# tradsec_checks

vuln_id: V-245830
stig_id: IS-08.01.02
title: Monitor Screens - Disable Access by CAC or Token Removal, or Lock Computer via Ctrl/Alt/Del
severity: high
check_text:
  Check to ensure:

  1. SIPRNet servers and/or work station hard drives/monitors/keyboards are disabled (locked) by CAC or Token Removal, or where CACs or tokens are not used the Computer must be locked via Ctrl/Alt/Del - when not personally and physically attended by properly vetted and cleared US personnel.  (CAT I)

  2. NIPRNet servers and/or work station hard drives/monitors/keyboards (*used by system administrators with privileged access) are disabled (locked) by CAC or Token Removal, or where CACs or tokens are not used the Computer must be locked via Ctrl/Alt/Del - when not personally and physically attended by properly vetted US personnel.  (CAT I)

  3. NIPRNet work station hard drives/monitors/keyboards (*used by general users or individuals without privileged systems access) are disabled (locked) by CAC or Token Removal, or where CACs or tokens are not used the Computer must be locked via Ctrl/Alt/Del - when not personally and physically attended by properly vetted US personnel. (CAT II)

  4. CACs and other tokens are not left unattended and are in the physical custody of the person to whom they were issued. (CAT II)

  TACTICAL ENVIRONMENT:  This check is applicable to all environments (including a field/mobile tactical environment) where information system assets are connected to the DISN.


vuln_id: V-245831
stig_id: IS-08.03.01
severity: low
title:
  Classified Monitors/Displays (Procedures for Obscuration of Classified Monitors) - protection from uncleared persons or those without a need-to-know.

check_text:
  Check to ensure there are written procedures for employees to follow to keep classified monitors from being viewed by unauthorized persons.  Procedures should include when to cover or turn-off classified monitors - such as when visitors are announced, importance of maintaining monitor positioning for privacy, pulling of window shades, blinds, etc.  Procedures must be tailored to the physical environment and mission operations of the organization.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


vuln_id: V-245832
stig_id: IS-09.02.01
severity: medium
title:
  End-of-Day Checks - Organizations that process or store classified information must establish a system of security checks at the close of each duty and/or business day to ensure that any area where classified information is used or stored is secure. SF 701, Activity Security Checklist, shall be used to record such checks.

check_text:
  Organizations that process or store classified information must establish a system of security checks at the close of each duty and/or business day to ensure that any area where classified information is used or stored is secure. SF 701, "Activity Security Checklist," shall be used to record such checks. An integral part of the security check system shall be the securing of all vaults, secure rooms, and containers used for storing classified material. SF 702, "Security Container Check Sheet," shall be used to record each opening, closing, and verification checks of these storage mediums.  Area verification checks will be recorded on the SF 701 upon completion of end-of-day checks.  Recommended end-of-day checks, which should be included on the SF 701 are:
  a.  Activation of Intrusion Detection System (IDS) alarm sensors where applicable.
  b.  All classified material has been properly stored.
  c.  Removal of CAC Cards and SIPRNet tokens from workstations.
  d.  All windows, doors or other openings are properly secured.
  e.  Verification of lock box closure for SIPRNet wall jacks and PDS lines, where applicable.
  f.  Additional checks such as turning off of coffee pots and lights, power-off of printers/MFDs, securing of STE keys, etc. can be identified and accomplished as part of the check.
  g.  The SF 701, Activity Security Checklist shall be used to record these checks, to include after hours, weekend and holiday activities.

  Results of end-of-day checks (SF 701 forms) should be retained for at least 30 days after completion of the monthly form (or otherwise as required by Component records management schedules) to ensure availability for audits and resolution of subsequent discovery of security incidents or discrepancies.

  TACTICAL ENVIRONMENT:  This check is applicable in a fixed operational facility in a tactical environment if classified equipment is used or documents or media are created/extracted from the SIPRNet.  The only exception will be for urgent (short term) tactical operations or other contingency situations where fixed facilities and equipment are not yet present or incapable of being used.


vuln_id: V-245833
stig_id: IS-10.01.01
severity: high
title:
  Classified Reproduction - SIPRNet Connected Classified Multi-Functional Devices (MFD) located in Space Not Approved for Collateral Classified Open Storage.

check_text:
  This set of checks covers multi-functional devices (MFD) (connected to the SIPRNet) that are used for printing, copying or other reproduction of classified DOCUMENTS.

  Checks:

  1.  Unless the MFD can be properly purged and sanitized (made unclassified) of all classified data or images after each use for classified - it must be housed in an area approved for open storage of classified material.

  Most current copiers, printers, scanners and facsimile machines or multi-functional devices (MFD) contain hard drives that collect and store images and data.

  Therefore check to ensure that such machines are maintained in space approved for open storage of classified (secret or higher for SIPRNet).

  NOTE that to be properly sanitized means that the MFD can be treated as an unclassified piece of equipment once a successful purge of data or images is completed. (CAT I)

  2.  If not maintained within a secret or higher collateral classified open storage area:

  Check that MFD (or individual copiers, scanners, printers or facsimile machines) do not have hard drives containing non-volatile memory in the device and that the volatile memory is purged/sanitized of all classified data or images after each use.

  Additionally check that these MFD are maintained in space where access is controlled to at least the level of the classified material authorized to be copied on the machine. This type of area is referred to as a Controlled Access Area (CAA) - at least a secret CAA or TS CAA for SIPRNet connections.

  ONLY those MFD with entirely volatile memory can be sanitized and reused upon removal of power from the device.

  Check to ensure that powering down the machine is a part of the MFD sanitization procedure to ensure that volatile memory is totally erased and sanitized so that it can be considered to be an unclassified device.  Documented procedures must be on-hand for this process.

  NOTE:  Sanitizing a MFD means it can be considered and treated as an unclassified device.  Hard drives with non-volatile memory cannot be sanitized by current overwriting/clearing procedures and must be destroyed (degaussing and/or physical destruction) to be considered sanitized/unclassified.  Hence MFD with non-volatile memory cannot be sanitized for reuse.  Only MFD with volatile memory can be sanitized for reuse.

  Only if ALL of the sub-checks listed under check 2 are compliant is it a CAT II finding.  Otherwise if ANY of the sub-checks are not compliant it remains a CAT I finding. (CAT II)

  3.  If not maintained within a secret or higher collateral classified open storage area and hard drives with non-volatile memory are present:

  Check to ensure MFD (or individual copiers, scanners, printers or facsimile machines) are located in a secret or higher CAA and the hard drive is promptly removed after each use and stored in a GSA approved safe.

  Check to ensure that powering down the machine is a required part of this procedure to ensure that volatile memory is totally erased and sanitized so that it can be considered to be an unclassified device.

  Check that documented procedures are on hand to support this process.

  Only if ALL of the sub-checks listed under check 3 are compliant is it a CAT II finding.  Otherwise if ANY of the sub-checks are not compliant it remains a CAT I finding.
  (CAT II)

  EXPLANATION for CAT II FINDINGS:  Despite the mitigations in checks 2 and 3 above, there is still a concern that the mitigation procedure will not be accomplished promptly or successfully each time and there is a risk for printed or copied classified documents to be left unattended for periods of time in the networked MFD machines, especially when printed from a remote workstation location.  Therefore, since a potential vulnerability still exists it is still considered as a CAT II finding.

  TACTICAL ENVIRONMENT:  This check is applicable in a fixed operational facility in a tactical environment if classified equipment is used or documents or media are created/extracted from the SIPRNet.  The only exception will be for urgent (short term) tactical operations or other contingency situations where fixed facilities and equipment are not yet present or incapable of being used.


vuln_id: V-245834
stig_id: IS-10.02.01
severity: medium
title:
  Classified Reproduction - Following guidance for System to Media Transfer of Data from systems connected specifically to the SIPRNet In-Accordance-With (IAW) US CYBERCOM CTO 10-133A.

check_text:
  General guidance: Paper copies, electronic files, and other material containing classified information shall be reproduced only when necessary for accomplishing the organizations mission or for complying with applicable statutes or Directives. Personnel reproducing classified information must be knowledgeable of the procedures for classified reproduction and aware of the risks involved with the specific reproduction equipment and media being used and the appropriate countermeasures they are required to take. Reproduced material is to be placed under the same accountability and control requirements as applied to the original material. Classified material is to be reproduced only on approved and when applicable, properly
  accredited systems.

  This check concerns ONLY reproduction and/or transfer of classified data using all forms of removable media on SIPRNet connected devices or systems.

  Check to ensure that US CYBERCOM Communications Tasking Order (CTO) 10-133A is being complied with as follows:

  1. Ensure that the write capability for all possible removable media is disabled as a default setting on all SIPRNet connected machines.

  2. Ensure that write settings are only allowed when specifically approved by using the HBSS Device Control Module (DCM).

  3. Ensure the system AO has specifically approved all persons authorized to transfer data from SIPRNet connected system components.

  4. Ensure the ISSM maintains a list of all persons authorized by the AO to transfer data from the SIPRNet.

  5. Ensure there are written procedures approved by the AO for use of removable media on SIPRNet.

  NOTE: Coordination with Technical Reviewers may be required to determine all of the information outlined above.

  TACTICAL ENVIRONMENT: This check is applicable in a fixed operational facility in a tactical environment if classified equipment is used or documents or media are created/extracted from the SIPRNet. The only exception will be for urgent (short term) tactical operations or other contingency situations where fixed facilities and equipment are not yet present or incapable of being used.


vuln_id: V-245835
stig_id: IS-10.03.01
severity: low
title:
  Classified Reproduction -  Written Procedures for SIPRNet Connected Classified Multi-Functional Devices (MFD) located in Space Not Approved for Collateral Classified Open Storage. NOTE: This vulnerability concerns only PROCEDURES for the reproduction (printing, copying, scanning, faxing) of classified documents on Multi-Functional Devices (MFD) connected to the DoDIN.

check_text:
  Classified Reproduction - Document Copying using Multi-Functional Device (MFD) machines (i.e., printer, copier, fax, scanner) connected to SIPRNet. This Check concerns ONLY PROCEDURES for the reproduction of classified DOCUMENTS on Multi-Functional Devices (MFD) connected to the DoDIN.

  General guidance: Paper copies, electronic files, and other material containing classified information shall be reproduced only when necessary for accomplishing the organization's mission or for complying with applicable statutes or Directives.  Personnel reproducing classified information must be knowledgeable of the procedures for classified reproduction and aware of the risks involved with the specific reproduction equipment being used and the appropriate countermeasures they are required to take.  Reproduced material is to be placed under the same accountability and control requirements as applied to the original material.

  Classified material is to be reproduced only on approved and, when applicable, properly accredited systems.

  Check to ensure:

  Check #1. Procedures for the proper reproduction of classified documents are posted on or near the MFD approved for classified reproduction. This is especially true when the MFD is capable of directly making copies of documents on the machine. The procedures must alert users when the particular MFD is approved for classified reproduction.

  Check #2. Other MFD (used as copiers) in the organization that are not approved for classified document reproduction must also be marked to alert users of the prohibition against making classified copies.

  Check #3. Procedures posted near the MFD must contain steps for users to take after printing, copying, scanning or faxing classified documents. Steps must include double checking of the MFD for missed pages, counting original and copied pages, purging or clearing of images from the MFD (if applicable), use of cover sheets, and general protection/control guidelines for reproduced documents.

  NOTE:  Most MFD contain both hard drives (non-volatile memory) and volatile memory and cannot be properly sanitized of classified data or images to make the MFD unclassified. Therefore, most (if not all) classified MFD should be housed and operated within space approved for collateral classified open storage.  If not maintained in spaces approved for classified open storage all MFD with non-volatile memory that is used for classified reproduction must be under the continuous observation and control of a cleared person AT ALL TIMES. A violation of this is a Category 1 Severity level finding and is covered under  STIG ID: IS-10.01.01.

  TACTICAL ENVIRONMENT:  This check is applicable in a fixed operational facility in a tactical environment if classified equipment is used or documents or media are created/extracted from the SIPRNet. The only exception will be for urgent (short term) tactical operations or other contingency situations where fixed facilities and equipment are not yet present or incapable of being used.


vuln_id: V-245836
stig_id: IS-11.01.01
severity: high
title:
  Destruction of Classified Documents Printed from the SIPRNet Using Approved Devices on NSA Evaluated Products Lists (EPL).

check_text:
  General Guidance: Classified documents and paper material identified for destruction shall be destroyed completely, to prevent anyone from reconstructing the classified information. Effective January 1, 2011, only equipment listed on an evaluated products list (EPL) issued by NSA may be used to destroy classified information.

  In all cases, if any such previously approved equipment needs to be replaced or otherwise requires a rebuild or replacement of a critical assembly (e.g., shredder blade assembly), the unit must be replaced with one listed on the appropriate EPL.

  The EPLs and further guidance may be obtained by calling (410) 854-6358 or at: https://www.nsa.gov/Resources/Media-Destruction-Guidance

  Checks:

  Check #1. Check that only crosscut shredders listed on an EPL for High Security Crosscut Paper Shredders are used to destroy classified material.

  Check #2. Check that only pulverizers, disintegrators and pulping (wet process) devices listed on an EPL are used to destroy classified water-soluble material.

  Check #3. Check to ensure that burn bags (if used to store classified paper awaiting destruction at a central destruction facility) are sealed and safeguard in a safe or vault or area approved for classified open storage until actually destroyed.

  NOTE: Recommend that reviewers check shredded material, no matter how new or old the shredder appears to be. Look to determine if it is readily apparent the shred material is "not within specifications" due to lack of maintenance, bad teeth, etc., This discovery can result in a finding.

  TACTICAL ENVIRONMENT: Applies in all environments whenever classified documents are to be destroyed.


vuln_id: V-245837
stig_id: IS-11.01.02
severity: high
title:
  Classified Material Destruction - Improper Disposal of Automated Information System (AIS) Hard Drives and Storage Media

check_text:
  For CLASSIFIED automated information system (AIS) data processing and/or storage equipment such as hard drives and media:

  Check to ensure data processing or storage devices are properly sanitized (purged of all classified data so that recovery using known laboratory attack is not possible) in accordance with current NSA guidance before such equipment or media is disposed of or placed in use (and/or stored) in a lower classification environment or an unclassified environment.

  NOTE 1: Clearing procedures using overwrite software is not sufficient to dispose of classified equipment or media (for instance by release to property disposal, vendors, or placement in trash) or to re-use it in an unclassified or lesser classification environment other than its original classification level. Clearing will only enable the equipment or media to be re-used within the original classified environment.

  NOTE 2: NSA guidance can be found in the NSA/CSA Policy Manual 9-12, NSA/CSS Storage Device Declassification Manual. Be certain to also read and apply specific guidance for the DOD from Enclosure 3 and Enclosure 7 of Volume 3 of DOD Manual 5200.01. Important excerpts from this guidance pertaining to disposal of classified equipment and storage media follow:

  Classified IT storage media (e.g., hard drives) cannot be declassified by overwriting.

  Sanitization (which may destroy the usefulness of the media) or physical destruction is required for disposal.

  NOTE 3: The specific methods and procedures for sanitization of classified hard drives or storage media differ depending on sensitivity of data, type of hard drive or storage media (magnetic, solid state, etc...) and ownership of the hard drive or storage media. To ensure DOD information is not inadvertently disclosed to unauthorized individuals, the activity security manager should coordinate with the local Authorizing Official (AO) and/or IT staff to ensure local procedures for disposal of computer hard drives appropriately address removal of U.S. Government data prior to disposal.

  TACTICAL ENVIRONMENT: Applies in all environments whenever classified documents or materials are to be destroyed.


vuln_id: V-245838
stig_id: IS-11.02.01
severity: medium
title:
  Classified Destruction - Hard Drive and Storage Media Sanitization Devices and Plans are not Available for disposal of Automated Information System (AIS) Equipment On-Hand

check_text:
  Check to ensure there is equipment and/or plans for the destruction of classified or sensitive systems and media used by the site or organization. Lack of appropriate equipment to properly sanitize the classified media used or lack of plans for disposal and/or proper protection in transit to a disposal facility will result in a finding.

  Checks:

  Check #1. If used by the site are hard drive and tape degaussers periodically tested and certified as required by the manufacturer?

  Check #2. Are appropriate wipe products available for classified systems or spillage incidents?

  Check #3. Is there an approved product (such as the Whitaker Brothers Inc. Datastroyer) on-hand to properly remove readable surfaces from optical media such as CDs or DVDs?

  Check #4. Is all obsolete classified equipment and media properly secured in a safe, vault or secure room until properly disposed of? (Note: This would be a CAT I finding under the appropriate "storage" vulnerability)

  Check #5. In the event the site has limited or no destruction equipment: Are there plans or arrangements to take classified material to NSA for proper disposal or another DOD organization who has destruction equipment and has agreed to provide support for destruction of classified?

  Check #6. Are there appropriate transportation and/or shipping arrangements to ensure the classified material is properly protected while in transit to the destruction facility?
      TACTICAL ENVIRONMENT: Applies in all environments whenever classified documents or materials are to be destroyed.


vuln_id: V-245839
stig_id: IS-11.03.01
severity: low
title:
  Destruction of Classified and Unclassified Documents, Equipment and Media - Availability of Local Policy and Procedures

check_text:
  Check to ensure there are procedures for the destruction of classified or sensitive documents, systems and media. Also check to ensure this documentation is readily available for employee reference and included in initial and recurring (annual) security training.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place. Not applicable to a field/mobile environment.


vuln_id: V-245840
stig_id: IS-13.02.01
title: Classified Emergency Destruction Plans - Develop and Make Available
severity: medium
check_text:
  General Requirement: Plans shall be developed to protect, remove, or destroy classified material in case of fire, natural disaster, civil disturbance, terrorist activities, or enemy action, to minimize the risk of compromise, and for the recovery of classified information, if necessary, following such events.

  Checks:

  Check #1. Check to ensure there is local site documentation for the emergency, protection, removal, and destruction of classified material and equipment. (CAT II)

  Check #2. Also check to ensure that these instructions are readily available to the employee population. Such plans should be posted on or near safes, exits to vaults and secure rooms or at any location where classified materials are stored. (CAT III)

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place. Not applicable to a field/mobile environment.


vuln_id: V-245841
stig_id: IS-14.02.01
title: Security Incident/Spillage - Lack of Procedures or Training for Handling and Reporting
severity: medium
check_text:
  General requirement:

  Anyone finding classified information out of proper control shall, if possible, take custody of and safeguard the material and immediately notify the appropriate security authorities. Secure communications should be used for notification whenever possible. Every civilian employee and Active, Reserve, and National Guard Military member of the Department of Defense, and every DoD contractor or employee of a contractor working with classified material, as provided by the terms of the contract, who becomes aware of the loss or potential compromise of classified information shall immediately report it to the head of his or her local activity and to the activity security manager.  Prompt reporting of security incidents ensures incidents are properly investigated and necessary actions are taken to negate or minimize the adverse effects of an actual loss or unauthorized disclosure of classified information and to preclude recurrence through a properly tailored, and up-to-date security education and awareness program. In cases where compromise has been ruled out and there is no adverse effect on national security, a common sense approach to the early resolution of an incident at the lowest appropriate level is encouraged. All security incidents involving classified information shall involve a security inquiry, a security investigation, or both.

