Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-34833 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-11-27T15:00:55.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://note.youdao.com/s/3tge43wH
CVE ID: CVE-2023-34834 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T21:48:44.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Browsing vulnerability in MCL-Net version 4.3.5.8788 webserver running on default port 5080, allows attackers to gain sensitive information about the configured databases via the "/file" endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.mclv4.mcl-collection.com/index.php - https://www.exploit-db.com/exploits/51542
CVE ID: CVE-2023-34835 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-05T19:10:41.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable delete_file parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-34835/blob/main/README.md
CVE ID: CVE-2023-34836 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-05T19:12:42.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-34836/blob/main/README.md
CVE ID: CVE-2023-34837 State: PUBLISHED Published: 2023-06-27T00:00:00.000Z Last Updated: 2025-02-13T16:55:40.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a vulnerable parameter GrpPath. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-34837/blob/main/README.md
CVE ID: CVE-2023-34838 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-02T21:34:24.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-34838/blob/main/README.md
CVE ID: CVE-2023-34839 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-02T21:34:51.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain privileges via a Custom CSRF exploit to create new user function in the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-34839/blob/main/README.md
CVE ID: CVE-2023-34840 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-27T16:01:12.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://alexcrack.com - https://github.com/alexcrack/angular-ui-notification - https://github.com/Xh4H/CVE-2023-34840
CVE ID: CVE-2023-34842 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T17:56:46.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://dedecms.com - https://www.dedecms.com/
CVE ID: CVE-2023-34843 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T14:52:37.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rootd4ddy/CVE-2023-34843
CVE ID: CVE-2023-34844 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T21:36:45.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hacku.top/wl/?id=MACBtnorZyp6hC3E5bw2CqBAusuWoKe3
CVE ID: CVE-2023-34845 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-08-02T16:17:04.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1508 - https://githu
ional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1508 - https://github.com/bludit/bludit/issues/1212#issuecomment-649514491 - https://github.com/bludit/bludit/issues/1369#issuecomment-940806199
CVE ID: CVE-2023-34849 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T21:22:41.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cczzmm/IOT-POC/tree/main/Ikuai
CVE ID: CVE-2023-34852 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:09:54.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: PublicCMS <=V4.0.202302 is vulnerable to Insecure Permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sanluan/PublicCMS - https://github.com/funny-kill/CVE-2023-34852/blob/main/CVE-2023-34852.md
CVE ID: CVE-2023-34853 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T13:49:27.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/Bios/softfiles/17136/X12DPG-QR_1.4b_X1.02.61_SUM2.10.0.zip. - https://www.supermicro.com/en/support/security_BIOS_Aug_2023
CVE ID: CVE-2023-34855 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:28:50.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability in Youxun Electronic Equipment (Shanghai) Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hashshfza/Vulnerability/issues/1
CVE ID: CVE-2023-34856 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T18:16:15.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /auth_pic.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hashshfza/Vulnerability/issues/2
CVE ID: CVE-2023-34865 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:03:57.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ujcms/ujcms/issues/5
CVE ID: CVE-2023-34867 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:00:45.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at jerry-core/ecma/base/ecma-property-hashmap.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5084
CVE ID: CVE-2023-34868 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-02T20:38:51.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start at jerry-core/parser/js/js-parser-statm.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5083
CVE ID: CVE-2023-34869 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-23T20:44:51.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Catering System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php?controller=pjAdmin&action=pjActionForgot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/catering-system/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-34872 State: PUBLISHED Published: 2023-07-31T00:00:00.000Z Last Updated: 2025-11-04T19:16:50.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/poppler/poppler/-/commit/591235c8b6c65a2eee88991b9ae73490fd9afdfe - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1399 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFBT7
