Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30200 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-24T16:50:01.779Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PrestaShop/PrestaShop/blob/6c05518b807d014ee8edb811041e3de232520c28/classes/Tools.php#L1247 - https
- https://github.com/PrestaShop/PrestaShop/blob/6c05518b807d014ee8edb811041e3de232520c28/classes/Tools.php#L1247 - https://security.friendsofpresta.org/modules/2023/07/20/ultimateimagetool.html
CVE ID: CVE-2023-30203 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T20:09:07.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event_id parameter at /php-jms/result_sheet.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/judging-management-system/SQLi-2.md
CVE ID: CVE-2023-30204 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-30T20:53:36.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the judge_id parameter at /php-jms/edit_judge.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/debug601/bug_report/blob/main/vendors/oretnom23/judging-management-system/SQLi-3.md
CVE ID: CVE-2023-30205 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-30T20:55:55.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the unique_id parameter in /admin/article.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/godd-bot/cve/issues/2
CVE ID: CVE-2023-30207 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-08-02T14:21:44.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xbmc/xbmc/issues/22378 - https://github.com/xbmc/xbmc/commit/dbc00c500f4c4830049cc040a61c439c580eea73 - https://github.com/xbmc/xbmc/pull/22391 - https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
CVE ID: CVE-2023-30210 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T18:58:03.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-tz-php-Reflection-xss/
CVE ID: CVE-2023-30211 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T18:25:07.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: OURPHP <= 7.2.0 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-Background-SQL-injection/
CVE ID: CVE-2023-30212 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T18:07:57.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-out-php-Reflection-xss/
CVE ID: CVE-2023-30216 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:34:12.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/newbee-ltd/newbee-mall/issues/76
CVE ID: CVE-2023-30222 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-08-02T14:21:44.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com - https://www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/ - https://blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure/
CVE ID: CVE-2023-30223 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-08-02T14:21:44.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com - https://www.infigo.is/en/insights/42/information-disclosure-and-broken-authentication-in-4d-sas-4d-server/ - https://blog.4d.com/security-bulletin-two-cves-and-how-to-stay-secure/
CVE ID: CVE-2023-30226 State: PUBLISHED Published: 2023-07-12T00:00:00 Last Updated: 2024-11-07T15:05:09.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted elf file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rizinorg/rizin/commit/a6d89de0d44e776f9bccc3a168fdc79f604e14ed - https://github.com/ifyGecko/CVE-2023-30226
CVE ID: CVE-2023-30237 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:36:42.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/77.html - http://cyberghostvpn.com - https://www.pentestpartners.com/security-blog/bullied-by-bugcrowd-over-kape-cyberghost-disclosure/
CVE ID: CVE-2023-30242 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T17:02:24.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ns-asg.com - https://www.netentsec.com/ - https://gist.github.com/nsvizp/ccbc51253a47d79d2bc1ea72e01bdaf6
CVE ID: CVE-2023-30243 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T17:01:22.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ns-asg.com - https://www.netentsec.com/
CVE ID: CVE-2023-30245 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T18:54:38.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the crit_id parameter of the edit_criteria.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.github.com - https://github.com/qingning988/cve_report/blob/main/judging-management-system/SQLi-1.md
CVE ID: CVE-2023-30246 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T16:06:58.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the contestant_id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.github.com - https://github.com/qingning988/cve_report/blob/main/judging-management-system/SQLi-2.md
CVE ID: CVE-2023-30247 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:37:49.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the update_settings parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.github.com - https://github.com/qingning988/cve_report/blob/main/storage-unit-rental-management-system/RCE-1.md
CVE ID: CVE-2023-30253 State: PUBLISHED Published: 2023-05-29T00:00:00 Last Updated: 2025-01-14T17:09:40.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Dolibarr/dolibarr - https://www.swascan.com/blog/ - https://www.swascan.com/security-advisory-dolibarr-17-0-0/
CVE ID: CVE-2023-30256 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:48:22.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://qloapps.com/ - https://github.com/webkul/hotelcommerce - https://github.com/ahrixia/CVE-2023-30256 - http://packetstormsecurity.com/files/172542/Webkul-Qloapps-1.5.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-30257 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T20:51:44.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stigward/PoCs-and-Exploits/tree/main/fiio_LPE_0day - https://stigward.github.io/posts/fiio-m6-exploit/