  Reviewer Checks:

  Check #1. Check to ensure the site or organization has written procedures on reporting possible security incidents.

  Check #2. Check to ensure personnel within the organization have training to be able to know when to report a possible security incident and who to report it to.

  Check #3. Check to ensure employees know what to do when discovering classified material unsecure or out of proper control.  Ask random employees if they know what to do if they discover a security incident?
                                                      TACTICAL ENVIRONMENT: Classified material that is discovered not properly secured must immediately be secured and the incident reported - regardless of environment.


vuln_id: V-245842
stig_id: IS-15.02.01
title: Classification Guides Must be Available for Programs and Systems for an Organization or Site
severity: medium
check_text:
  Check to ensure the site has all Classification Guides for the systems and programs they are responsible for and/or which are applicable to their operations.  Further, such classification guides and training on the use of them should be made available to employees working with the equipment or systems to which they apply. At a minimum if a site has SIPRNet connections they should have a copy of the most recent SIPRNet Security Classification Guide.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245843
stig_id: IS-16.02.01
title: Controlled Unclassified Information (CUI) - Employee Education and Training
severity: medium
check_text:
  General Policy Guidance:  At a minimum, DoD civilians, military members and on-site support contractors with access to CUI shall receive both initial and annual refresher training that reinforces the policies, principles, and procedures covered in CUI policy. Refresher training shall also address the threat and the techniques foreign intelligence activities use while attempting to obtain controlled unclassified DoD information and advise personnel of penalties for unauthorized disclosures. The importance of unclassified information, its potential sensitivity, and the requirement to have all information reviewed and approved for release prior to public disclosure or Web posting shall be reiterated. Refresher training shall also address relevant changes in CUI policy or procedures and issues or concerns identified during DoD Component oversight reviews.

  Checks:

  Check #1. Reviewers must check for an initial orientation on handling of CUI during new employee in-processing

  Check #2. Check that Annual Refresher training includes the topic of CUI as provided in the general policy guidance.  Check a sample number of individual training records and Annual Training briefing slides/materials for evidence of CUI training.

  Lack of either initial orientation or refresher training or both is a finding.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where training and associated documentation should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245844
stig_id: IS-16.02.02
title: Controlled Unclassified Information - Document, Hard Drive and Media Disposal
severity: medium
check_text:
  Check to ensure compliance with appropriate methods for disposal of the following:

  1. Unclassified Hard Drives:

  a. When no longer needed, unclassified computer systems and hard drives may be disposed of outside the Department of Defense (DOD). In some circumstances, the equipment may be provided to nongovernment entities for reutilization. To ensure that no data or information remains on operable unclassified hard drives that are transferred or permanently removed from DOD custody, the drives must be sanitized by overwriting.

  b. Where overwriting is inappropriate or cannot be completely accomplished (e.g., inoperable disk) the drives are to be totally removed from service (i.e., thrown away). In this case the drives must be physically destroyed before disposal.

  c. The specific methods and procedures differ depending on sensitivity of data and ownership of the hard drive. To ensure DOD information is not inadvertently disclosed to unauthorized individuals, the activity security manager should coordinate with the local DAA and/or IT staff to ensure local procedures for disposal of computer hard drives appropriately address removal of U.S. Government data prior to disposal.  Generally the use of hard drive degaussers with an appropriate strength (coercivity of magnetic field) for the drive being erased (Oestrid rating) is recommended as part of the requirement for physical destruction. After degaussing the hard drive, the physical destruction of individual platters should be accomplished to make attempted data retrieval impractical.

  2. Unclassified Automated Information System (AIS) Media:

  a. Various types of AIS media may contain CUI and must be disposed of in accordance with guidance in the NIST Special Publication 800-88, Guidelines for Media Sanitization.

  b. NSA/CSS publishes lists of products that meet specific performance criteria for sanitizing, destroying, or disposing of various types of media containing sensitive or classified information. The lists are available at https://www.nsa.gov/Resources/Media-Destruction-Guidance.

  3. Unclassified documents:

  a. Record copies of CUI documents shall be disposed of in accordance with the Federal Records Act (44 U.S.C. 33 and Component records management directives.

  b. Nonrecord CUI documents may be destroyed by shredding or tearing into pieces and discarding the pieces in regular trash containers.

  c. NOTE: The guidance provided here is for CUI paper documents and this is the least stringent standard found for any CUI document destruction. There are other types of CUI, such as DEA Sensitive material, which must be destroyed by a means approved for destruction of Confidential material. Be certain to check DOD Manual 5200.01 for specific destruction requirements for each type of CUI document.

  4. Additional reviewer checks and considerations:

  a. Check recycle bins, regular trash, and the availability of shredders or collection containers for sensitive material. Ensure the organization knows who gets the recycling (especially if it contains CUI) and that it is disposed of properly (for instance by shredding). NOTE: If you find (e.g., in the trash) and can easily reconstruct any document marked CUI (or other CUI document) and it contains extremely sensitive information such as PII (with SSN, etc.), this should be made a finding.

  b. In all cases the reviewer should recommend using at least a cross cut shredder for destruction of CUI documents. Further, while a shred-all policy is not required, this is another recommendation that should be made.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where training and associated documentation should be in place. Not applicable to a field/mobile environment.


vuln_id: V-245845
stig_id: IS-16.02.03
severity: medium
title:
  Controlled Unclassified Information - Handling, Storage and Controlling Access to Areas where CUI is Processed or Maintained

check_text:
  General Guidance:

  Standards of protection for most types of CUI are the same as for FOUO but some variance does exist.  Therefore, specific requirements for certain CUI may need to be checked against applicable references to ensure proper protection is afforded.  The checks are applicable to all forms of CUI: documents, AIS hard drives and storage media.

  Checks:

  For most CUI and FOUO specifically check to ensure the following standards are met:

  Check #1.  During working hours, reasonable steps shall be taken to minimize the risk of access by unauthorized personnel.  This would include things like placing cover sheets on FOUO documents and allowing unescorted access to areas where CUI (documents and AIS storage media) is processed/handled to only those persons with at least a favorably adjudicated National Agency Check (NAC).

  Check #2.  After working hours, FOUO information (documents and removable media) may be stored in unlocked containers, desks, or cabinets if Government or Government-contract building security is provided. If such building security is not provided or is deemed inadequate, the information (documents and removable media) shall be stored in locked desks, file cabinets, bookcases, locked rooms, etc.  In all cases FOUO and other CUI documents must be placed out of sight during non-working hours. While not required, recommending implementation of a clean desk policy would be appropriate.

  Check #3.  Unescorted access to computer rooms or areas containing major items of AIS equipment processing CUI information (servers and network components) should only be granted to persons with at least a favorable NAC.  All others should be physically escorted. Access control measures such as reception personnel, guards, keyed locks, cipher locks or automated access control systems may be used to control access to such areas.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245846
stig_id: IS-16.02.04
title: Controlled Unclassified Information - Encryption of Data at Rest
severity: medium
check_text:
  Check to ensure the following standards concerning encryption of data-at-rest are met:

  In accordance with DoD policy, all unclassified DoD data that has not been approved for public release and is stored on mobile computing devices or removable storage media must be encrypted using commercially available encryption technology. This requirement includes all CUI as well as other unclassified information that has not been reviewed and approved for public release. This includes certain Personally Identifiable Information (PII). Examples of common devices requiring DAR encryption are laptops used for telework or TDY and mobile devices such as cellular phones, tablets, etc. approved for processing and storing DoD sensitive data, and CDs, thumb drives (flash media) DVDs and other removable media.

  See ASD(NII) Memorandum, Encryption of Sensitive Unclassified Data at Rest on Mobile Computing Devices and Removable Storage Media, 3 Jul 07 for detailed guidance.

  TACTICAL ENVIRONMENT: The check is applicable for all tactical processing environments.


vuln_id: V-245847
stig_id: IS-16.02.05
title: Controlled Unclassified Information - Transmission by either Physical or Electronic Means
severity: medium
check_text:
  General Information:

  Standards for transmission for most types of CUI are the same as for FOUO but some variance does exist. Therefore, specific requirements for certain CUI may need to be checked against applicable references to ensure proper means for transmission are used.

  For most CUI and FOUO specifically check to ensure the following standards are met:

  1. FOUO information and material may be transmitted via first class mail, parcel post, or, for bulk shipments, via fourth class mail.

  2. Electronic transmission of FOUO information, e.g., email, shall be by approved secure communications systems or systems utilizing other protective measures such as Public Key Infrastructure (PKI) or transport layer security (e.g., https).

  3. Use of wireless telephones (cellphones, wireless hand-held phones, Bluetooth, etc.) should be avoided when other options are available.

  4. Transmission of FOUO by facsimile machine (fax) is permitted; the sender is responsible for determining that appropriate protection will be available at the receiving location prior to transmission (e.g., machine attended by a person authorized to receive FOUO; fax located in a controlled government environment).

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments. Not applicable to a field/mobile environment.


vuln_id: V-245848
stig_id: IS-16.02.06
severity: medium
title:
  Controlled Unclassified Information - Posting Only on Web-Sites with Appropriate Encryption; not on Publicly Accessible Web-Sites.

check_text:
  Check to ensure the following standards/guidance are adhered to:

  1.  FOUO, PII and other CUI may NOT be posted to publicly-accessible Internet sites and may NOT be posted to sites whose access is controlled only by domain (e.g., limited to .mil and/or .gov) as such restricted access can easily be circumvented.

  2.  At a minimum, posting CUI to a website requires certificate-based (e.g., common access card) or password and ID access as well as encrypted transmission using https: or similar technology. CUI other than FOUO may have additional posting restrictions.

  3.  See Deputy Secretary of Defense Memorandum Web Site Administration, December 7, 1998, with attached Web Site Administration Policies and Procedures, November 25, 1998 for detailed guidance.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245849
stig_id: IS-16.03.01
title: Controlled Unclassified Information (CUI) - Local Policy and Procedure
severity: low
check_text:
  General Policy Guidance: All personnel of the Department of Defense are personally and individually responsible for properly protecting classified information and Controlled Unclassified Information (CUI) under their custody and control. All officials within the Department of Defense who hold command, management, or supervisory positions have specific, non-delegable responsibility for the quality of implementation and management of the information security program within their areas of responsibility.

  Check:
  This check is specifically to ensure there are local written procedures for handling, marking, storing, destroying and transmitting Controlled Unclassified Information.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place. Not applicable to a field/mobile environment.


vuln_id: V-245850
stig_id: IS-16.03.02
severity: low
title:
  Controlled Unclassified Information - Marking/Labeling Media within Unclassified Environments (Not Mixed with Classified)

check_text:
  General Information:

  This check is only for unclassified/sensitive media being used in a strictly unclassified physical environment. If all Controlled Unclassified Information (CUI) media are in a mixed environment where classified systems and media are in use, then STIG ID IS-03.02.01. applies and this check is NA.

  Check to ensure the following standard is met:

  Regardless of media type, the requirement to identify as clearly as possible the information requiring protection remains. Therefore check to ensure that all unclassified media containing CUI is properly marked according to content. Where it is not feasible to include markings with all of the information required for classified or sensitive documents or media, an explanatory statement that provides the required information shall be included on the item or with the documentation that accompanies it.

  While For Official Use Only (FOUO) is the primary CUI marking used in DOD, all types of CUI markings must be considered for use as appropriate. For instance: "Law Enforcement Sensitive" is a marking sometimes applied, in addition to the marking "FOR OFFICIAL USE ONLY," by the Department of Justice and other activities in the law enforcement community, including those within the Department of Defense.

  TACTICAL ENVIRONMENT: The check is applicable for all fixed tactical processing environments where CUI is developed and used. Not applicable to a field/mobile environment.


vuln_id: V-245851
stig_id: IS-17.03.01
title: Classified Annual Review
severity: low
check_text:
  Check #1. Check to ensure there are written procedures for the annual review and clean out of classified material.

  Check #2. Check to ensure there is a memorandum or some form of documentation covering results of the last clean out day. This is to validate actual completion of the requirement.

  TACTICAL ENVIRONMENT: This check is not applicable for fixed (established) tactical processing environments and is not applicable to a field/mobile environment. Classified documents and materials in these environments should be properly disposed of as soon as possible after it is determined there is no longer a need for them.


vuln_id: V-245852
stig_id: PE-01.03.01
title: Position of Trust - Knowledge of Responsibility to Self Report Derogatory Information
severity: low
check_text:
  Check to ensure that Individuals are familiar with pertinent personnel security regulations, such as DOD Manual 5200.02 and are aware of standards of conduct required of persons holding positions of trust, including (and especially) the requirement to report derogatory information to their local security manager.

  This check can be validated by:

  1. Checking organizational personnel security initial and annual refresher training records to ensure that the topic of standards of conduct for individuals holding a security clearance and each individual's responsibility to self- report derogatory information to their security manager are covered.

  2. Conducting a general survey of multiple employees to determine if they understand the standards of conduct and their responsibility to self-report.

  The results should be based on a compilation of survey results rather than a single instance of an employee who is not familiar with personal responsibilities (standards and self-reporting).

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments AND is applicable to a field/mobile environment.


vuln_id: V-245853
stig_id: PE-01.03.02
severity: low
title:
  Position of Trust - Local Policy Covering Employee Personal Standards of Conduct and Responsibilities

check_text:
  Check to ensure that a local policy exists and is readily available to employees that informs them about pertinent security regulations and standards of conduct required of persons holding positions of trust, including (and especially) the requirement to report derogatory information to their local security manager.

  SOPs should be readily available to all employees in a common reading library or more efficiently, accessible on line in a common file or organization intranet.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245854
stig_id: PE-01.03.03
title: Position of Trust - Training Covering Employee Standards of Conduct and Personal Responsibilities
severity: low
check_text:
  General Information:  The effectiveness of an individual in meeting security responsibilities is proportional to the degree to which the individual understands them. Thus, an integral part of the DoD security program is the indoctrination and continuous training of individuals on their security responsibilities.

  CHECK to ensure that Standards of Conduct and Personal Responsibilities are covered in initial, annual refresher and termination training/briefings.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245856
stig_id: PE-03.02.01
severity: medium
title:
  Validation Procedures for Security Clearance Issuance (Classified Systems and/or Physical Access Granted)

check_text:
  BACKGROUND: When checking how an organization validates security clearance information for either systems or physical access the first thing to consider is that there are various categories of personnel and associated considerations with each one. These categories include: Military employees, Government Civilian employees, Contract employees, Foreign Nationals, and Local National employees under a Status of Forces (SOFA) agreement and Visitors.

  Generally, an organization validation of security clearance levels should come from official databases such as DISS, DCII, a service or agency data base or "high level" (major subordinate command) headquarters security office. Also note that organization manning (staffing) documents should include the required clearance level for each assigned Military and Civilian position. Staffing documents should be requested by inspectors for review.

  The minimum security clearance requirement for systems access to the SIPRNet or unescorted access to the physical environment surrounding SIPRNet system information technology assets is secret.

  Local procedures must be developed for verifying that all personnel with access to classified information systems (logical or physical access) have the appropriate security clearance and access authorization. Inspectors should review local procedures.

  Checks:

  Check #1. Review a sample of the organization personnel security records (from local data bases, physical files, DISS...) and compare with applicable System Access Authorization Request (SAAR) forms to ensure proper validation of clearance levels for access to the SIPRNet (both logical systems access and/or physical access to SIPRNet environments). Minimum of secret security clearance is required. Check organizational records against the DISS data base if possible. Ensure that organizational manning records (security clearance requirements for the position occupied) match the actual security clearance held by the incumbent employee (military or DOD civilian) as reflected in DISS.

  Because it is generally not feasible to review all records it is recommended to select where possible ALL those who have privileged systems access or responsibility for oversight of systems security (such as SAs, ISSM, ISSOs, Network Admin, etc.) along with key management personnel (commander/director, ISSM, division/branch chiefs, etc.) and supplement with a random sample of those with basic "user" access to systems.

  Check #2. If there are contractor employees with classified systems access (SIPRNet) (both logical and/or physical access) - check to ensure there is a Statement of Work with accompanying DD 254 ("Classified" Contract Security Specification) that covers security clearance requirements for each type of work (or specified positions) being performed by contractors.

  Check #3. Check to ensure that contractor employees performing the tasks outlined in the Statement of Work and/or DD Form 254 actually have the security clearance required by the contract - minimum secret for SIPRNet access. If possible validate this in the DISS data base.

  Check #4. Check that a delegation of disclosure authority letter (DDL) is on-hand in all cases where US Classified information is released/shared with Foreign National Exchange or Liaison personnel who are either assigned to or visiting the site. The DDL will reflect the level of security clearance the FN official has and the level and type of information authorized to be shared.

  Check #5. Check to ensure that a Limited Access Authorization (LAA) is on hand when system access (or physical access) to classified information is granted to an immigrant alien or a foreign national - not associated with or representing a foreign government.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments and is also applicable to a field/mobile environment.


vuln_id: V-245860
stig_id: PE-07.03.01
severity: low
title:
  Out-processing Procedures for Departing or Terminated Employees (Military, Government Civilian and Contractor)

check_text:
  Check to ensure the organization has documented out-processing procedures.

  Review a sampling of personnel security files of departed personnel to ensure compliance.  Files of departed personnel should be maintained by an organization for at least 90-days.

  Ensure the procedures and records of departed employees reviewed include:
  -Removal from access to Government Information Systems,
  - Turning in all access badges, classified and/or sensitive information,
  - Removal from automated entry control systems (AECS) and
  - Signing of an SF 312 acknowledging a security debriefing.

  NOTE: The SF 312 is only applicable for those persons holding a security clearance.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) and personnel records should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245861
stig_id: PE-08.02.01
title: Intrusion Detection System (IDS) Monitoring Station Personnel - Suitability Checks
severity: medium
check_text:
  Check that IDS - protecting vaults, secure rooms, alarmed Protected Distribution Systems (PDS), or other spaces containing SIPRNet assets - is monitored by U.S. personnel who have been subject to a trustworthiness check IAW DoD Manual 5200.02.

  For Industrial Security (Contractor sites) ONLY:

  Minimally, SECRET-cleared central station employees shall be in attendance at the alarm monitoring station in sufficient number to monitor each alarmed area within the cleared contractor facility IAW NISPOM requirements.

  For all other DoD locations:

  Minimally monitor station personnel must be subjects of a successfully adjudicated Tier 3 investigation or an older NACLAC and ANACI that is still within scope.

