Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-27650 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-02-11T15:55:53.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the FONT_FILE parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.apusapps.launcher - https://www.apusapps.com/en/launcher - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27650/CVE%20detail.md
CVE ID: CVE-2023-27651 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:34:06.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the update_info field of the _default_.xml file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.egostudiogroup.com/ - https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27651/CVE%20detail.md
CVE ID: CVE-2023-27652 State: PUBLISHED Published: 2023-04-20T00:00:00.000Z Last Updated: 2025-02-05T20:14:08.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the update_info field of the _default_.xml file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.egostudiogroup.com/ - https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27652/CVE%20detail.md
CVE ID: CVE-2023-27653 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:32:04.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service via the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.scorp.who - https://www.whoapp.live/ - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27653/CVE%20detail.md
CVE ID: CVE-2023-27654 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:27:26.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.scorp.who - https://www.whoapp.live/ - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27654/CVE%20detail.md
CVE ID: CVE-2023-27655 State: REJECTED Published: 2023-03-23T00:00:00 Last Updated: 2023-07-21T21:35:57.055Z Description: No description available.
CVE ID: CVE-2023-27666 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-10T15:23:46.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name parameter at /classes/SystemSettings.php?f=update_settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://auto.com - https://www.sourcecodester.com/php/15371/auto-dealer-management-system-phpoop-free-source-code.html - https://gist.github.com/Flower-fertilizer/a1fb260c02353906f2d2808656dd1559
CVE ID: CVE-2023-27667 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:16:13.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://auto.com - https://www.sourcecodester.com/php/15371/auto-dealer-management-system-phpoop-free-source-code.html - https://gist.github.com/Flower-fertilizer/9c615b0fe5f9589b0d41be1ece7cb28f
CVE ID: CVE-2023-27700 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-18T20:34:23.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MuYuCMS/MuYuCMS/issues/8
CVE ID: CVE-2023-27701 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-18T20:32:37.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MuYuCMS/MuYuCMS/issues/9
CVE ID: CVE-2023-27703 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-10T15:58:14.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/drive/folders/1Szu9pjivVtG93ceECvnoAjeSABVyfDES?usp=sharing - https://github.com/happy0717/CVE-2023-27703
CVE ID: CVE-2023-27704 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-10T15:57:00.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/drive/folders/1BmHAGSugrFo0whDEmg6nnbaOkvE21X-p?usp=sharing - https://www.voidtools.com/en-us/downloads/ - https://github.com/happy0717/CVE-2023-27704
CVE ID: CVE-2023-27705 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T15:24:34.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/apng/files/APNG_Optimizer/ - https://bitbucket.org/tiangeng_zq/cve/src/main/
CVE ID: CVE-2023-27706 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:05:57.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bitwarden/clients - https://github.com/bitwarden/clients/blob/8b5a223ad4ca0f89b6c9bcdbddef464d1755d2c0/apps/desktop/desktop_native/src/password/windows.rs#L16 - https://github.com/bitwarden/clients/blob/8b5a223ad4ca0f89b6c9bcdbddef464d1755d2c0/apps/deskt
/password/windows.rs#L16 - https://github.com/bitwarden/clients/blob/8b5a223ad4ca0f89b6c9bcdbddef464d1755d2c0/apps/desktop/desktop_native/src/biometric/windows.rs#L19 - https://hackerone.com/reports/1874155
CVE ID: CVE-2023-27707 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T18:46:34.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-group/
CVE ID: CVE-2023-27709 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T18:47:55.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-story/
CVE ID: CVE-2023-27711 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T18:49:40.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/typecho/typecho/issues/1539 - https://srpopty.github.io/2023/03/02/Typecho-V1.2.0-Backend-Reflected-XSS-cid/
CVE ID: CVE-2023-27716 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-06T17:25:16.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network to gain escalated privileges for the nodes running on it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/G-H-Z/CVE/blob/main/CVE-2023-27716
CVE ID: CVE-2023-27718 State: PUBLISHED Published: 2023-04-09T00:00:00.000Z Last Updated: 2025-02-11T19:06:32.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/1.md
CVE ID: CVE-2023-27719 State: PUBLISHED Published: 2023-04-09T00:00:00.000Z Last Updated: 2025-02-12T16:18:08.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/2.md
CVE ID: CVE-2023-27720 State: PUBLISHED Published: 2023-04-09T00:00:00.000Z Last Updated: 2025-02-12T16:14:51.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/4.md
CVE ID: CVE-2023-27727 State: PUBLISHED Published: 2023-04-09T00:00:00.000Z Last Updated: 2025-02-12T16:13:01.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_function.h. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nginx/njs/issues/617
CVE ID: CVE-2023-27728 State: PUBLISHED Published: 2023-04-09T00:00:00.000Z Last Updated: 2025-02-11T19:21:09.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nginx/njs/issues/618