CVE ID: CVE-2023-30258 State: PUBLISHED Published: 2023-06-23T00:00:00.000Z Last Updated: 2025-08-29T14:58:43.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://eldstal.se/advisories/230327-magnusbilling.html - https://github.com/magnussolution/magnusbilling7/commit/ccff9f6370f530cc41ef7de2e31d7590a0fdb8c3 - http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html - https://github.com/MarkLee131
http://packetstormsecurity.com/files/175672/MagnusBilling-Remote-Command-Execution.html - https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-30258.md
CVE ID: CVE-2023-30259 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:55:18.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LibreCAD/LibreCAD/issues/1481
CVE ID: CVE-2023-30260 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T17:01:02.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command injection vulnerability in RaspAP raspap-webgui 2.8.8 and earlier allows remote attackers to run arbitrary commands via crafted POST request to hostapd settings form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://eldstal.se/advisories/230328-raspap.html - https://github.com/RaspAP/raspap-webgui/pull/1322
CVE ID: CVE-2023-30261 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-12-03T17:20:55.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/snaptec/openWB/issues/2672 - https://github.com/snaptec/openWB/pull/2673 - https://eldstal.se/advisories/230329-openwb.html
CVE ID: CVE-2023-30262 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T17:43:08.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mimsoftware.com/ - https://www.kansashealthsystem.com/ - https://www.mimsoftware.com/cve-2023-30262
CVE ID: CVE-2023-30264 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:30:41.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/HuBenLab/8498761dc3eaaed724a134197f092c47
CVE ID: CVE-2023-30265 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:58:38.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: CLTPHP <=6.0 is vulnerable to Directory Traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/HuBenLab/1d1bc201d5df41426d719e56d4421b30
CVE ID: CVE-2023-30266 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:57:14.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/HuBenLab/a6ef7e5efeae2635f54cb69327409a19
CVE ID: CVE-2023-30267 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:54:00.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/HuBenLab/e26ee91c43d4409437df350398ec6cf6
CVE ID: CVE-2023-30268 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:28:27.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: CLTPHP <=6.0 is vulnerable to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/HuBenLab/16dc2f87f91a6f8c60eefce5abf18c08
CVE ID: CVE-2023-30269 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:51:34.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/HuBenLab/f5eb8ebbba20c835a3170d392c9e46a4
CVE ID: CVE-2023-30280 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:26:37.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the fwSchedule.cgi page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/
CVE ID: CVE-2023-30281 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T16:09:01.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from ps_customer table sush as name / surname / email Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/05/04/scquickaccounting.html
CVE ID: CVE-2023-30282 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:26:42.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control. Due to a lack of permissions' control, a guest can access exports from the module which can lead to leak of personal information from customer table. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/05/02/scexportcustomers.html
CVE ID: CVE-2023-30285 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T16:25:10.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain the login credentials of a user via a crafted request sent to /rest/synchronizer/1.0/technicalUser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://deviniti.com - http://issue.com - https://github.com/D23K4N/CVE/blob/main/CVE-2023-30285.md
CVE ID: CVE-2023-30297 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T20:04:41.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.n-able.com/ - https://status.n-able.com/2023/07/27/cve-2023-30297-release-note/
CVE ID: CVE-2023-30300 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-30T20:57:27.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/wabt/issues/2180 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSFFCKXUQ5PAC5UVXY7N6HEHVQ3AC2RG/
CVE ID: CVE-2023-30305 State: PUBLISHED Published: 2024-05-28T19:13:39.901Z Last Updated: 2025-02-13T15:46:41.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE ID: CVE-2023-30306 State: PUBLISHED Published: 2024-05-28T19:56:15.056Z Last Updated: 2025-02-13T15:46:42.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Mercury x30g, Mercury YR1800XG routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE ID: CVE-2023-30307 State: PUBLISHED Published: 2024-05-28T19:28:26.103Z Last Updated: 2025-03-27T20:48:22.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR1200L, and TP-LINK TL-R476G routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE ID: CVE-2023-30308 State: PUBLISHED Published: 2024-05-28T19:37:42.325Z Last Updated: 2025-02-13T15:46:43.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Ruijie EG210G-P, Ruijie EG105G-V2, Ruijie NBR, and Ruijie EG105G routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE ID: CVE-2023-30309 State: PUBLISHED Published: 2024-05-28T19:41:54.082Z Last Updated: 2025-03-13T17:46:30.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE ID: CVE-2023-30310 State: PUBLISHED Published: 2024-05-28T19:53:24.631Z Last Updated: 2025-02-13T15:46:44.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE ID: CVE-2023-30311 State: PUBLISHED Published: 2024-05-28T19:09:21.139Z Last Updated: 2025-02-13T15:46:45.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/