Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
: References: - https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ - https://sourceforge.net/p/keepass/feature-requests/2773/ - https://securityboulevard.com/2023/01/keepass-password-manager-leak-cve-richixbw/
CVE ID: CVE-2023-24056 State: PUBLISHED Published: 2023-01-22T00:00:00.000Z Last Updated: 2025-04-02T15:45:00.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tuple_parse. For example, a .pc file containing a few hundred bytes can expand to one billion bytes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nullprogram.com/blog/2023/01/18/ - https://gitea.treehouse.systems/ariadne/pkgconf/commit/628b2b2bafa5d3a2017193ddf375093e70666059 - https://github.com/pkgconf/pkgconf/tags
CVE ID: CVE-2023-24057 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-01T19:26:42.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive (for a prepackaged terminology cache, NPM package, or comparison archive). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-xr8x-pxm6-prjg
CVE ID: CVE-2023-24058 State: PUBLISHED Published: 2023-01-22T00:00:00.000Z Last Updated: 2025-04-02T16:09:24.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservation_save.php. NOTE: 2.5.5 is a version from 2014; the latest version of Booked Scheduler is not affected. However, LabArchives Scheduler (Sep 6, 2022 Feature Release) is affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://s1n1st3r.gitbook.io/theb10g/booked-scheduler-v2.5.5-vulnerability - https://www.limswiki.org/index.php/Booked
- https://s1n1st3r.gitbook.io/theb10g/booked-scheduler-v2.5.5-vulnerability - https://www.limswiki.org/index.php/Booked - https://github.com/LibreBooking/app/tags?after=2.7.1 - https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Web/ajax/reservation_save.php - https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Pages/Ajax/ReservationSavePage.php#L234-L237 - https://www.labarchives.com/labarchives-knowledge-base/2022-feature-releases-2/ - https://www.bookedscheduler.com/the-future-of-booked/
CVE ID: CVE-2023-24059 State: PUBLISHED Published: 2023-01-22T00:00:00.000Z Last Updated: 2025-04-02T16:08:01.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.rockstargames.com/community/200063373/13252523900819 - https://support.rockstargames.com/community/200063373/13249062368147 - https://www.reddit.com/r/gtaonline/comments/10hsosu/mass_reporting_the_dangerous_pc_exploit/ - https://twitter.com/TezFunz2/status/161657578321
r/gtaonline/comments/10hsosu/mass_reporting_the_dangerous_pc_exploit/ - https://twitter.com/TezFunz2/status/1616575783215964166
CVE ID: CVE-2023-24060 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-27T18:55:22.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Haven 5d15944 allows Server-Side Request Forgery (SSRF) via the feed[url]= Feeds functionality. Authenticated users with the ability to create new RSS Feeds or add RSS Feeds can supply an arbitrary hostname (or even the hostname of the Haven server itself). NOTE: this product has significant usage but does not have numbered releases; ordinary end users may typically use the master branch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://havenweb.org/ - https://github.com/h
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://havenweb.org/ - https://github.com/havenweb/haven/issues/51
CVE ID: CVE-2023-24062 State: PUBLISHED Published: 2024-08-08T00:00:00.000Z Last Updated: 2025-03-18T19:01:38.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR12, 4.0.0 SR04, 4.1.0 SR02, and 4.2.0 SR01 fails to validate the directory structure of the root file system during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%2
dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf
CVE ID: CVE-2023-24063 State: PUBLISHED Published: 2024-08-08T00:00:00.000Z Last Updated: 2025-03-27T16:02:33.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR10 fails to validate /etc/mtab during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%2
defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf
CVE ID: CVE-2023-24064 State: PUBLISHED Published: 2024-08-08T00:00:00.000Z Last Updated: 2025-03-13T18:44:20.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR4 fails to validate /etc/initab during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%
.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf
CVE ID: CVE-2023-24065 State: PUBLISHED Published: 2023-01-29T00:00:00.000Z Last Updated: 2025-03-28T15:34:17.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billing user) can have a JavaScript payload that is executed upon visiting the /users/2/1 page. This may allow attackers to steal Protected Health Information because the product is for health charting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/shihjay2/docker-nosh - https://noshemr.wordpress.com - https://gist.github.com/abbisQQ/e0967d5b83550
https://github.com/shihjay2/docker-nosh - https://noshemr.wordpress.com - https://gist.github.com/abbisQQ/e0967d5b8355087c8e224bdd1ace3bf3 - https://github.com/shihjay2/nosh2/issues/202 - https://github.com/shihjay2/nosh2/tree/4a5cfdbd73f6a2ab5ee43a33d173c46fe0271533
CVE ID: CVE-2023-24068 State: PUBLISHED Published: 2023-01-23T00:00:00 Last Updated: 2024-08-22T14:50:55.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachments.noindex directory. Client mechanisms fail to validate modifications of existing cached files, resulting in an attacker's ability to insert malicious code into pre-existing attachments or replace them completely. A threat actor can forward the existing attachment in the corresponding conversation to external groups, and the name and size of the file will not change, allowing the malware to masqu
onding conversation to external groups, and the name and size of the file will not change, allowing the malware to masquerade as another file. NOTE: the vendor disputes the relevance of this finding because the product is not intended to protect against adversaries with this degree of local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://signal.org/en/download/windows - https://signal.org/download/macos - https://signal.org/download/linux - https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/
CVE ID: CVE-2023-24069 State: PUBLISHED Published: 2023-01-23T00:00:00 Last Updated: 2024-08-02T10:49:09.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages from the attachments.noindex directory. Cached attachments are not effectively cleared. In some cases, even after a self-initiated file deletion, an attacker can still recover the file if it was previously replied to in a conversation. (Local filesystem access is needed by the attacker.) NOTE: the vendor disputes the relevance of this finding because the product is not intended to protect ag
