Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-29544 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T19:13:49.368Z Vendors: Mozilla Products: Firefox for Android, Firefox, Focus for Android Problem Types: Memory Corruption in garbage collector Description: If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-13/ - https://bugzilla.mozilla.org/
ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1818781
CVE ID: CVE-2023-29545 State: PUBLISHED Published: 2023-06-19T10:07:39.855Z Last Updated: 2024-12-11T15:54:04.096Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Windows Save As dialog resolved environment variables Description: Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable names would have resolved those in the context of the current user. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. Additional Analyst Notes: - CVE Program Contain
y affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1823077 - https://www.mozilla.org/security/advisories/mfsa2023-13/ - https://www.mozilla.org/security/advisories/mfsa2023-14/ - https://www.mozilla.org/security/advisories/mfsa2023-15/
CVE ID: CVE-2023-29546 State: PUBLISHED Published: 2023-06-19T10:13:23.600Z Last Updated: 2024-12-11T16:11:10.695Z Vendors: Mozilla Products: Firefox for Android, Focus for Android Problem Types: Screen recording in Private Browsing included address bar on Android Description: When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive information. *This bug only affects Firefox for Android. Other operating systems are unaffected.* This vulnerability affects Firefox for Android < 112 and Focus for Android < 112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
and Focus for Android < 112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1780842 - https://www.mozilla.org/security/advisories/mfsa2023-13/
CVE ID: CVE-2023-29547 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T19:15:22.880Z Vendors: Mozilla Products: Firefox for Android, Firefox, Focus for Android Problem Types: Secure document cookie could be spoofed with insecure cookie Description: When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
12, Firefox < 112, and Focus for Android < 112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1783536
CVE ID: CVE-2023-29548 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T19:16:42.014Z Vendors: Mozilla Products: Firefox, Focus for Android, Firefox ESR, Firefox for Android, Thunderbird Problem Types: Incorrect optimization result on ARM64 Description: A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-15/ - https://www.mozilla.org/security/ad
lnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-15/ - https://www.mozilla.org/security/advisories/mfsa2023-14/ - https://www.mozilla.org/security/advisories/mfsa2023-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1822754
CVE ID: CVE-2023-29549 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T19:18:10.045Z Vendors: Mozilla Products: Firefox for Android, Firefox, Focus for Android Problem Types: Javascript's bind function may have failed Description: Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1823042
CVE ID: CVE-2023-29550 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T19:20:38.410Z Vendors: Mozilla Products: Firefox, Focus for Android, Firefox ESR, Firefox for Android, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10 Description: Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. Additional Analyst Notes: - CVE P
roid < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-15/ - https://www.mozilla.org/security/advisories/mfsa2023-14/ - https://www.mozilla.org/security/advisories/mfsa2023-13/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828
CVE ID: CVE-2023-29551 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T21:33:07.415Z Vendors: Mozilla Products: Firefox for Android, Firefox, Focus for Android Problem Types: Memory safety bugs fixed in Firefox 112 Description: Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-13/ -
CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-13/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763625%2C1814314%2C1815798%2C1815890%2C1819239%2C1819465%2C1819486%2C1819492%2C1819957%2C1820514%2C1820776%2C1821838%2C1822175%2C1823547
CVE ID: CVE-2023-29552 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-10-21T23:05:48.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://datatracker.ietf.org/doc/html/rfc2608 - https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp - https://blo
.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp - https://blogs.vmware.com/security/2023/04/vmware-response-to-cve-2023-29552-reflective-denial-of-service-dos-amplification-vulnerability-in-slp.html - https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks - https://www.suse.com/support/kb/doc/?id=000021051 - https://curesec.com/blog/article/CVE-2023-29552-Service-Location-Protocol-Denial-of-Service-Amplification-Attack-212.html - https://github.com/curesec/slpload - https://security.netapp.com/advisory/ntap-20230426-0001/
CVE ID: CVE-2023-29562 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T20:10:21.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lzd521/IOT/tree/main/TP-Link%20WPA7510
CVE ID: CVE-2023-29566 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:22:43.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.npmjs.com/package/dawnsparks-node-tesseract - https://github.com/rona-dinihari/dawnsparks-node-tesseract - https://github.com/rona-dinihari/dawnsparks-node-tesseract/commit/81d1664f0b9fe521534acfae1d5b9c40127b36c1 - https://github.com/omnitaint/Vulnerab
nihari/dawnsparks-node-tesseract/commit/81d1664f0b9fe521534acfae1d5b9c40127b36c1 - https://github.com/omnitaint/Vulnerability-Reports/blob/ec3645003c7f8996459b5b24c722474adc2d599f/reports/dawnsparks-node-tesseract/report.md
CVE ID: CVE-2023-29569 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:20:41.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_ffi/readme.md - https://github.com/cesanta/mjs/issues/239
CVE ID: CVE-2023-29570 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:20:13.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_fii2/readme.md - https://github.com/cesanta/mjs/issues/240
CVE ID: CVE-2023-29571 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-08T02:35:45.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/z1r00/fuzz_vuln/blob/main/mjs/SEGV/mjs_gc/readme.md - https://github.com/cesanta/mjs/issues/241