CVE ID: CVE-2023-27729 State: PUBLISHED Published: 2023-04-09T00:00:00.000Z Last Updated: 2025-02-12T16:09:38.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nginx/njs/issues/619
CVE ID: CVE-2023-27730 State: PUBLISHED Published: 2023-04-09T00:00:00.000Z Last Updated: 2025-02-11T21:52:33.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nginx/njs/issues/615
CVE ID: CVE-2023-27733 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T15:22:14.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Ephemeral1y/Vulnerability/blob/master/DedeCMS/5.7.98/DedeCMS-v5.7.98-RCE.md - https://sha999-crypto.github.io/2023/02/28/Dedecms%20background%20SQL%20injection%20vulnerability/
CVE ID: CVE-2023-27734 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T16:20:22.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Eteran edb-debugger v.1.3.0 allows a local attacker to causea denial of service via the collect_symbols function in plugins/BinaryInfo/symbols.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eteran/edb-debugger/pull/834/commits/32f325f4016e0090f76934320173581860f090be
CVE ID: CVE-2023-27739 State: PUBLISHED Published: 2024-01-08T00:00:00.000Z Last Updated: 2025-06-18T16:01:59.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: easyXDM 2.5 allows XSS via the xdm_e parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://threeshield.ca/easyxdm-2.5.20.html
CVE ID: CVE-2023-27742 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T17:19:30.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/G37SYS73M/CVE-2023-27742
CVE ID: CVE-2023-27744 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T18:44:35.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf - https://www.whiteoaksecurity.com/blog/titanftp-vulnerability-disclosure/
CVE ID: CVE-2023-27745 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T18:41:12.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attackers with low-level privileges to perform Administrative actions by sending requests to the user server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.southrivertech.com/software/nextgen/titanftp/en/relnotes.pdf - https://www.whiteoaksecurity.com/blog/titanftp-vulnerability-disclosure/
CVE ID: CVE-2023-27746 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:17:42.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eyJhb/blackvue-cve-2022 - https://shop.blackvue.com/product/dr750-2ch-ir-lte/ - https://blackvue.com - https://github.com/eyJhb/blackvue-cve-2023
CVE ID: CVE-2023-27747 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:20:05.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access sensitive information such as configurations and recordings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eyJhb/blackvue-cve-2022 - https://shop.blackvue.com/product/dr750-2ch-ir-lte/ - https://blackvue.com - https://github.com/eyJhb/blackvue-cve-2023
CVE ID: CVE-2023-27748 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:21:32.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eyJhb/blackvue-cve-2022 - https://shop.blackvue.com/product/dr750-2ch-ir-lte/ - https://blackvue.com - https://github.com/eyJhb/blackvue-cve-2023
CVE ID: CVE-2023-27751 State: REJECTED Published: N/A Last Updated: 2023-04-21T00:00:00 Description: No description available.
CVE ID: CVE-2023-27752 State: REJECTED Published: N/A Last Updated: 2023-04-21T00:00:00 Description: No description available.
CVE ID: CVE-2023-27754 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-26T15:38:39.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy() funciton. The flow allows an attacker to cause a denial of service (abort) via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/10cksYiqiyinHangzhouTechnology/vox2mesh_poc
CVE ID: CVE-2023-27755 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T15:19:04.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gobbscom/go-bbs/issues/10
CVE ID: CVE-2023-27757 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:23:44.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/perfree/PerfreeBlog/issues/13
CVE ID: CVE-2023-27759 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-14T16:15:32.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/8
CVE ID: CVE-2023-27760 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:33:04.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmora_setup_full846.exe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/9
CVE ID: CVE-2023-27761 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:30:13.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co., Ltd UniConverter v.14.0.0 allows a remote attacker to execute arbitrary commands via the uniconverter14_64bit_setup_full14204.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/1
CVE ID: CVE-2023-27762 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:27:42.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to execute arbitrary commands via the democreator_setup_full7743.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/3
CVE ID: CVE-2023-27763 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:22:41.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to execute arbitrary commands via the mobiletrans_setup_full5793.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/5
CVE ID: CVE-2023-27764 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:21:08.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairit_setup_full5913.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/4
CVE ID: CVE-2023-27765 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:15:36.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to execute arbitrary commands via the recoverit_setup_full4134.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/7
CVE ID: CVE-2023-27766 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:12:54.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to execute arbitrary commands via the anireel_setup_full9589.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/2
CVE ID: CVE-2023-27767 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:09:46.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/6