Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-2356 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T20:48:28.310Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-23 Description: Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/7b5d130d-38eb-4133-8c7d-0dfc9a9d9896 - https://github.com/mlflow/mlflow/commit/f73147496e05c09a8b83d95fb4f1bf86696c6342
CVE ID: CVE-2023-2358 State: PUBLISHED Published: 2023-09-26T21:34:06.878Z Last Updated: 2024-09-23T20:24:01.836Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Hitachi Vantara Products: Pentaho Business Analytics Server Problem Types: CWE-257 Description: Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.5.0.0 and 9.3.0.4, including 8.3.x.x, saves passwords of the Hadoop Copy Files step in plaintext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.pentaho.com/hc/en-us/articles/19668208622221
CVE ID: CVE-2023-2359 State: PUBLISHED Published: 2023-06-19T10:52:49.053Z Last Updated: 2024-12-12T16:30:04.451Z Vendors: Unknown Products: Slider Revolution Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a8350890-e6d4-4b04-a158-2b0ee3748e65
CVE ID: CVE-2023-2360 State: PUBLISHED Published: 2023-04-28T11:10:46.100Z Last Updated: 2025-01-30T17:11:34.874Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Infrastructure Problem Types: CWE-942 Description: Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.2.0-135. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-4215
CVE ID: CVE-2023-2361 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T20:47:51.877Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/24d91b83-c3df-48f5-a713-9def733f2de7 - https://github.com/pimcore/pimcore/commit/6970649f5d3790a1db9ef4324bece0d4cb95366a
CVE ID: CVE-2023-2362 State: PUBLISHED Published: 2023-06-12T17:28:22.661Z Last Updated: 2025-05-05T16:01:12.174Z Vendors: Unknown Products: Float menu, Bubble Menu, Button Generator, Calculator Builder, Counter Box, Floating Button, Herd Effects, Popup Box, Side Menu Lite, Sticky Buttons, Wow Skype Buttons, WP Coder Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before 1.5.1, Counter Box WordPress plugin before 1.2.2, Floating Button WordPress plugin before 5.3.1, Herd Effects WordPress plugin before 5.2.2
WordPress plugin before 1.2.2, Floating Button WordPress plugin before 5.3.1, Herd Effects WordPress plugin before 5.2.2, Popup Box WordPress plugin before 2.2.2, Side Menu Lite WordPress plugin before 4.0.2, Sticky Buttons WordPress plugin before 3.1.1, Wow Skype Buttons WordPress plugin before 4.0.2, WP Coder WordPress plugin before 2.5.6 do not escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/27e70507-fd68-4915-88cf-0b96ed55208e
CVE ID: CVE-2023-2363 State: PUBLISHED Published: 2023-04-28T11:00:05.188Z Last Updated: 2024-08-02T06:19:14.885Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Resort Reservation System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. This issue affects some unknown processing of the file view_room.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227639. Additional Analyst Notes: - CVE
e public and may be used. The associated identifier of this vulnerability is VDB-227639. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227639 - https://vuldb.com/?ctiid.227639 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Resort_Reservation_System-SQL-Injection-1.md
CVE ID: CVE-2023-2364 State: PUBLISHED Published: 2023-04-28T11:00:06.591Z Last Updated: 2024-08-02T06:19:15.151Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SourceCodester Products: Resort Reservation System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Resort Reservation System 1.0. Affected is an unknown function of the file registration.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227640. Additional Analyst Notes: - CVE P
sed to the public and may be used. The identifier of this vulnerability is VDB-227640. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227640 - https://vuldb.com/?ctiid.227640 - https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Resort_Reservation_System-Stored-Cross-Site-Scripting-1.md
CVE ID: CVE-2023-2365 State: PUBLISHED Published: 2023-04-28T11:31:03.087Z Last Updated: 2024-08-02T06:19:14.989Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Faculty Evaluation System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax.php?action=delete_subject. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227641 was assigned to this vulnerability. Addition
has been disclosed to the public and may be used. The identifier VDB-227641 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227641 - https://vuldb.com/?ctiid.227641 - https://github.com/oV201/cve_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-1.md
CVE ID: CVE-2023-2366 State: PUBLISHED Published: 2023-04-28T12:00:05.334Z Last Updated: 2024-08-02T06:19:14.984Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Faculty Evaluation System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=delete_class. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227642 is the identifier assigned to this vulnerability. Additional Analyst Not
losed to the public and may be used. VDB-227642 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227642 - https://vuldb.com/?ctiid.227642 - https://github.com/oV201/cve_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-2.md
CVE ID: CVE-2023-2367 State: PUBLISHED Published: 2023-04-28T12:31:03.172Z Last Updated: 2025-01-30T17:10:59.743Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Faculty Evaluation System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manage_academic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227643. Additional Analyst Notes:
to the public and may be used. The associated identifier of this vulnerability is VDB-227643. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227643 - https://vuldb.com/?ctiid.227643 - https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-1.md
CVE ID: CVE-2023-2368 State: PUBLISHED Published: 2023-04-28T12:31:04.224Z Last Updated: 2024-08-02T06:19:14.997Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Faculty Evaluation System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php?page=manage_questionnaire. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227644. Additional Analyst Notes: - C
sclosed to the public and may be used. The identifier of this vulnerability is VDB-227644. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227644 - https://vuldb.com/?ctiid.227644 - https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-2.md
CVE ID: CVE-2023-2369 State: PUBLISHED Published: 2023-04-28T13:00:04.508Z Last Updated: 2024-08-02T06:19:14.824Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Faculty Evaluation System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/manage_restriction.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227645 was assigned to this vulnerability. Additional Analyst Notes:
to the public and may be used. The identifier VDB-227645 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.227645 - https://vuldb.com/?ctiid.227645 - https://github.com/f0llow/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-3.md
CVE ID: CVE-2023-2370 State: PUBLISHED Published: 2023-04-28T13:31:03.936Z Last Updated: 2024-08-02T06:19:15.014Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online DJ Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manage_event.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227646 is the identifier assigned to this vuln
motely. The exploit has been disclosed to the public and may be used. VDB-227646 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227646 - https://vuldb.com/?ctiid.227646 - https://github.com/aieouZZ/bug_report/blob/main/SQLi-1.md
CVE ID: CVE-2023-2371 State: PUBLISHED Published: 2023-04-28T13:31:05.071Z Last Updated: 2024-11-22T19:51:33.412Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online DJ Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this
n be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227647. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227647 - https://vuldb.com/?ctiid.227647 - https://github.com/yoyoyoyoyohane/bug_report/blob/main/SQLi-1.md
CVE ID: CVE-2023-2372 State: PUBLISHED Published: 2023-04-28T14:00:06.010Z Last Updated: 2024-08-02T06:19:15.008Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Online DJ Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this issue is some unknown functionality of the file classes/Master.php?f=save_event. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227648.
