admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-06 18:53:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2023-05-03 11:00:35 +00:00
parent bce6202148
commit 9faa4c954b
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
35 changed files with 924 additions and 36 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2015/20xxx/CVE-2015-20107.json
View File

@ -181,6 +181,11 @@
"refsource": "CONFIRM",
"name": "https://python-security.readthedocs.io/vuln/mailcap-shell-injection.html",
"url": "https://python-security.readthedocs.io/vuln/mailcap-shell-injection.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-02",
"url": "https://security.gentoo.org/glsa/202305-02"
}
]
}

5
2021/28xxx/CVE-2021-28363.json
View File

@ -86,6 +86,11 @@
"refsource": "CONFIRM",
"name": "https://github.com/urllib3/urllib3/security/advisories/GHSA-5phf-pp7p-vc2r",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-5phf-pp7p-vc2r"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-02",
"url": "https://security.gentoo.org/glsa/202305-02"
}
]
}

5
2021/28xxx/CVE-2021-28861.json
View File

@ -136,6 +136,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2022-7ca361a226",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5OABQ5CMPQETJLFHROAXDIDXCMDTNVYG/"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-02",
"url": "https://security.gentoo.org/glsa/202305-02"
}
]
}

5
2021/29xxx/CVE-2021-29921.json
View File

@ -126,6 +126,11 @@
"url": "https://www.oracle.com/security-alerts/cpujul2022.html",
"refsource": "MISC",
"name": "https://www.oracle.com/security-alerts/cpujul2022.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-02",
"url": "https://security.gentoo.org/glsa/202305-02"
}
]
}

5
2021/37xxx/CVE-2021-37231.json
View File

@ -61,6 +61,11 @@
"url": "https://github.com/wez/atomicparsley/pull/31#issue-687280335",
"refsource": "MISC",
"name": "https://github.com/wez/atomicparsley/pull/31#issue-687280335"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-01",
"url": "https://security.gentoo.org/glsa/202305-01"
}
]
}

5
2021/37xxx/CVE-2021-37232.json
View File

@ -61,6 +61,11 @@
"url": "https://github.com/wez/atomicparsley/commit/d72ccf06c98259d7261e0f3ac4fd8717778782c1",
"refsource": "MISC",
"name": "https://github.com/wez/atomicparsley/commit/d72ccf06c98259d7261e0f3ac4fd8717778782c1"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-01",
"url": "https://security.gentoo.org/glsa/202305-01"
}
]
}

5
2021/3xxx/CVE-2021-3654.json
View File

@ -78,6 +78,11 @@
"refsource": "MISC",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1961439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1961439"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-02",
"url": "https://security.gentoo.org/glsa/202305-02"
}
]
},

5
2021/46xxx/CVE-2021-46854.json
View File

@ -71,6 +71,11 @@
"url": "http://www.proftpd.org/docs/RELEASE_NOTES-1.3.7e",
"refsource": "MISC",
"name": "http://www.proftpd.org/docs/RELEASE_NOTES-1.3.7e"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-03",
"url": "https://security.gentoo.org/glsa/202305-03"
}
]
}

5
2022/0xxx/CVE-2022-0391.json
View File

@ -68,6 +68,11 @@
"refsource": "CONFIRM",
"name": "https://security.netapp.com/advisory/ntap-20220225-0009/",
"url": "https://security.netapp.com/advisory/ntap-20220225-0009/"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-02",
"url": "https://security.gentoo.org/glsa/202305-02"
}
]
},

87
2022/30xxx/CVE-2022-30995.json
View File

@ -1,17 +1,96 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-30995",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "security@acronis.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-287",
"cweId": "CWE-287"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Acronis",
"product": {
"product_data": [
{
"product_name": "Acronis Cyber Protect 15",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "unspecified",
"version_value": "29486"
}
]
}
},
{
"product_name": "Acronis Cyber Backup 12.5",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "unspecified",
"version_value": "16545"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://security-advisory.acronis.com/advisories/SEC-3855",
"refsource": "MISC",
"name": "https://security-advisory.acronis.com/advisories/SEC-3855"
}
]
},
"credits": [
{
"lang": "en",
"value": "@boldglum (https://hackerone.com/boldglum)"
},
{
"lang": "en",
"value": "Sandro Tolksdorf of usd AG (https://herolab.usd.de)"
}
],
"impact": {
"cvss": [
{
"version": "3.0",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N"
}
]
}

