Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40869 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T19:48:39.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the edit_menu, copuon, and group_categorias functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MinoTauro2020/CVE-2023-40869
CVE ID: CVE-2023-40874 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:25:53.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and voteitem1 parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss1.md
CVE ID: CVE-2023-40875 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:25:20.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_edit.php via the votename and votenote parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss2.md
CVE ID: CVE-2023-40876 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:24:52.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_add.php via the title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss3.md
CVE ID: CVE-2023-40877 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:47:14.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_edit.php via the title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/DedeCMS/xss4.md
CVE ID: CVE-2023-40889 State: PUBLISHED Published: 2023-08-29T00:00:00.000Z Last Updated: 2025-11-04T18:16:43.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner. Additional Analyst Notes: - CVE Program Container: References: - https://hackmd.io/%40cspl/B1ZkFZv23 - https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html - https://lists.
ttps://hackmd.io/%40cspl/B1ZkFZv23 - https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DC7V5YCLCPB36J2KY6WLZCABFLBRB665/
CVE ID: CVE-2023-40890 State: PUBLISHED Published: 2023-08-29T00:00:00.000Z Last Updated: 2025-11-04T18:16:44.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%40cspl/H1PxPAUnn - https://lists.debian.org/debian-lts-announce/2023/1
DP Vulnrichment: References: - https://hackmd.io/%40cspl/H1PxPAUnn - https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DC7V5YCLCPB36J2KY6WLZCABFLBRB665/
CVE ID: CVE-2023-40891 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:44:41.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/formSetFirewallCfg/1.md
CVE ID: CVE-2023-40892 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:41:20.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/setSchedEWifi/1.md
CVE ID: CVE-2023-40893 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:24:17.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/setSmartPowerManagement/1.md
CVE ID: CVE-2023-40894 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:23:20.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/fromSetStaticRouteCfg/1.md
CVE ID: CVE-2023-40895 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:22:24.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/formSetVirtualSer/1.md
CVE ID: CVE-2023-40896 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:21:02.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/SetIpMacBind/1.md
CVE ID: CVE-2023-40897 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:19:16.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/GetParentControlInfo/1.md
CVE ID: CVE-2023-40898 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:16:31.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/SetSysTimeCfg/1.md
CVE ID: CVE-2023-40899 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:14:57.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/formSetMacFilterCfg/1.md
CVE ID: CVE-2023-40900 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-02T20:48:40.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac8/formSetQosBand/1.md
CVE ID: CVE-2023-40901 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-02T20:46:45.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac10/fromSetStaticRouteCfg/1.md - https://github.com/peris-navince/founded-0-days/blob/main/ac10/formSetMacFilterCfg/1.md - https://nvd.nist.gov/vuln/detail/CVE-2023-40901
CVE ID: CVE-2023-40902 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-02T20:43:18.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac10/SetIpMacBind/1.md
CVE ID: CVE-2023-40904 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-02T20:29:06.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peris-navince/founded-0-days/blob/main/ac10/formSetMacFilterCfg/1.md
CVE ID: CVE-2023-40915 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T17:59:17.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ssid parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Korey0sh1/IoT_vuln/blob/main/Tenda/AX3/form_fast_setting_wifi_set.md
CVE ID: CVE-2023-40918 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-30T17:29:24.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/didi/KnowStreaming/issues/1128
CVE ID: CVE-2023-40920 State: PUBLISHED Published: 2023-10-05T00:00:00 Last Updated: 2024-09-19T20:26:22.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prixan prixanconnect up to v1.62 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::importProducts(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/05/prixanconnect.html
CVE ID: CVE-2023-40921 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-10-08T14:31:22.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/12/12/soliberte.html
CVE ID: CVE-2023-40922 State: PUBLISHED Published: 2023-11-04T00:00:00 Last Updated: 2024-09-05T14:33:52.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontController::initContent(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/11/02/kerawen.html
CVE ID: CVE-2023-40923 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:58:23.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyPrestaModules ordersexport before v5.0 was discovered to contain multiple SQL injection vulnerabilities at send.php via the key and save_setting parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/11/09/ordersexport.html
CVE ID: CVE-2023-40924 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:33:57.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarView Compact < 6.00 is vulnerable to Directory Traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2023-33620 - https://github.com/Yobing1/CVE-2023-40924/blob/main/README.md
