Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-50955 State: PUBLISHED Published: 2024-02-21T14:32:06.614Z Last Updated: 2024-08-02T22:23:43.870Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-36 Description: IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7116610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/275777
CVE ID: CVE-2023-50956 State: PUBLISHED Published: 2024-12-18T15:24:57.948Z Last Updated: 2024-12-18T16:00:13.346Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Storage Defender - Resiliency Service Problem Types: CWE-256 Description: IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive user credentials from secret keys that are stored in clear text. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7178587
CVE ID: CVE-2023-50957 State: PUBLISHED Published: 2024-02-10T15:30:55.922Z Last Updated: 2025-04-24T15:45:39.842Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Storage Defender - Resiliency Service Problem Types: CWE-312 Description: IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtaining encrypted data from clear text key storage. IBM X-Force ID: 275783. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7115261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/275783
CVE ID: CVE-2023-50959 State: PUBLISHED Published: 2024-03-31T11:56:26.054Z Last Updated: 2024-08-02T22:23:43.912Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Cloud Pak for Business Automation Problem Types: CWE-497 Description: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1,2 2.0.2, 23.0.1, and 23.0.2 may allow end users to query more documents than expected from a connected Enterprise Content Management system when configured to use a system account. IBM X-Force ID: 275938. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
se a system account. IBM X-Force ID: 275938. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/275938
CVE ID: CVE-2023-50961 State: PUBLISHED Published: 2024-03-27T12:35:40.175Z Last Updated: 2024-08-02T22:23:44.133Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-79 Description: IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 275939. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145262 - https://exchange.xf
ulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/275939
CVE ID: CVE-2023-50962 State: PUBLISHED Published: 2024-02-02T01:18:59.448Z Last Updated: 2024-08-22T14:21:13.192Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: PowerSC Problem Types: CWE-319 Description: IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" (HSTS) web security policy mechanism. IBM X-Force ID: 276004. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7113759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/276004
CVE ID: CVE-2023-50963 State: PUBLISHED Published: 2024-01-19T01:30:49.594Z Last Updated: 2025-06-17T21:19:24.124Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Storage Defender - Data Protect Problem Types: CWE-601 Description: IBM Storage Defender - Data Protect 1.0.0 through 1.4.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 276101. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
hijacking. IBM X-Force ID: 276101. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/276101
CVE ID: CVE-2023-50964 State: PUBLISHED Published: 2024-06-30T18:12:32.203Z Last Updated: 2024-08-02T22:23:43.916Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 276102. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/276102
CVE ID: CVE-2023-50965 State: PUBLISHED Published: 2023-12-17T00:00:00 Last Updated: 2024-08-02T22:23:44.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/starnight/MicroHttpServer/issues/5 - https://github.com/starnight/MicroHttpServer/tree/43985708ef5fe7677392c54e229bd22e136c2665
CVE ID: CVE-2023-50966 State: PUBLISHED Published: 2024-03-19T00:00:00 Last Updated: 2024-08-02T22:23:44.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/potatosalad/erlang-jose - https://hexdocs.pm/jose/JOSE.html - https://github.com/P3ngu1nW/CVE_Request/blob/main/erlang-jose.md
CVE ID: CVE-2023-50967 State: PUBLISHED Published: 2024-03-20T00:00:00.000Z Last Updated: 2025-11-04T22:05:24.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/latchset/jose - https://github.com/P3ngu1nW/CVE_Request/blob/main/latch-jose.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OOBFVMOAV732C7PY74AHJ62ZNKT3ISZ6/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/OOBFVMOAV732C7PY74AHJ62ZNKT3ISZ6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIFPQUCLNWEAHYYJWCQD3AZPWYIV6YT3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7EGLOAFN2PWZ75ZRLTUDUZCIPH2VFZU/
CVE ID: CVE-2023-50968 State: PUBLISHED Published: 2023-12-26T11:45:55.393Z Last Updated: 2025-02-13T17:19:42.335Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-200, CWE-918 Description: Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations. The same uri can be operated to realize a SSRF attack also without authorizations. Users are recommended to upgrade to version 18.12.11, which fixes this issue. Additional Analyst Notes: - CVE Program Container: References: - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://ofbiz.apache.org/re
erences: - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://ofbiz.apache.org/release-notes-18.12.11.html - https://issues.apache.org/jira/browse/OFBIZ-12875 - https://lists.apache.org/thread/x5now4bk3llwf3k58kl96qvtjyxwp43q - http://www.openwall.com/lists/oss-security/2023/12/26/2
CVE ID: CVE-2023-50969 State: PUBLISHED Published: 2024-03-28T00:00:00.000Z Last Updated: 2025-03-13T15:46:53.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability than CVE-2021-45468. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.imperva.com/bundle/v14.7-waf-administration-guide/page/9282.htm - https://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html
CVE ID: CVE-2023-50974 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-06-17T16:02:00.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/SkypLabs/72ee00ecfa7d1a3494e2d69a24279c1d - https://appwrite.io/docs/tooling/command-line/installation
CVE ID: CVE-2023-50975 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-09-04T17:51:58.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of electron::fuses::IsRunAsNodeEnabled (i.e., ELECTRON_RUN_AS_NODE can be used in production). This makes it easier for a compromised process to access banking information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://newsroom.ripeda.com/tag/macs-for-business/ - https://www.electronjs.org/blog/statement-run-as-node-cves - https://gist.github.com/khronokernel/
/macs-for-business/ - https://www.electronjs.org/blog/statement-run-as-node-cves - https://gist.github.com/khronokernel/2598c067d0f49b0f0a4c8b01cf129d34
CVE ID: CVE-2023-50976 State: PUBLISHED Published: 2023-12-17T00:00:00.000Z Last Updated: 2025-05-20T18:23:43.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/redpanda-data/redpanda/pull/14969 - https://github.com/redpanda-data/redpanda/pull/15060 - https://github.com/redpanda-data/redpanda/issues/15048 - https://github.com/redpanda-data/redpanda/compare/v23.1.20...v23.1.21 - https://github.com/redpanda-data/redpanda/compare/v23.2.17...v23.2.18
CVE ID: CVE-2023-50977 State: REJECTED Published: N/A Last Updated: 2025-02-13T15:46:58.231Z Description: No description available.