CVE ID: CVE-2023-29573 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:29:53.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/840 - https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp4info/readme.md
CVE ID: CVE-2023-29574 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-08T02:33:17.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/841 - https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp42avc/readme.md
CVE ID: CVE-2023-29575 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-04T21:27:10.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/842 - https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp42aac/readme.md
CVE ID: CVE-2023-29576 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-10T19:32:05.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_TrunAtom::SetDataOffset(int) function in Ap4TrunAtom.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axiomatic-systems/Bento4/issues/844 - https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp4decrypt/sigv/readme.md
CVE ID: CVE-2023-29578 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:16:16.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/mp4property.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TechSmith/mp4v2/issues/74 - https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/mp4property.cpp/readme.md
CVE ID: CVE-2023-29579 State: PUBLISHED Published: 2023-04-24T00:00:00 Last Updated: 2024-08-02T14:14:39.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/214 - https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-buffer-overflow/yasm/readmd.md
CVE ID: CVE-2023-29580 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-08T02:29:07.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/expr.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/215 - https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/yasm_expr_create/readmd.md
CVE ID: CVE-2023-29581 State: PUBLISHED Published: 2023-04-12T00:00:00 Last Updated: 2024-08-02T14:14:39.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE: although a libyasm application could become unavailable if this were exploited, the vendor's position is that there is no security relevance because there is either supposed to be input validation before data reaches libyasm, or a sandbox in which the application runs. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/216 - https://
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/216 - https://github.com/z1r00/fuzz_vuln/blob/main/yasm/segv/delete_Token/readme.md - https://bugzilla.redhat.com/show_bug.cgi?id=2186333 - https://github.com/yasm/yasm/blob/master/SECURITY.md
CVE ID: CVE-2023-29582 State: PUBLISHED Published: 2023-04-24T00:00:00 Last Updated: 2024-08-02T14:14:39.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/217 - https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr1/readme.md - https://bugzilla.redhat.com/show_bug.cgi?id=2189601
1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr1/readme.md - https://bugzilla.redhat.com/show_bug.cgi?id=2189601#c3
CVE ID: CVE-2023-29583 State: PUBLISHED Published: 2023-04-24T00:00:00 Last Updated: 2024-08-02T14:14:39.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at /nasm/nasm-parse.c. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/218 - https://github.com/z1r00/fuzz_vuln/blob/main/yasm/stack-overflow/parse_expr5/readme.md
CVE ID: CVE-2023-29584 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:19:09.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/enzo1982/mp4v2/issues/30 - https://github.com/z1r00/fuzz_vuln/blob/main/mp4v2/heap-buffer-overflow/MP4GetVideoProfileLevel/readme.md
CVE ID: CVE-2023-29586 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:23:34.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code Sector TeraCopy 3.9.7 does not perform proper access validation on the source folder during a copy operation. This leads to Arbitrary File Read by allowing any user to copy any directory in the system to a directory they control. NOTE: the Supplier disputes this because only admin users can copy arbitrary folders, and because the 143984 reference is about a different concern (unrelated to directory copying) that was fixed in 3.5b. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
copying) that was fixed in 3.5b. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/143984/TeraCopyService-3.1-Unquoted-Service-Path-Privilege-Escalation.html - https://securityandstuff.com/posts/teracopy_arbitrary_read/ - https://support.codesector.com/en/articles/10088479-cve-2023-29586 - https://www.youtube.com/watch?v=mrOHtWWFhJI
CVE ID: CVE-2023-29596 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:48:21.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability found in ByronKnoll Cmix v.19 allows an attacker to execute arbitrary code and cause a denial of service via the paq8 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/byronknoll/cmix/issues/54
CVE ID: CVE-2023-29597 State: PUBLISHED Published: 2023-04-13T00:00:00 Last Updated: 2024-08-02T14:14:39.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jspring996/PHPcodecms/issues/2
CVE ID: CVE-2023-29598 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T15:44:40.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jspring996/PHPcodecms/issues/3
CVE ID: CVE-2023-29621 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:17:52.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brightsec.com/blog/file-inclusion-vulnerabilities/ - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0
CVE ID: CVE-2023-29622 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T16:12:34.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/sql-injection - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0/SQLi
CVE ID: CVE-2023-29623 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-26T21:07:21.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/cross-site-scripting/reflected - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Purchase-Order-Management-1.0/XSS-Reflected
CVE ID: CVE-2023-29625 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:16:40.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Employee-Performance-Evaluation-1.0
CVE ID: CVE-2023-29626 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T21:14:35.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Yoga-Class-Registration%20-1.0-2023%20-%20Multiple-SQLi