otely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227648. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227648 - https://vuldb.com/?ctiid.227648 - https://github.com/yoyoyoyoyohane/bug_report/blob/main/XSS-1.md
CVE ID: CVE-2023-2373 State: PUBLISHED Published: 2023-04-28T14:00:07.264Z Last Updated: 2025-01-30T17:10:14.273Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-77 Description: A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Management Interface. The manipulation of the argument ecn-up leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227649 was assigned to this vulnerability. Additional Analyst Notes: - CVE Progra
ic and may be used. The identifier VDB-227649 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227649 - https://vuldb.com/?ctiid.227649 - https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/5
CVE ID: CVE-2023-2374 State: PUBLISHED Published: 2023-04-28T14:31:04.038Z Last Updated: 2024-08-02T06:19:14.979Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-77 Description: A vulnerability has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument ecn-down leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227650 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program
ic and may be used. VDB-227650 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227650 - https://vuldb.com/?ctiid.227650 - https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/6
CVE ID: CVE-2023-2375 State: PUBLISHED Published: 2023-04-28T15:00:07.068Z Last Updated: 2024-08-02T06:19:15.021Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-77 Description: A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This issue affects some unknown processing of the component Web Management Interface. The manipulation of the argument src leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227651. Additional Analyst Notes: - CVE Program Cont
may be used. The associated identifier of this vulnerability is VDB-227651. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227651 - https://vuldb.com/?ctiid.227651 - https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/7
CVE ID: CVE-2023-2376 State: PUBLISHED Published: 2023-04-28T15:00:08.881Z Last Updated: 2024-08-02T06:19:15.146Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-77 Description: A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been classified as critical. Affected is an unknown function of the component Web Management Interface. The manipulation of the argument dpi leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227652. Additional Analyst Notes: - CVE Program Container
c and may be used. The identifier of this vulnerability is VDB-227652. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227652 - https://vuldb.com/?ctiid.227652 - https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/8
CVE ID: CVE-2023-2377 State: PUBLISHED Published: 2023-04-28T15:31:03.377Z Last Updated: 2024-08-02T06:19:14.992Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-77 Description: A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Web Management Interface. The manipulation of the argument name leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227653 was assigned to this vulnerability. Additional Analyst Not
osed to the public and may be used. The identifier VDB-227653 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227653 - https://vuldb.com/?ctiid.227653 - https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/9
CVE ID: CVE-2023-2378 State: PUBLISHED Published: 2023-04-28T16:00:04.575Z Last Updated: 2024-08-02T06:19:14.921Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-77 Description: A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been rated as critical. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument suffix-rate-up leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227654 is the identifier assigned to this vulnerability. Additional Analyst Not
losed to the public and may be used. VDB-227654 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227654 - https://vuldb.com/?ctiid.227654 - https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/4
CVE ID: CVE-2023-2379 State: PUBLISHED Published: 2023-04-28T16:31:03.591Z Last Updated: 2025-01-30T19:26:09.486Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C) Vendors: Ubiquiti Products: EdgeRouter X Problem Types: CWE-404 Description: A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227655. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
ier of this vulnerability is VDB-227655. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.227655 - https://vuldb.com/?ctiid.227655 - https://github.com/leetsun/IoT/tree/main/EdgeRouterX/DoS
CVE ID: CVE-2023-2380 State: PUBLISHED Published: 2023-04-28T16:54:01.674Z Last Updated: 2024-08-02T06:19:15.222Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: Netgear Products: SRX5308 Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227658 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227658 - https://vuldb.com/?ctiid.227658 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17
CVE ID: CVE-2023-2381 State: PUBLISHED Published: 2023-04-28T17:00:05.464Z Last Updated: 2024-08-02T06:19:15.088Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=bandwidth_profile.htm of the component Web Management Interface. The manipulation of the argument BandWidthProfile.ProfileName leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated
pting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227659. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227659 - https://vuldb.com/?ctiid.227659 - https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/6
CVE ID: CVE-2023-2382 State: PUBLISHED Published: 2023-04-28T17:00:06.639Z Last Updated: 2024-08-02T06:19:14.984Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Netgear Products: SRX5308 Problem Types: CWE-79 Description: A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argument sysLogInfo.serverName leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnera