Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31461 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-28T14:18:48.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://steelseries.com/gg - https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation
CVE ID: CVE-2023-31462 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-28T17:45:05.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://steelseries.com/gg - https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation
CVE ID: CVE-2023-31465 State: PUBLISHED Published: 2023-07-26T00:00:00 Last Updated: 2024-10-23T18:53:35.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named arg[x], with x an integer starting from 1; it is possible to modify arg[2] to insert Bash code that will be executed directly by the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fsmlabs.com/fsmlabs-cybersecurity/ - https://github.
E Program Container: - CISA ADP Vulnrichment: References: - https://fsmlabs.com/fsmlabs-cybersecurity/ - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-2023-31465.md
CVE ID: CVE-2023-31466 State: PUBLISHED Published: 2023-07-26T00:00:00 Last Updated: 2024-08-02T14:53:30.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On the "Configuration -> Compliance -> Add a new compliance report" and "Configuration -> Timekeeper Configuration -> Add a new source there" screens, there are entry points to inject JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://fsmlabs.com/fsmlabs-cybersecurity/ - https://github.com/CapgeminiCisRedTeam/Disclosure/blob/main/CVE%20PoC/CVE-2023-31466.md
CVE ID: CVE-2023-31468 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-08-02T14:53:31.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\INOSOFT GmbH" folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as SYSTEM. 2024-1 is a fixed version. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://packetstormsecurity.com/files/174268/Inosoft-VisiWin-7-2022-2.1-Insecure-Permissions-Privilege-Escalation.html - https://www.exploit-db.com/exploits/51682 - htt
soft-VisiWin-7-2022-2.1-Insecure-Permissions-Privilege-Escalation.html - https://www.exploit-db.com/exploits/51682 - https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-03 - https://www.inosoft.com/en/news-details/news/neue-visiwin-version-2024-1 - https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - https://cwe.mitre.org/data/definitions/276.html
CVE ID: CVE-2023-31469 State: PUBLISHED Published: 2023-06-23T07:07:42.875Z Last Updated: 2024-10-09T15:11:39.555Z Vendors: Apache Software Foundation Products: Apache StreamPipes Problem Types: CWE-269 Description: A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a non-admin user with valid login credentials to elevate privileges beyond the initially assigned roles. The issue is resolved by upgrading to StreamPipes 0.92.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/c4y8kf9bzpf36v4bottfmd8tc9cxo19m
CVE ID: CVE-2023-31470 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T15:58:25.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pymumu/smartdns/issues/1378 - https://github.com/pymumu/smartdns/commit/56d0332bf91104cfc877635f6c82e9348587df04
CVE ID: CVE-2023-31471 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T19:26:40.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install software from the filesystem, the package list, or a URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/Abuse
SA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/Abuse_of_Functionality_leads_to_RCE.md
CVE ID: CVE-2023-31472 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:28:12.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Creation.md
CVE ID: CVE-2023-31473 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T17:18:23.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. This is caused by a command injection vulnerability with a filter applied. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to read an arbitrary file name while using root privileges. The -f option can be used with a configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
The -f option can be used with a configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary_File_Read.md
CVE ID: CVE-2023-31474 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:26:33.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/Directory_Listing.md
CVE ID: CVE-2023-31475 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T17:17:11.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/Buffer_Overflow.md - https://justinapplegate.me/2023/glinet-CVE-2023-31475/
CVE ID: CVE-2023-31476 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:22:03.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywhere on the filesystem, as long as the filename and path is no more than 6 characters (the working directory is /www). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/GL-MV1000_Arbitrary_File_Creation.md
CVE ID: CVE-2023-31477 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T17:15:44.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/Path_Traversal.md
CVE ID: CVE-2023-31478 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:16:30.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SSID and key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com - https://github.com/gl-inet/CVE-issues/blob/main/3.215/SSID_Key_Disclosure.md
CVE ID: CVE-2023-31483 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T19:57:08.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create or write to files outside the current directory via a crafted tar archive. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CauldronDevelopmentLLC/cbang/issues/115 - https://github.com/CauldronDevelopmentLLC/cbang/compare/bastet-v8.1.16...bastet-v8.1.17
CVE ID: CVE-2023-31484 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-11-03T21:48:25.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/ - https://www.openwall.com/lists/oss-security/2023/04/18/14 - https://github.com/andk/cpanpm/pull/175 - https://metacpan.org/dist/CPAN/changes - http://www.openwall.com/lists/oss-security/2023/04/29/1 - http://www.openwall.com/lists/oss-security/2023/05/03
hanges - http://www.openwall.com/lists/oss-security/2023/04/29/1 - http://www.openwall.com/lists/oss-security/2023/05/03/3 - http://www.openwall.com/lists/oss-security/2023/05/03/5 - http://www.openwall.com/lists/oss-security/2023/05/07/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BM6UW55CNFUTNGD5ZRKGUKKKFDJGMFHL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LEGCEOKFJVBJ2QQ6S2H4NAEWTUERC7SB/ - https://security.netapp.com/advisory/ntap-20240621-0007/