  TACTICAL ENVIRONMENT APPLICABILITY: Apply to fixed tactical environments where IDS is installed to protect SIPRNet and other DoDIN (AKA: DISN) connected assets.


vuln_id: V-245862
stig_id: PE-08.02.02
title: Intrusion Detection System (IDS) Installation and Maintenance Personnel - Suitability Checks
severity: medium
check_text:
  Check physical IDS - protecting vaults, secure rooms or spaces containing SIPRNet assets - to ensure that  installation and maintenance is accomplished by U.S. citizens who have been subjected to a trustworthiness determination in accordance with DoD Manual 5200.02.  Minimally installation and maintenance personnel must be subjects of a successfully adjudicated Tier 3 investigation or an older NACLAC and ANACI that is still within scope.

  TACTICAL ENVIRONMENT APPLICABILITY: Apply to fixed tactical environments where IDS is installed to protect SIPRNet and other DoDIN (AKA: DISN) connected assets.


vuln_id: V-245863
stig_id: PH-01.03.01
severity: low
title:
  Physical Security Program - Physical Security Plan (PSP) and/or Systems Security Plan (SSP) Development and Implementation with Consideration/Focus on Protection of Information System Assets in the Physical Environment

check_text:
  1. Check to ensure there is a Physical Security Plan (PSP), either an organizational/site AND/OR an installation security plan in which granular security concerns and procedures at the site are addressed and considered.

  NOTE 1:  If a higher level installation or base plan is used ensure that it specifically addresses security concerns/procedures for the inspected organization or site.  Ideally, a local site or organization should always be included in the host installation security plan. If not, then a separately developed local (site/organization) Physical Security Plan (and/or Systems Security Plan (SSP)) is required, which integrates local security procedures for the site with the security-in-depth (SID) measures detailed in the host installation PSP.  The installation level PSP will likely not address granular security concerns for computer rooms and areas hosting information systems assets at individual installation sites.  Therefore the local organization(s) should still document specific protection measures covering SIPRNet and/or NIPRNet assets in a local PSP or in an SSP.

  2. Check to ensure security requirements of the computer room(s) (SIPRNet and/or NIPRNet) and collateral classified open storage areas (as applicable) are addressed and that guidance is provided to counter threats during peacetime, transition to war, and in wartime.

  3. Check to ensure the plan also addresses entry/access control procedures for the facility overall and for individual computer rooms/secure rooms or other areas housing network equipment (routers/crypto/switches, etc.). Use of an AECS, guards, lock & key systems, cipher locks, etc. should be specifically and thoroughly addressed in the plan.

  4. Check to ensure that access control procedures cover requirements for various categories of persons expected to access the facility such as employees, visitors, vendors, facility maintenance, and foreign nationals.

  NOTE 2: To be complete the plan should specifically address access control of vendors (ie., vending machine deliveries), cleaning and food service personnel, cleared versus uncleared visitors, foreign national (FN) visitors, FN employees (OCONUS SOFA, liaison, exchange and REL partners).

  5. Finally check to ensure the plan addresses security measures and response (Emergency Planning Measures) to include application of Force Protection Conditions, anti-terrorism planning and measures, civil disturbances, natural disasters, crime and any other possible local disruptions of the mission. A thorough plan will include measures designed to detect, delay, assess and respond to intrusions and other emergency situations.

  NOTE 3: If the plan or any of the critical elements of the plan (everything mentioned here) applicable to the specific site are missing - a finding should be written.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245864
stig_id: PH-02.02.01
title: Risk Assessment -Holistic Review (site/environment/information systems)
severity: medium
check_text:
  1. Check that there is a "Holistic" Risk Assessment (RA) for the site that includes consideration of environmental hazards, weather hazards, criminal and terrorist hazards, insider threat hazards and any other threats that could possibly impact the Confidentiality/Integrity/Availability (CIA) of the Information Technology (IT) facility and/or Information System (IS) equipment.

  2. Check to ensure the RA is revalidated/updated at least annually.

  3. Check to ensure the current site commander/director signed the risk assessment in conjunction with or in coordination with the Authorizing Officials (AOs) for resident system(s), signifying acceptance of any residual risk.

  NOTE 1: While an AO signed ATO does in fact signify acceptance of risk for specific systems, this alone does not meet the requirement for a formal risk assessment, which is a very specific and separate individual document.

  NOTE 2: Conducting a risk analysis is not just a simple paper work drill - or at least it should not be.  Often organizations take a risk analysis template and simply insert their organizations information, local environmental information, etc. - but do not do a good job of actually assessing threats, countermeasures in place (or that can be applied) to come up with an acceptable level of residual risk.  A good risk assessment is a team effort (security, IA, COOP, engineers, safety, management...) and should be headed by someone with at least some training in conducting risk assessments.

  NOTE 3: Training is offered by the Defense Security Service (DSS) Academy in Linthicum, MD among others.

  NOTE 4:  The NIST SP 800-30, Guide for Conducting Risk Assessments provides a widely used format and instructions for conducting a RA.  Reviewers should recommend sites use this publication as the basis for conducting their RA.

  NOTE 5: Time permitting the reviewer should make recommendations for improving the risk analysis process at a site since this is a critical element in any effective security management program.

  NOTE 6:  When there is a government/DoD contract with an industry partner; the government sponsor is inherently and ultimately responsible for risk based decisions.  The contractor only performs mission related tasks IAW contract specifications (e.g., statement of work (SOW)), which should ideally include guidance for risk assessment and acceptance.

  Hence, while the industry partner can prepare and coordinate the risk assessment it is the government/DoD customer who has the ultimate responsibility for accepting and coordinating risk based on their mission requirements. Therefore, the head of the contract sponsoring organization must approve/sign the risk assessment/acceptance of residual risk.

  The Authorizing Official (AO) for industry locations is the Defense Security Service (DSS) Cognizant Security Office (CSO).  Each CSO appoints an AO for system related risk evaluation.

  NOTE 7:  A thorough organizational risk assessment and acceptance of residual risk should be properly coordinated with all stakeholders to ensure there are no conflicts or issues.  This must include the Authorizing Official (AO), and should also include where appropriate the DISN Connection Approval Office (CAO), the Program Management Office (PMO), local law enforcement, fire/safety, Counter Intelligence (CI) Support, Federal Emergency Management Agency (FEMA) along with state and local emergency management counterparts as applicable. The government Contracting Officer and/ or Contracting Officer's Representative (COR) should inherently be included for coordination with all contractor related risk assessments.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place.  Not applicable to a field/mobile environment.


vuln_id: V-245865
stig_id: PH-03.02.01
severity: medium
title:
  Physical Protection of Unclassified Key System Devices/Computer Rooms in Large Processing Facilities

check_text:
  1. Check to ensure that Unclassified system assets (servers, DASD, tape drives, hubs, etc.) are protected in secure locked/access controlled rooms or closets and maintained separately from general employee access.

  NOTE 1: This check concerns protection of "ONLY UNCLASSIFIED" System and Network Devices.

  NOTE 2: While not required; the ideal situation with larger computer systems is to locate all major system components within "raised floor" computer rooms.  Regardless of the location the key factor in determining acceptable security compliance is if the equipment is accessible only to properly vetted persons who require unescorted access to the equipment for performance of duties.

  NOTE 3: While not preferred, if space and/or size of the Information Systems (IS) assets do not allow for being housed in a secure room or closet they may be maintained in locked Information System (IS) cabinets that preclude ease of access by unauthorized individuals.

  2. Check to ensure that properly managed Automated Entry Control Systems (AECS), mechanical access devices such as cipher locks, or keyed locks are being used to control access to these rooms, closets or cabinets.

  NOTE 4: If keyed locks are used check to ensure that proper key control procedures are in place. *If key control procedures are determined to be inadequate a finding under this STIG rule should be written.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


vuln_id: V-245866
stig_id: PH-04.02.01
severity: medium
title:
  Restricted Area and Controlled Area Designation of Areas Housing Critical Information System Components or Classified /Sensitive Technology or Data

check_text:
  Check to ensure the areas housing critical information technology systems are designated as Restricted Areas or Controlled Areas IAW host installation and/or Service, Agency or COCOM guidance.

  Signage should be properly posted at all access points and at adequate intervals to advise those approaching of the restricted area/controlled area designation, authority and consequences for violation of access restrictions.  Signs will be in English as well as in any language prevalent in the area.  Signs may not be required where OPSEC countermeasures dictate.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


vuln_id: V-245867
stig_id: PH-05.02.01
severity: medium
title:
  Security-in-Depth (AKA: Defense-in-Depth) - Minimum Physical Barriers and Access Control Measures for Facilities or Buildings Containing DoDIN (SIPRNet/NIPRNet) Connected Assets.

check_text:
  Background Information:  This set of checks is intended to validate security-in-depth protection measures in place for facilities with either Unclassified DoDIN assets (NIPRNet) or Classified (SIPRNet) DoDIN assets or both.  Checks are specifically oriented to each (one or more) of the following 4-situations:

  1.  Protection of unclassified (NIPRNet) assets (such as-end user workstations with typical office equipment - PC/laptop/thin client/multi-functional devices (MFD), printers, copiers, scanners, facsimile machine...) that are housed and operated in administrative office spaces.

  2.  Protection of unclassified (NIPRNet) assets housed and operated in unclassified computer rooms.  This check is intended for rooms with key system assets such as servers, routers, DASD, etc., rather than end user workstations.  This high level system equipment requires an additional layer of physical protection and access control.

  3.  Protection of classified (SIPRNet) assets (such as end-user workstations with typical office equipment - PC/laptop/thin client/multi-functional devices (MFD), printers, copiers, scanners, facsimile machine...) that are housed and operated in administrative office spaces NOT designated for collateral classified open storage (AKA: secure room or closed storage area).  Normally such space should be controlled/designated as secret controlled access areas (CAA) for SIPRNet.

  4.  Protection of classified (SIPRNet) assets housed and operated in space designated for collateral classified open storage (AKA: secure room or closed storage area).  Assets in this situation may include both end-user workstations with typical office equipment as detailed above and/or Computer Rooms containing key system assets such as servers, routers, DASD, etc.  So to restate, this includes any classified equipment (both end-user and key system equipment) stored and operated in space designated for and meeting collateral classified open storage standards.
  Where both NIPRNet and SIPRNet assets as well as end-user and system level assets are co-located in a facility - the most stringent SID standards applicable for the area will be used.

  Checks:

  1. Protection of areas containing unclassified (NIPRNet) assets (such as end user workstations):
  Check that any facility (building, room or area) housing  unclassified information system assets connected to the DODIN (such as end user NIPRNet work stations) has at least one physical barrier supplemented by any type of 24/7 access control (keyed locks, reception, guards, Access Control System, Cipher Locks, etc.).

  2.  Protection of unclassified (NIPRNet) assets housed and operated in unclassified computer rooms:

  Check to ensure that Unclassified Computer Rooms containing equipment connected to the DoDIN (located within a facility (building, room or area) meeting the standard in #1 above) have an additional layer of physical protection and access control (beyond that for the surrounding facility or area). This check is intended for rooms with key system assets such as servers, routers, etc., rather than end user workstations.

  3.  Protection of classified (SIPRNet) assets (such as end user workstations with typical office equipment that are NOT housed and operated within a facility designated as a collateral classified open storage area):

      a.  Check to ensure that every physical access point to facilities housing DoDIN end-user workstations that process or display classified information is guarded or alarmed 24/7 (minimum of alarm contacts on the doors) and that intrusion alarms are properly monitored.  This is space NOT designated as a collateral classified open storage area.  Normally such space should be access controlled/designated as a secret controlled access area (CAA) for SIPRNet.

      b.  Check that two forms of identification are required to gain access to a facility housing DoDIN workstations that process or display classified information (e.g., key card with PIN/biometrics or two acceptable forms of picture ID presented to a guard or receptionist).

      c.  Check to ensure that a visitor log is maintained for facilities containing DoDIN end-user workstations that process or display classified information. Automated Entry Control System (AECS) log entries may be used to meet this requirement.

  NOTE:  Physical access points to facilities housing DoDIN workstations in secret CAAs that process or display classified information, which are located on an access controlled military installation (or that employ another layer of physical barrier/access control) are not required to have an IDS alarm contact on the doors and need only one level of access control.  For instance access control to the facility using only a swipe or proximity card (w/o PIN or biometrics) or a guard checking a single picture ID is acceptable.

  4.  Protection of classified (SIPRNet) assets housed and operated in space designated for collateral classified open storage (AKA: secure room or closed storage area):

  *Check to ensure that the senior agency official (SAO) has determined in writing that security-in-depth (SID) exists.

  Note that the SAO for the Defense Security Service (DSS)/industry is the Cognizant Security Agency (CSA)/Cognizant Security Office (CSO).

  SID Explained:

  SID is a determination that the security program consists of layered and complementary security controls sufficient to deter and detect unauthorized entry and movement within the facility. Examples include, but are not limited to, use of perimeter fences, employee and visitor access controls, use of an IDS, random guard patrols throughout the facility during non-working hours, closed circuit video monitoring or other safeguards that mitigate the vulnerability of open storage areas without alarms as well as for security containers (safes) during non-working hours.

  Specific Secure Room security standards are not covered under this check for security-in-depth as they are covered in other Rules within this STIG.

  Selection of supplementary controls for secure rooms (IDS versus 4-hours guard checks) is based upon the SID in conjunction with an assessment of risk that is accepted by the SAO.

  Access control requirements for collateral open storage areas are established and must be IAW the DoD Manual 5200.01, V3 and as implemented by Rules in this STIG.

  An SID determination may be rendered using one of two methods:

  First, the SAO can issue SID approvals on a case-by-case basis.  For instance the facility or organization with collateral open storage space would provide the SAO with a request for SID (IAW pre-established organizational (CC/S/A) procedures) that is subsequently approved or disapproved by the SAO.

  A second method would be for the CC/S/A to establish a policy (Manual, Instruction, Regulation, Circular, etc.) that provides specific criteria or requirements that when met by organizations is evidence of adequate SID for collateral open storage spaces.  Criteria may be based on additional considerations such threat environments (high, medium, or low), if the space is on access controlled installations versus off-installations in public accessible space, CONUS versus OCONUS sites or other such considerations per the discretion of the SAO of the CC/S/A.

  Regardless of the method used by the SAO to render an SID determination, it must be properly documented and clearly apply to the collateral open storage area (AKA: secure room or closed storage area) being evaluated.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


vuln_id: V-245868
stig_id: PH-06.02.01
title: Visitor Control - To Facility or Organization with Information System Assets Connected to the DISN
severity: medium
check_text:
  Review visitor control procedures and implementation and ensure they include verification of clearance/investigation status (where required for access), personal identification of visitor, registering of visitors, proper badging (using DoD issued Common Access Cards (CAC) or other authorized credentials) and escorts.

  NOTE 1: Traditional Security reviewers may be able to evaluate implementation of the visitor process by reviewing how the review team was identified and badged.

  NOTE 2: Detailed audit logs of all facility visitors should be maintained for at least 90 days.  Automated Entry Control System (AECS) electronic logs may be used to meet this requirement.

  NOTE 3: Additional interviews can be conducted with personnel handling the visitor control function.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


vuln_id: V-245869
stig_id: PH-07.02.01
severity: medium
title:
  Sensitive Item Control - Keys, Locks and Access Cards Controlling Access to Information Systems (IS) or IS Assets Connected to the DISN

check_text:
  1. Check to ensure there are written procedures for the control of sensitive items such as keys, locks, badges and smart cards (CAC, token, or other locally issued badge).

  2. Check to verify the process is being followed and that it is effective.  As a minimum, lock and key systems or automated entry control systems (AECS) using coded access swipe/proximity badges - require a key or credential inventory, issuance records, and procedures for returning the key or access control credential once the user no longer needs it.

  3. Check to ensure a Key/Credential Control Officer and/or Key/Credential Custodians are appointed in writing to implement the system for controlling keys, locks and access control credentials.

  4. Check to ensure the Key/Credential Control Officer conducts at least an annual inventory/reconciliation of all keys/credentials issued and on-hand.

  5. Check to ensure that all keys/credentials are also inventoried upon change of Key/Credential Control Officer or Key/Credential Custodian.

  NOTE FOR REVIEWERS:
  If the Combatant Command, Service or Agency (CC/S/A) has issued guidelines for control of sensitive items the inspected organization may be considered compliant if following the issued guidelines.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


vuln_id: V-245870
stig_id: PH-09.03.01
severity: low
title:
  Physical Penetration Testing - of Facilities or Buildings Containing Information Systems (IS) Connected to the DISN

check_text:
  Check to ensure that procedures for a facility penetration testing process are developed that includes periodic, unannounced attempts to penetrate key computing facilities. Results of these tests should be provided to the site or organization commander/director and if applicable, the supporting base physical security specialist.  Any discrepancies should be addressed and corrective action taken (i.e., update procedures or provide additional training).

  If a test has not been completed within the last 12-months this should be a finding.

  Note: It is often a good idea for the site conducting physical penetration tests to coordinate support or this testing from supporting host installation security or an outside source.  That enables the test to be conducted by someone that most site personnel might not be familiar with and will facilitate a good test using social engineering or other methodology to gain unauthorized access.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


vuln_id: V-245871
stig_id: SM-01.03.01
title: Security and Cybersecurity Staff Appointment, Training/Certification and Suitability
severity: medium
check_text:
  Check #1. Check to ensure there are appointment letters for all security staff members including the SM, AO, ISSM, ISSOs, System Administrators (SA), and Network Security Officers (NSO). (CAT III)

  Check #2. Check to ensure the appointments are current and an appropriate authority has made the appointments. (CAT III)

  Check #3. Check to ensure that pertinent duties, responsibilities, training/certification and other suitability requirements for the appointed positions are contained in the appointment order. (CAT III)

  Check #4. Check supporting documentation to ensure that security staff have been properly trained and certified for the positions to which they are appointed (e.g. IAM I, II or III for ISSM/ISSO) and that they meet all applicable requirements for the positions. For instance the AO and ISSM must be US Citizens. (CAT II)

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments. Not applicable to a field/mobile environment.


vuln_id: V-245872
stig_id: SM-02.02.01
severity: medium
title:
  Security Training - Information Security (INFOSEC) for ALL Employees; Military, Government Civilian and Contractor

check_text:
  Check #1. Check that initial and recurring (minimum annually) information security is provided to each employee.

  Check #2. Check to ensure the following training topics are covered.  Some topics may not be necessary based on the organizations mission or other considerations.  Reviewers should use discretion in determining if adequate training topics are covered:

  a. Classified Handling (physical (storage) security, transportation/transmission & marking of documents, equipment and media)
  b. Communications Security
  c. Computer (AKA: cybersecurity) Security requirements
  d. Counter-intelligence briefings
  e. Penalties for engaging in espionage activities
  f. Courier briefing (if applicable)
  g. Reporting of derogatory information
  h. Reporting of Security Incidents
  i. Security of Laptop computers when traveling
  j. Special access programs, NATO, COSMIC TS, etc. (as applicable)
  k. Use of personal computers for conducting official business
  l. Concerns identified during Component self-inspections
  m. Procedures to be followed when using classified removable data storage media.
  n. Procedures to be followed if an individual believes an unauthorized disclosure of classified data has occurred on an information system or network (typically called a "data spill").

