Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
private registry are affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4180 - https://github.com/docker/for-win/issues/13344
CVE ID: CVE-2023-1803 State: PUBLISHED Published: 2023-04-14T13:40:27.226Z Last Updated: 2025-02-06T20:02:22.436Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: DTS Electronics Products: Redline Router Problem Types: CWE-289 Description: Authentication Bypass by Alternate Name vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass.This issue affects Redline Router: before 7.17. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0227
CVE ID: CVE-2023-1804 State: PUBLISHED Published: 2023-05-02T07:04:56.944Z Last Updated: 2025-01-30T14:36:50.431Z Vendors: Unknown Products: Product Catalog Feed by PixelYourSite Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/55b28fa6-a54f-4365-9d59-f9e331c1e11b
CVE ID: CVE-2023-1805 State: PUBLISHED Published: 2023-05-02T07:04:54.297Z Last Updated: 2025-01-30T14:44:26.494Z Vendors: Unknown Products: Product Catalog Feed by PixelYourSite Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/46b4582f-7651-4b74-a00b-1788587ecfa8
CVE ID: CVE-2023-1806 State: PUBLISHED Published: 2023-05-08T13:58:13.983Z Last Updated: 2025-05-05T16:06:17.450Z Vendors: Unknown Products: WP Inventory Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/38d99c7d-2d10-4910-b95a-1cb545b813c4
CVE ID: CVE-2023-1807 State: PUBLISHED Published: 2023-06-09T05:33:31.920Z Last Updated: 2024-12-20T23:35:44.021Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: staxwp Products: Elementor Addons, Widgets and Enhancements – Stax Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.3. This is due to missing or incorrect nonce validation on the toggle_widget function. This makes it possible for unauthenticated attackers to enable or disable Elementor widgets via a forged request granted th
s makes it possible for unauthenticated attackers to enable or disable Elementor widgets via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c12094bd-aa23-4f9b-92e1-d1d4284fb2a0?source=cve - https://plugins.trac.wordpress.org/browser/stax-addons-for-elementor/trunk/core/admin/pages/Widgets.php#L31
CVE ID: CVE-2023-1809 State: PUBLISHED Published: 2023-05-02T07:04:53.506Z Last Updated: 2025-01-30T14:47:05.448Z Vendors: Unknown Products: Download Manager Problem Types: CWE-200 Information Exposure Description: The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/57f0a078-fbeb-4b05-8892-e6d99edb82c1
CVE ID: CVE-2023-1810 State: PUBLISHED Published: 2023-04-04T21:39:33.940Z Last Updated: 2025-02-13T16:39:31.752Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1414018 - https://lists.fedoraproject.org/archives/list/package-announc
nnel-update-for-desktop.html - https://crbug.com/1414018 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1811 State: PUBLISHED Published: 2023-04-04T21:39:34.131Z Last Updated: 2025-02-13T16:39:32.339Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1420510 - https://lists.fedoraproject.org/archives/list/package-ann
-channel-update-for-desktop.html - https://crbug.com/1420510 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1812 State: PUBLISHED Published: 2023-04-04T21:39:34.328Z Last Updated: 2025-02-13T16:39:32.962Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1418224 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraprojec
top.html - https://crbug.com/1418224 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1813 State: PUBLISHED Published: 2023-04-04T21:39:34.424Z Last Updated: 2025-02-13T16:39:33.510Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1423258 - https://lists.fedoraproject.org/archi
g.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1423258 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1814 State: PUBLISHED Published: 2023-04-04T21:39:34.568Z Last Updated: 2025-02-13T16:39:34.070Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1417325 - https://lists.fedoraproject.org/archives/list/package-announc
nnel-update-for-desktop.html - https://crbug.com/1417325 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1815 State: PUBLISHED Published: 2023-04-04T21:39:34.671Z Last Updated: 2025-02-13T16:39:34.633Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1278708 - https://lists.fedoraproject.org/archives/list/
3/04/stable-channel-update-for-desktop.html - https://crbug.com/1278708 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1816 State: PUBLISHED Published: 2023-04-04T21:39:34.781Z Last Updated: 2025-02-13T16:39:35.203Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1413919 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.
p.html - https://crbug.com/1413919 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1817 State: PUBLISHED Published: 2023-04-04T21:39:34.963Z Last Updated: 2025-02-13T16:39:35.750Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1418061 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fed
-for-desktop.html - https://crbug.com/1418061 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1818 State: PUBLISHED Published: 2023-04-04T21:39:35.092Z Last Updated: 2025-02-13T16:39:36.365Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1223346 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NC
3346 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1819 State: PUBLISHED Published: 2023-04-04T21:39:35.207Z Last Updated: 2025-02-13T16:39:36.979Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1406588 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG
://crbug.com/1406588 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1820 State: PUBLISHED Published: 2023-04-04T21:39:35.325Z Last Updated: 2025-02-13T16:39:37.503Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1408120 - https://lists.fedoraproject.org/ar
blog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1408120 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1821 State: PUBLISHED Published: 2023-04-04T21:39:35.443Z Last Updated: 2025-02-13T16:39:38.206Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1413618 - https://lists.fedoraproject.org/archives/list/package-announce@list
pdate-for-desktop.html - https://crbug.com/1413618 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1822 State: PUBLISHED Published: 2023-04-04T21:39:35.557Z Last Updated: 2025-02-13T16:39:38.784Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1066555 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK
1066555 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1823 State: PUBLISHED Published: 2023-04-04T21:39:35.672Z Last Updated: 2025-02-13T16:39:39.340Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop.html - https://crbug.com/1406900 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message
tps://crbug.com/1406900 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://www.debian.org/security/2023/dsa-5386 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1825 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T16:56:43.350Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-201 Description: An issue has been discovered in GitLab EE affecting all versions starting from 15.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. It was possible to disclose issue notes to an unauthorized user at project export. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/384035 - https://gitlab.com/gitlab-or
CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/384035 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1825.json
CVE ID: CVE-2023-1826 State: PUBLISHED Published: 2023-04-04T09:00:05.968Z Last Updated: 2025-02-11T17:04:46.685Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Computer and Laptop Store Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-224841 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA
The identifier VDB-224841 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224841 - https://vuldb.com/?ctiid.224841 - http://packetstormsecurity.com/files/171790/Online-Computer-And-Laptop-Store-1.0-Shell-Upload.html
CVE ID: CVE-2023-1827 State: PUBLISHED Published: 2023-04-04T09:31:03.874Z Last Updated: 2024-08-02T06:05:26.164Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Centralized Covid Vaccination Records System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/manage_location.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b
id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224842 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224842 - https://vuldb.com/?ctiid.224842 - https://github.com/ZERO-XX-ONE/bug_report/blob/main/SQLi.md
CVE ID: CVE-2023-1829 State: PUBLISHED Published: 2023-04-12T11:16:59.101Z Last Updated: 2025-02-13T16:39:39.975Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Linux Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgra
ng the structure. A local attacker user can use this vulnerability to elevate its privileges to root. We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8c710f75256bb3cf05ac7b1672c82b92c43f3d28 - https://kernel.dance/#8c710f75256bb3cf05ac7b1672c82b92c43f3d28 - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - https://security.netapp.com/advisory/ntap-20230601-0001/