Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37019 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:30:46.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `S1Setup Request` message missing a required `Supported TAs` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37020 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:31:21.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Context Release Complete` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37021 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:31:28.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME version <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Context Modification Failure` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37022 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-03-18T18:52:52.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `UE Context Release Request` packet handler. A packet containing an invalid `MME_UE_S1AP_ID` field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37023 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:32:06.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `Uplink NAS Transport` packet handler. A packet missing its `MME_UE_S1AP_ID` field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37024 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-23T19:07:21.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an `Emergency Number List` Information Element. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37025 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-23T17:33:19.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Reset` packet missing an expected `ResetType` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37026 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-23T17:31:30.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Release Response` packet missing an expected `MME_UE_S1AP_ID` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37027 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-18T20:06:56.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37028 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-13T20:01:28.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37029 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-01-23T19:10:01.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MME via either a compromised base station or via an unauthenticated cellphone within range of a base station managed by the MME, causing a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37030 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-25T14:12:15.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `eNB_UE_S1AP_ID` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37031 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-19T14:19:21.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `eNB Configuration Transfer` packet missing its required `Target eNB ID` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37032 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-13T14:12:18.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an oversized `Emergency Number List` Information Element. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37033 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-20T13:52:57.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `EUTRAN_CGI` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37034 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-24T17:28:12.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `TAI` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37035 State: PUBLISHED Published: 2025-01-21T00:00:00 Last Updated: 2025-01-22T14:58:37.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Global eNB ID` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37036 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-18T20:18:16.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `ENB_UE_S1AP_ID` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37037 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-18T14:00:04.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Supported TAs` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37038 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-13T19:58:38.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `MME_UE_S1AP_ID` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37039 State: PUBLISHED Published: 2025-01-21T00:00:00.000Z Last Updated: 2025-03-14T17:09:26.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allow network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `RRC Establishment Clause` field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37049 State: PUBLISHED Published: 2023-07-26T00:00:00 Last Updated: 2024-10-23T15:45:28.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Num-Nine/CVE/issues/1
CVE ID: CVE-2023-37057 State: PUBLISHED Published: 2024-06-17T00:00:00.000Z Last Updated: 2025-03-14T19:22:41.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentication mechanism. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://jlink.com - http://www.unionman.com.cn/en/contact.html - https://jlink-global.com/ - https://github.com/ri5c/Jlink-Router-RCE
CVE ID: CVE-2023-37058 State: PUBLISHED Published: 2024-06-17T00:00:00.000Z Last Updated: 2025-03-18T19:47:50.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://jlink.com - https://github.com/ri5c/Jlink-Router-RCE
CVE ID: CVE-2023-37061 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T14:37:20.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chamilo/chamilo-lms/commit/75e9b3e0acac6f7a643da6ff19a00d55a94417a1 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-116-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-languages-management
CVE ID: CVE-2023-37062 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T14:31:48.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chamilo/chamilo-lms/commit/c263933d1d958edee3999820f636c8cb919d03d1 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-115-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-course-category
CVE ID: CVE-2023-37063 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T14:31:12.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chamilo/chamilo-lms/commit/546a18b0bd1446123f4e29f81f42e71b761f51b7 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-117-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-careers-amp-promotions-management
CVE ID: CVE-2023-37064 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T14:30:42.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chamilo/chamilo-lms/commit/91ecc6141de6de9483c5a31fbb9fa91450f24940 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-119-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-extra-fields-management
CVE ID: CVE-2023-37065 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T14:30:07.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chamilo/chamilo-lms/commit/da61f287d2e508a5e940953b474051d0f21e91c0 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-118-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-session-category-management
CVE ID: CVE-2023-37066 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T14:29:22.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chamilo/chamilo-lms/commit/4f7b5ebf90c35999917c231276e47a4184275690 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-114-2023-06-06-Low-impact-Low-risk-XSS-through-admin-account-skills
CVE ID: CVE-2023-37067 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T14:35:09.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chamilo/chamilo-lms/commit/c75ff227bcf00e9f88e9477b78eaeed9e0668905 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-120-2023-06-07-Low-impact-Low-risk-XSS-through-admin-account-classesusergroups-management
CVE ID: CVE-2023-37068 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T15:57:30.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password fields, enabling SQL Injection attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37068-Exploit.md - https://github.com/riteshs4hu/
erences: - https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37068-Exploit.md - https://github.com/riteshs4hu/My-CVE/blob/main/CVE-2023-37068-Exploit.md
CVE ID: CVE-2023-37069 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:37:39.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields during the login process, enabling an attacker to inject malicious SQL code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://code-projects.org/online-hospital-management-system-in-php-with-source-cod
CISA ADP Vulnrichment: References: - https://code-projects.org/online-hospital-management-system-in-php-with-source-code/ - https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37069-Exploit.md - https://github.com/riteshs4hu/My-CVE/blob/main/CVE-2023-37069-Exploit.md
CVE ID: CVE-2023-37070 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T16:13:59.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://code-projects.org/hospital-information-system-in-php-with-source-code/ - https://github.com/InfoSecWarrior/Offensive-Payloads/blob/main/Cross-Site-Scripting-XSS-Payloads.txt - https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37070-Exploit.md - https://github.com/riteshs4hu/My-CVE/blob/main/CVE-2023-37070-Exploit.md
CVE ID: CVE-2023-37117 State: PUBLISHED Published: 2024-01-12T00:00:00 Last Updated: 2024-09-03T18:14:41.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.live555.com/liveMedia/public/changelog.txt - http://lists.live555.com/pipermail/live-devel/2023-June/022331.html
CVE ID: CVE-2023-37122 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:12:52.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Settings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bagesoft/bagecms/issues/6
CVE ID: CVE-2023-37124 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:49:14.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seacms-com/seacms/issues/24
CVE ID: CVE-2023-37125 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:48:30.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seacms-com/seacms/issues/25
CVE ID: CVE-2023-37131 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:47:46.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the component /public/admin/profile/update.html of YznCMS v1.1.0 allows attackers to arbitrarily change the Administrator password via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ken678/yzncms/issues/2
CVE ID: CVE-2023-37132 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:12:24.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/45
CVE ID: CVE-2023-37133 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:11:15.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/46
CVE ID: CVE-2023-37134 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:10:48.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/47