Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1831 State: PUBLISHED Published: 2023-04-17T14:21:13.233Z Last Updated: 2024-12-06T23:05:08.457Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-200 Description: Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other operations if the experimental audit logging configuration was enabled (ExperimentalAuditSettings section in config). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2023-1832 State: PUBLISHED Published: 2023-10-04T13:05:37.522Z Last Updated: 2024-09-19T14:42:30.285Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: n/a, Red Hat Products: candlepin-4.3.7, candlepin-4.3.8, Red Hat Satellite 6 Problem Types: CWE-284 Description: An improper access control flaw was found in Candlepin. An attacker can create data scoped under another customer/tenant, which can result in loss of confidentiality and availability for the affected customer/tenant. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-1832 - https://bugzilla.redhat.com/s
ISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-1832 - https://bugzilla.redhat.com/show_bug.cgi?id=2184364
CVE ID: CVE-2023-1833 State: PUBLISHED Published: 2023-04-14T13:45:17.129Z Last Updated: 2025-02-06T19:34:05.226Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: DTS Electronics Products: Redline Router Problem Types: CWE-305 Description: Authentication Bypass by Primary Weakness vulnerability in DTS Electronics Redline Router firmware allows Authentication Bypass.This issue affects Redline Router: before 7.17. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0227
CVE ID: CVE-2023-1834 State: PUBLISHED Published: 2023-05-11T18:01:06.560Z Last Updated: 2025-01-24T21:15:54.175Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Rockwell Automation Products: Kinetix 5500 EtherNet/IP Servo Drive Problem Types: CWE-284 Description: Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running v7.13 may have the telnet and FTP ports open by default. This could potentially allow attackers unauthorized access to the device through the open ports. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.cus
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139441
CVE ID: CVE-2023-1835 State: PUBLISHED Published: 2023-05-15T12:15:46.279Z Last Updated: 2025-01-14T18:17:11.781Z Vendors: Unknown Products: Ninja Forms Contact Form Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b5fc223c-5ec0-44b2-b2f6-b35f9942d341
CVE ID: CVE-2023-1836 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-29T21:46:34.969Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. When viewing an XML file in a repository in "raw" mode, it can be made to render as HTML if viewed under specific circumstances Additional Analy
in a repository in "raw" mode, it can be made to render as HTML if viewed under specific circumstances Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/404613 - https://hackerone.com/reports/1923293 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1836.json
CVE ID: CVE-2023-1837 State: PUBLISHED Published: 2023-05-23T18:23:04.113Z Last Updated: 2025-01-17T17:44:58.132Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: HYPR Products: HYPR Server Problem Types: CWE-306 Description: Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: before 8.0 (with enabled Legacy APIs) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hypr.com/security-advisories
CVE ID: CVE-2023-1838 State: PUBLISHED Published: 2023-04-05T00:00:00 Last Updated: 2024-08-02T06:05:26.723Z Vendors: n/a Products: Kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/netdev/20220516084213.26854-1-jasowang%40redhat.com/T/ - https://security.netapp.com/advisory/ntap-20230517-0003/
CVE ID: CVE-2023-1839 State: PUBLISHED Published: 2023-05-15T12:15:45.502Z Last Updated: 2025-01-24T21:23:08.125Z Vendors: Unknown Products: Product Addons & Fields for WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.6 does not sanitize and escape some of its setting fields, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fddc5a1c-f26
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fddc5a1c-f267-4ef4-8acf-731dbecac450
CVE ID: CVE-2023-1840 State: PUBLISHED Published: 2023-04-04T19:00:12.852Z Last Updated: 2025-01-13T16:56:39.525Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: jonkastonka Products: Sp*tify Play Button for WordPress Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Sp*tify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inj
put escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/308f6887-7c1c-4efd-85e2-b71bb6d26dab?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2893653%40spotify-play-button-for-wordpress%2Ftrunk&old=2870608%40spotify-play-button-for-wordpress%2Ft
l=&reponame=&new=2893653%40spotify-play-button-for-wordpress%2Ftrunk&old=2870608%40spotify-play-button-for-wordpress%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2023-1841 State: PUBLISHED Published: 2024-02-29T05:09:14.716Z Last Updated: 2024-08-02T06:05:26.725Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Honeywell Products: MPA2 Access Panel Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows XSS Using Invalid Characters.This issue affects MPA2 Access Panel all version prior to R1.00.08.05. Honeywell released firmware update package MPA2 firmware R1.00.08.05 which addresses this vulnerability. This version and all later versions correct the reported vulnerability
e R1.00.08.05 which addresses this vulnerability. This version and all later versions correct the reported vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://buildings.honeywell.com/us/en/brands/our-brands/security/support-and-resources/product-resources/eol-and-security-notices - https://https://www.honeywell.com/us/en/product-security
CVE ID: CVE-2023-1842 State: REJECTED Published: N/A Last Updated: 2023-04-13T00:00:00 Description: No description available.
