yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-48254: The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victims session via a crafted URL or HTTP request.
Key phrases: execute arbitrary client, inject and execute arbitrary client-side script
CVE-2023-48255: The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a victims session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned log.
Key phrases: containing arbitrary client, obtain its execution, send malicious network requests containing arbitrary client-
CVE-2023-48256: The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victims session via a crafted URL or HTTP request.
Key phrases: inject arbitrary HTTP response headers, inject arbitrary HTTP response headers or manipulate HTTP
CVE-2023-48257: The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device. The vulnerability can be exploited directly by authenticated users, via crafted HTTP requests, or indirectly by unauthenticated users, by accessing already-exported backup packages, or crafting an import package and inducing an authenticated victim into sending the HTTP upload request.
Key phrases: obtain up to Remote Code Execution, access sensitive data inside exported packages or obtain, remote code execution (rce), root privilege
CVE-2023-48258: The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTPrequest through a victims session.
Key phrases: delete arbitrary files, delete arbitrary files on the file system via
CVE-2023-48259: The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Key phrases: read arbitrary content, read arbitrary content of the results database via
CVE-2023-4826: The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attack.
Key phrases: inject arbitrary properties, inject arbitrary properties resulting in a cross-, prototype pollution, cross-site scripting (xss)
CVE-2023-48260: The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Key phrases: read arbitrary content, read arbitrary content of the results database via
CVE-2023-48261: The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.
Key phrases: read arbitrary content, read arbitrary content of the results database via
CVE-2023-48262: The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Key phrases: obtain Remote Code Execution, perform a Denial-of-Service (, remote code execution (rce)
CVE-2023-48263: The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Key phrases: obtain Remote Code Execution, perform a Denial-of-Service (, remote code execution (rce)
CVE-2023-48264: The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Key phrases: obtain Remote Code Execution, perform a Denial-of-Service (, remote code execution (rce)
CVE-2023-48265: The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Key phrases: obtain Remote Code Execution, perform a Denial-of-Service (, remote code execution (rce)
CVE-2023-48266: The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
Key phrases: obtain Remote Code Execution, perform a Denial-of-Service (, remote code execution (rce)
CVE-2023-48268: Mattermost fails tolimit the amount of data extracted from compressed archives during board import in Mattermost Boardsallowing an attacker to consume excessive resources, possibly leading to Denial of Service, byimporting a board using a specially crafted zip (zip bomb).
Key phrases: denial of service
CVE-2023-4827: The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using GET requests, such as uploading a web shell.
Key phrases: make highly privileged users perform unwanted file system, csrf nonce, unwanted file system actions, web shell
CVE-2023-48272: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yonifre Maspik  Spam Blacklist allows Stored XSS.This issue affects Maspik  Spam Blacklist: from n/a through 0.9.2.
Key phrases: Stored XSS.This issue affects Maspik  Spam Blacklist, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-48275: Unrestricted Upload of File with Dangerous Type vulnerability in Trustindex.Io Widgets for Google Reviews.This issue affects Widgets for Google Reviews: from n/a through 11.0.2.
Key phrases: dangerous type
CVE-2023-48278: Cross-Site Request Forgery (CSRF) vulnerability in Nitin Rathod WP Forms Puzzle Captcha allows Stored XSS.This issue affects WP Forms Puzzle Captcha: from n/a through 4.1.
Key phrases: Stored XSS.This issue affects WP Forms Puzzle Captcha, cross-site request forgery (csrf), stored xss
CVE-2023-48279: Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-4828: An improper check for an exceptional condition in the Insider Threat Management (ITM) Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure of sensitive data events from the agent about the personally identifiable information (PII) and intellectual property it monitors, and all such data could be altered or deleted before reaching the ITM Server. An attacker must first successfully obtain valid agent credentials and agent hostname. All versions prior to 7.14.3.69 are affected.
