Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4964 State: PUBLISHED Published: 2023-10-30T14:18:59.394Z Last Updated: 2024-09-06T20:43:19.195Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L) Vendors: opentext , opentext Products: Service Management Automation X (SMAX), Asset Management X (AMX) Problem Types: CWE-601 Description: Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11 and opentext Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. The vulnerability could allow attackers to redirect a user to malicious websites. Additional Analyst Notes: - CVE
2.11. The vulnerability could allow attackers to redirect a user to malicious websites. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000022703?language=en_US
CVE ID: CVE-2023-4965 State: PUBLISHED Published: 2023-09-14T20:00:07.601Z Last Updated: 2024-08-02T07:44:53.442Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: phpipam Problem Types: CWE-601 Description: A vulnerability was found in phpipam 1.5.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Header Handler. The manipulation of the argument X-Forwarded-Host leads to open redirect. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239732. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Re
fier of this vulnerability is VDB-239732. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239732 - https://vuldb.com/?ctiid.239732 - https://github.com/ctflearner/Vulnerability/blob/main/PHPIPAM/Open_Redirect.md
CVE ID: CVE-2023-4966 State: PUBLISHED Published: 2023-10-10T13:12:17.644Z Last Updated: 2025-10-21T23:05:35.045Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Citrix Products: NetScaler ADC, NetScaler Gateway Problem Types: CWE-119 Description: Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX579459 - http://packetstormsecurity.com/files/175323/Citrix-Bleed-Session-Token-Leakage-Proof-Of-Concept.html
CVE ID: CVE-2023-4967 State: PUBLISHED Published: 2023-10-27T18:01:59.707Z Last Updated: 2025-02-27T20:39:19.338Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Cloud Software Group Products: NetScaler ADC, NetScaler Gateway Problem Types: CWE-119 Description: Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX579459/
CVE ID: CVE-2023-4968 State: PUBLISHED Published: 2023-10-20T06:35:30.907Z Last Updated: 2025-02-05T19:06:50.328Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: wpeka-club Products: Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WPLegalPages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wplegalpage' shortcode in versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authentica
o insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with author-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/68d7b5d0-c777-4ff9-bdef-a7762cfbdf1a?source=cve - https://plugins.trac.wordpress.org/browser/wplegalpages/tags/2.9.2/public/class-wp-legal-pages-public.php#L150 - https://plugins.trac.wordpress.org/changeset/2976774/wplegalpages/trunk/public/class-wp-legal-pages-public.php#fi
L150 - https://plugins.trac.wordpress.org/changeset/2976774/wplegalpages/trunk/public/class-wp-legal-pages-public.php#file0
CVE ID: CVE-2023-4969 State: PUBLISHED Published: 2024-01-16T17:01:29.598Z Last Updated: 2025-06-20T17:10:16.313Z Vendors: Khronos Group Products: OpenCL, Vulkan Problem Types: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor Description: A GPU kernel can read sensitive data from another GPU kernel (even from another user or app) through an optimized GPU memory region called _local memory_ on various architectures. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memo
Vulnrichment: References: - https://registry.khronos.org/OpenCL/specs/3.0-unified/html/OpenCL_API.html#_fundamental_memory_regions - https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html - https://kb.cert.org/vuls/id/446598 - https://blog.trailofbits.com - https://www.kb.cert.org/vuls/id/446598
CVE ID: CVE-2023-4970 State: PUBLISHED Published: 2023-11-20T18:55:02.071Z Last Updated: 2024-08-02T07:44:53.415Z Vendors: Unknown Products: PubyDoc Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The PubyDoc WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/845bbfdd-fe9f-487c-91a0-5fe10403d8a2
CVE ID: CVE-2023-4971 State: PUBLISHED Published: 2023-10-16T19:38:52.844Z Last Updated: 2025-04-23T16:14:56.611Z Vendors: Unknown Products: Weaver Xtreme Theme Support Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/421194e1-6c3f-4972-8f3c-de1b9d2bcb13
CVE ID: CVE-2023-4972 State: PUBLISHED Published: 2023-09-14T19:03:37.291Z Last Updated: 2024-09-26T11:37:21.162Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Yepas Products: Digital Yepas Problem Types: CWE-648 Description: Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.This issue affects Digital Yepas: before 1.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-23-0526
