Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47872 State: PUBLISHED Published: 2023-11-30T16:46:53.076Z Last Updated: 2024-08-02T21:16:43.701Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: gVectors Team Products: wpForo Forum Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gVectors Team wpForo Forum allows Stored XSS.This issue affects wpForo Forum: from n/a through 2.2.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-plugin-2-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47873 State: PUBLISHED Published: 2024-03-26T20:34:49.984Z Last Updated: 2024-08-06T15:17:30.069Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WEN Solutions Products: WP Child Theme Generator Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-child-theme-generator/wordpress-wp-child-theme-generator-plugin-1-0-8-arbitrary-file-upload-vulnerabilit
ulnerability/wp-child-theme-generator/wordpress-wp-child-theme-generator-plugin-1-0-8-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-47874 State: PUBLISHED Published: 2024-02-29T05:31:09.730Z Last Updated: 2024-08-09T20:44:08.571Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Perfmatters Products: Perfmatters Problem Types: CWE-862 Description: Missing Authorization vulnerability in Perfmatters.This issue affects Perfmatters: from n/a through 2.1.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/perfmatters/wordpress-perfmatters-plugin-2-1-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-47875 State: PUBLISHED Published: 2023-11-30T16:12:56.990Z Last Updated: 2024-08-02T21:16:44.022Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Perfmatters Products: Perfmatters Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Perfmatters allows Cross Site Request Forgery.This issue affects Perfmatters: from n/a through 2.1.6. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/perfmatters/wordpress-perfmatters-plugin-2-1-6-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve
CVE ID: CVE-2023-47876 State: PUBLISHED Published: 2023-11-30T16:43:42.700Z Last Updated: 2024-11-20T20:48:32.685Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Perfmatters Products: Perfmatters Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows Reflected XSS.This issue affects Perfmatters: from n/a through 2.1.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/perfmatters/wordpress-perfmatters-plugin-2-1-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47877 State: PUBLISHED Published: 2023-11-30T16:40:30.617Z Last Updated: 2024-08-02T21:16:43.622Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Perfmatters Products: Perfmatters Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows Stored XSS.This issue affects Perfmatters: from n/a before 2.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/perfmatters/wordpress-perfmatters-plugin-2-1-6-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47882 State: PUBLISHED Published: 2023-12-27T00:00:00 Last Updated: 2024-08-02T21:16:43.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.yunyi.smartcamera - https://github.com/actuator/yi/blob/main/CWE-319.md
CVE ID: CVE-2023-47883 State: PUBLISHED Published: 2023-12-27T00:00:00 Last Updated: 2024-08-02T21:16:43.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/CWE-94.md - https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/AFC-POC.apk - https://github.com/actuator/com.altamirano.fabricio.tvbrowser/blob/main/TVBrowserDemo.gif
CVE ID: CVE-2023-47889 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-06-20T20:12:47.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly concerning because these actions include powering off, system reboot & entering recovery mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.bdrm.superreboo
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md
CVE ID: CVE-2023-47890 State: PUBLISHED Published: 2024-01-08T00:00:00.000Z Last Updated: 2025-06-03T14:39:20.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: pyLoad 0.5.0 is vulnerable to Unrestricted File Upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://pyload.com - https://github.com/pyload/pyload/security/advisories/GHSA-h73m-pcfw-25h2
CVE ID: CVE-2023-47990 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-09-16T18:27:30.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in components/table_manager/html/edit_admin_table.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/d3do-23/cuppacve/blob/main/sql%20in%20edit_admin_table.php
CVE ID: CVE-2023-47992 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-06-17T16:59:25.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47992
CVE ID: CVE-2023-47993 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-06-20T15:21:48.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47993
CVE ID: CVE-2023-47994 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-06-03T14:33:44.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47994
CVE ID: CVE-2023-47995 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-11-04T18:19:11.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47995 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE/ - https://lists.fedoraproject.org/archives/list/package-anno
fedoraproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM/
CVE ID: CVE-2023-47996 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-05-14T19:13:44.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47996
CVE ID: CVE-2023-47997 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-11-04T18:19:13.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thelastede/FreeImage-cve-poc/tree/master/CVE-2023-47997 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE/ - https://lists.fedoraproject.org/archives/list/package-announce%
aproject.org/message/VLDUDJOWZAKBQMQ7XYNJTRCFPOB56BOE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3ZNVRL5PCTMMA3ZBDKH5WH4RT4ST3HW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EDK7DSADYUHJFNVSRGJHEFJGMWRGGDLM/
CVE ID: CVE-2023-48003 State: PUBLISHED Published: 2023-12-26T00:00:00 Last Updated: 2024-08-02T21:16:44.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redirect targeted victims to any URL via the '<meta http-equiv="refresh"' in the WebSocket messages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/passtheticket/vulnerability-research/blob/main/aspnetzero_html_injection_via_websockets_messages.md - https://docs.unsafe-inline.com/0day/asp.net-zero-v12.3.0-html-injection-leads-to-open-redirect-via-websockets-cve-2023-48003