CVE ID: CVE-2023-40930 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:17:08.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the directory /system/bin/blkid of Skyworth v3.0 allows attackers to perform a directory traversal via mounting the Udisk to /mnt/. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/NSnidie/2af70d58426c4563b2f11171379fdd8c
CVE ID: CVE-2023-40931 State: PUBLISHED Published: 2023-09-19T00:00:00 Last Updated: 2024-09-25T14:26:23.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nagios.com - https://www.nagios.com/products/security/ - https://outpost24.com/blog/nagios-xi-vulnerabilities/
CVE ID: CVE-2023-40932 State: PUBLISHED Published: 2023-09-19T00:00:00 Last Updated: 2024-09-24T20:39:19.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in Nagios XI version 5.11.1 and below allows authenticated attackers with access to the custom logo component to inject arbitrary javascript or HTML via the alt-text field. This affects all pages containing the navbar including the login page which means the attacker is able to to steal plaintext credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nagios.com - https://www.nagios.com/products/security/ - https://outpost24.com/b
ADP Vulnrichment: References: - http://nagios.com - https://www.nagios.com/products/security/ - https://outpost24.com/blog/nagios-xi-vulnerabilities/
CVE ID: CVE-2023-40933 State: PUBLISHED Published: 2023-09-19T00:00:00 Last Updated: 2024-09-24T20:38:15.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner configuration privileges to execute arbitrary SQL commands via the ID parameter sent to the update_banner_message() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nagios.com - https://www.nagios.com/products/security/ - https://outpost24.com/blog/nagios-xi-vulnerabilities/
CVE ID: CVE-2023-40934 State: PUBLISHED Published: 2023-09-19T00:00:00 Last Updated: 2024-09-24T20:43:56.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage host escalations in the Core Configuration Manager to execute arbitrary SQL commands via the host escalation notification settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nagios.com - https://www.nagios.com/products/security/ - https://outpost24.com/blog/nagios-xi-vulnerabilities/
CVE ID: CVE-2023-40936 State: REJECTED Published: N/A Last Updated: 2023-09-05T03:57:14.788215 Description: No description available.
CVE ID: CVE-2023-40937 State: REJECTED Published: N/A Last Updated: 2023-09-05T03:23:36.623546 Description: No description available.
CVE ID: CVE-2023-40942 State: PUBLISHED Published: 2023-09-07T00:00:00 Last Updated: 2024-09-26T17:38:40.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GleamingEyes/vul/blob/main/tenda_ac9/SetFirewallCfg.md
CVE ID: CVE-2023-40943 State: REJECTED Published: N/A Last Updated: 2023-10-30T13:34:24.107415 Description: No description available.
CVE ID: CVE-2023-40944 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:55:06.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KLSEHB/vulnerability-report/blob/main/Schoolmate_CVE-2023-40944
CVE ID: CVE-2023-40945 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:55:37.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KLSEHB/vulnerability-report/blob/main/Doctormms_CVE-2023-40945
CVE ID: CVE-2023-40946 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:56:12.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/KLSEHB/vulnerability-report/blob/main/Schoolmate_CVE-2023-40946
CVE ID: CVE-2023-40953 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:51:44.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.icmsdev.com/ - https://gist.github.com/ChubbyZ/e1e5c1858c389334dcf581a19c741308
CVE ID: CVE-2023-40954 State: PUBLISHED Published: 2023-12-15T00:00:00 Last Updated: 2024-08-02T18:46:11.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (aka web_progress) v. 11.0 through 11.0.2, v12.0 through v12.0.2, v.13.0 through v13.0.2, v.14.0 through v14.0.2.1, v.15.0 through v15.0.2, and v16.0 through v16.0.2.1 allows a remote attacker to gain privileges via the recency parameter in models/web_progress.py component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/luvsn/OdZoo/tree/main/exploits/web_progress - https://github.com/gmarczynski/odoo-web-progress/com
- https://github.com/luvsn/OdZoo/tree/main/exploits/web_progress - https://github.com/gmarczynski/odoo-web-progress/commit/3c867f1cf7447449c81b1aa24ebb1f7ae757489f
CVE ID: CVE-2023-40955 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T19:47:10.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0, pdm-15.0.1.0.0, and pdm-16.0.1.0.0 allows a remote authenticated attacker to execute arbitrary code via the select parameter in models/base_client.py component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/luvsn/OdZoo/tree/main/exploits/pdm/2
CVE ID: CVE-2023-40956 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T19:46:06.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Cloudroits Website Job Search v.15.0 allows a remote authenticated attacker to execute arbitrary code via the name parameter in controllers/main.py component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/luvsn/OdZoo/tree/main/exploits/website_job_search
CVE ID: CVE-2023-40957 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T19:44:32.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0, pdm-15.0.1.0.0, and pdm-16.0.1.0.0 allows a remote authenticated attacker to execute arbitrary code via the request parameter in models/base_client.py component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/luvsn/OdZoo/tree/main/exploits/pdm/3
CVE ID: CVE-2023-40958 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T19:42:31.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0, pdm-15.0.1.0.0, and pdm-16.0.1.0.0 allows a remote authenticated attacker to execute arbitrary code via the query parameter in models/base_client.py component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/luvsn/OdZoo/tree/main/exploits/pdm/1
CVE ID: CVE-2023-40968 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T14:24:00.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in hzeller timg v.1.5.1 and before allows a remote attacker to cause a denial of service via the 0x61200000045c address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hzeller/timg/issues/115 - https://github.com/hzeller/timg/releases/tag/v1.5.2