r/-/issues/1399 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFBT75QHBWNMSDAHSXZQ2I3PBJWID36K/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3H3GOWFE3C7543GMEN7LY4GWMWJ7D2G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XXL3L6RJOTLGCN7GLH2OLLNF4FJ4T7I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQ3NYJ43U2MA7COKGMJDARZUAAOP45D4/
CVE ID: CVE-2023-34873 State: PUBLISHED Published: 2025-05-23T00:00:00.000Z Last Updated: 2025-05-23T18:19:15.324Z Vendors: MOBOTIX Products: P3, Mx6 Problem Types: CWE-78 Description: On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mobotix.com/en/node/13391 - https://www.cisa.gov/news-events/ics-advisories/icsa-24-235-03
CVE ID: CVE-2023-34878 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-02T20:37:37.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ujcms/ujcms/issues/6
CVE ID: CVE-2023-34880 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:07:23.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.pumpk1n.com/2023/06/06/cmseasy-v7-7-7-7-20230520-path-traversal/
CVE ID: CVE-2023-34916 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-18T20:42:10.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fuge/cms/issues/4 - https://payatu.com/advisory/unvalidated-open-redirection-fuge-cms-v1-0/
CVE ID: CVE-2023-34917 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-18T20:41:43.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fuge CMS v1.0 contains an Open Redirect vulnerability in member/RegisterAct.java. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fuge/cms/issues/3 - https://payatu.com/advisory/unvalidated-redirection-vulnerability-in-fuge-cms-v1-0/
CVE ID: CVE-2023-34923 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-04T21:41:52.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response manipulation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://char49.com/articles/topdesk-vulnerable-to-xml-signature-wrapping-attacks - https://my.topdesk.com/tas/public/ssp/content/detail/knowledgeitem?unid=56a16ba1c2824e9a82655892ba75d3c0
CVE ID: CVE-2023-34924 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-12-03T18:58:35.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the function SetAPInfoById. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChrisL0tus/CVE-2023-34924
CVE ID: CVE-2023-34927 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-04T21:40:56.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/casdoor/casdoor/issues/1531 - https://casdoor.org/ - https://gist.github.com/omriman067/4e90a3a4ffa40984f011d8777a995469
CVE ID: CVE-2023-34928 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:54:06.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34928.md
CVE ID: CVE-2023-34929 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:50:11.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34929.md
CVE ID: CVE-2023-34930 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:47:07.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34930.md
CVE ID: CVE-2023-34931 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:45:53.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34931.md
CVE ID: CVE-2023-34932 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:45:00.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34932.md
CVE ID: CVE-2023-34933 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:43:39.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34933.md
CVE ID: CVE-2023-34934 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:41:46.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34934.md
CVE ID: CVE-2023-34935 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T15:30:31.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34935.md
CVE ID: CVE-2023-34936 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:32:27.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34936.md
CVE ID: CVE-2023-34937 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:28:35.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/h4kuy4/vuln/blob/main/H3C_B1STW/CVE-2023-34937.md
CVE ID: CVE-2023-34939 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T18:25:18.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the component UploadProgress.ashx. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/firsov/onlyoffice - https://github.com/ONLYOFFICE/CommunityServer/blob/master/CHANGELOG.md#version-1252 - https://github.com/firsov/onlyoffice/blob/main/CVE-2023-34939-PoC.md
CVE ID: CVE-2023-34940 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-06T15:56:48.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/URLFilterList_Stack_BOF.md
CVE ID: CVE-2023-34941 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2024-10-28T01:38:29.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/StoredXSS_FirewallURLFilter.md
CVE ID: CVE-2023-34942 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2024-08-02T16:17:04.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10LX_2.0.0.39/MAC_Address_StackBOF.md
CVE ID: CVE-2023-34944 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T02:17:58.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://github.com/chamilo/chamilo-lms/commit/0d0c88c4806280ac9b70a299d6e3099269c9bc54 - https://github.com/chamilo/chamilo-lms/commit/f6e83550c2d17fc93a65ec4be602a78312289f37 - https://support.chamilo.org/projects/chamilo-18/wiki/Sec