Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-38996 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:35:48.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://douran.com/en-US/Dourtal/4797/page/DSGate - https://douran.com/fa-IR/Dourtal/4797/page/DSGate - https://gist.github.com/RNPG/53b579da330ba896aa8dc2d901e5e400
CVE ID: CVE-2023-38997 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-08-02T17:54:39.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands as root via a crafted ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/opnsense/core/commit/448762d440b51574f1906c0ec2f5ea6dc4f16eb2 - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-38998 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T18:33:07.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/commit/6bc025af1705dcdd8ef22ff5d4fcb986fa4e45f8 - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-38999 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T15:36:58.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/commit/5d68f43d1f254144831881fc87d885eed120cf3c - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39000 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T15:35:47.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to inject arbitrary JavaScript via the URL path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/commit/d1f350ce70e477adc86d445f5cda9b24f9ff0168 - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39001 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T15:34:31.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the component diag_backup.php of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary commands via a crafted backup configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/commit/e800097d0c287bb665f0751a98a67c75ef7b45e5 - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39002 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T15:33:42.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/commit/a4f6a8f8d604271f81984cfcbba0471af58e34dc - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39003 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T15:33:01.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions in the directory /tmp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://opnsense.com - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39004 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T14:59:54.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://opnsense.com - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39005 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T14:59:21.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions exist for configd.socket in OPNsense Community Edition before 23.7 and Business Edition before 23.4.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/issues/6647 - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39006 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T14:58:30.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/commit/1c05a19d9d52c7bfa4ac52114935d9fe76d5d181 - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39007 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T18:23:11.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: /ui/cron/item/open in the Cron component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows XSS via openAction in app/controllers/OPNsense/Cron/ItemController.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/commit/5edff49db1cd8b5078611e2f542d91c02af2b25c - https://logicaltrust.net/blog/2023/08/opnsense.html - https://github.com/opnsense/core/compare/23.1.11...23.7
CVE ID: CVE-2023-39008 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T14:57:32.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows attackers to execute arbitrary system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/opnsense/core/commit/e800097d0c287bb665f0751a98a67c75ef7b45e5 - https://logicaltrust.net/blog/2023/08/opnsense.html
CVE ID: CVE-2023-39010 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-22T19:58:55.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lessthanoptimal/BoofCV/issues/406
CVE ID: CVE-2023-39013 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-22T19:45:37.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/larsga/Duke/issues/273
CVE ID: CVE-2023-39015 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-22T19:45:00.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/code4craft/webmagic/issues/1122
CVE ID: CVE-2023-39016 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-22T19:44:10.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolman.util.SQLManager.createPool. This vulnerability is exploited via passing an unchecked argument. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/bboss/bboss/issues/I7MH08
CVE ID: CVE-2023-39017 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-08-02T17:54:39.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMessageJob.execute. This vulnerability is exploited via passing an unchecked argument. NOTE: this is disputed by multiple parties because it is not plausible that untrusted user input would reach the code location where injection must occur. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/quartz-scheduler/quartz/issues/943
CVE ID: CVE-2023-39018 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-11-27T14:27:45.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg 0.7.0 and below was discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>. This vulnerability is exploited via passing an unchecked argument. NOTE: this is disputed by multiple third parties because there are no realistic use cases in which FFmpeg.java uses untrusted input for the path of the executable file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bramp/ffmpeg-cli-wrapper/issues/291 - https://gith
Container: - CISA ADP Vulnrichment: References: - https://github.com/bramp/ffmpeg-cli-wrapper/issues/291 - https://github.com/bramp/ffmpeg-cli-wrapper/blob/master/src/main/java/net/bramp/ffmpeg/FFmpeg.java
CVE ID: CVE-2023-39020 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-22T19:43:14.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LetianYuan/My-CVE-Public-References/tree/main/edu_stanford_nlp_stanford-parser
CVE ID: CVE-2023-39021 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-22T19:42:14.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LetianYuan/My-CVE-Public-References/tree/main/com_wix_wix-embedded-mysql
CVE ID: CVE-2023-39022 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-22T18:29:57.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LetianYuan/My-CVE-Public-References/tree/main/opensymphony_oscore
CVE ID: CVE-2023-39023 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-22T18:29:04.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: university compass v2.2.0 and below was discovered to contain a code injection vulnerability in the component org.compass.core.executor.DefaultExecutorManager.configure. This vulnerability is exploited via passing an unchecked argument. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LetianYuan/My-CVE-Public-References/tree/main/org_compass-project_compass
CVE ID: CVE-2023-39026 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:34:36.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a crafted request to the /mgmt/ component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.filemage.io/docs/updates.html#change-log - https://raindayzz.com/technicalblog/2023/08/20/FileMage-Vulnerability.html - http://packetstormsecurity.com/files/174491/FileMage-Gateway-1.10.9-Local-File-Inclusion.html
CVE ID: CVE-2023-39039 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T18:40:43.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://camp.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39039.md
CVE ID: CVE-2023-39040 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T19:26:04.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://cheese.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39040.md
CVE ID: CVE-2023-39041 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:15:52.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39041.md
CVE ID: CVE-2023-39042 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-05T15:41:02.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liff.line.me/1660693321-VmNyyXqO - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39042.md
CVE ID: CVE-2023-39043 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T19:32:53.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tokushimaawayokocho.com - http://ykc.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39043.md
CVE ID: CVE-2023-39044 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:14:01.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39044.md
CVE ID: CVE-2023-39045 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:25:47.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in kokoroe_members card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39045.md
CVE ID: CVE-2023-39046 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:57:47.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tonton-teiwaiting.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39046.md
CVE ID: CVE-2023-39047 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-05T15:39:13.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liff.line.me/1657207159-oGgKdNNW - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39047.md
CVE ID: CVE-2023-39048 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-05T15:37:41.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liff.line.me/1660822133-g5YonEZK - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39048.md
CVE ID: CVE-2023-39049 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T18:17:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://youmart-tokunaga.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39049.md
CVE ID: CVE-2023-39050 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-05T15:35:44.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liff.line.me/1657264266-MPKmV0nq - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39050.md
CVE ID: CVE-2023-39051 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-05T15:33:25.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liff.line.me/1660679085-jy2OO7WE - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39051.md
CVE ID: CVE-2023-39052 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-24T20:40:01.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Earthgarden_waiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39052.md
CVE ID: CVE-2023-39053 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-05T15:31:17.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liff.line.me/1657507029-eDjDJQ68 - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39053.md
CVE ID: CVE-2023-39054 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-05T15:29:22.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liff.line.me/1660822001-2aM5Rl7Q - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39054.md
CVE ID: CVE-2023-39056 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T15:52:23.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://coffee-jumbo.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39056.md
CVE ID: CVE-2023-39057 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-05T15:26:55.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liff.line.me/1657563463-WZNjNErk - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39057.md
CVE ID: CVE-2023-39058 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T15:51:46.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access token and send crafted messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://thebmembers.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39058.md
CVE ID: CVE-2023-39059 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T16:03:51.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.alevsk.com/2023/07/a-quick-story-of-security-pitfalls-with-execcommand-in-software-integrations/ - https://gist.github.com/Alevsk/1757da24c5fb8db735d392fd4146ca3a