Key phrases: obtain valid agent credentials, exceptional condition, disclosure
CVE-2023-48281: Cross-Site Request Forgery (CSRF) vulnerability in Super Blog Me Broken Link Checker for YouTube allows Cross Site Request Forgery.This issue affects Broken Link Checker for YouTube: from n/a through 1.3.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48282: Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio Taxonomy filter allows Cross Site Request Forgery.This issue affects Taxonomy filter: from n/a through 2.2.9.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48283: Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Testimonials Showcase allows Cross Site Request Forgery.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48284: Cross-Site Request Forgery (CSRF) vulnerability in WebToffee Decorator  WooCommerce Email Customizer allows Cross Site Request Forgery.This issue affects Decorator  WooCommerce Email Customizer: from n/a through 1.2.7.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48288: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin  JobWP.This issue affects WordPress Job Board and Recruitment Plugin  JobWP: from n/a through 2.1.
Key phrases: exposure of sensitive information
CVE-2023-48289: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Stored XSS.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.3.
Key phrases: Stored XSS.This issue affects Import Spreadsheets from Microsoft, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-4829: Cross-site Scripting (XSS) - Stored in GitHub repository froxlor/froxlor prior to 2.0.22.
Key phrases: cross-site scripting (xss)
CVE-2023-48291: Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn't.This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.
Key phrases: some DAGs
CVE-2023-48292: The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacker to execute arbitrary shell commands by tricking an admin into loading the URL with the shell command. A very simple possibility for an attack are comments. When the attacker can leave a comment on any page in the wiki it is sufficient to include an image with an URL like  `/xwiki/bin/view/Admin/RunShellCommand?command=touch%20/tmp/attacked` in the comment. When an admin views the comment, the file `/tmp/attacked` will be created on the server. The output of the command is also vulnerable to XWiki syntax injection which offers a simple way to execute Groovy in the context of the XWiki installation and thus an even easier way to compromise the integrity and confidentiality of the whole XWiki installation. This has been patched by adding a form token check in version 4.5.1 of the admin tools. Some workarounds are available. The patch can be applied manually to the affected wiki pages. Alternatively, the document `Admin.RunShellCommand` can also be deleted if the possibility to run shell commands isn't needed.
Key phrases: execute arbitrary shell commands, execute arbitrary shell commands by tricking an admin, cross site request forgery, xwiki syntax injection, integrity, confidentiality
CVE-2023-48293: The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerability in the query on XWiki tool allows executing arbitrary database queries on the database of the XWiki installation. Among other things, this allows modifying and deleting all data of the wiki. This could be both used to damage the wiki and to create an account with elevated privileges for the attacker, thus impacting the confidentiality, integrity and availability of the whole XWiki instance. A possible attack vector are comments on the wiki, by embedding an image with wiki syntax like `[[image:path:/xwiki/bin/view/Admin/QueryOnXWiki?query=DELETE%20FROM%20xwikidoc]]`, all documents would be deleted from the database when an admin user views this comment. This has been patched in Admin Tools Application 4.5.1 by adding form token checks. Some workarounds are available. The patch can also be applied manually to the affected pages. Alternatively, if the query tool is not needed, by deleting the document `Admin.SQLToolsGroovy`, all database query tools can be deactivated.
Key phrases: executing arbitrary database, damage the wiki and to create an account, cross-site request forgery, attack vector, cross site request forgery, execute arbitrary, confidentiality, confidentiality and integrity, integrity and availability
CVE-2023-48294: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions of LibreNMS when a user accesses their device dashboard, one request is sent to `graph.php` to access graphs generated on the particular Device. This request can be accessed by a low privilege user and they can enumerate devices on librenms with their id or hostname. Leveraging this vulnerability a low privilege user can see all devices registered by admin users. This vulnerability has been addressed in commit `489978a923` which has been included in release version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-48295: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. Affected versions are subject to a cross site scripting (XSS) vulnerability in the device group popups. This issue has been addressed in commit `faf66035ea` which has been included in release version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: cross site scripting (xss)
CVE-2023-48296: OroPlatform is a PHP Business Application Platform (BAP).  Navigation history, most viewed and favorite navigation items are returned to storefront user in JSON navigation response if ID of storefront user matches ID of back-office user. This vulnerability is fixed in 5.1.4.