  Check #3. Check records of employee training and ensure 100% of initial training briefings are accomplished and at least 95% of employees have completed annual training.  Note that while 100% completion of annual training is the goal, employees on extended leave. TDY or other circumstances make this a difficult thing to accomplish.

  All training accomplished must be documented. Anything less will be a finding.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


vuln_id: V-245873
stig_id: SM-03.03.01
title: Counter-Intelligence Program - Training, Procedures and Incident Reporting
severity: low
check_text:
  Background Information:

  It is DoD policy that:
  a. Initial and annual CI awareness and reporting (CIAR) training on the foreign intelligence entity (FIE) threat, methods, reportable information, and reporting procedures shall be provided to DoD personnel as outlined in Enclosure 3 of DoDD 5240.06, 17 May 11 .
  b. Potential FIE threats to the DoD, its personnel, information, materiel, facilities, and
  activities, or to U.S. national security shall be reported by DoD personnel in accordance with
  Enclosure 4 of DoDD 5240.06.
  c. Failure to report FIE threats as identified in paragraph 3.a and section 5 of Enclosure 4 of
  DoDD 5240.06 may result in judicial or administrative action or both pursuant to applicable law or policy.

  Checks:

  Check #1. Check to ensure all assigned site/organization personnel have received both initial and annual CIAR training in accordance with DoDD 5240.06.

  Check #2. Check to ensure there are procedures for reporting possible threat information and that local threat assessments and warnings received are properly shared with the work force.

  TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments.  Not applicable to a field/mobile environment.


# oca_hostname_mappings

hostname: MONT-WS-92010
classification: NIPR
created_at: 2026-03-05 13:44:09
updated_at: 2026-03-05 13:44:09
notes:
  Needs Attention mapping update: _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_Win10_V3R4_20251023-141133.ckl


hostname: MONT-WS-92040
classification: NIPR
created_at: 2026-03-05 13:44:13
updated_at: 2026-03-05 13:44:13
notes:
  Needs Attention mapping update: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_Win10_V3R4_20251023-142421.ckl


hostname: MONT-SW-89108
classification: SIPR
created_at: 2026-03-05 14:07:03
updated_at: 2026-03-05 15:00:08
notes:
  Unknown STIG override from MONT-SW-89108_MSOffice365_V3R4_20251217-202911.ckl -> Microsoft Office 365 ProPlus Security Technical Implementation Guide (V3 R4); remapped 5 finding(s)


hostname: MONT-SW-89108
classification: SIPR
created_at: 2026-03-05 14:07:06
updated_at: 2026-03-05 14:59:48
notes:
  Unknown STIG override from MONT-SW-89108_Win10_V3R5_20251217-203019.ckl -> Microsoft Windows 10 Security Technical Implementation Guide (V3 R6); remapped 8 finding(s)


hostname: MONT-SW-89134
classification: SIPR
created_at: 2026-03-05 14:07:10
updated_at: 2026-03-05 15:00:32
notes:
  Unknown STIG override from MONT-SW-89134_MSOffice365_V3R4_20251217-201101.ckl -> Microsoft Office 365 ProPlus Security Technical Implementation Guide (V3 R4); remapped 5 finding(s)


hostname: MONT-SW-89134
classification: SIPR
created_at: 2026-03-05 14:07:13
updated_at: 2026-03-05 15:00:21
notes:
  Unknown STIG override from MONT-SW-89134_Win10_V3R5_20251217-201218.ckl -> Microsoft Windows 10 Security Technical Implementation Guide (V3 R6); remapped 8 finding(s)


hostname: MONT-WS-92040
classification: NIPR
created_at: 2026-03-05 15:00:59
updated_at: 2026-03-05 15:00:59
notes:
  Needs Attention mapping update: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_MSOffice365_V3R3_20251023-142330.ckl


hostname: MONT-WS-92010
classification: NIPR
created_at: 2026-03-05 15:01:02
updated_at: 2026-03-05 15:01:02
notes:
  Needs Attention mapping update: _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_MSOffice365_V3R3_20251023-141031.ckl


hostname: MONT-DP-001
classification: NIPR
created_at: 2026-03-13 12:59:20
updated_at: 2026-03-13 12:59:20
notes:
  Needs Attention mapping update: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IIS10Server_V3R4_20251023-143809.ckl


hostname: MONT-DP-001
classification: NIPR
created_at: 2026-03-13 12:59:25
updated_at: 2026-03-13 12:59:25
notes:
  Needs Attention mapping update: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IIS10Site_Default_Web_Site_V2R12_20251023-143912.ckl


hostname: MONT-MB-002
classification: NIPR
created_at: 2026-03-13 12:59:31
updated_at: 2026-03-13 12:59:31
notes:
  Needs Attention mapping update: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IIS10Server_V3R4_20251023-152431.ckl


hostname: MONT-MB-002
classification: NIPR
created_at: 2026-03-13 12:59:36
updated_at: 2026-03-13 12:59:36
notes:
  Needs Attention mapping update: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IIS10Site_Exchange_Back_End_V2R12_20251023-152602.ckl


hostname: MONT-WS-92010
classification: NIPR
created_at: 2026-03-13 12:59:43
updated_at: 2026-03-13 12:59:43
notes:
  Needs Attention mapping update: _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_MSEdge_V2R3_20251023-141013.ckl


hostname: MONT-WS-92040
classification: NIPR
created_at: 2026-03-13 12:59:49
updated_at: 2026-03-13 12:59:49
notes:
  Needs Attention mapping update: _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_MSEdge_V2R3_20251023-142313.ckl


# external_feed_items

feed_type: stig_vuln
title: CVE-2017-20187
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-20187
ingested_at: 2026-03-12 19:11:42
summary:
  ** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3.1 is able to address this issue. The patch is identified as 500d340e1f6421007413cc08a8383475221c2604. It is recommended to upgrade the affected component. VDB-244482 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.


feed_type: stig_vuln
title: CVE-2017-7252
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7252
ingested_at: 2026-03-12 19:11:42
summary:
  bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password.


feed_type: stig_vuln
title: CVE-2018-25092
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-25092
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Command Mention Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The patch is named cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-244483.


feed_type: stig_vuln
title: CVE-2018-25093
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-25093
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The name of the patch is cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-244484.


feed_type: stig_vuln
title: CVE-2020-28407
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-28407
ingested_at: 2026-03-12 19:11:42
summary:
  In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.


feed_type: stig_vuln
title: CVE-2021-4430
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-4430
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability classified as problematic has been found in Ortus Solutions ColdBox Elixir 3.1.6. This affects an unknown part of the file src/defaultConfig.js of the component ENV Variable Handler. The manipulation leads to information disclosure. Upgrading to version 3.1.7 is able to address this issue. The identifier of the patch is a3aa62daea2e44c76d08d1eac63768cd928cd69e. It is recommended to upgrade the affected component. The identifier VDB-244485 was assigned to this vulnerability.


feed_type: stig_vuln
title: CVE-2022-3172
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3172
ingested_at: 2026-03-12 19:11:42
summary:
  A security issue was discovered in kube-apiserver that allows an 
  aggregated API server to redirect client traffic to any URL.  This could
   lead to the client performing unexpected actions as well as forwarding 
  the client's API server credentials to third parties.


feed_type: stig_vuln
title: CVE-2022-43554
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-43554
ingested_at: 2026-03-12 19:11:42
summary:
  Ivanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation Vulnerability


feed_type: stig_vuln
title: CVE-2022-43555
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-43555
ingested_at: 2026-03-12 19:11:42
summary:
  Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability


feed_type: stig_vuln
title: CVE-2022-44569
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-44569
ingested_at: 2026-03-12 19:11:42
summary:
  A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.


feed_type: stig_vuln
title: CVE-2022-45373
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-45373
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics allows SQL Injection.This issue affects Slimstat Analytics: from n/a through 5.0.4.


feed_type: stig_vuln
title: CVE-2022-45805
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-45805
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3.


feed_type: stig_vuln
title: CVE-2022-46808
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-46808
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4.11.


feed_type: stig_vuln
title: CVE-2022-46818
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-46818
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a through 6.2.


feed_type: stig_vuln
title: CVE-2022-46849
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-46849
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar Coming Soon Page &acirc;&euro;&ldquo; Responsive Coming Soon &amp; Maintenance Mode allows SQL Injection.This issue affects Coming Soon Page &acirc;&euro;&ldquo; Responsive Coming Soon &amp; Maintenance Mode: from n/a through 1.5.9.


feed_type: stig_vuln
title: CVE-2022-46859
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-46859
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows SQL Injection.This issue affects Spiffy Calendar: from n/a through 4.9.1.


feed_type: stig_vuln
title: CVE-2022-46860
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-46860
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaizenCoders Short URL allows SQL Injection.This issue affects Short URL: from n/a through 1.6.4.


feed_type: stig_vuln
title: CVE-2022-47420
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47420
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.11.


feed_type: stig_vuln
title: CVE-2022-47426
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47426
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Neshan Maps Platform Neshan Maps neshan-maps allows SQL Injection.This issue affects Neshan Maps: from n/a through 1.1.4.


feed_type: stig_vuln
title: CVE-2022-47428
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47428
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7.


feed_type: stig_vuln
title: CVE-2022-47430
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47430
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar The School Management &acirc;&euro;&ldquo; Education &amp; Learning Management allows SQL Injection.This issue affects The School Management &acirc;&euro;&ldquo; Education &amp; Learning Management: from n/a through 4.1.


feed_type: stig_vuln
title: CVE-2022-47432
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47432
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kemal YAZICI - PluginPress Shortcode IMDB allows SQL Injection.This issue affects Shortcode IMDB: from n/a through 6.0.8.


feed_type: stig_vuln
title: CVE-2022-47445
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47445
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0.


feed_type: stig_vuln
title: CVE-2022-47588
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-47588
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tips and Tricks HQ, Peter Petreski Simple Photo Gallery simple-photo-gallery allows SQL Injection.This issue affects Simple Photo Gallery: from n/a through v1.8.1.


feed_type: stig_vuln
title: CVE-2022-48192
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48192
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script (JavaScript, VBScript) in the context of the application.


feed_type: stig_vuln
title: CVE-2022-48454
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48454
ingested_at: 2026-03-12 19:11:42
summary:
  In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2022-48456
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48456
ingested_at: 2026-03-12 19:11:42
summary:
  In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed


feed_type: stig_vuln
title: CVE-2022-48457
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48457
ingested_at: 2026-03-12 19:11:42
summary:
  In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2022-48460
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48460
ingested_at: 2026-03-12 19:11:42
summary:
  In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2022-48461
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-48461
ingested_at: 2026-03-12 19:11:42
summary:
  In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed


feed_type: stig_vuln
title: CVE-2022-4900
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-4900
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.


feed_type: stig_vuln
title: CVE-2023-1192
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1192
ingested_at: 2026-03-12 19:11:42
summary:
  A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a denial of service.


feed_type: stig_vuln
title: CVE-2023-1193
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1193
ingested_at: 2026-03-12 19:11:42
summary:
  A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work.


feed_type: stig_vuln
title: CVE-2023-1194
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1194
ingested_at: 2026-03-12 19:11:42
summary:
  An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory.


feed_type: stig_vuln
title: CVE-2023-1476
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1476
ingested_at: 2026-03-12 19:11:42
summary:
  A use-after-free flaw was found in the Linux kernel&acirc;&euro;&trade;s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.


feed_type: stig_vuln
title: CVE-2023-1713
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1713
ingested_at: 2026-03-12 19:11:42
summary:
  Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code via uploading a crafted &quot;.htaccess&quot; file.


feed_type: stig_vuln
title: CVE-2023-1714
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1714
ingested_at: 2026-03-12 19:11:42
summary:
  Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitrary code via (1) appending arbitrary content to existing PHP files or (2) PHAR deserialization.


feed_type: stig_vuln
title: CVE-2023-1715
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1715
ingested_at: 2026-03-12 19:11:42
summary:
  A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags at the begining of the payload.


feed_type: stig_vuln
title: CVE-2023-1716
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1716
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege.


feed_type: stig_vuln
title: CVE-2023-1717
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1717
ingested_at: 2026-03-12 19:11:42
summary:
  Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitrary JavaScript code in the victim&acirc;&euro;&trade;s browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via polluting `__proto__[tag]` and `__proto__[text]`.


feed_type: stig_vuln
title: CVE-2023-1718
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1718
ingested_at: 2026-03-12 19:11:42
summary:
  Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted &quot;tmp_url&quot;.


feed_type: stig_vuln
title: CVE-2023-1719
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1719
ingested_at: 2026-03-12 19:11:42
summary:
  Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the server and (2) execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via overwriting uninitialised variables.


feed_type: stig_vuln
title: CVE-2023-1720
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-1720
ingested_at: 2026-03-12 19:11:42
summary:
  Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim has administrator privilege, via uploading a crafted HTML file through /desktop_app/file.ajax.php?action=uploadfile.


feed_type: stig_vuln
title: CVE-2023-20005
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20005
ingested_at: 2026-03-12 19:11:42
summary:
  Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by inserting crafted input into various data fields in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface, or access sensitive, browser-based information. In some cases, it is also possible to cause a temporary availability impact to portions of the FMC Dashboard.


feed_type: stig_vuln
title: CVE-2023-20031
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20031
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a logic error that occurs when an SSL/TLS certificate that is under load is accessed when it is initiating an SSL connection. Under specific, time-based constraints, an attacker could exploit this vulnerability by sending a high rate of SSL/TLS connection requests to be inspected by the Snort 3 detection engine on an affected device. A successful exploit could allow the attacker to cause the Snort 3 detection engine to reload, resulting in either a bypass or a denial of service (DoS) condition, depending on device configuration. The Snort detection engine will restart automatically. No manual intervention is required.


feed_type: stig_vuln
title: CVE-2023-20042
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20042
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an implementation error within the SSL/TLS session handling process that can prevent the release of a session handler under specific conditions. An attacker could exploit this vulnerability by sending crafted SSL/TLS traffic to an affected device, increasing the probability of session handler leaks. A successful exploit could allow the attacker to eventually deplete the available session handler pool, preventing new sessions from being established and causing a DoS condition.


feed_type: stig_vuln
title: CVE-2023-20048
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20048
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) device that is managed by the FMC Software. This vulnerability is due to insufficient authorization of configuration commands that are sent through the web service interface. An attacker could exploit this vulnerability by authenticating to the FMC web services interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute certain configuration commands on the targeted FTD device. To successfully exploit this vulnerability, an attacker would need valid credentials on the FMC Software.


feed_type: stig_vuln
title: CVE-2023-20063
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20063
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco Firepower Management (FMC) Software could allow an authenticated, local attacker to execute arbitrary commands with root permissions on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by accessing the expert mode of an affected device and submitting specific commands to a connected system. A successful exploit could allow the attacker to execute arbitrary code in the context of an FMC device if the attacker has administrative privileges on an associated FTD device. Alternatively, a successful exploit could allow the attacker to execute arbitrary code in the context of an FTD device if the attacker has administrative privileges on an associated FMC device.


feed_type: stig_vuln
title: CVE-2023-20070
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20070
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability is due to a logic error in how memory allocations are handled during a TLS 1.3 session. Under specific, time-based constraints, an attacker could exploit this vulnerability by sending a crafted TLS 1.3 message sequence through an affected device. A successful exploit could allow the attacker to cause the Snort 3 detection engine to reload, resulting in a denial of service (DoS) condition. While the Snort detection engine reloads, packets going through the FTD device that are sent to the Snort detection engine will be dropped. The Snort detection engine will restart automatically. No manual intervention is required.


feed_type: stig_vuln
title: CVE-2023-20071
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20071
ingested_at: 2026-03-12 19:11:42
summary:
  Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a flaw in the FTP module of the Snort detection engine. An attacker could exploit this vulnerability by sending crafted FTP traffic through an affected device. A successful exploit could allow the attacker to bypass FTP inspection and deliver a malicious payload.


feed_type: stig_vuln
title: CVE-2023-20083
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20083
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the CPU of an affected device to spike to 100 percent, which could stop all traffic processing and result in a denial of service (DoS) condition. FTD management traffic is not affected by this vulnerability. This vulnerability is due to improper error checking when parsing fields within the ICMPv6 header. An attacker could exploit this vulnerability by sending a crafted ICMPv6 packet through an affected device. A successful exploit could allow the attacker to cause the device to exhaust CPU resources and stop processing traffic, resulting in a DoS condition. Note: To recover from the DoS condition, the Snort 2 Detection Engine or the Cisco FTD device may need to be restarted.


feed_type: stig_vuln
title: CVE-2023-20086
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20086
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper processing of ICMPv6 messages. An attacker could exploit this vulnerability by sending crafted ICMPv6 messages to a targeted Cisco ASA or FTD system with IPv6 enabled. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.


feed_type: stig_vuln
title: CVE-2023-20095
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20095
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of HTTPS requests. An attacker could exploit this vulnerability by sending crafted HTTPS requests to an affected system. A successful exploit could allow the attacker to cause resource exhaustion, resulting in a DoS condition.


feed_type: stig_vuln
title: CVE-2023-20114
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20114
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbitrary files from an affected system. This vulnerability is due to a lack of input sanitation. An attacker could exploit this vulnerability by sending a crafted HTTPS request. A successful exploit could allow the attacker to download arbitrary files from the affected system.


feed_type: stig_vuln
title: CVE-2023-20155
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20155
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause the device to become unresponsive or trigger an unexpected reload. This vulnerability could also allow an attacker with valid user credentials, but not Administrator privileges, to view a system log file that they would not normally have access to. This vulnerability is due to a lack of rate-limiting of requests that are sent to a specific API that is related to an FMC log. An attacker could exploit this vulnerability by sending a high rate of HTTP requests to the API. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to the FMC CPU spiking to 100 percent utilization or to the device reloading. CPU utilization would return to normal if the attack traffic was stopped before an unexpected reload was triggered.


feed_type: stig_vuln
title: CVE-2023-20170
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20170
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, an attacker must have valid Administrator-level privileges on the affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.


feed_type: stig_vuln
title: CVE-2023-20175
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20175
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, an attacker must have valid Read-only-level privileges or higher on the affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.


feed_type: stig_vuln
title: CVE-2023-20177
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20177
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category and the Snort 3 detection engine could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This vulnerability exists because a logic error occurs when a Snort 3 detection engine inspects an SSL/TLS connection that has either a URL Category configured on the SSL file policy or a URL Category configured on an access control policy with TLS server identity discovery enabled. Under specific, time-based constraints, an attacker could exploit this vulnerability by sending a crafted SSL/TLS connection through an affected device. A successful exploit could allow the attacker to trigger an unexpected reload of the Snort 3 detection engine, resulting in either a bypass or denial of service (DoS) condition, depending on device configuration. The Snort 3 detection engine will restart automatically. No manual intervention is required.


