Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-27768 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:06:28.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd PDFelement v9.1.1 allows a remote attacker to execute arbitrary commands via the pdfelement-pro_setup_full5239.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/12
CVE ID: CVE-2023-27769 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:04:50.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the pdfreader_setup_full13143.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/11
CVE ID: CVE-2023-27770 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T15:21:01.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-max_setup_full5371.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/10
CVE ID: CVE-2023-27771 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T21:01:42.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCC_setup_full10819.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liong007/Wondershare/issues/13
CVE ID: CVE-2023-27772 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:23:22.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() at /client/client_control.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mz-automation/libiec61850/issues/442 - https://github.com/mz-automation/libiec61850/commit/79a8eaf26070e02044afc4b2ffbfe777dfdf3e0b
CVE ID: CVE-2023-27775 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-08T02:44:49.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liveaction.com - http://livesp.com - https://github.com/marcovntr/CVE/blob/main/2023/CVE-2023-27775/CVE-2023-27775.md
CVE ID: CVE-2023-27776 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:32:26.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in /index.php?page=category_list of Online Jewelry Shop v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website. - https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery
-Store-from-Sourcecodester-website. - https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website./blob/main/README.md
CVE ID: CVE-2023-27777 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:13:05.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability was discovered in Online Jewelry Shop v1.0 that allows attackers to execute arbitrary script via a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lohyt/Privilege-escalation-in-online-jewelry-website
CVE ID: CVE-2023-27779 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T16:25:18.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://alo.com - https://amsystem.es/ - https://docs.google.com/document/d/1kGzmc6AOCfRzJf9mDz4emkhQj84Y1XemmAMZjYK32-o/edit?usp=sharing - https://portalempleado.alosuite.com/home
CVE ID: CVE-2023-27781 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:22:29.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tjko/jpegoptim/issues/132 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66ZW65INCWSQYIT5E6N6I6PE5D7R6EK7/
CVE ID: CVE-2023-27783 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T20:18:39.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/issues/780 - https://github.com/appneta/tcpreplay/pull/781 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/
announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/
CVE ID: CVE-2023-27784 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T20:44:00.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/issues/787 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3
K4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/
CVE ID: CVE-2023-27785 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T20:44:41.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/issues/785 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFT
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/
CVE ID: CVE-2023-27786 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:06:54.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/issues/782 - https://github.com/appneta/tcpreplay/pull/783 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.or
J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/
CVE ID: CVE-2023-27787 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:27:44.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/issues/788 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XID
QMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/
CVE ID: CVE-2023-27788 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:29:28.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/issues/786 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YT
JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/
CVE ID: CVE-2023-27789 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:35:40.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/pull/783 - https://github.com/appneta/tcpreplay/issues/784 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce
raproject.org/message/UE3J4LKYFNKPKNSLDQK4JG36THQMQH3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3ER3YTFR3XIDMYEB7LMFWFTPVQALBHC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UK2BRH3W3ECF5FDXP6QM3ZEDTHIOE4M5/
CVE ID: CVE-2023-27791 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T20:45:55.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bramfitt-tech-labs.com/article/easy-install-cve-issue
CVE ID: CVE-2023-27792 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T20:40:43.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub directories. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bramfitt-tech-labs.com/article/easy-install-cve-issue
CVE ID: CVE-2023-27793 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T20:37:07.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bramfitt-tech-labs.com/article/easy-install-cve-issue
CVE ID: CVE-2023-27795 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T20:27:10.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bramfitt-tech-labs.com/article/easy-install-cve-issue
CVE ID: CVE-2023-27796 State: PUBLISHED Published: 2023-03-26T00:00:00.000Z Last Updated: 2025-02-20T15:36:45.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the runPackDiagnose function of diagnose.lua. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/winmt/my-vuls/tree/main/RG-EW%20PRO%20Series
CVE ID: CVE-2023-27801 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T17:08:43.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/DelDNSHnList
CVE ID: CVE-2023-27802 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T17:06:27.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/EditvsList
CVE ID: CVE-2023-27803 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:54:45.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/EdittriggerList
CVE ID: CVE-2023-27804 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-11T19:10:59.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/DelvsList
CVE ID: CVE-2023-27805 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:53:31.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/EditSTList
CVE ID: CVE-2023-27806 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:51:12.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/ipqos_lanip_dellist
CVE ID: CVE-2023-27807 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:49:42.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/Delstlist
CVE ID: CVE-2023-27808 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:35:14.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/DeltriggerList
CVE ID: CVE-2023-27810 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:32:11.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/ipqos_lanip_editlist
CVE ID: CVE-2023-27812 State: PUBLISHED Published: 2023-04-13T00:00:00 Last Updated: 2024-08-02T12:23:29.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function. Additional Analyst Notes: - CVE Program Container: References: - http://bloofox.com - https://github.com/jspring996 - https://github.com/jspring996/PHPcodecms/issues/1 - https://www.bloofox.com/
CVE ID: CVE-2023-27821 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-18T20:30:40.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vran-dev/databasir/issues/269 - https://github.com/luelueking/Databasir-1.0.7-vuln-poc
CVE ID: CVE-2023-27823 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:50:58.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://optoma.com - https://packetstormsecurity.com/files/172276/Optoma-1080PSTX-Firmware-C02-Authentication-Bypass.html
CVE ID: CVE-2023-27826 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-08T02:42:58.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pastebin.com/raw/buhVV7iL - https://usermanual.wiki/SEOWON-INTECH/SWC5100W - https://www.exploit-db.com/exploits/51311
CVE ID: CVE-2023-27830 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-08T02:40:24.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted files when executing a file transfer. This is due to the fact that TightVNC runs in the backend as a high-privileges account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tightvnc.com/whatsnew.php - https://medium.com/nestedif/vulnerability-disclosure-privilege-escalation-tightvnc-8165208cce - https://www.tightvnc.com/news.php
CVE ID: CVE-2023-27836 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-06T15:20:13.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the function sub_ 40A80C. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lzd521/IOT/tree/main/TP-Link%20WPA8630P%202
CVE ID: CVE-2023-27837 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T20:25:22.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the function sub_ 40A774. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lzd521/IOT/tree/main/TP-Link%20WPA8630P
CVE ID: CVE-2023-27842 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T17:11:02.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blog.tristaomarinho.com/extplorer-2-1-15-insecure-permissions-following-remote-code-execution/ - http://extplorer.net/ - http://extplorer.net/attachments/download/99/eXtplorer_2.1.15.zip - https://github.com/tristao-marinho/CVE-2023-27842/blob/main/README.md - htt
tachments/download/99/eXtplorer_2.1.15.zip - https://github.com/tristao-marinho/CVE-2023-27842/blob/main/README.md - https://github.com/tristao-marinho/CVE-2023-27842