CVE ID: CVE-2023-1843 State: PUBLISHED Published: 2023-06-09T05:33:18.588Z Last Updated: 2024-12-28T00:52:05.371Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: xpeedstudio Products: Metform Elementor Contact Form Builder – Flexible and Design-Friendly Contact Form builder plugin for WordPress Problem Types: CWE-862 Missing Authorization Description: The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to unauthorized permalink structure update due to a missing capability check on the permalink_setup function in versions up to, and including, 3.3.0. This makes it possible for unauthenticated attackers to change the permalink structu
rsions up to, and including, 3.3.0. This makes it possible for unauthenticated attackers to change the permalink structure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5db00eb6-3e05-42fa-bb84-2df4bcae3955?source=cve - https://plugins.trac.wordpress.org/browser/metform/trunk/plugin.php#L544 - https://plugins.trac.wordpress.org/changeset/2907471/
CVE ID: CVE-2023-1844 State: PUBLISHED Published: 2023-06-28T02:34:23.370Z Last Updated: 2024-11-06T18:51:40.478Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wedevs Products: Subscribe2 – Form, Email Subscribers & Newsletters Problem Types: CWE-862 Missing Authorization Description: The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capability check when sending test emails in versions up to, and including, 10.40. This makes it possible for author-level attackers to send emails with arbitrary content and attachments to site users. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
ls with arbitrary content and attachments to site users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c34ce601-5cf9-433f-bc9d-5c705eba6b08?source=cve - https://plugins.trac.wordpress.org/browser/subscribe2/trunk/admin/send-email.php#L12 - https://plugins.trac.wordpress.org/changeset/2930676
CVE ID: CVE-2023-1845 State: PUBLISHED Published: 2023-04-05T06:00:07.498Z Last Updated: 2024-08-02T06:05:26.880Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employee_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224985 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
c and may be used. The identifier VDB-224985 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224985 - https://vuldb.com/?ctiid.224985 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%202.pdf
CVE ID: CVE-2023-1846 State: PUBLISHED Published: 2023-04-05T06:31:03.116Z Last Updated: 2024-08-02T06:05:26.085Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Online Payroll System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/deduction_row.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224986 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program C
and may be used. VDB-224986 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224986 - https://vuldb.com/?ctiid.224986 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%204.pdf
CVE ID: CVE-2023-1847 State: PUBLISHED Published: 2023-04-05T06:57:33.916Z Last Updated: 2024-08-02T06:05:26.079Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Payroll System 1.0 and classified as critical. This issue affects some unknown processing of the file attendance.php. The manipulation of the argument employee leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224987. Additional Analyst Notes: - CVE Program Conta
ay be used. The associated identifier of this vulnerability is VDB-224987. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224987 - https://vuldb.com/?ctiid.224987 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%201.pdf
CVE ID: CVE-2023-1848 State: PUBLISHED Published: 2023-04-05T07:00:05.908Z Last Updated: 2024-08-02T06:05:26.658Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/attendance_row.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224988. Additional Analyst Notes: - CVE Program Conta
ublic and may be used. The identifier of this vulnerability is VDB-224988. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224988 - https://vuldb.com/?ctiid.224988 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%203.pdf
CVE ID: CVE-2023-1849 State: PUBLISHED Published: 2023-04-05T07:00:07.967Z Last Updated: 2024-11-22T21:39:42.537Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cashadvance_row.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224989 was assigned to this vulnerability. Additional Analyst
isclosed to the public and may be used. The identifier VDB-224989 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224989 - https://vuldb.com/?ctiid.224989 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%205.pdf
CVE ID: CVE-2023-1850 State: PUBLISHED Published: 2023-04-05T07:31:03.643Z Last Updated: 2024-08-02T06:05:26.807Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-224990 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE
he public and may be used. VDB-224990 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224990 - https://vuldb.com/?ctiid.224990 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%206.pdf
CVE ID: CVE-2023-1851 State: PUBLISHED Published: 2023-04-05T07:39:29.593Z Last Updated: 2025-02-10T18:07:06.079Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employee_add.php. The manipulation of the argument of leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224991. Additional Analyst Notes: - CVE Progr
ic and may be used. The associated identifier of this vulnerability is VDB-224991. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224991 - https://vuldb.com/?ctiid.224991 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%207.pdf
CVE ID: CVE-2023-1852 State: PUBLISHED Published: 2023-04-05T07:40:11.360Z Last Updated: 2024-08-02T06:05:26.694Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1.0. This vulnerability affects unknown code of the file /admin/deduction_edit.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-224992. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224992 - https:/
y is VDB-224992. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224992 - https://vuldb.com/?ctiid.224992 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%208.pdf
CVE ID: CVE-2023-1853 State: PUBLISHED Published: 2023-04-05T07:40:12.354Z Last Updated: 2025-02-10T18:06:25.822Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Payroll System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Online Payroll System 1.0. This issue affects some unknown processing of the file /admin/employee_edit.php. The manipulation of the argument of leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224993 was assigned to this vulnerability. Additional Analyst No
losed to the public and may be used. The identifier VDB-224993 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224993 - https://vuldb.com/?ctiid.224993 - https://github.com/E1CHO/cve_hub/blob/main/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide/Online%20Payroll%20System%20in%20PHP%20and%20MySQL%20Free%20Download%20A%20Comprehensive%20Guide%20-%20vlun%209.pdf
CVE ID: CVE-2023-1854 State: PUBLISHED Published: 2023-04-05T07:40:17.090Z Last Updated: 2024-08-02T06:05:26.779Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Graduate Tracer System Problem Types: CWE-613 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224994 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment:
be used. VDB-224994 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.224994 - https://vuldb.com/?ctiid.224994 - https://github.com/Jlan45/OGTSFCOIA/blob/main/unauthorizedaccess.md
CVE ID: CVE-2023-1855 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-12T16:08:11.549Z Vendors: n/a Products: Kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/all/20230318122758.2140868-1-linux%40roeck-us.net/ - https://lists.debian.org/debian-lts-announce/2023/0
lore.kernel.org/all/20230318122758.2140868-1-linux%40roeck-us.net/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - https://github.com/torvalds/linux/commit/cb090e64cf25602b9adaf32d5dfc9c8bec493cd1