Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-51780 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T22:48:11.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/24e90b9e34f9e039f56b5f25f6e6eb92cdd8f4b3 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html - https://security.netapp.com/a
24/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html - https://security.netapp.com/advisory/ntap-20240419-0001/
CVE ID: CVE-2023-51781 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T22:48:11.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8 - https://github.com/torvalds/linux/commit/189ff16722ee36ced4d2a2469d4ab65a8fee4198 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE ID: CVE-2023-51782 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T22:48:11.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because of a rose_accept race condition. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8 - https://github.com/torvalds/linux/commit/810c38a369a0a0ce625b5c12169abce1dd9ccd53 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE ID: CVE-2023-51784 State: PUBLISHED Published: 2024-01-03T09:39:23.382Z Last Updated: 2025-05-16T15:53:16.443Z Vendors: Apache Software Foundation Products: Apache InLong Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/9329 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/4nxbyl6mh5jgh0plk0qposbxwn6w9h8j - http://
ainer: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/4nxbyl6mh5jgh0plk0qposbxwn6w9h8j - http://www.openwall.com/lists/oss-security/2024/01/03/1
CVE ID: CVE-2023-51785 State: PUBLISHED Published: 2024-01-03T09:36:24.189Z Last Updated: 2025-02-13T17:19:55.037Z Vendors: Apache Software Foundation Products: Apache InLong Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/9331 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/g0yjmtjqvp8bnf1j0tdsk0nhfozjdjno - h
m Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/g0yjmtjqvp8bnf1j0tdsk0nhfozjdjno - http://www.openwall.com/lists/oss-security/2024/01/03/2
CVE ID: CVE-2023-51786 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-27T20:13:24.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sensitive information via Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.lustre.org/pipermail/lustre-announce-lustre.org/2024/000270.html - http://www.openwall.com/lists/oss-security/2024/03/12/2
CVE ID: CVE-2023-51787 State: PUBLISHED Published: 2024-02-15T00:00:00.000Z Last Updated: 2025-03-18T15:00:59.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not freed, resulting in a memory leak. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2023-51787
CVE ID: CVE-2023-51790 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-17T14:05:31.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the lang parameter in the Admin Tools plug-in component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Piwigo/Piwigo/issues/2069 - https://github.com/Piwigo/AdminTools/issues/21
CVE ID: CVE-2023-51791 State: PUBLISHED Published: 2024-04-19T00:00:00.000Z Last Updated: 2025-11-04T17:13:45.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxl_parser.c in gen_alias_map. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ffmpeg.org/ - https://trac.ffmpeg.org/ticket/10738 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora
essage/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2023-51792 State: PUBLISHED Published: 2024-04-19T00:00:00.000Z Last Updated: 2025-11-04T17:13:49.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/strukturag/libde265 - https://github.com/strukturag/libde265/issues/427 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.
list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2023-51793 State: PUBLISHED Published: 2024-04-19T00:00:00.000Z Last Updated: 2025-11-04T17:13:51.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in image_copy_plane. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ffmpeg.org/ - https://trac.ffmpeg.org/ticket/10743 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
g/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2023-51794 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T22:48:11.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/af_stereowiden.c:120:69. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://trac.ffmpeg.org/ticket/10746
CVE ID: CVE-2023-51795 State: PUBLISHED Published: 2024-04-19T00:00:00.000Z Last Updated: 2025-11-04T17:13:54.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showspectrum.c:1789:52 component in showspectrumpic_request_frame Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ffmpeg.org/ - https://trac.ffmpeg.org/ticket/10749 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives
-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2023-51796 State: PUBLISHED Published: 2024-04-19T00:00:00.000Z Last Updated: 2025-11-04T17:13:57.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/f_reverse.c:269:26 in areverse_request_frame. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ffmpeg.org/ - https://trac.ffmpeg.org/ticket/10753 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2023-51797 State: PUBLISHED Published: 2024-04-19T00:00:00.000Z Last Updated: 2025-11-04T17:14:00.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avf_showwaves.c:722:24 in showwaves_filter_frame Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg - https://ffmpeg.org/ - https://trac.ffmpeg.org/ticket/10756 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraprojec
s/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
CVE ID: CVE-2023-51798 State: PUBLISHED Published: 2024-04-19T00:00:00.000Z Last Updated: 2025-11-04T17:14:03.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a floating point exception (FPE) error at libavfilter/vf_minterpolate.c:1078:60 in interpolate. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ffmpeg.org/ - https://trac.ffmpeg.org/ticket/10758 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ - https://lists.fedoraproject.or
CVE ID: CVE-2023-51800 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-08-16T14:40:37.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the main_settings component in the phone, address, bank, acc_name, acc_number parameters, new_class and cname parameter, add_new_parent function in the name email parameters, new_term function in the tname parameter, and the edit_student function in the name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.