CVE-2023-48297: Discourse is a platform for community discussion. The message serializer uses the full list of expanded chat mentions (@all and @here) which can lead to a very long array of users. This issue was patched in versions 3.1.4 and beta 3.2.0.beta5.
CVE-2023-48298: ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time. This vulnerability is an integer underflow resulting in crash due to stack buffer overflow in decompression of FPC codec. It can be triggered and exploited by an unauthenticated attacker. The vulnerability is very similar to CVE-2023-47118 with how the vulnerable function can be exploited.
Key phrases: stack buffer overflow in decompression of FPC codec, integer underflow, crash
CVE-2023-48299: TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to version 0.9.0, using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are extracted to any location on the filesystem that is within the process permissions. Leveraging this issue could aid third-party actors in hiding harmful code in open-source/public models, which can be downloaded from the internet, and take advantage of machines running Torchserve. The ZipSlip issue in TorchServe has been fixed by validating the paths of files contained within a zip archive before extracting them. TorchServe release 0.9.0 includes fixes to address the ZipSlip vulnerability.
Key phrases: zipslip
CVE-2023-4830: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tura Signalix allows SQL Injection.This issue affects Signalix: 7T_0228.
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-48300: The `Embed Privacy` plugin for WordPress that prevents the loading of embedded external content is vulnerable to Stored Cross-Site Scripting via `embed_privacy_opt_out` shortcode in versions up to, and including, 1.8.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Version 1.8.1 contains a patch for this issue.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-48301: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles.
Key phrases: workaround
CVE-2023-48302: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, when a user is tricked into copy pasting HTML code without markup (Ctrl+Shift+V) the markup will actually render. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app text.
CVE-2023-48303: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud Enterprise Server, admins can change authentication details of user configured external storage. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.11, 26.0.6, and 27.1.0 contain a patch for this issue. No known workarounds are available.
CVE-2023-48304: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in version 22.0.0 and prior to versions 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Enterprise Server, an attacker could enable and disable the birthday calendar for any user on the same server. Nextcloud Server 25.0.11, 26.0.6, and 27.1.0 and Nextcloud Enterprise Server 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0 contain patches for this issue. No known workarounds are available.
CVE-2023-48305: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud Enterprise Server, when the log level was set to debug, the user_ldap app logged user passwords in plaintext into the log file. If the log file was then leaked or shared in any way the users' passwords would be leaked. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.11, 26.0.6, and 27.1.0 contain a patch for this issue. As a workaround, change config setting `loglevel` to `1` or higher (should always be higher than 1 in production environments).
Key phrases: leaked
CVE-2023-48306: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in version 22.0.0 and prior to versions 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Enterprise Server, the DNS pin middleware was vulnerable to DNS rebinding allowing an attacker to perform SSRF as a final result. Nextcloud Server 25.0.11, 26.0.6, and 27.1.0 and Nextcloud Enterprise Server 22.2.10.16, 23.0.12.11, 24.0.12.7, 25.0.11, 26.0.6, and 27.1.0 contain patches for this issue. No known workarounds are available.
Key phrases: perform SSRF as a final result, dns rebinding, ssrf
CVE-2023-48307: Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an attacker can use an unprotected endpoint in the Mail app to perform a SSRF attack. Nextcloud Mail app versions 2.2.8 and 3.3.0 contain a patch for this issue. As a workaround, disable the mail app.