CVE ID: CVE-2023-31485 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T20:03:32.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/ - https://www.openwall.com/lists/oss-security/2023/04/18/14 - https://github.com/bluefeet/GitLab-API-v4/pull/57 - https://github.com/chansen/p5-http-tiny/pull/151 - http://www.openwall.com/lists/oss-security/2023/0
ab-API-v4/pull/57 - https://github.com/chansen/p5-http-tiny/pull/151 - http://www.openwall.com/lists/oss-security/2023/04/29/1 - http://www.openwall.com/lists/oss-security/2023/05/03/3 - http://www.openwall.com/lists/oss-security/2023/05/03/5 - http://www.openwall.com/lists/oss-security/2023/05/07/2
CVE ID: CVE-2023-31486 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T19:26:26.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/ - https://www.openwall.com/lists/oss-security/2023/04/18/14 - https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/ - https://h
04/18/14 - https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/ - https://hackeriet.github.io/cpan-http-tiny-overview/ - http://www.openwall.com/lists/oss-security/2023/04/29/1 - http://www.openwall.com/lists/oss-security/2023/05/03/3 - http://www.openwall.com/lists/oss-security/2023/05/03/5 - https://www.openwall.com/lists/oss-security/2023/05/03/4 - http://www.openwall.com/lists/oss-security/2023/05/07/2 - https://github.com/chansen/p5-http-tiny/pull/153
CVE ID: CVE-2023-31488 State: PUBLISHED Published: 2024-01-10T00:00:00 Last Updated: 2024-09-03T20:18:30.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gateway, and various non-Cisco products, allow attackers to trigger a segmentation fault and execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bst.cisco.com/quickview/bug/CSCwe11003
CVE ID: CVE-2023-31489 State: PUBLISHED Published: 2023-05-09T00:00:00 Last Updated: 2024-08-02T14:53:31.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FRRouting/frr/issues/13098 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/ - https://lists.fed
g/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
CVE ID: CVE-2023-31490 State: PUBLISHED Published: 2023-05-09T00:00:00 Last Updated: 2024-08-02T14:53:30.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FRRouting/frr/issues/13099 - https://www.debian.org/security/2023/dsa-5495 - https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/arc
ckage-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
CVE ID: CVE-2023-31492 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-11-26T21:35:29.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md - https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html - http://packetstormsecurity.com/files/177091/ManageEngine-ADM
.com/products/ad-manager/admanager-kb/cve-2023-31492.html - http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html
CVE ID: CVE-2023-31493 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-10-16T18:56:57.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://zoneminder.com - https://medium.com/%40dk50u1/rce-remote-code-execution-in-zoneminder-up-to-1-36-33-0686f5bcd370
CVE ID: CVE-2023-31497 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T17:13:55.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security (EPS) all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/0xInfection/EPScalate
CVE ID: CVE-2023-31498 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T17:12:34.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensitive information via the session token parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/captain-noob - https://twitter.com/captain__noob - https://gist.github.com/captain-noob/aff11542477ddd0a92ad8b94ec75f832
CVE ID: CVE-2023-31502 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T17:11:16.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the component /models/management_model.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ahmedalroky/Disclosures/blob/main/apesystems/Insufficient_Verification_of_Data_Authenticity.MD
CVE ID: CVE-2023-31505 State: PUBLISHED Published: 2024-01-31T00:00:00.000Z Last Updated: 2025-06-20T19:55:37.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrary code and obtain sensitive information via a crafted .phtml file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://m3n0sd0n4ld.github.io/patoHackventuras/cve-2023-31505
CVE ID: CVE-2023-31506 State: PUBLISHED Published: 2024-02-09T00:00:00.000Z Last Updated: 2025-06-16T18:28:05.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to execute arbitrary web scripts or HTML via the onmouseover attribute of an ISINDEX element. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://m3n0sd0n4ld.github.io/patoHackventuras/cve-2023-31506
CVE ID: CVE-2023-31508 State: REJECTED Published: N/A Last Updated: 2023-06-06T00:00:00 Description: No description available.
CVE ID: CVE-2023-31517 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2024-08-02T14:53:31.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via opening a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://teeworlds.com - https://gist.github.com/manba-bryant/9ca95d69c65f4d2c55946932c946fb9b - https://www.redpacketsecurity.com/teeworlds-denial-of-service-cve-2023-31517/
CVE ID: CVE-2023-31518 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T14:08:50.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via a crafted map file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/ - https://github.com/teeworlds/teeworlds/issues/2970 - https://gist.github.com/manba-bryant/9ca95d69c65f4d2c55946932c946fb9b
CVE ID: CVE-2023-31519 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T17:15:53.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the email parameter at login_core.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yangliukk/Injection-Vulnerability-In-Pharmacy-Management-System-1.0/blob/main/README.md
CVE ID: CVE-2023-31528 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:44:08.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the staticroute_list parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leetsun/IoT/tree/main/Motorola-CX2L/CI2
CVE ID: CVE-2023-31529 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:43:21.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leetsun/IoT/tree/main/Motorola-CX2L/CI1