ame parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/geraldoalcantara/CVE-2023-51800
CVE ID: CVE-2023-51801 State: PUBLISHED Published: 2024-02-29T00:00:00.000Z Last Updated: 2025-04-22T15:53:54.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the student_form.php and the class_form.php pages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/geraldoalcantara/CVE-2023-51801
CVE ID: CVE-2023-51802 State: PUBLISHED Published: 2024-02-29T00:00:00 Last Updated: 2024-10-28T01:37:00.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the page or class_month parameter in the /php-attendance/attendance_report component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/geraldoalcantara/CVE-2023-51802
CVE ID: CVE-2023-51803 State: PUBLISHED Published: 2024-03-31T00:00:00 Last Updated: 2024-08-20T19:40:24.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" substring. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/linuxserver/Heimdall/pull/1167 - https://github.com/linuxserver/Heimdall/pull/1173 - https://github.com/linuxserver/Heimdall/releases/tag/v2.5.7
CVE ID: CVE-2023-51804 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-03T14:03:17.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP body URL in the com.rymcu.forest.web.api.common.UploadController file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rymcu/forest/issues/149
CVE ID: CVE-2023-51805 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-20T16:47:57.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of FormDataMysqlService.java file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TDuckCloud/tduck-platform/issues/22
CVE ID: CVE-2023-51806 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-20T16:42:47.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ujcms.com/ - https://github.com/ujcms/ujcms - https://github.com/ujcms/ujcms/issues/8
CVE ID: CVE-2023-51807 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-20T17:11:14.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in OFCMS v.1.14 allows a remote attacker to obtain sensitive information via a crafted payload to the title addition component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/oufu/ofcms - https://gitee.com/oufu/ofcms/issues/I7OAU2 - https://github.com/Phantom4me/CVE-Management/blob/main/CVE-2023-51807.md
CVE ID: CVE-2023-51810 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-20T17:12:00.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://easydiscuss.com - http://stackideas.com - https://github.com/Pastea/CVE-2023-51810
CVE ID: CVE-2023-51812 State: PUBLISHED Published: 2024-01-04T00:00:00.000Z Last Updated: 2025-06-03T18:52:07.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.11 was discovered to contain a remote code execution (RCE) vulnerability via the list parameter at /goform/SetNetControlList. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/blue_ty/cms/issues/I8PG2A
CVE ID: CVE-2023-51813 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-06-20T19:51:14.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the staff_list parameter in the index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xxxxfang/CVE-Apply/blob/main/csrf-1.md
CVE ID: CVE-2023-51820 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-20T20:02:41.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Blurams Lumi Security Camera (A31C) v.2.3.38.12558 allows a physically proximate attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://infosec.rm-it.de/2024/02/01/blurams-lumi-security-camera-analysis/ - https://github.com/roman-mueller/PoC/tree/master/CVE-2023-51820
CVE ID: CVE-2023-51828 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-27T18:47:25.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in get_next_notice function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nexacybersecurity.blogspot.com/2024/02/journey-finding-vulnerabilities-in-pmb-library-management-system.html
CVE ID: CVE-2023-51833 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-05-29T15:19:45.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection issue in TRENDnet TEW-411BRPplus v.2.07_eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.trendnet.com/support/support-detail.asp?prod=160_TEW-411BRPplus - https://warp-desk-89d.notion.site/TEW-411BRPplus-9bafe26e48964be3be12eab47f77203d
CVE ID: CVE-2023-51835 State: PUBLISHED Published: 2024-02-01T00:00:00 Last Updated: 2024-08-28T19:58:36.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping in the /boafrm/formSystemCheck. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-822DRE - https://warp-desk-89d.notion.site/TEW-822DRE-5289eb95796749c2878843519ab451d8
CVE ID: CVE-2023-51837 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-05-29T15:08:13.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/Bug_MeshCentral.md - https://github.com/Ylianst/MeshCentral/blob/master/mpsserver.js - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51837.md
CVE ID: CVE-2023-51838 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-16T19:04:35.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/Bug_MeshCentral.md - https://github.com/Ylianst/MeshCentral/tree/master - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51838.md
CVE ID: CVE-2023-51839 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-06-20T19:42:17.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DeviceFarmer/stf/issues/736 - https://github.com/DeviceFarmer/stf - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51839.md
CVE ID: CVE-2023-51840 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-05-29T15:10:43.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/doramart/DoraCMS/issues/262 - https://github.com/doramart/DoraCMS - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51840.md
CVE ID: CVE-2023-51842 State: PUBLISHED Published: 2024-01-29T00:00:00.000Z Last Updated: 2025-06-02T19:34:59.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/Bug_MeshCentral.md - https://github.com/Ylianst/MeshCentral/tree/master - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51842.md