CVE ID: CVE-2023-50979 State: PUBLISHED Published: 2023-12-18T00:00:00 Last Updated: 2024-08-02T22:23:44.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/weidai11/cryptopp/issues/1247
CVE ID: CVE-2023-50980 State: PUBLISHED Published: 2023-12-18T00:00:00 Last Updated: 2024-08-02T22:23:44.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data for an F(2^m) curve, if the degree of each term in the polynomial is not strictly decreasing. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/weidai11/cryptopp/issues/1248
CVE ID: CVE-2023-50981 State: PUBLISHED Published: 2023-12-18T00:00:00.000Z Last Updated: 2025-05-07T20:40:09.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weidai11/cryptopp/issues/1249
CVE ID: CVE-2023-50982 State: PUBLISHED Published: 2024-01-08T00:00:00.000Z Last Updated: 2025-06-03T14:39:16.020Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in Admin_SmileysController do not check the file extension. This leads to remote code execution with the privileges of the www-data user. The fixed versions are 5.3.4, 5.2.6, 5.1.7, and 5.0.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/studip/files/Stud.I
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/studip/files/Stud.IP/5.4/ - https://gitlab.studip.de/studip/studip/-/tags - https://rehmeinfosec.de/labor/cve-2023-50982
CVE ID: CVE-2023-50983 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-08-02T22:23:44.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the sysScheduleRebootSet function. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/sysScheduleRebootSet-2.md
CVE ID: CVE-2023-50984 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-08-02T22:23:44.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/spdtstConfigAndStart.md
CVE ID: CVE-2023-50985 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-08-02T22:23:44.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/lanCfgSet.md
CVE ID: CVE-2023-50986 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-09-13T18:58:58.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysLogin function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/sysLogin.md
CVE ID: CVE-2023-50987 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-08-02T22:23:44.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/sysTimeInfoSet.md
CVE ID: CVE-2023-50988 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-08-02T22:23:44.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/wifiRadioSetIndoor.md
CVE ID: CVE-2023-50989 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-11-26T15:02:37.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/pingSet-2.md
CVE ID: CVE-2023-50990 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-08-02T22:23:44.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/sysScheduleRebootSet.md
CVE ID: CVE-2023-50991 State: PUBLISHED Published: 2024-01-05T00:00:00.000Z Last Updated: 2025-06-13T18:14:14.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp parameter in the pingSet function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ef4tless/vuln/blob/master/iot/i29/pingSet.md
CVE ID: CVE-2023-50992 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-08-02T22:23:44.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function. Additional Analyst Notes: - CVE Program Container: References: - http://tenda.com - https://github.com/ef4tless/vuln/blob/master/iot/i29/setPing.md
CVE ID: CVE-2023-50993 State: PUBLISHED Published: 2023-12-20T00:00:00 Last Updated: 2024-08-02T22:23:44.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruijie WS6008 v1.x v2.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 and WS6108 v1.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 was discovered to contain a command injection vulnerability via the function downFiles. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/WS6008-WS6108/1.md
CVE ID: CVE-2023-51006 State: PUBLISHED Published: 2023-12-28T00:00:00 Last Updated: 2024-08-02T22:23:44.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the openFile method of Chinese Perpetual Calendar v9.0.0 allows attackers to read any file via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firmianay/security-issues/tree/main/app/cn.etouch.ecalendar
CVE ID: CVE-2023-51010 State: PUBLISHED Published: 2023-12-28T00:00:00 Last Updated: 2024-08-02T22:23:44.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the export component AdSdkH5Activity of com.sdjictec.qdmetro v4.2.2 allows attackers to open a crafted URL without any filtering or checking. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/firmianay/security-issues/tree/main/app/com.sdjictec.qdmetro
CVE ID: CVE-2023-51011 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLanConfig interface of the cstecgi .cgi Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanPriDns/
CVE ID: CVE-2023-51012 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the setLanConfig interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanGateway/
CVE ID: CVE-2023-51013 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLanConfig interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanNetmask/
CVE ID: CVE-2023-51014 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-09-12T12:38:29.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig_lanSecDns/
CVE ID: CVE-2023-51015 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-27T20:09:09.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface of the cstecgi .cgi Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setDmzCfg/
CVE ID: CVE-2023-51016 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/10/EX1800T/TOTOlink%20EX1800T_V9.1.0cu.2112_B20220316%28setRebootScheCfg%29/
CVE ID: CVE-2023-51017 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T22:23:44.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi. Additional Analyst Notes: - CVE Program Container: References: - https://815yang.github.io/2023/12/11/EX1800T/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setLanConfig-lanIp/