Key phrases: unprotected endpoint, ssrf, workaround, disable
CVE-2023-48308: Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the server when generating an exception while editing a calendar appointment. It is recommended that the Nextcloud Calendar app is upgraded to 4.5.3
Key phrases: gain access, internal paths
CVE-2023-48309: NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization are affected by a vulnerability. A bad actor could create an empty/mock user, by getting hold of a NextAuth.js-issued JWT from an interrupted OAuth sign-in flow (state, PKCE or nonce). Manually overriding the `next-auth.session-token` cookie value with this non-related JWT would let the user simulate a logged in user, albeit having no user information associated with it. (The only property on this user is an opaque randomly generated string). This vulnerability does not give access to other users' data, neither to resources that require proper authorization via scopes or other means. The created mock user has no information associated with it (ie. no name, email, access_token, etc.) This vulnerability can be exploited by bad actors to peek at logged in user states (e.g. dashboard layout). `next-auth` `v4.24.5` contains a patch for the vulnerability. As a workaround, using a custom authorization callback for Middleware, developers can manually do a basic authentication.
CVE-2023-4831: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncode Ncep allows SQL Injection.This issue affects Ncep: before 20230914 .
Key phrases: SQL Injection, sql injection
CVE-2023-48310: TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted. In this particular case, the option to create log files is accepted in addition to a host name (and even without). A log file is created at the location specified. These files are created as root. If the file exists, the existing file is being rendered useless. This can result in denial of service. Additionally, input for scanning can be any CIDR blocks passed to nmap. An attacker can scan 0.0.0.0/0 or even local networks. Version 2.1.1 contains a patch for this issue.
Key phrases: denial of service
CVE-2023-48311: dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers. Users of JupyterHub deployments running DockerSpawner starting with 0.11.0 without specifying `DockerSpawner.allowed_images` configuration allow users to launch _any_ pullable docker image, instead of restricting to only the single configured image, as intended. This issue has been addressed in commit `3ba4b665b` which has been included in dockerspawner release version 13. Users are advised to upgrade. Users unable to upgrade should explicitly set `DockerSpawner.allowed_images` to a non-empty list containing only the default image will result in the intended default behavior.
Key phrases: launch _any_ pullable docker image
CVE-2023-48312: capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All the clusters running with the `anonymous-auth` Kubernetes API Server setting disable (set to `false`) are affected since it would be possible to bypass the token review mechanism, interacting with the upper Kubernetes API Server. This privilege escalation cannot be exploited if you're relying only on client certificates (SSL/TLS). This vulnerability has been addressed in version 0.4.6. Users are advised to upgrade.
Key phrases: bypass the token review mechanism, privilege escalation
CVE-2023-48313: Umbraco is an ASP.NET content management system (CMS).  Starting in 10.0.0 and prior to versions 10.8.1 and 12.3.4, Umbraco contains a cross-site scripting (XSS) vulnerability enabling attackers to bring malicious content into a website or application. Versions 10.8.1 and 12.3.4 contain a patch for this issue.
Key phrases: cross-site scripting (xss)
CVE-2023-48314: Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with Collabora Online Built-in CODE Server app can be vulnerable to attack via proxy.php. This vulnerability has been fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.403. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: proxy.php
CVE-2023-48315: Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to ftp and sntp in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: remote code execution, memory overflow
CVE-2023-48316: Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to snmp, smtp, ftp and dtls in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: remote code execution, memory overflow
CVE-2023-48317: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Vatsa Display Custom Post allows Stored XSS.This issue affects Display Custom Post: from n/a through 2.2.1.
Key phrases: Stored XSS.This issue affects Display Custom Post:, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-4832: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072 .
Key phrases: SQL Injection, sql command, sql injection, company management
CVE-2023-48320: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22.
Key phrases: Stored XSS.This issue affects SpiderVPlayer: from n, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-48321: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmed Kaludi, Mohammed Kaludi AMP for WP  Accelerated Mobile Pages allows Stored XSS.This issue affects AMP for WP  Accelerated Mobile Pages: from n/a through 1.0.88.1.