feed_type: stig_vuln
title: CVE-2023-20195
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20195
ingested_at: 2026-03-12 19:11:42
summary:
  Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit these vulnerabilities by uploading a crafted file to an affected device. A successful exploit could allow the attacker to store malicious files in specific directories on the device. The attacker could later use those files to conduct additional attacks, including executing arbitrary code on the affected device with root privileges.


feed_type: stig_vuln
title: CVE-2023-20213
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20213
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of the CDP process on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes CDP traffic. An attacker could exploit this vulnerability by sending crafted CDP traffic to the device. A successful exploit could cause the CDP process to crash, impacting neighbor discovery and the ability of Cisco ISE to determine the reachability of remote devices. After a crash, the CDP process must be manually restarted using the cdp enable command in interface configuration mode.


feed_type: stig_vuln
title: CVE-2023-20219
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20219
ingested_at: 2026-03-12 19:11:42
summary:
  Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require administrator privileges to exploit this vulnerability. These vulnerabilities are due to insufficient validation of user-supplied input for certain configuration options. An attacker could exploit these vulnerabilities by using crafted input within the device configuration GUI. A successful exploit could allow the attacker to execute arbitrary commands on the device including the underlying operating system which could also affect the availability of the device.


feed_type: stig_vuln
title: CVE-2023-20220
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20220
ingested_at: 2026-03-12 19:11:42
summary:
  Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. To exploit these vulnerabilities, the attacker must have valid device credentials, but does not need Administrator privileges. These vulnerabilities are due to insufficient validation of user-supplied input for certain configuration options. An attacker could exploit these vulnerabilities by using crafted input within the device configuration GUI. A successful exploit could allow the attacker to execute arbitrary commands on the device, including on the underlying operating system, which could also affect the availability of the device.


feed_type: stig_vuln
title: CVE-2023-20244
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20244
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain packets when they are sent to the inspection engine. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to deplete all 9,472 byte blocks on the device, resulting in traffic loss across the device or an unexpected reload of the device. If the device does not reload on its own, a manual reload of the device would be required to recover from this state.


feed_type: stig_vuln
title: CVE-2023-20245
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20245
ingested_at: 2026-03-12 19:11:42
summary:
  Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access control list (ACL) and allow traffic that should be denied to flow through an affected device. These vulnerabilities are due to a logic error that could occur when the affected software constructs and applies per-user-override rules. An attacker could exploit these vulnerabilities by connecting to a network through an affected device that has a vulnerable configuration. A successful exploit could allow the attacker to bypass the interface ACL and access resources that would should be protected.


feed_type: stig_vuln
title: CVE-2023-20246
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20246
ingested_at: 2026-03-12 19:11:42
summary:
  Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a logic error that occurs when the access control policies are being populated. An attacker could exploit this vulnerability by establishing a connection to an affected device. A successful exploit could allow the attacker to bypass configured access control rules on the affected system.


feed_type: stig_vuln
title: CVE-2023-20247
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20247
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid username and password. This vulnerability is due to improper error handling during remote access VPN authentication. An attacker could exploit this vulnerability by sending crafted requests during remote access VPN session establishment. A successful exploit could allow the attacker to bypass the configured multiple certificate authentication policy while retaining the privileges and permissions associated with the original connection profile.


feed_type: stig_vuln
title: CVE-2023-20255
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20255
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause a partial availability condition, which could cause ongoing video calls to be dropped due to the invalid packets reaching the Web Bridge.


feed_type: stig_vuln
title: CVE-2023-20264
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20264
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to intercept the SAML assertion of a user who is authenticating to a remote access VPN session. This vulnerability is due to insufficient validation of the login URL. An attacker could exploit this vulnerability by persuading a user to access a site that is under the control of the attacker, allowing the attacker to modify the login URL. A successful exploit could allow the attacker to intercept a successful SAML assertion and use that assertion to establish a remote access VPN session toward the affected device with the identity and permissions of the hijacked user, resulting in access to the protected network.


feed_type: stig_vuln
title: CVE-2023-20267
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20267
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This vulnerability exists because the configuration for IP geolocation rules is not parsed properly. An attacker could exploit this vulnerability by spoofing an IP address until they bypass the restriction. A successful exploit could allow the attacker to bypass location-based IP address restrictions.


feed_type: stig_vuln
title: CVE-2023-20270
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20270
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the configured policies or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error-checking when the Snort 3 detection engine is processing SMB traffic. An attacker could exploit this vulnerability by sending a crafted SMB packet stream through an affected device. A successful exploit could allow the attacker to cause the Snort process to reload, resulting in a DoS condition.


feed_type: stig_vuln
title: CVE-2023-20702
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-20702
ingested_at: 2026-03-12 19:11:42
summary:
  In 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE received invalid 1-byte rlc sdu, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00921261; Issue ID: MOLY01128895.


feed_type: stig_vuln
title: CVE-2023-23368
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-23368
ingested_at: 2026-03-12 19:11:42
summary:
  An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.

  We have already fixed the vulnerability in the following versions:
  QTS 5.0.1.2376 build 20230421 and later
  QTS 4.5.4.2374 build 20230416 and later
  QuTS hero h5.0.1.2376 build 20230421 and later
  QuTS hero h4.5.4.2374 build 20230417 and later
  QuTScloud c5.0.1.2374 and later


feed_type: stig_vuln
title: CVE-2023-23369
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-23369
ingested_at: 2026-03-12 19:11:42
summary:
  An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.

  We have already fixed the vulnerability in the following versions:
  Multimedia Console 2.1.2 ( 2023/05/04 ) and later
  Multimedia Console 1.4.8 ( 2023/05/05 ) and later
  QTS 5.1.0.2399 build 20230515 and later
  QTS 4.3.6.2441 build 20230621 and later
  QTS 4.3.4.2451 build 20230621 and later
  QTS 4.3.3.2420 build 20230621 and later
  QTS 4.2.6 build 20230621 and later
  Media Streaming add-on 500.1.1.2 ( 2023/06/12 ) and later
  Media Streaming add-on 500.0.0.11 ( 2023/06/16 ) and later


feed_type: stig_vuln
title: CVE-2023-23702
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-23702
ingested_at: 2026-03-12 19:11:42
summary:
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pixelgrade Comments Ratings plugin &lt;=&Acirc;&nbsp;1.1.7 versions.


feed_type: stig_vuln
title: CVE-2023-25700
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-25700
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10.


feed_type: stig_vuln
title: CVE-2023-25800
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-25800
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.2.0.


feed_type: stig_vuln
title: CVE-2023-25960
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-25960
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zendrop Zendrop &acirc;&euro;&ldquo; Global Dropshipping zendrop-dropshipping-and-fulfillment allows SQL Injection.This issue affects Zendrop &acirc;&euro;&ldquo; Global Dropshipping: from n/a through 1.0.0.


feed_type: stig_vuln
title: CVE-2023-26015
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26015
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Chris Richardson MapPress Maps for WordPress mappress-google-maps-for-wordpress allows SQL Injection.This issue affects MapPress Maps for WordPress: from n/a through 2.85.4.


feed_type: stig_vuln
title: CVE-2023-26452
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26452
ingested_at: 2026-03-12 19:11:42
summary:
  Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default. Arbitrary SQL statements could be executed in the context of the services database user account. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-26453
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26453
ingested_at: 2026-03-12 19:11:42
summary:
  Requests to cache an image could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default. Arbitrary SQL statements could be executed in the context of the services database user account. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-26454
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26454
ingested_at: 2026-03-12 19:11:42
summary:
  Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. Exploiting this vulnerability requires at least access to adjacent networks of the imageconverter service, which is not exposed to public networks by default. Arbitrary SQL statements could be executed in the context of the services database user account. API requests are now properly checked for valid content and attempts to circumvent this check are being logged as error. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-26455
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26455
ingested_at: 2026-03-12 19:11:42
summary:
  RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent network access could abuse the RMI service to modify calendar items using RMI. RMI access is restricted to localhost by default. The interface has been updated to require authenticated requests. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-26456
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-26456
ingested_at: 2026-03-12 19:11:42
summary:
  Users were able to set an arbitrary &quot;product name&quot; for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code execution, allowing an attacker to build a foothold. Sanitization is in place for product names now. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-27605
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-27605
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sajjad Hossain WP Reroute Email allows SQL Injection.This issue affects WP Reroute Email: from n/a through 1.4.6.


feed_type: stig_vuln
title: CVE-2023-28748
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-28748
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in biztechc Copy or Move Comments allows SQL Injection.This issue affects Copy or Move Comments: from n/a through 5.0.4.


feed_type: stig_vuln
title: CVE-2023-28794
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-28794
ingested_at: 2026-03-12 19:11:42
summary:
  Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.


feed_type: stig_vuln
title: CVE-2023-29043
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-29043
ingested_at: 2026-03-12 19:11:42
summary:
  Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document. Script code embedded in malicious documents could be executed in the context of the user editing the document when performing certain actions, like copying content. The relevant attribute does now get encoded to avoid the possibility of executing script code. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-29044
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-29044
ingested_at: 2026-03-12 19:11:42
summary:
  Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now get escaped to avoid code execution. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-29045
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-29045
ingested_at: 2026-03-12 19:11:42
summary:
  Documents operations, in this case &quot;drawing&quot;, could be manipulated to contain invalid data types, possibly script code. Script code could be injected to an operation that would be executed for users that are actively collaborating on the same document. Operation data exchanged between collaborating parties does now gets checked for validity to avoid code execution. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-29046
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-29046
ingested_at: 2026-03-12 19:11:42
summary:
  Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, instead those connections were logged. Some connections use user-controlled endpoints, which could be malicious and attempt to keep the connection open for an extended period of time. As a result users were able to trigger large amount of egress network connections, possibly exhausting network pool resources and lock up legitimate requests. A new mechanism has been introduced to cancel external connections that might access user-controlled endpoints. No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-29047
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-29047
ingested_at: 2026-03-12 19:11:42
summary:
  Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowing to inject arbitrary SQL statements. An attacker with access to the adjacent network and potentially API credentials, could read and modify database content which is accessible to the imageconverter SQL user account. None No publicly available exploits are known.


feed_type: stig_vuln
title: CVE-2023-31016
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31016
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.


feed_type: stig_vuln
title: CVE-2023-31017
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31017
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.


feed_type: stig_vuln
title: CVE-2023-31018
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31018
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.


feed_type: stig_vuln
title: CVE-2023-31019
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31019
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context.


feed_type: stig_vuln
title: CVE-2023-31020
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31020
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.


feed_type: stig_vuln
title: CVE-2023-31021
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31021
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.


feed_type: stig_vuln
title: CVE-2023-31022
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31022
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service.


feed_type: stig_vuln
title: CVE-2023-31023
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31023
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.


feed_type: stig_vuln
title: CVE-2023-31026
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31026
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.


feed_type: stig_vuln
title: CVE-2023-31027
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31027
ingested_at: 2026-03-12 19:11:42
summary:
  NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.


feed_type: stig_vuln
title: CVE-2023-31102
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31102
ingested_at: 2026-03-12 19:11:42
summary:
  7-Zip through 22.01 on Linux allows an integer underflow and code execution via a crafted 7Z archive.


feed_type: stig_vuln
title: CVE-2023-31579
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-31579
ingested_at: 2026-03-12 19:11:42
summary:
  Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.


feed_type: stig_vuln
title: CVE-2023-3164
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3164
ingested_at: 2026-03-12 19:11:42
summary:
  A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.


feed_type: stig_vuln
title: CVE-2023-32121
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32121
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Highfivery LLC Zero Spam for WordPress allows SQL Injection.This issue affects Zero Spam for WordPress: from n/a through 5.4.4.


feed_type: stig_vuln
title: CVE-2023-3246
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3246
ingested_at: 2026-03-12 19:11:42
summary:
  An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.


feed_type: stig_vuln
title: CVE-2023-32508
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32508
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolf van Gelder Order Your Posts Manually allows SQL Injection.This issue affects Order Your Posts Manually: from n/a through 2.2.5.


feed_type: stig_vuln
title: CVE-2023-32741
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32741
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: from n/a through 1.1.2.


feed_type: stig_vuln
title: CVE-2023-3277
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3277
ingested_at: 2026-03-12 19:11:42
summary:
  The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as any user as long as they know the user's email address. We are disclosing this issue as the developer has not yet released a patch, but continues to release updates and we escalated this issue to the plugin's team 30 days ago.


feed_type: stig_vuln
title: CVE-2023-32818
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32818
ingested_at: 2026-03-12 19:11:42
summary:
  In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896 &amp; ALPS08013430; Issue ID: ALPS07867715.


feed_type: stig_vuln
title: CVE-2023-32825
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32825
ingested_at: 2026-03-12 19:11:42
summary:
  In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07884130; Issue ID: ALPS07884130.


feed_type: stig_vuln
title: CVE-2023-32832
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32832
ingested_at: 2026-03-12 19:11:42
summary:
  In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08235273.


feed_type: stig_vuln
title: CVE-2023-32834
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32834
ingested_at: 2026-03-12 19:11:42
summary:
  In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08161762; Issue ID: ALPS08161762.


feed_type: stig_vuln
title: CVE-2023-32835
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32835
ingested_at: 2026-03-12 19:11:42
summary:
  In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08157918; Issue ID: ALPS08157918.


feed_type: stig_vuln
title: CVE-2023-32836
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32836
ingested_at: 2026-03-12 19:11:42
summary:
  In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08126725; Issue ID: ALPS08126725.


feed_type: stig_vuln
title: CVE-2023-32837
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32837
ingested_at: 2026-03-12 19:11:42
summary:
  In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357.


feed_type: stig_vuln
title: CVE-2023-32838
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32838
ingested_at: 2026-03-12 19:11:42
summary:
  In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310805; Issue ID: ALPS07310805.


feed_type: stig_vuln
title: CVE-2023-32839
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32839
ingested_at: 2026-03-12 19:11:42
summary:
  In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07262576; Issue ID: ALPS07262576.


feed_type: stig_vuln
title: CVE-2023-32840
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-32840
ingested_at: 2026-03-12 19:11:42
summary:
  In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction may be also needed for exploitation Patch ID: MOLY01138425; Issue ID: MOLY01138425 (MSV-862).


feed_type: stig_vuln
title: CVE-2023-33226
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-33226
ingested_at: 2026-03-12 19:11:42
summary:
  The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability.  This vulnerability allows a low-level user to perform the actions with SYSTEM privileges.


feed_type: stig_vuln
title: CVE-2023-33227
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-33227
ingested_at: 2026-03-12 19:11:42
summary:
  The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges.


feed_type: stig_vuln
title: CVE-2023-33228
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-33228
ingested_at: 2026-03-12 19:11:42
summary:
  The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.


feed_type: stig_vuln
title: CVE-2023-33924
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-33924
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS Handball allows SQL Injection.This issue affects SIS Handball: from n/a through 1.0.45.


feed_type: stig_vuln
title: CVE-2023-3397
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3397
ingested_at: 2026-03-12 19:11:42
summary:
  A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information.


feed_type: stig_vuln
title: CVE-2023-3399
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3399
ingested_at: 2026-03-12 19:11:42
summary:
  An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom project templates.


feed_type: stig_vuln
title: CVE-2023-34179
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-34179
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Inc. Groundhogg allows SQL Injection.This issue affects Groundhogg: from n/a through 2.7.11.


feed_type: stig_vuln
title: CVE-2023-34259
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-34259
ingested_at: 2026-03-12 19:11:42
summary:
  Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even files that require root privileges. NOTE: this issue exists because of an incomplete fix for CVE-2020-23575.


feed_type: stig_vuln
title: CVE-2023-34260
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-34260
ingested_at: 2026-03-12 19:11:42
summary:
  Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory reference such as %2fetc%00index.htm to try to read the /etc directory.


feed_type: stig_vuln
title: CVE-2023-34261
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-34261
ingested_at: 2026-03-12 19:11:42
summary:
  Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow identification of valid user accounts via username enumeration because they lead to a &quot;nicht einloggen&quot; error rather than a falsch error.


feed_type: stig_vuln
title: CVE-2023-34383
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-34383
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP Project Manager wedevs-project-manager allows SQL Injection.This issue affects WP Project Manager: from n/a through 2.6.0.


feed_type: stig_vuln
title: CVE-2023-35896
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-35896
ingested_at: 2026-03-12 19:11:42
summary:
  IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.  IBM X-Force ID:  259247.


feed_type: stig_vuln
title: CVE-2023-35910
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-35910
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nucleus_genius Quasar form free &acirc;&euro;&ldquo; Contact Form Builder for WordPress allows SQL Injection.This issue affects Quasar form free &acirc;&euro;&ldquo; Contact Form Builder for WordPress: from n/a through 6.0.


feed_type: stig_vuln
title: CVE-2023-35911
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-35911
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affects Contact Form Generator : Creative form builder for WordPress: from n/a through 2.6.0.


feed_type: stig_vuln
title: CVE-2023-36529
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-36529
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme allows SQL Injection.This issue affects Houzez - Real Estate WordPress Theme: from n/a through 1.3.4.


feed_type: stig_vuln
title: CVE-2023-36620
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-36620
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup=&quot;false&quot; attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is used to authenticate requests to the API.


feed_type: stig_vuln
title: CVE-2023-36621
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-36621
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing.


feed_type: stig_vuln
title: CVE-2023-36677
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-36677
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project &amp; Document Manager allows SQL Injection.This issue affects SP Project &amp; Document Manager: from n/a through 4.67.


feed_type: stig_vuln
title: CVE-2023-38382
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38382
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel S&Atilde;&para;derstr&Atilde;&para;m / Sidney van de Stouwe Subscribe to Category allows SQL Injection.This issue affects Subscribe to Category: from n/a through 2.7.4.


feed_type: stig_vuln
title: CVE-2023-38391
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38391
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themesgrove Onepage Builder allows SQL Injection.This issue affects Onepage Builder: from n/a through 2.4.1.


feed_type: stig_vuln
title: CVE-2023-38406
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38406
ingested_at: 2026-03-12 19:11:42
summary:
  bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a &quot;flowspec overflow.&quot;


feed_type: stig_vuln
title: CVE-2023-38407
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38407
ingested_at: 2026-03-12 19:11:42
summary:
  bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.


feed_type: stig_vuln
title: CVE-2023-38469
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38469
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.


feed_type: stig_vuln
title: CVE-2023-38470
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38470
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.


feed_type: stig_vuln
title: CVE-2023-38471
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38471
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.


feed_type: stig_vuln
title: CVE-2023-38472
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38472
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.


feed_type: stig_vuln
title: CVE-2023-38473
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38473
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.


feed_type: stig_vuln
title: CVE-2023-3893
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3893
ingested_at: 2026-03-12 19:11:42
summary:
  A security issue was discovered in Kubernetes where a user that can 
  create pods on Windows nodes running kubernetes-csi-proxy may be able to
   escalate to admin privileges on those nodes. Kubernetes clusters are 
  only affected if they include Windows nodes running 
  kubernetes-csi-proxy.


feed_type: stig_vuln
title: CVE-2023-38965
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38965
ingested_at: 2026-03-12 19:11:42
summary:
  Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI.


feed_type: stig_vuln
title: CVE-2023-39042
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39042
ingested_at: 2026-03-12 19:11:42
summary:
  An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted messages.


feed_type: stig_vuln
title: CVE-2023-39047
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39047
ingested_at: 2026-03-12 19:11:42
summary:
  An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted messages.


feed_type: stig_vuln
title: CVE-2023-39048
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39048
ingested_at: 2026-03-12 19:11:42
summary:
  An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.


feed_type: stig_vuln
title: CVE-2023-39050
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39050
ingested_at: 2026-03-12 19:11:42
summary:
  An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.


feed_type: stig_vuln
title: CVE-2023-39051
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39051
ingested_at: 2026-03-12 19:11:42
summary:
  An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted messages.


feed_type: stig_vuln
title: CVE-2023-39053
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39053
ingested_at: 2026-03-12 19:11:42
summary:
  An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages.


feed_type: stig_vuln
title: CVE-2023-39054
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39054
ingested_at: 2026-03-12 19:11:42
summary:
  An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted messages.


feed_type: stig_vuln
title: CVE-2023-39057
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39057
ingested_at: 2026-03-12 19:11:42
summary:
  An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages.


feed_type: stig_vuln
title: CVE-2023-3909
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3909
ingested_at: 2026-03-12 19:11:42
summary:
  An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A Regular Expression Denial of Service was possible by adding a large string in timeout input in gitlab-ci.yml file.


feed_type: stig_vuln
title: CVE-2023-39281
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39281
ingested_at: 2026-03-12 19:11:42
summary:
  A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.


feed_type: stig_vuln
title: CVE-2023-39283
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39283
ingested_at: 2026-03-12 19:11:42
summary:
  An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation.


feed_type: stig_vuln
title: CVE-2023-39284
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39284
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls to SetVariable with unsanitized arguments in the SMI handler.


feed_type: stig_vuln
title: CVE-2023-39299
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39299
ingested_at: 2026-03-12 19:11:42
summary:
  A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network.

