Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-50887 State: PUBLISHED Published: 2024-12-09T11:29:54.474Z Last Updated: 2024-12-09T19:54:14.840Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: UserFeedback Team Products: User Feedback Problem Types: CWE-862 Description: Missing Authorization vulnerability in UserFeedback Team User Feedback allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Feedback: from n/a through 1.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/userfeedback-lite/vulnerability/wordpress-user-feedback-plugin-1-0-10-broken-access-control-vulnerability?_s_
ess/plugin/userfeedback-lite/vulnerability/wordpress-user-feedback-plugin-1-0-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-50889 State: PUBLISHED Published: 2023-12-29T11:21:56.258Z Last Updated: 2024-08-02T22:23:43.858Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: The Beaver Builder Team Products: Beaver Builder – WordPress Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Beaver Builder Team Beaver Builder – WordPress Page Builder allows Stored XSS.This issue affects Beaver Builder – WordPress Page Builder: from n/a through 2.7.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/beaver-builder-
onal Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/beaver-builder-lite-version/wordpress-beaver-builder-plugin-2-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50890 State: PUBLISHED Published: 2024-05-17T08:39:33.472Z Last Updated: 2024-08-02T22:23:44.028Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Brainstorm Force Products: Ultimate Addons for Elementor Problem Types: CWE-269 Description: Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate Addons for Elementor: from n/a through 1.36.20. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate-elementor/wordpress-ultimate-addons-for-elementor-plugin-1-36-20-priv
s://patchstack.com/database/vulnerability/ultimate-elementor/wordpress-ultimate-addons-for-elementor-plugin-1-36-20-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2023-50891 State: PUBLISHED Published: 2023-12-29T11:19:01.969Z Last Updated: 2024-08-02T22:23:43.651Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Zoho Forms Products: Form plugin for WordPress – Zoho Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Forms Form plugin for WordPress – Zoho Forms allows Stored XSS.This issue affects Form plugin for WordPress – Zoho Forms: from n/a through 3.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/zoho-forms/wordpress-zoho-forms-plugin-3-0-1
gram Container: References: - https://patchstack.com/database/vulnerability/zoho-forms/wordpress-zoho-forms-plugin-3-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50892 State: PUBLISHED Published: 2023-12-29T11:15:38.381Z Last Updated: 2024-08-02T22:23:44.153Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CodexThemes Products: TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme allows Reflected XSS.This issue affects TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme: from n/a through 5.9.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack
Press Theme: from n/a through 5.9.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/thegem/wordpress-thegem-theme-5-9-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50893 State: PUBLISHED Published: 2023-12-29T11:12:36.317Z Last Updated: 2024-08-02T22:23:44.096Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: UpSolution Products: Impreza – WordPress Website and WooCommerce Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution Impreza – WordPress Website and WooCommerce Builder allows Reflected XSS.This issue affects Impreza – WordPress Website and WooCommerce Builder: from n/a through 8.17.4. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/us-
17.4. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/us-core/wordpress-upsolution-core-plugin-8-17-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50894 State: PUBLISHED Published: 2024-03-26T00:00:00 Last Updated: 2024-08-05T16:22:37.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-50895 State: PUBLISHED Published: 2024-03-26T00:00:00.000Z Last Updated: 2025-03-13T18:48:59.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality allow remote authenticated administrative users to execute arbitrary Groovy code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-50896 State: PUBLISHED Published: 2023-12-29T11:09:16.175Z Last Updated: 2024-08-02T22:23:43.895Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: weForms Products: weForms – Easy Drag & Drop Contact Form Builder For WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weForms weForms – Easy Drag & Drop Contact Form Builder For WordPress allows Stored XSS.This issue affects weForms – Easy Drag & Drop Contact Form Builder For WordPress: from n/a through 1.6.17. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/dat