the attacker.) NOTE: the vendor disputes the relevance of this finding because the product is not intended to protect against adversaries with this degree of local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://signal.org/en/download/windows - https://signal.org/download/macos - https://signal.org/download/linux - https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/
CVE ID: CVE-2023-24070 State: PUBLISHED Published: 2023-01-23T00:00:00 Last Updated: 2024-08-02T10:49:09.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/View/AuthKeys/authkey_display.ctp in MISP through 2.4.167 has an XSS in authkey add via a Referer field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/f7238fe5e71ac065daa43c8607d02f8ac682f18f - https://zigrin.com/advisories/misp-xss-in-add-action-of-the-authkeys-controller/
CVE ID: CVE-2023-24078 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T16:48:22.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the component /FuguHub/cmsdocs/. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ojan2021/Fuguhub-8.1-RCE - http://packetstormsecurity.com/files/173279/FuguHub-8.1-Remote-Code-Execution.html
CVE ID: CVE-2023-24080 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-14T18:40:07.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to compromise user accounts via a bruteforce attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamberlain.com - http://web.archive.org/web/20230122144550/https://brackish.io/chamberlain-myq-account-takeover/ - https://archive.ph/NH0Bk
CVE ID: CVE-2023-24081 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-14T18:34:42.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac before v4.2.170210 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the reason and location fields of the visits listing page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://brackish.io/tutortrac-multiple-stored-xss/ - https://www.go-redrock.com/solutions/tutortrac/ - https://wiki.go-redrock.com/index.php/4.0_Recent_Changes
CVE ID: CVE-2023-24084 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:21:06.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChiKoi v1.0 was discovered to contain a SQL injection vulnerability via the load_file function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/tanhongit/2023/ChiKoi
CVE ID: CVE-2023-24086 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:20:14.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /customs/loan_by_class.php?reportView. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/slims.web.id/SLIMS-9.5.2
CVE ID: CVE-2023-24093 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-12T20:46:42.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.luckytain.com/?p=66
CVE ID: CVE-2023-24094 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T18:46:53.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via crafted packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://mikrotik.com - http://routeros.com - https://github.com/ZYen12138/RouterOS/blob/main/CVE-2023-24094.md
CVE ID: CVE-2023-24095 State: PUBLISHED Published: 2023-01-23T00:00:00 Last Updated: 2024-08-02T10:49:08.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSystemCheck. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/05/README.md
CVE ID: CVE-2023-24096 State: PUBLISHED Published: 2023-01-23T00:00:00.000Z Last Updated: 2025-04-02T15:28:36.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the newpass parameter at /formPasswordSetup. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/06/README.md
CVE ID: CVE-2023-24097 State: PUBLISHED Published: 2023-01-23T00:00:00.000Z Last Updated: 2025-04-02T15:56:21.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formPasswordAuth. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/03/README.md
CVE ID: CVE-2023-24098 State: PUBLISHED Published: 2023-01-23T00:00:00.000Z Last Updated: 2025-04-02T15:55:32.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSysLog. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/04/README.md
CVE ID: CVE-2023-24099 State: PUBLISHED Published: 2023-01-23T00:00:00 Last Updated: 2024-08-02T10:49:08.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWizardPassword. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/07/README.md
CVE ID: CVE-2023-24104 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-18T14:59:37.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/f1veT/BUG/issues/1 - https://attack.mitre.org/techniques/T1090/004/
CVE ID: CVE-2023-24107 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-13T19:43:56.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mirrors.neusoft.edu.cn/pypi/web/simple/request/ - https://github.com/jminh/hour_of_code_python_2015/ - https://github.com/jminh/hour_of_code_python_2015/issue
/request/ - https://github.com/jminh/hour_of_code_python_2015/ - https://github.com/jminh/hour_of_code_python_2015/issues/4
CVE ID: CVE-2023-24108 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-13T19:42:13.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mirrors.neusoft.edu.cn/pypi/web/simple/request/ - https://github.com/zetacomponents/MvcTools/ - https://github.com/zetacomponents/MvcTools/issues/12
CVE ID: CVE-2023-24114 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-18T14:57:30.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/typecho/typecho/issues/1523
CVE ID: CVE-2023-24117 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T16:52:49.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepauth_5g_DoS
CVE ID: CVE-2023-24118 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-10T16:29:57.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_security_DoS
CVE ID: CVE-2023-24119 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:40:55.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS
CVE ID: CVE-2023-24120 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:40:21.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wrlEn_5g_DoS
CVE ID: CVE-2023-24121 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T20:39:48.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_security_5g_DoS
CVE ID: CVE-2023-24122 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-18T15:52:41.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the ssid_5g parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_ssid_5g_DoS
CVE ID: CVE-2023-24123 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-18T15:53:56.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://eagle.com - http://jensen.com - https://oxnan.com/posts/WifiBasic_wepauth_DoS