CVE ID: CVE-2023-4973 State: PUBLISHED Published: 2023-09-15T02:00:09.840Z Last Updated: 2024-08-02T07:44:53.370Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Academy Products: LMS Problem Types: CWE-79 Description: A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument searched_word/searched_tution_class_type[]/searched_price_type[]/searched_duration[] leads to cross site scripting. The attack can be launched remotely. The identifier VDB-239749 was assigned to this vulnerabil
to cross site scripting. The attack can be launched remotely. The identifier VDB-239749 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239749 - https://vuldb.com/?ctiid.239749 - http://packetstormsecurity.com/files/174680/Academy-LMS-6.2-Cross-Site-Scripting.html
CVE ID: CVE-2023-4974 State: PUBLISHED Published: 2023-09-15T02:00:11.177Z Last Updated: 2024-08-02T07:44:52.666Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Academy Products: LMS Problem Types: CWE-89 Description: A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument price_min/price_max leads to sql injection. The attack may be launched remotely. VDB-239750 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way
ssigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239750 - https://vuldb.com/?ctiid.239750 - http://packetstormsecurity.com/files/174681/Academy-LMS-6.2-SQL-Injection.html
CVE ID: CVE-2023-4975 State: PUBLISHED Published: 2023-10-20T06:35:13.296Z Last Updated: 2025-02-05T19:10:50.752Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: seedprod Products: Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Website Builder by SeedProd plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.15.13.1. This is due to missing or incorrect nonce validation on functionality in the builder.php file. This makes it possible for unauthenticated attackers to change the stripe co
n on functionality in the builder.php file. This makes it possible for unauthenticated attackers to change the stripe connect token via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2cb5370f-14aa-445d-bda3-62a0dd068fc5?source=cve - https://plugins.trac.wordpress.org/browser/coming-soon/trunk/resources/views/builder.php#L164 - https://plugins.trac.wordpress.org/changeset/2968455/coming-soon/trunk/resources/views/builder.php
CVE ID: CVE-2023-4976 State: PUBLISHED Published: 2024-07-17T15:25:58.472Z Last Updated: 2025-04-10T14:18:03.534Z Vendors: PureStorage Products: FlashBlade Problem Types: CWE-269 Description: A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.purestorage.com/security
CVE ID: CVE-2023-4977 State: PUBLISHED Published: 2023-09-15T00:00:19.430Z Last Updated: 2024-09-20T17:32:15.625Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: librenms Products: librenms/librenms Problem Types: CWE-94 Description: Code Injection in GitHub repository librenms/librenms prior to 23.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3db8a1a4-ca2d-45df-be18-a959ebf82fbc - https://github.com/librenms/librenms/commit/1194934d31c795a3f6877a96ffaa34b1f475bdd0
CVE ID: CVE-2023-4978 State: PUBLISHED Published: 2023-09-15T00:00:19.517Z Last Updated: 2024-09-20T17:30:37.221Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/cefd9295-2053-4e6e-a130-7e1f845728f4 - https://github.com/librenms/librenms/commit/e4c46a45364cb944b94abf9b83f0558b2c4c2fb7
CVE ID: CVE-2023-4979 State: PUBLISHED Published: 2023-09-15T00:00:19.484Z Last Updated: 2024-09-20T17:31:14.161Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e67f8f5d-4048-404f-9b86-cb6b8719b77f - https://github.com/librenms/librenms/commit/49d66fa31b43acef02eaa09ee9af15fe7e16cd03
CVE ID: CVE-2023-4980 State: PUBLISHED Published: 2023-09-15T00:00:42.319Z Last Updated: 2024-09-20T17:30:20.097Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 23.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/470b9b13-b7fe-4b3f-a186-fdc5dc193976 - https://github.com/librenms/librenms/commit/cfd642be6a1e988453bd63069d17db3664e7de97
CVE ID: CVE-2023-4981 State: PUBLISHED Published: 2023-09-15T00:00:42.509Z Last Updated: 2024-09-20T17:30:03.909Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1f014494-49a9-4bf0-8d43-a675498b9609 - https://github.com/librenms/librenms/commit/03c4da62c8acde0a82acbb4a445ae866ebfdd3f7
CVE ID: CVE-2023-4982 State: PUBLISHED Published: 2023-09-15T00:00:50.054Z Last Updated: 2024-09-20T17:29:44.932Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: librenms Products: librenms/librenms Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 23.9.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d3c2dd8a-883c-400e-a1a7-326c3fd37b9e - https://github.com/librenms/librenms/commit/2c5960631c49f7414f61b6d4dcd305b07da05769
CVE ID: CVE-2023-4983 State: PUBLISHED Published: 2023-09-15T13:31:05.366Z Last Updated: 2024-08-02T07:44:53.679Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: app1pro Products: Shopicial Problem Types: CWE-79 Description: A vulnerability was found in app1pro Shopicial up to 20230830. It has been declared as problematic. This vulnerability affects unknown code of the file search. The manipulation of the argument from with the input comments</script>'"><img src=x onerror=alert(document.cookie)> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239794 is the identifier assigned to this vulnerabili