Key phrases: Stored XSS.This issue affects AMP for WP  , improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-48322: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eDoc Intelligence eDoc Employee Job Application  Best WordPress Job Manager for Employees allows Reflected XSS.This issue affects eDoc Employee Job Application  Best WordPress Job Manager for Employees: from n/a through 1.13.
Key phrases: Reflected XSS.This issue affects eDoc Employee Job Application, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2023-48323: Cross-Site Request Forgery (CSRF) vulnerability in Awesome Support Team Awesome Support  WordPress HelpDesk & Support Plugin allows Cross Site Request Forgery.This issue affects Awesome Support  WordPress HelpDesk & Support Plugin: from n/a through 6.1.4.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48325: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps Landing Page Builder  Lead Page  Optin Page  Squeeze Page  WordPress Landing Pages.This issue affects Landing Page Builder  Lead Page  Optin Page  Squeeze Page  WordPress Landing Pages: from n/a through 1.5.1.5.
Key phrases: url redirection, open redirect
CVE-2023-48326: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager allows Reflected XSS.This issue affects Events Manager: from n/a through 6.4.5.
Key phrases: Reflected XSS.This issue affects Events Manager: from, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2023-48327: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Vendors WC Vendors  WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendors  WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors: from n/a through 2.4.7.
Key phrases: sql command, sql injection
CVE-2023-48328: Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin  NextGEN Gallery allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin  NextGEN Gallery: from n/a through 3.37.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48329: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1.
Key phrases: Stored XSS.This issue affects Fast Custom Social Share, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-4833: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Besttem Network Marketing Software allows SQL Injection.This issue affects Network Marketing Software: before 1.0.2309.6.
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-48330: Cross-Site Request Forgery (CSRF) vulnerability in Mike Strand Bulk Comment Remove allows Cross Site Request Forgery.This issue affects Bulk Comment Remove: from n/a through 2.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48331: Cross-Site Request Forgery (CSRF) vulnerability in Stormhill Media MyBookTable Bookstore by Stormhill Media allows Cross Site Request Forgery.This issue affects MyBookTable Bookstore by Stormhill Media: from n/a through 3.3.4.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48333: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce.This issue affects Booster for WooCommerce: from n/a through 7.1.1.
Key phrases: exposure of sensitive information
CVE-2023-48334: Cross-Site Request Forgery (CSRF) vulnerability in DAEXT League Table allows Cross Site Request Forgery.This issue affects League Table: from n/a through 1.13.
Key phrases: Cross Site Request Forgery, cross-site request forgery (csrf), cross site request forgery
CVE-2023-48336: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cybernetikz Easy Social Icons allows Stored XSS.This issue affects Easy Social Icons: from n/a through 3.2.4.
Key phrases: Stored XSS.This issue affects Easy Social Icons:, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-48339: In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed
Key phrases: missing permission check, local information disclosure
CVE-2023-4834: In Red Lion EuropembCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 animproperly implemented access validation allows an authenticated, low privilegedattacker to gain read access to limited, non-critical device information in his account he should not have access to.															
Key phrases: gain read access, gain read access to limited, access validation
CVE-2023-48340: In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, local denial of service, improper input validation
CVE-2023-48341: In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds read, local denial of service, improper input validation
CVE-2023-48342: In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-48343: In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, local denial of service, improper input validation
CVE-2023-48344: In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds read, local denial of service, improper input validation
CVE-2023-48345: In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds read, local denial of service, improper input validation
CVE-2023-48346: In video decoder, there is a possible improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: improper input validation, local denial of service
CVE-2023-48347: In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds read, local denial of service, improper input validation
CVE-2023-48348: In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, local denial of service, improper input validation
CVE-2023-48349: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-4835: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CF Software Oil Management Software allows SQL Injection.This issue affects Oil Management Software: before 20230912 .