5
2022/31xxx/CVE-2022-31212.json
View File

@ -61,6 +61,11 @@
"refsource": "MISC",
"name": "https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/",
"url": "https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-04",
"url": "https://security.gentoo.org/glsa/202305-04"
}
]
}

5
2022/31xxx/CVE-2022-31213.json
View File

@ -61,6 +61,11 @@
"refsource": "MISC",
"name": "https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/",
"url": "https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker/"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-04",
"url": "https://security.gentoo.org/glsa/202305-04"
}
]
}

5
2022/37xxx/CVE-2022-37454.json
View File

@ -119,6 +119,11 @@
"url": "https://news.ycombinator.com/item?id=35050307",
"refsource": "MISC",
"name": "https://news.ycombinator.com/item?id=35050307"
},
{
"url": "https://security.gentoo.org/glsa/202305-02",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/202305-02"
}
]
}

92
2022/3xxx/CVE-2022-3405.json
View File

@ -1,17 +1,101 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-3405",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "security@acronis.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-269",
"cweId": "CWE-269"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Acronis",
"product": {
"product_data": [
{
"product_name": "Acronis Cyber Protect 15",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "unspecified",
"version_value": "29486"
}
]
}
},
{
"product_name": "Acronis Cyber Backup 12.5",
"version": {
"version_data": [
{
"version_affected": "<",
"version_name": "unspecified",
"version_value": "16545"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://security-advisory.acronis.com/advisories/SEC-4092",
"refsource": "MISC",
"name": "https://security-advisory.acronis.com/advisories/SEC-4092"
},
{
"url": "https://herolab.usd.de/security-advisories/usd-2022-0008/",
"refsource": "MISC",
"name": "https://herolab.usd.de/security-advisories/usd-2022-0008/"
}
]
},
"credits": [
{
"lang": "en",
"value": "Sandro Tolksdorf of usd AG (https://herolab.usd.de)"
},
{
"lang": "en",
"value": "@boldglum (https://hackerone.com/boldglum)"
}
],
"impact": {
"cvss": [
{
"version": "3.0",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N"
}
]
}

5
2022/42xxx/CVE-2022-42919.json
View File

@ -116,6 +116,11 @@
"refsource": "CONFIRM",
"name": "https://github.com/python/cpython/compare/v3.9.15...v3.9.16",
"url": "https://github.com/python/cpython/compare/v3.9.15...v3.9.16"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-02",
"url": "https://security.gentoo.org/glsa/202305-02"
}
]
}

5
2022/45xxx/CVE-2022-45061.json
View File

@ -191,6 +191,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2023-f1381c83af",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-02",
"url": "https://security.gentoo.org/glsa/202305-02"
}
]
}

5
2022/45xxx/CVE-2022-45062.json
View File

@ -81,6 +81,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2022-7febff96e0",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XGTGTTPFHDUB3EZHVKDK4H32QUUYPPFF/"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-05",
"url": "https://security.gentoo.org/glsa/202305-05"
}
]
}

5
2022/46xxx/CVE-2022-46871.json
View File

@ -74,6 +74,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230220 [SECURITY] [DLA 3324-1] thunderbird security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00018.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46872.json
View File

@ -86,6 +86,11 @@
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1799156",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1799156"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46873.json
View File

@ -54,6 +54,11 @@
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1644790",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1644790"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46874.json
View File

@ -95,6 +95,11 @@
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1746139",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1746139"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46875.json
View File

@ -86,6 +86,11 @@
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1786188",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1786188"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46877.json
View File

@ -74,6 +74,11 @@
"refsource": "MLIST",
"name": "[debian-lts-announce] 20230220 [SECURITY] [DLA 3324-1] thunderbird security update",
"url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00018.html"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46878.json
View File

