766: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Movus allows SQL Injection.This issue affects Movus: before 20230913.
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-47660: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Wham Product Visibility by Country for WooCommerce plugin <=1.4.9 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47662: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GoldBroker.Com Live Gold Price & Silver Price Charts Widgets plugin <=2.4 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47664: Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview Plainview Protect Passwords.This issue affects Plainview Protect Passwords: from n/a through 1.4.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47665: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in edward_plainview Plainview Protect Passwords plugin <=1.4 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47666: Cross-Site Request Forgery (CSRF) vulnerability in Code Snippets Pro Code Snippets.This issue affects Code Snippets: from n/a through 3.5.0.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47667: Cross-Site Request Forgery (CSRF) vulnerability in Mammothology WP Full Stripe Free.This issue affects WP Full Stripe Free: from n/a through 1.6.1.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47668: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin  Restrict Content plugin <=3.2.7 versions.
Key phrases: exposure of sensitive information
CVE-2023-47669: Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs User Profile Builder  Beautiful User Registration Forms, User Profiles & User Role Editor plugin <=3.10.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4767: A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.csv.
Key phrases: inject arbitrary HTTP headers, inject arbitrary HTTP headers and perform HTTP response, crlf injection, http response splitting
CVE-2023-47670: Cross-Site Request Forgery (CSRF) vulnerability in Jongmyoung Kim Korea SNS.This issue affects Korea SNS: from n/a through 1.6.3.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47671: Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy Vertical scroll recent.This issue affects Vertical scroll recent post: from n/a through 14.0.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47672: Cross-Site Request Forgery (CSRF) vulnerability in Swashata WP Category Post List Widget.This issue affects WP Category Post List Widget: from n/a through 2.0.3.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47673: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Stefano Ottolenghi Post Pay Counter plugin <=2.784 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47674: Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
Key phrases: obtain the configuration information, rewrite or obtain the configuration information of the, critical function, missing authentication, missing authentication for critical function
CVE-2023-47675: CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command.
Key phrases: execute an arbitrary OS command, cubecart, execute arbitrary, arbitrary os command
CVE-2023-47678: An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp.
Key phrases: access control, improper access control, to write files
CVE-2023-4768: A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.pdf.
Key phrases: inject arbitrary HTTP headers, inject arbitrary HTTP headers and perform HTTP response, crlf injection, http response splitting
CVE-2023-47680: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Qode Interactive Qi Addons For Elementor plugin <=1.6.3 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47684: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThemePunch OHG Essential Grid plugin <=3.1.0 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47685: Cross-Site Request Forgery (CSRF) vulnerability in Lukman Nakib Preloader Matrix.This issue affects Preloader Matrix: from n/a through 2.0.1.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47686: Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <=2.7.2.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47687: Cross-Site Request Forgery (CSRF) vulnerability in VJInfotech Woo Custom and Sequential Order Number plugin <=2.6.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47688: Cross-Site Request Forgery (CSRF) vulnerability in Alexufo Youtube SpeedLoad plugin <=0.6.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4769: A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, service enumeration and other attacks via HTTP requests.
Key phrases: launch targeted attacks, ssrf, cross-port, service enumeration, http requests
CVE-2023-47690: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin <=1.10 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47695: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Scribit Shortcodes Finder plugin <=1.5.3 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47696: Unauth. Stored Cross-Site Scripting (XSS) vulnerabilityin Gravity Master Product Enquiry for WooCommerce plugin <=3.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47697: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager  Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <=3.1.39 versions.
Key phrases: cross-site scripting (xss)
CVE-2023-47699: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  270974.
Key phrases: embed arbitrary JavaScript code, embed arbitrary JavaScript code in the Web UI, cross-site scripting, credentials disclosure
CVE-2023-4770: An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code execution.
Key phrases: search path element, dll hijacking, arbitrary code execution
CVE-2023-47700: IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote attacker to spoof a trusted system that would not be correctly validated by the Storwize server.  This could lead to a user connecting to a malicious host, believing that it was a trusted system and deceived into accepting spoofed data.  IBM X-Force ID:  271016.
Key phrases: spoof a trusted system that would not be, spoofed data, spoofing