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-48350: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-48351: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-48352: In phasecheckserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-48353: In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed
Key phrases: use after free, logic error, local denial of service
CVE-2023-48354: In telephone service, there is a possible improper input validation. This could lead to local information disclosure with no additional execution privileges needed
Key phrases: improper input validation, local information disclosure
CVE-2023-48355: In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-48356: In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-48357: In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-48358: In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, missing bounds check, local denial of service
CVE-2023-48359: In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed
Key phrases: out of bounds write, improper input validation, local denial of service
CVE-2023-4836: The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced
Key phrases: gain access, gain access to those filed by manipulating IDs, brute forced
CVE-2023-48360: in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
Key phrases: a local attacker cause multimedia player crash through, released pointer
CVE-2023-48363: A vulnerability has been identified in OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V9.1 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Route Control V9.1 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions < V8.0 SP4). The implementation of the RPC (Remote Procedure call) communication protocol in the affected products do not properly handle certain unorganized RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server.
Key phrases: unorganized rpc messages, denial of service condition
CVE-2023-48364: A vulnerability has been identified in OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V9.1 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Route Control V9.1 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions < V8.0 SP4). The implementation of the RPC (Remote Procedure call) communication protocol in the affected products do not properly handle certain malformed RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server.
Key phrases: malformed rpc messages, denial of service condition
CVE-2023-48365: Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.
Key phrases: improper validation of HTTP headers, execute HTTP requests on the backend server that, unauthenticated remote code execution, elevate privileges
CVE-2023-48369: Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow the log. 
Key phrases: different endpoints to potentially overflow the log, log size
CVE-2023-4837: SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of SmodBIP. SmodBIP is no longer maintained and the vulnerability will not be fixed.
Key phrases: cross-site request forgery, unintended actions
CVE-2023-48371: ITPison OMICARD EDMs file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.
Key phrases: perform arbitrary system commands or disrupt, dangerous type, disrupt service
CVE-2023-48372: ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.
Key phrases: inject arbitrary SQL commands
CVE-2023-48373: ITPison OMICARD EDM has a path traversal vulnerability within its parameter FileName in a specific function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Key phrases: download arbitrary system files, bypass authentication, path traversal
CVE-2023-48374: SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service or obtain sensitive information.
Key phrases: obtain partial information, obtain sensitive information, hard-coded, disrupt service
CVE-2023-48375: SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege, resulting in performing arbitrary system operations or disrupting service.
Key phrases: performing arbitrary system operations, missing authorization, disrupting service
CVE-2023-48376: SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.
Key phrases: perform arbitrary command or disrupt, file with dangerous type, disrupt service, arbitrary file, arbitrary commands
CVE-2023-48378: Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Key phrases: download arbitrary system files, bypass authentication, path traversal
CVE-2023-48379: Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.
Key phrases: url parameter, blind ssrf, internal network topology, url error response
CVE-2023-4838: The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes like 'before' and 'after'. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-48380: Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.
Key phrases: execute arbitrary system command, insufficient filtering, command injection, disrupt service
CVE-2023-48381: Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.
Key phrases: execute arbitrary PHP file, local file inclusion (lfi), service availability
CVE-2023-48382: Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.
Key phrases: execute arbitrary PHP file, local file inclusion (lfi), service availability
CVE-2023-48383: NetVisionInformation  airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Key phrases: download arbitrary system files, bypass authentication, path traversal
CVE-2023-48384: ArmorX Global Technology Corporation ArmorX Spam has insufficient validation for user input within a special function. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.
Key phrases: inject arbitrary SQL commands, armorx spam
CVE-2023-48387: TAIWAN-CA(TWCA) JCICSecurityTool  fails to check the source website and access locations when executing multiple Registry-related functions. In the scenario where a user is using the JCICSecurityTool and has completed identity verification, if the user browses a malicious webpage created by an attacker, the attacker can exploit this vulnerability to read or modify any registry file under HKEY_CURRENT_USER, thereby achieving remote code execution.
Key phrases: remote code execution