@ -86,6 +86,11 @@
"url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1782219%2C1797370%2C1797685%2C1801102%2C1801315%2C1802395",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1782219%2C1797370%2C1797685%2C1801102%2C1801315%2C1802395"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46879.json
View File

@ -54,6 +54,11 @@
"url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1736224%2C1793407%2C1794249%2C1795845%2C1797682%2C1797720%2C1798494%2C1799479",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1736224%2C1793407%2C1794249%2C1795845%2C1797682%2C1797720%2C1798494%2C1799479"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46880.json
View File

@ -86,6 +86,11 @@
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1749292",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1749292"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46881.json
View File

@ -86,6 +86,11 @@
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1770930",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1770930"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

5
2022/46xxx/CVE-2022-46882.json
View File

@ -86,6 +86,11 @@
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1789371",
"refsource": "MISC",
"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1789371"
},
{
"refsource": "GENTOO",
"name": "GLSA-202305-06",
"url": "https://security.gentoo.org/glsa/202305-06"
}
]
},

113
2023/25xxx/CVE-2023-25783.json
View File

@ -1,17 +1,122 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-25783",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "audit@patchstack.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Moss FireCask Like & Share Button plugin <=\u00a01.1.5 versions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Alex Moss",
"product": {
"product_data": [
{
"product_name": "FireCask Like & Share Button",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"versions": [
{
"changes": [
{
"at": "1.2",
"status": "unaffected"
}
],
"lessThanOrEqual": "1.1.5",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://patchstack.com/database/vulnerability/facebook-like-send-button/wordpress-peadig-s-like-share-button-plugin-1-1-5-cross-site-scripting-xss?_s_id=cve",
"refsource": "MISC",
"name": "https://patchstack.com/database/vulnerability/facebook-like-send-button/wordpress-peadig-s-like-share-button-plugin-1-1-5-cross-site-scripting-xss?_s_id=cve"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"solution": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to&nbsp;1.2 or a higher version."
}
],
"value": "Update to\u00a01.2 or a higher version."
}
],
"credits": [
{
"lang": "en",
"value": "Rio Darmawan (Patchstack Alliance)"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
]
}

85
2023/25xxx/CVE-2023-25784.json
View File

@ -1,17 +1,94 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-25784",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "audit@patchstack.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bon Plan Gratos Sticky Ad Bar plugin\u00a0<= 1.3.1 versions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Bon Plan Gratos",
"product": {
"product_data": [
{
"product_name": "Sticky Ad Bar Plugin",
"version": {
"version_data": [
{
"version_affected": "<=",
"version_name": "n/a",
"version_value": "1.3.1"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://patchstack.com/database/vulnerability/sticky-ad-bar/wordpress-sticky-ad-bar-plugin-plugin-1-3-1-cross-site-scripting-xss?_s_id=cve",
"refsource": "MISC",
"name": "https://patchstack.com/database/vulnerability/sticky-ad-bar/wordpress-sticky-ad-bar-plugin-plugin-1-3-1-cross-site-scripting-xss?_s_id=cve"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"credits": [
{
"lang": "en",
"value": "Rio Darmawan (Patchstack Alliance)"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
]
}

85
2023/25xxx/CVE-2023-25786.json
View File

@ -1,17 +1,94 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-25786",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "audit@patchstack.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Thom Stark Eyes Only: User Access Shortcode plugin <=\u00a01.8.2 versions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Thom Stark",
"product": {
"product_data": [
{
"product_name": "Eyes Only: User Access Shortcode",
"version": {
"version_data": [
{
"version_affected": "<=",
"version_name": "n/a",
"version_value": "1.8.2"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://patchstack.com/database/vulnerability/eyes-only-user-access-shortcode/wordpress-eyes-only-user-access-shortcode-plugin-1-8-2-cross-site-scripting-xss?_s_id=cve",
"refsource": "MISC",
"name": "https://patchstack.com/database/vulnerability/eyes-only-user-access-shortcode/wordpress-eyes-only-user-access-shortcode-plugin-1-8-2-cross-site-scripting-xss?_s_id=cve"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"credits": [
{
"lang": "en",
"value": "Rio Darmawan (Patchstack Alliance)"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
]
}

85
2023/25xxx/CVE-2023-25787.json
View File

@ -1,17 +1,94 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-25787",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "audit@patchstack.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wbolt team WP\u8d44\u6e90\u4e0b\u8f7d\u7ba1\u7406 plugin <=\u00a01.3.9 versions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Wbolt team",
"product": {
"product_data": [
{
"product_name": "WP\u8d44\u6e90\u4e0b\u8f7d\u7ba1\u7406",
"version": {
"version_data": [
{
"version_affected": "<=",
"version_name": "n/a",
"version_value": "1.3.9"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://patchstack.com/database/vulnerability/download-info-page/wordpress-wp-plugin-1-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve",
"refsource": "MISC",
"name": "https://patchstack.com/database/vulnerability/download-info-page/wordpress-wp-plugin-1-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"credits": [
{
"lang": "en",
"value": "Rio Darmawan (Patchstack Alliance)"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
]
}

113
2023/25xxx/CVE-2023-25789.json
View File

@ -1,17 +1,122 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-25789",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "audit@patchstack.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tapfiliate plugin <=\u00a03.0.12 versions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Tapfiliate",
"product": {
"product_data": [
{
"product_name": "Tapfiliate",
"version": {
"version_data": [
{
"version_value": "not down converted",
"x_cve_json_5_version_data": {
"versions": [
{
"changes": [
{
"at": "3.0.13",
"status": "unaffected"
}
],
"lessThanOrEqual": "3.0.12",
"status": "affected",
"version": "n/a",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://patchstack.com/database/vulnerability/tapfiliate/wordpress-tapfiliate-plugin-3-0-12-cross-site-scripting-xss?_s_id=cve",
"refsource": "MISC",
"name": "https://patchstack.com/database/vulnerability/tapfiliate/wordpress-tapfiliate-plugin-3-0-12-cross-site-scripting-xss?_s_id=cve"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"solution": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to&nbsp;3.0.13 or a higher version."
}
],
"value": "Update to\u00a03.0.13 or a higher version."
}
],
"credits": [
{
"lang": "en",
"value": "Rio Darmawan (Patchstack Alliance)"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
]
}

85
2023/25xxx/CVE-2023-25792.json
View File

@ -1,17 +1,94 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-25792",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "audit@patchstack.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XiaoMac WP Open Social plugin <=\u00a05.0 versions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "XiaoMac",
"product": {
"product_data": [
{
"product_name": "WP Open Social",
"version": {
"version_data": [
{
"version_affected": "<=",
"version_name": "n/a",
"version_value": "5.0"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://patchstack.com/database/vulnerability/open-social/wordpress-wp-open-social-plugin-5-0-cross-site-scripting-xss?_s_id=cve",
"refsource": "MISC",
"name": "https://patchstack.com/database/vulnerability/open-social/wordpress-wp-open-social-plugin-5-0-cross-site-scripting-xss?_s_id=cve"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"credits": [
{
"lang": "en",
"value": "Rio Darmawan (Patchstack Alliance)"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
]
}

85
2023/25xxx/CVE-2023-25797.json
View File

@ -1,17 +1,94 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2023-25797",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "audit@patchstack.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "Auth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <=\u00a04.1.2 versions."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
"cweId": "CWE-79"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Mr.Vibe",
"product": {
"product_data": [
{
"product_name": "vSlider Multi Image Slider for WordPress",
"version": {
"version_data": [
{
"version_affected": "<=",
"version_name": "n/a",
"version_value": "4.1.2"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://patchstack.com/database/vulnerability/vslider/wordpress-vslider-multi-image-slider-for-wordpress-plugin-4-1-2-cross-site-scripting-xss?_s_id=cve",
"refsource": "MISC",
"name": "https://patchstack.com/database/vulnerability/vslider/wordpress-vslider-multi-image-slider-for-wordpress-plugin-4-1-2-cross-site-scripting-xss?_s_id=cve"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "EXTERNAL"
},
"credits": [
{
"lang": "en",
"value": "Lana Codes (Patchstack Alliance)"
}
],
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
]
}