CVE ID: CVE-2023-48010 State: PUBLISHED Published: 2024-12-05T00:00:00 Last Updated: 2024-12-11T16:38:32.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.st.com/resource/en/reference_manual/rm0452-spc58-h-line--32-bit-power-architecture-automotive-mcu-triple-z4-cores-200-mhz-10-mbytes-flash-hsm-asild-stmicroelectronics.pdf - https:
-bit-power-architecture-automotive-mcu-triple-z4-cores-200-mhz-10-mbytes-flash-hsm-asild-stmicroelectronics.pdf - https://plaxidityx.com/blog/blog-post/is-your-memory-protecteduncovering-hidden-vulnerabilities-in-automotive-mpu-mechanisms/
CVE ID: CVE-2023-48011 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T19:47:02.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2611 - https://github.com/gpac/gpac/commit/c70f49dda4946d6db6aa55588f6a756b76bd84ea
CVE ID: CVE-2023-48013 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:11:00.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2612 - https://github.com/gpac/gpac/commit/cd8a95c1efb8f5bfc950b86c2ef77b4c76f6b893
CVE ID: CVE-2023-48014 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:09:26.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2613 - https://github.com/gpac/gpac/commit/66abf0887c89c29a484d9e65e70882794e9e3a1b
CVE ID: CVE-2023-48016 State: PUBLISHED Published: 2023-12-01T00:00:00 Last Updated: 2024-08-02T21:16:43.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Serhatcck/cves/blob/main/CVE-2023-48016-restaurant-table-booking-system-SQLInjection.md
CVE ID: CVE-2023-48017 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-29T13:59:51.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/Add%20permissions%20to%20CSRF%20in%20Permission%20Management.md
CVE ID: CVE-2023-48020 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:09:44.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/Enable%20CSRF%20for%20Task%20Management%20Office.md
CVE ID: CVE-2023-48021 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:08:34.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/moonsabc123/dreamer_cms/blob/main/There%20is%20a%20CSRF%20in%20the%20task%20management%20editing%20task%20area.md
CVE ID: CVE-2023-48022 State: PUBLISHED Published: 2023-11-28T00:00:00 Last Updated: 2024-10-28T16:10:47.152927 Vendors: n/a Products: n/a Problem Types: n/a Description: Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0 - https://docs.ray.io/en/latest/ray-security/index.html - https://www.vicarius.io/vsociety/post
ray-versions-2-6-3-2-8-0 - https://docs.ray.io/en/latest/ray-security/index.html - https://www.vicarius.io/vsociety/posts/shadowray-cve-2023-48022-exploit - https://atlas.mitre.org/studies/AML.CS0023
CVE ID: CVE-2023-48023 State: PUBLISHED Published: 2023-11-28T00:00:00 Last Updated: 2024-10-10T20:23:31.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bishopfox.com/blog/ray-versions-2-6-3-2-8-0 - https://docs.ray.io/en/latest/ray-security/index.html
CVE ID: CVE-2023-48024 State: PUBLISHED Published: 2023-11-17T00:00:00 Last Updated: 2024-08-29T17:27:45.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hash_destroy(hash_table_t *h) at hash.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/howerj/liblisp/issues/1
CVE ID: CVE-2023-48025 State: PUBLISHED Published: 2023-11-17T00:00:00 Last Updated: 2024-08-29T14:38:49.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liblisp through commit 4c65969 was discovered to contain a out-of-bounds-read vulnerability in unsigned get_length(lisp_cell_t * x) at eval.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/howerj/liblisp/issues/1
CVE ID: CVE-2023-48028 State: PUBLISHED Published: 2023-11-17T00:00:00.000Z Last Updated: 2025-09-29T13:47:45.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/bugplorer/9ae8ad7a9f2a3053ebd07a1b7b54deae - https://nitipoom-jar.github.io/CVE-2023-48028/ - https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-4802
//nitipoom-jar.github.io/CVE-2023-48028/ - https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48028
CVE ID: CVE-2023-48029 State: PUBLISHED Published: 2023-11-17T00:00:00.000Z Last Updated: 2025-09-29T13:44:13.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/bugplorer/09d312373066a3b72996ebd76a7a23a5 - https://niti
- CISA ADP Vulnrichment: References: - https://gist.github.com/bugplorer/09d312373066a3b72996ebd76a7a23a5 - https://nitipoom-jar.github.io/CVE-2023-48029/ - https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48029
CVE ID: CVE-2023-48031 State: PUBLISHED Published: 2023-11-17T00:00:00.000Z Last Updated: 2025-09-29T13:53:43.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the comment function, an attacker can bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type. This can enable the attacker to execute arbitrary code or establish a reverse shell, leading to unauthorized file writes or control over the victim's station via a crafted file upload operation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
tion via a crafted file upload operation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugplorer.github.io/cve-opensupports/ - https://nitipoom-jar.github.io/CVE-2023-48031/ - https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-48031
CVE ID: CVE-2023-48034 State: PUBLISHED Published: 2023-11-27T00:00:00 Last Updated: 2024-08-02T21:23:37.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/aprkr/CVE-2023-48034
CVE ID: CVE-2023-48039 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-02T21:23:37.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2679
CVE ID: CVE-2023-48042 State: PUBLISHED Published: 2023-11-28T00:00:00 Last Updated: 2024-08-02T21:23:37.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://addons.prestashop.com/en/search-filters/18575-amazzing-filter.html - https://medium.com/%40nasir.synack/uncovering-a-cross-site-scripting-vulnerability-cve-2023-48042-in-amazzing-filters-prestashop-2e4a9f8b655e
CVE ID: CVE-2023-48049 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-08-02T21:23:37.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search (aka website_search_blog) v. 13.0 through 13.0.1.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the name parameter in controllers/main.py component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/luvsn/OdZoo/tree/main/exploits/website_search_blog
CVE ID: CVE-2023-48050 State: PUBLISHED Published: 2023-12-15T00:00:00 Last Updated: 2024-08-02T21:23:37.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-attendance) v. 13.0 through 16.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the db parameter in the controllers/controllers.py component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/luvsn/OdZoo/tree/main/exploits/odoo-biometric-attendance