The exploit has been disclosed to the public and may be used. VDB-239794 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239794 - https://vuldb.com/?ctiid.239794
CVE ID: CVE-2023-4984 State: PUBLISHED Published: 2023-09-15T13:31:06.947Z Last Updated: 2024-08-02T07:44:53.522Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: didi Products: KnowSearch Problem Types: CWE-256 Description: A vulnerability was found in didi KnowSearch 0.3.2/0.3.1.2. It has been rated as problematic. This issue affects some unknown processing of the file /api/es/admin/v3/security/user/1. The manipulation leads to unprotected storage of credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239795. Additional Analyst Notes: - CVE Pr
ublic and may be used. The associated identifier of this vulnerability is VDB-239795. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239795 - https://vuldb.com/?ctiid.239795 - https://github.com/didi/KnowSearch/issues/86 - https://github.com/didi/KnowSearch/files/12135597/ad1aa7b3-ecee-44b0-a22a-80917ca0fe71.pdf4398935202801712312.pdf
CVE ID: CVE-2023-4985 State: PUBLISHED Published: 2023-09-15T14:00:10.223Z Last Updated: 2024-08-02T07:44:53.693Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Supcon Products: InPlant SCADA Problem Types: CWE-287 Description: A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239796. NOTE: The vendor was contacted early about this disclosure but did not respond in
r of this vulnerability is VDB-239796. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239796 - https://vuldb.com/?ctiid.239796 - https://drive.google.com/file/d/1V_O95QddCGdZzYGgx7tkMOYQ5i_alv69/view?usp=drive_link
CVE ID: CVE-2023-4986 State: PUBLISHED Published: 2023-09-15T14:31:04.464Z Last Updated: 2025-06-18T14:42:39.633Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Supcon Products: InPlant SCADA Problem Types: CWE-916 Description: A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and
of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-239797 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239797 - https://vuldb.com/?ctiid.239797 - https://drive.google.com/file/d/1V_O95QddCGdZzYGgx7tkMOYQ5i_alv69/view?usp=drive_link
CVE ID: CVE-2023-4987 State: PUBLISHED Published: 2023-09-15T14:31:05.555Z Last Updated: 2024-09-25T15:14:30.250Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: infinitietech Products: taskhub Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in infinitietech taskhub 2.8.7. Affected by this issue is some unknown functionality of the file /home/get_tasks_list of the component GET Parameter Handler. The manipulation of the argument project/status/user_id/sort/search leads to sql injection. VDB-239798 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure b
DB-239798 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239798 - https://vuldb.com/?ctiid.239798 - http://packetstormsecurity.com/files/174760/Taskhub-2.8.7-SQL-Injection.html
CVE ID: CVE-2023-4988 State: PUBLISHED Published: 2023-09-15T15:00:09.019Z Last Updated: 2024-09-25T14:08:38.302Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bettershop Products: LaikeTui Problem Types: CWE-434 Description: A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui. This affects an unknown part of the file index.php?module=system&action=uploadImg. The manipulation of the argument imgFile leads to unrestricted upload. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is
information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-239799. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239799 - https://vuldb.com/?ctiid.239799
CVE ID: CVE-2023-4990 State: PUBLISHED Published: 2023-10-11T07:46:22.593Z Last Updated: 2024-09-18T16:01:28.529Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: MCL Technologies Products: MCL-Net Problem Types: CWE-22 Description: Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package (P01) may allow attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mcl-mobilityplatform.com/downloads.php
CVE ID: CVE-2023-4991 State: PUBLISHED Published: 2023-09-15T15:31:05.016Z Last Updated: 2024-09-25T15:09:31.012Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NextBX Products: QWAlerter Problem Types: CWE-428 Description: A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file QWAlerter.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. The identifier of this vulnerability is VDB-239804. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Pr
The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239804 - https://vuldb.com/?ctiid.239804
CVE ID: CVE-2023-4993 State: PUBLISHED Published: 2024-02-15T15:40:24.532Z Last Updated: 2024-09-26T11:41:43.127Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Utarit Information Technologies Products: SoliPay Mobile App Problem Types: CWE-648 Description: Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users.This issue affects SoliPay Mobile App: before 5.0.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-0104