  We have already fixed the vulnerability in the following versions:
  Music Station 4.8.11 and later
  Music Station 5.1.16 and later
  Music Station 5.3.23 and later


feed_type: stig_vuln
title: CVE-2023-39301
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39301
ingested_at: 2026-03-12 19:11:42
summary:
  A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network.

  We have already fixed the vulnerability in the following versions:
  QTS 5.0.1.2514 build 20230906 and later
  QTS 5.1.1.2491 build 20230815 and later
  QuTS hero h5.0.1.2515 build 20230907 and later
  QuTS hero h5.1.1.2488 build 20230812 and later
  QuTScloud c5.1.0.2498 and later


feed_type: stig_vuln
title: CVE-2023-39345
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-39345
ingested_at: 2026-03-12 19:11:42
summary:
  strapi is an open-source headless CMS. Versions prior to 4.13.1 did not properly restrict write access to fielded marked as private in the user registration endpoint. As such malicious users may be able to errantly modify their user records. This issue has been addressed in version 4.13.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.


feed_type: stig_vuln
title: CVE-2023-3961
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3961
ingested_at: 2026-03-12 19:11:42
summary:
  A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB clients to remote procedure call (RPC) services like SAMR LSA or SPOOLSS, which Samba initiates on demand. However, due to inadequate sanitization of incoming client pipe names, allowing a client to send a pipe name containing Unix directory traversal characters (../). This could result in SMB clients connecting as root to Unix domain sockets outside the private directory. If an attacker or client managed to send a pipe name resolving to an external service using an existing Unix domain socket, it could potentially lead to unauthorized access to the service and consequential adverse events, including compromise or service crashes.


feed_type: stig_vuln
title: CVE-2023-3972
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-3972
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an unprivileged local user or attacker could create the /var/tmp/insights-client directory (owning the directory with read, write, and execute permissions) on the system. After the insights-client is registered by root, an attacker could then control the directory content that insights are using by putting malicious scripts into it and executing arbitrary code as root (trivially bypassing SELinux protections because insights processes are allowed to disable SELinux system-wide).


feed_type: stig_vuln
title: CVE-2023-40061
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40061
ingested_at: 2026-03-12 19:11:42
summary:
  &Acirc;&nbsp;Insecure
  job execution mechanism vulnerability.  This
  vulnerability can lead to other attacks as a result.


feed_type: stig_vuln
title: CVE-2023-40062
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40062
ingested_at: 2026-03-12 19:11:42
summary:
  SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges.


feed_type: stig_vuln
title: CVE-2023-40207
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40207
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations Made Easy &acirc;&euro;&ldquo; Smart Donations allows SQL Injection.This issue affects Donations Made Easy &acirc;&euro;&ldquo; Smart Donations: from n/a through 4.0.12.


feed_type: stig_vuln
title: CVE-2023-40215
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40215
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Demonisblack demon image annotation allows SQL Injection.This issue affects demon image annotation: from n/a through 5.1.


feed_type: stig_vuln
title: CVE-2023-4043
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4043
ingested_at: 2026-03-12 19:11:42
summary:
  In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of edge cases where the input text of a number can lead to much larger processing time than one would expect.


  To mitigate the risk, parsson put in place a size limit for the numbers as well as their scale.


feed_type: stig_vuln
title: CVE-2023-40609
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40609
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aiyaz, maheshpatel Contact form 7 Custom validation allows SQL Injection.This issue affects Contact form 7 Custom validation: from n/a through 1.1.3.


feed_type: stig_vuln
title: CVE-2023-40660
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40660
ingested_at: 2026-03-12 19:11:42
summary:
  A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock and for small, permanently connected tokens to computers. Additionally, the token can internally track login status. This flaw allows an attacker to gain unauthorized access, carry out malicious actions, or compromise the system without the user's awareness.


feed_type: stig_vuln
title: CVE-2023-40661
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40661
ingested_at: 2026-03-12 19:11:42
summary:
  Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a custom-crafted USB device or smart card to manipulate responses to APDUs. This manipulation can potentially allow 
  compromise key generation, certificate loading, and other card management operations during enrollment.


feed_type: stig_vuln
title: CVE-2023-4091
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4091
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module &quot;acl_xattr&quot; is configured with &quot;acl_xattr:ignore system acls = yes&quot;. The SMB protocol allows opening files when the client requests read-only access but then implicitly truncates the opened file to 0 bytes if the client specifies a separate OVERWRITE create disposition request. The issue arises in configurations that bypass kernel file system permissions checks, relying solely on Samba's permissions.


feed_type: stig_vuln
title: CVE-2023-40922
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-40922
ingested_at: 2026-03-12 19:11:42
summary:
  kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontController::initContent().


feed_type: stig_vuln
title: CVE-2023-41164
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41164
ingested_at: 2026-03-12 19:11:42
summary:
  In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.


feed_type: stig_vuln
title: CVE-2023-41259
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41259
ingested_at: 2026-03-12 19:11:42
summary:
  Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call.


feed_type: stig_vuln
title: CVE-2023-41260
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41260
ingested_at: 2026-03-12 19:11:42
summary:
  Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls.


feed_type: stig_vuln
title: CVE-2023-41343
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41343
ingested_at: 2026-03-12 19:11:42
summary:
  Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters. A remote attacker with regular user privilege can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.


feed_type: stig_vuln
title: CVE-2023-41344
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41344
ingested_at: 2026-03-12 19:11:42
summary:
  NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files.


feed_type: stig_vuln
title: CVE-2023-41345
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41345
ingested_at: 2026-03-12 19:11:42
summary:
  ASUS RT-AX55&acirc;&euro;&trade;s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services.


feed_type: stig_vuln
title: CVE-2023-41346
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41346
ingested_at: 2026-03-12 19:11:42
summary:
  ASUS RT-AX55&acirc;&euro;&trade;s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.


feed_type: stig_vuln
title: CVE-2023-41347
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41347
ingested_at: 2026-03-12 19:11:42
summary:
  ASUS RT-AX55&acirc;&euro;&trade;s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.


feed_type: stig_vuln
title: CVE-2023-41348
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41348
ingested_at: 2026-03-12 19:11:42
summary:
  ASUS RT-AX55&acirc;&euro;&trade;s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.


feed_type: stig_vuln
title: CVE-2023-41350
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41350
ingested_at: 2026-03-12 19:11:42
summary:
  Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypass the captcha check and more susceptible to brute force attacks.


feed_type: stig_vuln
title: CVE-2023-41351
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41351
ingested_at: 2026-03-12 19:11:42
summary:
  Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL. This makes it possible for unauthenticated remote attackers to log in as any existing users, such as an administrator, to perform arbitrary system operations or disrupt service.


feed_type: stig_vuln
title: CVE-2023-41352
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41352
ingested_at: 2026-03-12 19:11:42
summary:
  Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.


feed_type: stig_vuln
title: CVE-2023-41353
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41353
ingested_at: 2026-03-12 19:11:42
summary:
  Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrupt service.


feed_type: stig_vuln
title: CVE-2023-41354
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41354
ingested_at: 2026-03-12 19:11:42
summary:
  Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially sensitive information exposed to an actor.


feed_type: stig_vuln
title: CVE-2023-41355
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41355
ingested_at: 2026-03-12 19:11:42
summary:
  Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting in a denial of service or sensitive information leaking.


feed_type: stig_vuln
title: CVE-2023-41357
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41357
ingested_at: 2026-03-12 19:11:42
summary:
  Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system operations or disrupt service.


feed_type: stig_vuln
title: CVE-2023-41378
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41378
ingested_at: 2026-03-12 19:11:42
summary:
  In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake() call is performed inside the main server handle for loop without any timeout allowing an unclean TLS handshake to block the main loop indefinitely while other connections will be idle waiting for that handshake to finish.


feed_type: stig_vuln
title: CVE-2023-41652
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41652
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6.


feed_type: stig_vuln
title: CVE-2023-41685
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41685
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ilGhera Woocommerce Support System allows SQL Injection.This issue affects Woocommerce Support System: from n/a through 1.2.1.


feed_type: stig_vuln
title: CVE-2023-41725
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41725
ingested_at: 2026-03-12 19:11:42
summary:
  Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability


feed_type: stig_vuln
title: CVE-2023-41914
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-41914
ingested_at: 2026-03-12 19:11:42
summary:
  SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files.


feed_type: stig_vuln
title: CVE-2023-4197
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4197
ingested_at: 2026-03-12 19:11:42
summary:
  Improper input validation in Dolibarr ERP CRM &lt;= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.


feed_type: stig_vuln
title: CVE-2023-4198
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4198
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Access Control in Dolibarr ERP CRM &lt;= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data


feed_type: stig_vuln
title: CVE-2023-42027
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42027
ingested_at: 2026-03-12 19:11:42
summary:
  IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.  IBM X-Force ID:  266057.


feed_type: stig_vuln
title: CVE-2023-42029
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42029
ingested_at: 2026-03-12 19:11:42
summary:
  IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  266059.


feed_type: stig_vuln
title: CVE-2023-4217
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4217
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.


feed_type: stig_vuln
title: CVE-2023-42299
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42299
ingested_at: 2026-03-12 19:11:42
summary:
  Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_subimage_data function.


feed_type: stig_vuln
title: CVE-2023-42631
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42631
ingested_at: 2026-03-12 19:11:42
summary:
  In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2023-42644
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42644
ingested_at: 2026-03-12 19:11:42
summary:
  In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2023-42645
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42645
ingested_at: 2026-03-12 19:11:42
summary:
  In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2023-42646
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42646
ingested_at: 2026-03-12 19:11:42
summary:
  In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2023-42647
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42647
ingested_at: 2026-03-12 19:11:42
summary:
  In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2023-42648
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42648
ingested_at: 2026-03-12 19:11:42
summary:
  In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed


feed_type: stig_vuln
title: CVE-2023-42653
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42653
ingested_at: 2026-03-12 19:11:42
summary:
  In faceid service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges


feed_type: stig_vuln
title: CVE-2023-42655
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42655
ingested_at: 2026-03-12 19:11:42
summary:
  In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed


feed_type: stig_vuln
title: CVE-2023-42669
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42669
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Samba's &quot;rpcecho&quot; development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the &quot;rpcecho&quot; service operates with only one worker in the main RPC task, allowing calls to the &quot;rpcecho&quot; server to be blocked for a specified time, causing service disruptions. This disruption is triggered by a &quot;sleep()&quot; call in the &quot;dcesrv_echo_TestSleep()&quot; function under specific conditions. Authenticated users or attackers can exploit this vulnerability to make calls to the &quot;rpcecho&quot; server, requesting it to block for a specified duration, effectively disrupting most services and leading to a complete denial of service on the AD DC. The DoS affects all other services as &quot;rpcecho&quot; runs in the main RPC task.


feed_type: stig_vuln
title: CVE-2023-42670
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42670
ingested_at: 2026-03-12 19:11:42
summary:
  A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba's RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation &quot;classic DCs&quot;) can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as &quot;The procedure number is out of range&quot; when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services.


feed_type: stig_vuln
title: CVE-2023-42750
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42750
ingested_at: 2026-03-12 19:11:42
summary:
  In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed


feed_type: stig_vuln
title: CVE-2023-42802
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-42802
ingested_at: 2026-03-12 19:11:42
summary:
  GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10, an unverified object instantiation allows one to upload malicious PHP files to unwanted directories. Depending on web server configuration and available system libraries, malicious PHP files can then be executed through a web server request. Version 10.0.10 fixes this issue. As a workaround, remove write access on `/ajax` and `/front` files to the web server.


feed_type: stig_vuln
title: CVE-2023-43018
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43018
ingested_at: 2026-03-12 19:11:42
summary:
  IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.  IBM X-Force ID:  266163.


feed_type: stig_vuln
title: CVE-2023-43076
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43076
ingested_at: 2026-03-12 19:11:42
summary:
  Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker could potentially exploit this vulnerability to cause an out of memory (OOM) condition.


feed_type: stig_vuln
title: CVE-2023-43087
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43087
ingested_at: 2026-03-12 19:11:42
summary:
  Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient permissions. A low privileged remote attacker could potentially exploit this vulnerability to cause information disclosure.


feed_type: stig_vuln
title: CVE-2023-43193
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43193
ingested_at: 2026-03-12 19:11:42
summary:
  Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the forum that leads to XSS.


feed_type: stig_vuln
title: CVE-2023-43194
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43194
ingested_at: 2026-03-12 19:11:42
summary:
  Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.


feed_type: stig_vuln
title: CVE-2023-43336
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43336
ingested_at: 2026-03-12 19:11:42
summary:
  Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101.


feed_type: stig_vuln
title: CVE-2023-43665
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43665
ingested_at: 2026-03-12 19:11:42
summary:
  In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potentially malformed HTML text. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which are thus also vulnerable. NOTE: this issue exists because of an incomplete fix for CVE-2019-14232.


feed_type: stig_vuln
title: CVE-2023-43982
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-43982
ingested_at: 2026-03-12 19:11:42
summary:
  Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at insta_parser.php. This vulnerability allows attackers to use the vulnerable website as proxy to attack other websites or exfiltrate data via a HTTP call.


feed_type: stig_vuln
title: CVE-2023-44025
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-44025
ingested_at: 2026-03-12 19:11:42
summary:
  SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component.


feed_type: stig_vuln
title: CVE-2023-44271
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-44271
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.


feed_type: stig_vuln
title: CVE-2023-44398
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-44398
ingested_at: 2026-03-12 19:11:42
summary:
  Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.


feed_type: stig_vuln
title: CVE-2023-4452
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4452
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them  vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.


feed_type: stig_vuln
title: CVE-2023-44954
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-44954
ingested_at: 2026-03-12 19:11:42
summary:
  Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute arbitrary code via the ID parameter in the Developer Settings functions.


feed_type: stig_vuln
title: CVE-2023-45001
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45001
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Castos Seriously Simple Stats allows SQL Injection.This issue affects Seriously Simple Stats: from n/a through 1.5.0.


feed_type: stig_vuln
title: CVE-2023-45012
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45012
ingested_at: 2026-03-12 19:11:42
summary:
  Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.&Acirc;&nbsp;The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45013
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45013
ingested_at: 2026-03-12 19:11:42
summary:
  Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_query' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45014
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45014
ingested_at: 2026-03-12 19:11:42
summary:
  Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bus_id' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45015
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45015
ingested_at: 2026-03-12 19:11:42
summary:
  Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45016
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45016
ingested_at: 2026-03-12 19:11:42
summary:
  Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'source' parameter of the search.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45017
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45017
ingested_at: 2026-03-12 19:11:42
summary:
  Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'destination' parameter of the search.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45018
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45018
ingested_at: 2026-03-12 19:11:42
summary:
  Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45019
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45019
ingested_at: 2026-03-12 19:11:42
summary:
  Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45024
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45024
ingested_at: 2026-03-12 19:11:42
summary:
  Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.


feed_type: stig_vuln
title: CVE-2023-45046
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45046
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pressference Pressference Exporter allows SQL Injection.This issue affects Pressference Exporter: from n/a through 1.0.3.


feed_type: stig_vuln
title: CVE-2023-45055
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45055
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InspireUI MStore API allows SQL Injection.This issue affects MStore API: from n/a through 4.0.6.


feed_type: stig_vuln
title: CVE-2023-45069
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45069
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Video Gallery by Total-Soft Video Gallery &acirc;&euro;&ldquo; Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affects Video Gallery &acirc;&euro;&ldquo; Best WordPress YouTube Gallery Plugin: from n/a through 2.1.3.


feed_type: stig_vuln
title: CVE-2023-45074
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45074
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter Advanced Page Visit Counter &acirc;&euro;&ldquo; Most Wanted Analytics Plugin for WordPress allows SQL Injection.This issue affects Advanced Page Visit Counter &acirc;&euro;&ldquo; Most Wanted Analytics Plugin for WordPress: from n/a through 7.1.1.


feed_type: stig_vuln
title: CVE-2023-45111
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45111
ingested_at: 2026-03-12 19:11:42
summary:
  Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.&Acirc;&nbsp;The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45112
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45112
ingested_at: 2026-03-12 19:11:42
summary:
  Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'feedback' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45113
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45113
ingested_at: 2026-03-12 19:11:42
summary:
  Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45114
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45114
ingested_at: 2026-03-12 19:11:42
summary:
  Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'subject' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45161
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45161
ingested_at: 2026-03-12 19:11:42
summary:
  The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions.

  To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-URLResponseTime instruction to v20.1 by uploading it through the 1E Platform instruction upload UI


feed_type: stig_vuln
title: CVE-2023-45163
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45163
ingested_at: 2026-03-12 19:11:42
summary:
  The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions.

  To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-CommandLinePing instruction to v18.1 by uploading it through the 1E Platform instruction upload UI


feed_type: stig_vuln
title: CVE-2023-45189
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45189
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials.  This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials.  IBM X-Force ID:  268752.


feed_type: stig_vuln
title: CVE-2023-45201
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45201
ingested_at: 2026-03-12 19:11:42
summary:
  Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities.&Acirc;&nbsp;The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.


feed_type: stig_vuln
title: CVE-2023-45202
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45202
ingested_at: 2026-03-12 19:11:42
summary:
  Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.


feed_type: stig_vuln
title: CVE-2023-45203
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45203
ingested_at: 2026-03-12 19:11:42
summary:
  Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.


feed_type: stig_vuln
title: CVE-2023-45323
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45323
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.&Acirc;&nbsp;The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45324
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45324
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45325
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45325
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45326
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45326
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45327
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45327
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45328
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45328
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45329
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45329
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'role' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45330
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45330
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45331
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45331
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'contact' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45332
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45332
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45333
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45333
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45334
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45334
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45335
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45335
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45336
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45336
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45337
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45337
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45338
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45338
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45339
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45339
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'type' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45340
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45340
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/details-router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45341
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45341
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45342
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45342
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45343
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45343
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45344
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45344
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45345
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45345
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45346
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45346
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-45347
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45347
ingested_at: 2026-03-12 19:11:42
summary:
  Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.


feed_type: stig_vuln
title: CVE-2023-4535
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4535
ingested_at: 2026-03-12 19:11:42
summary:
  An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security.


feed_type: stig_vuln
title: CVE-2023-45360
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45360
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.


feed_type: stig_vuln
title: CVE-2023-45362
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45362
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. diff-multi-sameuser (aka &quot;X intermediate revisions by the same user not shown&quot;) ignores username suppression. This is an information leak.


feed_type: stig_vuln
title: CVE-2023-45556
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45556
ingested_at: 2026-03-12 19:11:42
summary:
  Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component.


feed_type: stig_vuln
title: CVE-2023-45657
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45657
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.


feed_type: stig_vuln
title: CVE-2023-45827
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-45827
ingested_at: 2026-03-12 19:11:42
summary:
  Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions to work with object paths in dot notation. In versions prior to 1.0.2 there is a Prototype Pollution vulnerability in the `setByPath` function which can leads to remote code execution (RCE). This issue has been addressed in commit `98daf567` which has been included in release 1.0.2. Users are advised to upgrade. There are no known workarounds to this vulnerability.


feed_type: stig_vuln
title: CVE-2023-4591
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4591
ingested_at: 2026-03-12 19:11:42
summary:
  A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion (LFI) via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the loading of a PHP file on the server, leading to a critical webshell exploit.


feed_type: stig_vuln
title: CVE-2023-4592
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4592
ingested_at: 2026-03-12 19:11:42
summary:
  A Cross-Site Scripting vulnerability has been detected in WPN-XM Serverstack affecting version 0.8.6. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload through the /tools/webinterface/index.php parameter and retrieve the cookie session details of an authenticated user, resulting in a session hijacking.


feed_type: stig_vuln
title: CVE-2023-46084
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46084
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bPlugins LLC Icons Font Loader allows SQL Injection.This issue affects Icons Font Loader: from n/a through 1.1.2.


feed_type: stig_vuln
title: CVE-2023-46176
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46176
ingested_at: 2026-03-12 19:11:42
summary:
  IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys.  IBM X-Force ID:  269535.


feed_type: stig_vuln
title: CVE-2023-4625
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4625
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after the attacker has attempted to log in illegally by continuously attempting unauthorized login to the Web server function. The impact of this vulnerability will persist while the attacker continues to attempt unauthorized login.


feed_type: stig_vuln
title: CVE-2023-46251
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46251
ingested_at: 2026-03-12 19:11:42
summary:
  MyBB is a free and open source forum software. Custom MyCode (BBCode) for the visual editor (_SCEditor_) doesn't escape input properly when rendering HTML, resulting in a DOM-based XSS vulnerability. This weakness can be exploited by pointing a victim to a page where the visual editor is active (e.g. as a post or Private Message) and operates on a maliciously crafted MyCode message. This may occur on pages where message content is pre-filled using a GET/POST parameter, or on reply pages where a previously saved malicious message is quoted. The impact is be mitigated when: 1. the visual editor is disabled globally (_Admin CP ? Configuration ? Settings ? Clickable Smilies and BB Code: [Clickable MyCode Editor](https://github.com/mybb/mybb/blob/mybb_1836/install/resources/settings.xml#L2087-L2094)_ is set to _Off_), or 2. the visual editor is disabled for individual user accounts (_User CP ? Your Profile ? Edit Options_: _Show the MyCode formatting options on the posting pages_ checkbox is not checked). MyBB 1.8.37 resolves this issue with the commit `6dcaf0b4d`. Users are advised to upgrade. Users unable to upgrade may mitigate the impact without upgrading MyBB by changing the following setting (_Admin CP ? Configuration ? Settings_):
  - _Clickable Smilies and BB Code ? [Clickable MyCode Editor](https://github.com/mybb/mybb/blob/mybb_1836/install/resources/settings.xml#L2087-L2094)_: _Off_. Similarly, individual MyBB forum users are able to disable the visual editor by diabling the account option (_User CP ? Your Profile ? Edit Options_) _Show the MyCode formatting options on the posting pages_.


feed_type: stig_vuln
title: CVE-2023-46254
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46254
ingested_at: 2026-03-12 19:11:42
summary:
  capsule-proxy is a reverse proxy for Capsule kubernetes multi-tenancy framework. A bug in the RoleBinding reflector used by `capsule-proxy` gives ServiceAccount tenant owners the right to list Namespaces of other tenants backed by the same owner kind and name. For example consider two tenants `solar` and `wind`. Tenant `solar`, owned by a ServiceAccount named `tenant-owner` in the Namespace `solar`. Tenant `wind`, owned by a ServiceAccount named `tenant-owner` in the Namespace `wind`. The Tenant owner `solar` would be able to list the namespaces of the Tenant `wind` and vice-versa, although this is not correct. The bug introduces an exfiltration vulnerability since allows the listing of Namespace resources of other Tenants, although just in some specific conditions: 1. `capsule-proxy` runs with the `--disable-caching=false` (default value: `false`) and 2. Tenant owners are ServiceAccount, with the same resource name, but in different Namespaces. This vulnerability doesn't allow any privilege escalation on the outer tenant Namespace-scoped resources, since the Kubernetes RBAC is enforcing this. This issue has been addressed in version 0.4.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.


feed_type: stig_vuln
title: CVE-2023-46327
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46327
ingested_at: 2026-03-12 19:11:42
summary:
  Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encryption key, the information such as the server credentials may be obtained from the exported Address Book data. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].


feed_type: stig_vuln
title: CVE-2023-46352
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46352
ingested_at: 2026-03-12 19:11:42
summary:
  In the module &quot;Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module&quot; (facebookconversiontrackingplus) up to version 2.4.9 from Smart Modules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from the module which can lead to a leak of personal information from ps_customer table such as name / surname / email.


feed_type: stig_vuln
title: CVE-2023-46380
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46380
ingested_at: 2026-03-12 19:11:42
summary:
  LOYTEC LINX-212 firmware 6.2.4 and LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3 devices send password-change requests via cleartext HTTP.


feed_type: stig_vuln
title: CVE-2023-46381
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46381
ingested_at: 2026-03-12 19:11:42
summary:
  LOYTEC LINX-212 firmware 6.2.4 and LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3 devices lack authentication for the preinstalled version of LWEB-802 via an lweb802_pre/ URI. An unauthenticated attacker can edit any project (or create a new project) and control its GUI.


feed_type: stig_vuln
title: CVE-2023-46382
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46382
ingested_at: 2026-03-12 19:11:42
summary:
  LOYTEC LINX-212 firmware 6.2.4 and LVIS-3ME12-A1 firmware 6.2.2 and LIOB-586 firmware 6.2.3 devices use cleartext HTTP for login.


feed_type: stig_vuln
title: CVE-2023-46404
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46404
ingested_at: 2026-03-12 19:11:42
summary:
  PCRS &lt;= 3.11 (d0de1e) &acirc;&euro;&oelig;Questions&acirc;&euro;&#65533; page and &acirc;&euro;&oelig;Code editor&acirc;&euro;&#65533; page are vulnerable to remote code execution (RCE) by escaping Python sandboxing.


feed_type: stig_vuln
title: CVE-2023-46428 (hadsky)
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46428
ingested_at: 2026-03-12 19:11:42
summary:
  An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.


feed_type: stig_vuln
title: CVE-2023-46448
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46448
ingested_at: 2026-03-12 19:11:42
summary:
  Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images.


feed_type: stig_vuln
title: CVE-2023-46475
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46475
ingested_at: 2026-03-12 19:11:42
summary:
  A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the name field of the project, they can inject malicious JavaScript code.


feed_type: stig_vuln
title: CVE-2023-46482
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46482
ingested_at: 2026-03-12 19:11:42
summary:
  SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Backup Functionality in the coreframe/app/database/admin/index.php component.


feed_type: stig_vuln
title: CVE-2023-46517
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46517
ingested_at: 2026-03-12 19:11:42
summary:
  ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.


feed_type: stig_vuln
title: CVE-2023-46595
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46595
ingested_at: 2026-03-12 19:11:42
summary:
  Net-NTLM leak in Fireflow A32.20 and A32.50 allows an attacker&Acirc;&nbsp;to obtain victim&acirc;&euro;&trade;s domain credentials and Net-NTLM hash which can lead&Acirc;&nbsp;to relay domain attacks.


feed_type: stig_vuln
title: CVE-2023-46695
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46695
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.


feed_type: stig_vuln
title: CVE-2023-46724
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46724
ingested_at: 2026-03-12 19:11:42
summary:
  Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.


feed_type: stig_vuln
title: CVE-2023-46725
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46725
ingested_at: 2026-03-12 19:11:42
summary:
  FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery. In the Network module, a manufacturer account can use the `/api/updateProducts.json` endpoint to make the server send a request to an arbitrary host. This means that the server can be used as a proxy into the internal network where the server is. Furthermore, the checks on a valid image are not adequate, leading to a time of check time of use issue. For example, by using a custom server that returns 200 on HEAD requests, then return a valid image on first GET request and then a 302 redirect to final target on second GET request, the server will copy whatever file is at the redirect destination, making this a full SSRF. Version 3.6.1 fixes this vulnerability.


feed_type: stig_vuln
title: CVE-2023-46728
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46728
ingested_at: 2026-03-12 19:11:42
summary:
  Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.


feed_type: stig_vuln
title: CVE-2023-46731
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46731
ingested_at: 2026-03-12 19:11:42
summary:
  XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section URL parameter that is used in the code for displaying administration sections. This allows any user with read access to the document `XWiki.AdminSheet` (by default, everyone including unauthenticated users) to execute code including Groovy code. This impacts the confidentiality, integrity and availability of the whole XWiki instance. This vulnerability has been patched in XWiki 14.10.14, 15.6 RC1 and 15.5.1. Users are advised to upgrade. Users unablr to upgrade may apply the fix in commit `fec8e0e53f9` manually. Alternatively, to protect against attacks from unauthenticated users, view right for guests can be removed from this document (it is only needed for space and wiki admins).


feed_type: stig_vuln
title: CVE-2023-46732
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46732
ingested_at: 2026-03-12 19:11:42
summary:
  XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to reflected cross-site scripting (RXSS) via the `rev` parameter that is used in the content of the content menu without escaping. If an attacker can convince a user to visit a link with a crafted parameter, this allows the attacker to execute arbitrary actions in the name of the user, including remote code (Groovy) execution in the case of a user with programming right, compromising the confidentiality, integrity and availability of the whole XWiki installation. This has been patched in XWiki 15.6 RC1, 15.5.1 and 14.10.14. The patch in commit `04e325d57` can be manually applied without upgrading (or restarting) the instance. Users are advised to upgrade or to manually apply the patch. There are no known workarounds for this vulnerability.


feed_type: stig_vuln
title: CVE-2023-46775
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46775
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) vulnerability in Djo Original texts Yandex WebMaster plugin &lt;=&Acirc;&nbsp;1.18 versions.


feed_type: stig_vuln
title: CVE-2023-46776
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46776
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) vulnerability in Serena Villa Auto Excerpt everywhere plugin &lt;=&Acirc;&nbsp;1.5 versions.


feed_type: stig_vuln
title: CVE-2023-46777
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46777
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) vulnerability in Custom Login Page | Temporary Users | Rebrand Login | Login Captcha plugin &lt;=&Acirc;&nbsp;1.1.3 versions.


feed_type: stig_vuln
title: CVE-2023-46778
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46778
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) vulnerability in TheFreeWindows Auto Limit Posts Reloaded plugin &lt;=&Acirc;&nbsp;2.5 versions.


feed_type: stig_vuln
title: CVE-2023-46779
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46779
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) vulnerability in EasyRecipe plugin &lt;=&Acirc;&nbsp;3.5.3251 versions.


feed_type: stig_vuln
title: CVE-2023-46781
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46781
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin &lt;=&Acirc;&nbsp;1.5 versions.


feed_type: stig_vuln
title: CVE-2023-46782
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46782
ingested_at: 2026-03-12 19:11:42
summary:
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Chris Yee MomentoPress for Momento360 plugin &lt;=&Acirc;&nbsp;1.0.1 versions.


feed_type: stig_vuln
title: CVE-2023-46783
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46783
ingested_at: 2026-03-12 19:11:42
summary:
  Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bright Plugins Pre-Orders for WooCommerce plugin &lt;=&Acirc;&nbsp;1.2.13 versions.


feed_type: stig_vuln
title: CVE-2023-46802
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46802
ingested_at: 2026-03-12 19:11:42
summary:
  e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.


feed_type: stig_vuln
title: CVE-2023-46817
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46817
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in phpFox before 4.8.14. The url request parameter passed to the /core/redirect route is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by remote, unauthenticated attackers to inject arbitrary PHP objects into the application scope, allowing them to perform a variety of attacks, such as executing arbitrary PHP code.


feed_type: stig_vuln
title: CVE-2023-46821
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46821
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Security Headers allows auth. (admin+) SQL Injection.This issue affects GD Security Headers: from n/a through 1.7.


feed_type: stig_vuln
title: CVE-2023-46822
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46822
ingested_at: 2026-03-12 19:11:42
summary:
  Unauth. Reflected Cross-Site Scripting') vulnerability in Visser Labs Store Exporter for WooCommerce &acirc;&euro;&ldquo; Export Products, Export Orders, Export Subscriptions, and More plugin &lt;=&Acirc;&nbsp;2.7.2 versions.


feed_type: stig_vuln
title: CVE-2023-46823
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46823
ingested_at: 2026-03-12 19:11:42
summary:
  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum ImageLinks Interactive Image Builder for WordPress allows SQL Injection.This issue affects ImageLinks Interactive Image Builder for WordPress: from n/a through 1.5.4.


feed_type: stig_vuln
title: CVE-2023-46824
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46824
ingested_at: 2026-03-12 19:11:42
summary:
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin &lt;=&Acirc;&nbsp;1.7.14 versions.


feed_type: stig_vuln
title: CVE-2023-46846
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46846
ingested_at: 2026-03-12 19:11:42
summary:
  SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.


feed_type: stig_vuln
title: CVE-2023-46847
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46847
ingested_at: 2026-03-12 19:11:42
summary:
  Squid is vulnerable to a Denial of Service,  where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.


feed_type: stig_vuln
title: CVE-2023-46848
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46848
ingested_at: 2026-03-12 19:11:42
summary:
  Squid is vulnerable to Denial of Service,  where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.


feed_type: stig_vuln
title: CVE-2023-46911
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46911
ingested_at: 2026-03-12 19:11:42
summary:
  There is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of Jspxcms v10.2.0 backend.


feed_type: stig_vuln
title: CVE-2023-46927
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46927
ingested_at: 2026-03-12 19:11:42
summary:
  GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box.


feed_type: stig_vuln
title: CVE-2023-46928
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46928
ingested_at: 2026-03-12 19:11:42
summary:
  GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42.


feed_type: stig_vuln
title: CVE-2023-46930
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46930
ingested_at: 2026-03-12 19:11:42
summary:
  GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14.


feed_type: stig_vuln
title: CVE-2023-46931
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46931
ingested_at: 2026-03-12 19:11:42
summary:
  GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box.


feed_type: stig_vuln
title: CVE-2023-46954
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46954
ingested_at: 2026-03-12 19:11:42
summary:
  SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter.


feed_type: stig_vuln
title: CVE-2023-46958
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46958
ingested_at: 2026-03-12 19:11:42
summary:
  An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.


feed_type: stig_vuln
title: CVE-2023-46963
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46963
ingested_at: 2026-03-12 19:11:42
summary:
  An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function.


feed_type: stig_vuln
title: CVE-2023-46964
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46964
ingested_at: 2026-03-12 19:11:42
summary:
  Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitrary code via the use front-end filtering instead of back-end filtering.


feed_type: stig_vuln
title: CVE-2023-46980
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46980
ingested_at: 2026-03-12 19:11:42
summary:
  An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter.


feed_type: stig_vuln
title: CVE-2023-46981
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-46981
ingested_at: 2026-03-12 19:11:42
summary:
  SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /common/log/list.


feed_type: stig_vuln
title: CVE-2023-4699
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4699
ingested_at: 2026-03-12 19:11:42
summary:
  Insufficient Verification of Data Authenticity vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules and MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to reset the memory of the products to factory default state and cause denial-of-service (DoS) condition on the products by sending specific packets.


feed_type: stig_vuln
title: CVE-2023-4700
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4700
ingested_at: 2026-03-12 19:11:42
summary:
  An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals.


feed_type: stig_vuln
title: CVE-2023-47004
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47004
ingested_at: 2026-03-12 19:11:42
summary:
  Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code via the code logic after valid authentication.


feed_type: stig_vuln
title: CVE-2023-47177
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47177
ingested_at: 2026-03-12 19:11:42
summary:
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yakir Sitbon, Ariel Klikstein Linker plugin &lt;=&Acirc;&nbsp;1.2.1 versions.


feed_type: stig_vuln
title: CVE-2023-47182
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47182
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) leading to a Stored Cross-Site Scripting (XSS) vulnerability in Nazmul Hossain Nihal Login Screen Manager plugin &lt;=&Acirc;&nbsp;3.5.2 versions.


feed_type: stig_vuln
title: CVE-2023-47184
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47184
ingested_at: 2026-03-12 19:11:42
summary:
  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Proper Fraction LLC. Admin Bar &amp; Dashboard Access Control plugin &lt;=&Acirc;&nbsp;1.2.8 versions.


feed_type: stig_vuln
title: CVE-2023-47185
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47185
ingested_at: 2026-03-12 19:11:42
summary:
  Unauth. Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team Comments &acirc;&euro;&rdquo; wpDiscuz plugin &lt;=&Acirc;&nbsp;7.6.11 versions.


feed_type: stig_vuln
title: CVE-2023-47186
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47186
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin &lt;=&Acirc;&nbsp;1.5.11 versions.


feed_type: stig_vuln
title: CVE-2023-47204
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47204
ingested_at: 2026-03-12 19:11:42
summary:
  Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.


feed_type: stig_vuln
title: CVE-2023-47233
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47233
ingested_at: 2026-03-12 19:11:42
summary:
  The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this &quot;could be exploited in a real world scenario.&quot; This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.


feed_type: stig_vuln
title: CVE-2023-47234
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47234
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).


feed_type: stig_vuln
title: CVE-2023-47235
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47235
ingested_at: 2026-03-12 19:11:42
summary:
  An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.


feed_type: stig_vuln
title: CVE-2023-47249
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47249
ingested_at: 2026-03-12 19:11:42
summary:
  In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read.


feed_type: stig_vuln
title: CVE-2023-47253
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47253
ingested_at: 2026-03-12 19:11:42
summary:
  Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.


feed_type: stig_vuln
title: CVE-2023-47271
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47271
ingested_at: 2026-03-12 19:11:42
summary:
  PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.


feed_type: stig_vuln
title: CVE-2023-47272
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-47272
ingested_at: 2026-03-12 19:11:42
summary:
  Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or download).


feed_type: stig_vuln
title: CVE-2023-4767
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4767
ingested_at: 2026-03-12 19:11:42
summary:
  A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.csv.


feed_type: stig_vuln
title: CVE-2023-4768
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4768
ingested_at: 2026-03-12 19:11:42
summary:
  A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.pdf.


feed_type: stig_vuln
title: CVE-2023-4769
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4769
ingested_at: 2026-03-12 19:11:42
summary:
  A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This vulnerability could allow an authenticated attacker to launch targeted attacks, such as a cross-port attack, service enumeration and other attacks via HTTP requests.


feed_type: stig_vuln
title: CVE-2023-4810
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4810
ingested_at: 2026-03-12 19:11:42
summary:
  The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


feed_type: stig_vuln
title: CVE-2023-4858
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4858
ingested_at: 2026-03-12 19:11:42
summary:
  The Simple Table Manager WordPress plugin through 1.5.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).


feed_type: stig_vuln
title: CVE-2023-4910
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4910
ingested_at: 2026-03-12 19:11:42
summary:
  A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.


feed_type: stig_vuln
title: CVE-2023-4930
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4930
ingested_at: 2026-03-12 19:11:42
summary:
  The Front End PM WordPress plugin before 11.4.3 does not block listing the contents of the directories where it stores attachments to private messages, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled.


feed_type: stig_vuln
title: CVE-2023-4996
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-4996
ingested_at: 2026-03-12 19:11:42
summary:
  Netskope was made aware of a security vulnerability in its NSClient product for version 100 &amp; prior where a malicious non-admin user can disable the Netskope client by using a specially-crafted package. The root cause of the problem was a user control code when called by a Windows ServiceController did not validate the permissions associated with the user before executing the user control code. This user control code had permissions to terminate the NSClient service.&Acirc;&nbsp;


feed_type: stig_vuln
title: CVE-2023-5035
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5035
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.


feed_type: stig_vuln
title: CVE-2023-5082
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5082
ingested_at: 2026-03-12 19:11:42
summary:
  The History Log by click5 WordPress plugin before 1.0.13 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when using the Smash Balloon Social Photo Feed plugin alongside it.


feed_type: stig_vuln
title: CVE-2023-5088
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5088
ingested_at: 2026-03-12 19:11:42
summary:
  A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.


feed_type: stig_vuln
title: CVE-2023-5090
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5090
ingested_at: 2026-03-12 19:11:42
summary:
  A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.


feed_type: stig_vuln
title: CVE-2023-5178
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5178
ingested_at: 2026-03-12 19:11:42
summary:
  A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation in case that the attacker already has local privileges.


feed_type: stig_vuln
title: CVE-2023-5181
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5181
ingested_at: 2026-03-12 19:11:42
summary:
  The WP Discord Invite WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


feed_type: stig_vuln
title: CVE-2023-5228
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5228
ingested_at: 2026-03-12 19:11:42
summary:
  The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).


feed_type: stig_vuln
title: CVE-2023-5352
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5352
ingested_at: 2026-03-12 19:11:42
summary:
  The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do not have permission.


feed_type: stig_vuln
title: CVE-2023-5354
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5354
ingested_at: 2026-03-12 19:11:42
summary:
  The Awesome Support WordPress plugin before 6.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.


feed_type: stig_vuln
title: CVE-2023-5355
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5355
ingested_at: 2026-03-12 19:11:42
summary:
  The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server.


feed_type: stig_vuln
title: CVE-2023-5358
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5358
ingested_at: 2026-03-12 19:11:42
summary:
  Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to retrieve logs from vaults or entries they are not allowed to access via the report request url query parameters.


feed_type: stig_vuln
title: CVE-2023-5408
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5408
ingested_at: 2026-03-12 19:11:42
summary:
  A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift. A remote attacker who modifies the node role label could steer workloads from the control plane and etcd nodes onto different worker nodes and gain broader access to the cluster.


feed_type: stig_vuln
title: CVE-2023-5454
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5454
ingested_at: 2026-03-12 19:11:42
summary:
  The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call, allowing unauthenticated users to delete arbitrary posts.


feed_type: stig_vuln
title: CVE-2023-5480
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5480
ingested_at: 2026-03-12 19:11:42
summary:
  Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. (Chromium security severity: High)


feed_type: stig_vuln
title: CVE-2023-5482
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5482
ingested_at: 2026-03-12 19:11:42
summary:
  Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)


feed_type: stig_vuln
title: CVE-2023-5530
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5530
ingested_at: 2026-03-12 19:11:42
summary:
  The Ninja Forms Contact Form WordPress plugin before 3.6.34 does not sanitize and escape its label fields, which could allow high privilege users such as admin to perform Stored XSS attacks. Only users with the unfiltered_html capability can perform this, and such users are already allowed to use JS in posts/comments etc however the vendor acknowledged and fixed the issue


feed_type: stig_vuln
title: CVE-2023-5601
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5601
ingested_at: 2026-03-12 19:11:42
summary:
  The WooCommerce Ninja Forms Product Add-ons WordPress plugin before 1.7.1 does not validate the file to be uploaded, allowing any unauthenticated users to upload arbitrary files to the server, leading to RCE.


feed_type: stig_vuln
title: CVE-2023-5605
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5605
ingested_at: 2026-03-12 19:11:42
summary:
  The URL Shortify WordPress plugin through 1.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


feed_type: stig_vuln
title: CVE-2023-5606
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5606
ingested_at: 2026-03-12 19:11:42
summary:
  The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. NOTE: This vulnerability is a re-introduction of CVE-2023-4253.


feed_type: stig_vuln
title: CVE-2023-5625
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5625
ingested_at: 2026-03-12 19:11:42
summary:
  A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.


feed_type: stig_vuln
title: CVE-2023-5627
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5627
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorized access to the web service.


feed_type: stig_vuln
title: CVE-2023-5678
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5678
ingested_at: 2026-03-12 19:11:42
summary:
  Issue summary: Generating excessively long X9.42 DH keys or checking
  excessively long X9.42 DH keys or parameters may be very slow.

  Impact summary: Applications that use the functions DH_generate_key() to
  generate an X9.42 DH key may experience long delays.  Likewise, applications
  that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()
  to check an X9.42 DH key or X9.42 DH parameters may experience long delays.
  Where the key or parameters that are being checked have been obtained from
  an untrusted source this may lead to a Denial of Service.

  While DH_check() performs all the necessary checks (as of CVE-2023-3817),
  DH_check_pub_key() doesn't make any of these checks, and is therefore
  vulnerable for excessively large P and Q parameters.

  Likewise, while DH_generate_key() performs a check for an excessively large
  P, it doesn't check for an excessively large Q.

  An application that calls DH_generate_key() or DH_check_pub_key() and
  supplies a key or parameters obtained from an untrusted source could be
  vulnerable to a Denial of Service attack.

  DH_generate_key() and DH_check_pub_key() are also called by a number of
  other OpenSSL functions.  An application calling any of those other
  functions may similarly be affected.  The other functions affected by this
  are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().

  Also vulnerable are the OpenSSL pkey command line application when using the
  &quot;-pubcheck&quot; option, as well as the OpenSSL genpkey command line application.

  The OpenSSL SSL/TLS implementation is not affected by this issue.

  The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.


feed_type: stig_vuln
title: CVE-2023-5707
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5707
ingested_at: 2026-03-12 19:11:42
summary:
  The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.


feed_type: stig_vuln
title: CVE-2023-5719
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5719
ingested_at: 2026-03-12 19:11:42
summary:
  The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent (%) character, invalid values will be included, potentially truncating the string if a NUL is encountered. If the simplified password is not detected by the administrator, the device might be left in a vulnerable state as a result of more-easily compromised credentials. Note that passwords entered via the Crimson system web server do not suffer from this vulnerability.


feed_type: stig_vuln
title: CVE-2023-5763
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5763
ingested_at: 2026-03-12 19:11:42
summary:
  In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or &lt; 7u201, or &lt; 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.


feed_type: stig_vuln
title: CVE-2023-5765
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5765
ingested_at: 2026-03-12 19:11:42
summary:
  Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass permissions via data source switching.


feed_type: stig_vuln
title: CVE-2023-5766
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5766
ingested_at: 2026-03-12 19:11:42
summary:
  A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute code from another windows user session on the same host via a specially crafted TCP packet.


feed_type: stig_vuln
title: CVE-2023-5771
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5771
ingested_at: 2026-03-12 19:11:42
summary:
  Proofpoint Enterprise Protection contains a stored XSS vulnerability in the AdminUI. An unauthenticated attacker can send a specially crafted email with HTML in the subject which triggers XSS when viewing quarantined messages.&Acirc;&nbsp;&Acirc;&nbsp;This issue affects Proofpoint Enterprise Protection: from 8.20.0 before patch 4796, from 8.18.6 before patch 4795 and all other prior versions.


feed_type: stig_vuln
title: CVE-2023-5777
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5777
ingested_at: 2026-03-12 19:11:42
summary:
  Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server.


feed_type: stig_vuln
title: CVE-2023-5823
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5823
ingested_at: 2026-03-12 19:11:42
summary:
  Cross-Site Request Forgery (CSRF) vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin &lt;=&Acirc;&nbsp;2.2.11 versions.


feed_type: stig_vuln
title: CVE-2023-5824
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5824
ingested_at: 2026-03-12 19:11:42
summary:
  Squid is vulnerable to Denial of Service attack against HTTP and HTTPS clients due to an Improper Handling of Structural Elements bug.


feed_type: stig_vuln
title: CVE-2023-5825
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5825
ingested_at: 2026-03-12 19:11:42
summary:
  An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to exhaust all available memory through an infinite loop and cause Denial of Service.


feed_type: stig_vuln
title: CVE-2023-5831
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5831
ingested_at: 2026-03-12 19:11:42
summary:
  An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors.


feed_type: stig_vuln
title: CVE-2023-5846
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5846
ingested_at: 2026-03-12 19:11:42
summary:
  Franklin Fueling System TS-550 versions prior to 1.9.23.8960 are vulnerable to attackers decoding admin credentials, resulting in unauthenticated access to the device.


feed_type: stig_vuln
title: CVE-2023-5847
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5847
ingested_at: 2026-03-12 19:11:42
summary:
  Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.


feed_type: stig_vuln
title: CVE-2023-5849
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5849
ingested_at: 2026-03-12 19:11:42
summary:
  Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


feed_type: stig_vuln
title: CVE-2023-5850
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5850
ingested_at: 2026-03-12 19:11:42
summary:
  Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium)


feed_type: stig_vuln
title: CVE-2023-5851
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5851
ingested_at: 2026-03-12 19:11:42
summary:
  Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)


feed_type: stig_vuln
title: CVE-2023-5852
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5852
ingested_at: 2026-03-12 19:11:42
summary:
  Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)


feed_type: stig_vuln
title: CVE-2023-5853
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5853
ingested_at: 2026-03-12 19:11:42
summary:
  Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)


feed_type: stig_vuln
title: CVE-2023-5854
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5854
ingested_at: 2026-03-12 19:11:42
summary:
  Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)


feed_type: stig_vuln
title: CVE-2023-5855
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5855
ingested_at: 2026-03-12 19:11:42
summary:
  Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)


feed_type: stig_vuln
title: CVE-2023-5856
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5856
ingested_at: 2026-03-12 19:11:42
summary:
  Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)


feed_type: stig_vuln
title: CVE-2023-5857
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5857
ingested_at: 2026-03-12 19:11:42
summary:
  Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium)


feed_type: stig_vuln
title: CVE-2023-5858
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5858
ingested_at: 2026-03-12 19:11:42
summary:
  Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low)


feed_type: stig_vuln
title: CVE-2023-5859
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5859
ingested_at: 2026-03-12 19:11:42
summary:
  Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local HTML page. (Chromium security severity: Low)


feed_type: stig_vuln
title: CVE-2023-5860
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5860
ingested_at: 2026-03-12 19:11:42
summary:
  The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.


feed_type: stig_vuln
title: CVE-2023-5875
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5875
ingested_at: 2026-03-12 19:11:42
summary:
  Mattermost Desktop fails to correctly&Acirc;&nbsp;handle permissions or prompt the user for consent on certain sensitive ones allowing media exploitation from a malicious mattermost server


feed_type: stig_vuln
title: CVE-2023-5876
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5876
ingested_at: 2026-03-12 19:11:42
summary:
  Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enrolled server to mount a Denial Of Service.


feed_type: stig_vuln
title: CVE-2023-5910
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5910
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing of the file install.php of the component Web Config. The manipulation of the argument Site Title with the input &lt;script&gt;alert(1)&lt;/script&gt; leads to cross site scripting. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-244229 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.


feed_type: stig_vuln
title: CVE-2023-5916
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5916
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-244305 was assigned to this vulnerability.


feed_type: stig_vuln
title: CVE-2023-5917
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5917
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the function main of the file phpBB/includes/acp/acp_icons.php of the component Smiley Pack Handler. The manipulation of the argument pak leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 3.3.11 is able to address this issue. The patch is named ccf6e6c255d38692d72fcb613b113e6eaa240aac. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-244307.


feed_type: stig_vuln
title: CVE-2023-5918
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5918
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-244308.


feed_type: stig_vuln
title: CVE-2023-5919
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5919
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /dashboard/createblog of the component Create Blog Page. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-244310 is the identifier assigned to this vulnerability.


feed_type: stig_vuln
title: CVE-2023-5920
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5920
ingested_at: 2026-03-12 19:11:42
summary:
  Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input.


feed_type: stig_vuln
title: CVE-2023-5923
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5923
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability classified as critical has been found in Campcodes Simple Student Information System 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-244323.


feed_type: stig_vuln
title: CVE-2023-5924
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5924
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability affects unknown code of the file /admin/courses/view_course.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-244324.


feed_type: stig_vuln
title: CVE-2023-5925
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5925
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-244325 was assigned to this vulnerability.


feed_type: stig_vuln
title: CVE-2023-5926
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5926
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affected is an unknown function of the file /admin/students/update_status.php. The manipulation of the argument student_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-244326 is the identifier assigned to this vulnerability.


feed_type: stig_vuln
title: CVE-2023-5927
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5927
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/courses/manage_course.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-244327.


feed_type: stig_vuln
title: CVE-2023-5928
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5928
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/departments/manage_department.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-244328.


feed_type: stig_vuln
title: CVE-2023-5929
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5929
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/students/manage_academic.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-244329 was assigned to this vulnerability.


feed_type: stig_vuln
title: CVE-2023-5930
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5930
ingested_at: 2026-03-12 19:11:42
summary:
  A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/students/manage_academic.php. The manipulation of the argument student_id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-244330 is the identifier assigned to this vulnerability.


feed_type: stig_vuln
title: CVE-2023-5945
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5945
ingested_at: 2026-03-12 19:11:42
summary:
  The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the responsive_video_gallery_with_lightbox_video_management_func() function. This makes it possible for unauthenticated attackers to delete videos hosted from the video slider via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


feed_type: stig_vuln
title: CVE-2023-5946
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5946
ingested_at: 2026-03-12 19:11:42
summary:
  The Digirisk plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'current_group_id' parameter in version 6.0.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.


feed_type: stig_vuln
title: CVE-2023-5950
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5950
ingested_at: 2026-03-12 19:11:42
summary:
  Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerability allows attackers to inject JS into the error path, potentially leading to unauthorized execution of scripts within a user's web browser.&Acirc;&nbsp;This vulnerability is fixed in&Acirc;&nbsp;version 0.7.0-04 and a&Acirc;&nbsp;patch is available to download. Patches are also available for version 0.6.9 (0.6.9-1).


feed_type: stig_vuln
title: CVE-2023-5963
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5963
ingested_at: 2026-03-12 19:11:42
summary:
  An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to 16.4.2 and 16.5 prior to 16.5.1 that could allow a denial of service in the Advanced Search function by chaining too many syntax operators.


feed_type: stig_vuln
title: CVE-2023-5964
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5964
ingested_at: 2026-03-12 19:11:42
summary:
  The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions.

  To remediate this issue DELETE the instruction&Acirc;&nbsp;&acirc;&euro;&oelig;Show dialogue with caption %Caption% and message %Message%&acirc;&euro;&#65533; from the list of instructions in the Settings UI, and replace it with the new instruction&Acirc;&nbsp;1E-Exchange-ShowNotification instruction available in the updated End-User Interaction product pack. The new instruction should show as&Acirc;&nbsp;&acirc;&euro;&oelig;Show %Type% type notification with header %Header% and message %Message%&acirc;&euro;&#65533; with a version of 7.1 or above.


feed_type: stig_vuln
title: CVE-2023-5967
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5967
ingested_at: 2026-03-12 19:11:42
summary:
  Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin


feed_type: stig_vuln
title: CVE-2023-5968
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5968
ingested_at: 2026-03-12 19:11:42
summary:
  Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body.&Acirc;&nbsp;


feed_type: stig_vuln
title: CVE-2023-5969
source_url: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-5969
ingested_at: 2026-03-12 19:11:42
summary:
  Mattermost fails to properly sanitize the request to&Acirc;&nbsp;/api/v4/redirect_location allowing an&Acirc;&nbsp;attacker,&Acirc;&nbsp;sending a specially crafted request to /api/v4/redirect_location,&Acirc;&nbsp;to fill up the memory due to caching large items.