ss: from n/a through 1.6.17. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/weforms/wordpress-weforms-plugin-1-6-17-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50898 State: PUBLISHED Published: 2024-03-15T14:18:14.192Z Last Updated: 2024-08-08T19:09:22.685Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: sirv.com Products: Sirv Problem Types: CWE-862 Description: Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sirv/wordpress-image-optimizer-resizer-and-cdn-sirv-plugin-7-1-2-broken-access-control-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-50899 State: PUBLISHED Published: 2024-12-09T11:29:53.660Z Last Updated: 2024-12-09T18:01:57.229Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: MultiVendorX Products: Product Catalog Enquiry for WooCommerce by MultiVendorX Problem Types: CWE-862 Description: Missing Authorization vulnerability in MultiVendorX Product Catalog Enquiry for WooCommerce by MultiVendorX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Catalog Enquiry for WooCommerce by MultiVendorX: from n/a through 5.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/p
ough 5.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-catalog-enquiry/vulnerability/wordpress-product-catalog-enquiry-for-woocommerce-by-multivendorx-plugin-5-0-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-50900 State: PUBLISHED Published: 2024-06-19T10:00:54.670Z Last Updated: 2024-08-02T22:23:43.941Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Averta Products: Master Slider Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/master-slider/wordpress-master-slider-plugin-3-9-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-50901 State: PUBLISHED Published: 2023-12-29T11:06:04.834Z Last Updated: 2024-08-02T22:23:43.766Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: HasThemes Products: HT Mega – Absolute Addons For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Mega – Absolute Addons For Elementor allows Reflected XSS.This issue affects HT Mega – Absolute Addons For Elementor: from n/a through 2.3.8. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ht-mega-for-elementor/wordpress-ht-mega-ab
rogram Container: References: - https://patchstack.com/database/vulnerability/ht-mega-for-elementor/wordpress-ht-mega-absolute-addons-for-elementor-plugin-2-3-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50902 State: PUBLISHED Published: 2023-12-29T12:28:46.992Z Last Updated: 2024-11-20T19:11:03.859Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WPExpertsio Products: New User Approve Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPExpertsio New User Approve.This issue affects New User Approve: from n/a through 2.5.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/new-user-approve/wordpress-new-user-approve-plugin-2-5-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-50903 State: PUBLISHED Published: 2024-12-09T11:29:52.850Z Last Updated: 2024-12-09T19:55:42.209Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Wpmet Products: Metform Elementor Contact Form Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in Wpmet Metform Elementor Contact Form Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform Elementor Contact Form Builder: from n/a through 3.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/metform/vulnerability/wordpress-metform-elementor-contact-f
ferences: - https://patchstack.com/database/wordpress/plugin/metform/vulnerability/wordpress-metform-elementor-contact-form-builder-plugin-3-4-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-50904 State: PUBLISHED Published: 2024-12-09T11:29:52.044Z Last Updated: 2024-12-09T15:01:50.169Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Poll Maker Team Products: Poll Maker Problem Types: CWE-862 Description: Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 4.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/poll-maker/vulnerability/wordpress-poll-maker-plugin-4-8-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-50905 State: PUBLISHED Published: 2024-02-29T05:35:14.761Z Last Updated: 2024-08-08T18:49:09.450Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Melapress Products: WP Activity Log Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-security-audit-log/wordpress-wp-activity-log-plugin-plugin-4-6-1-cross-site-scripting-xss
.com/database/vulnerability/wp-security-audit-log/wordpress-wp-activity-log-plugin-plugin-4-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-50913 State: PUBLISHED Published: 2024-12-05T00:00:00 Last Updated: 2024-12-11T16:41:58.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oxide control plane software before 5 allows SSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://oxide.computer - https://docs.oxide.computer/security/advisories/20231215-1
CVE ID: CVE-2023-50914 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T22:23:43.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction parameters sent from GalaxyClient.exe to GalaxyClientService.exe. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-pri
ent: - CVE Program Container: References: - https://www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce/ - https://support.gog.com/hc/en-us/categories/201553005-Downloads-Installing?product=gog - https://github.com/anvilsecure/gog-galaxy-app-research - https://github.com/anvilsecure/gog-galaxy-app-research/blob/main/advisories/CVE-2023-50914%20-%20LPE.md
CVE ID: CVE-2023-50915 State: PUBLISHED Published: 2024-04-30T00:00:00.000Z Last Updated: 2025-03-28T19:28:13.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC Object Manager symbolic link and could result in a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.gog.com/hc/en-us/categories/201553005-Downloads-Installing?product=gog - https://github.com/anvilsecure/gog-galaxy-app-research
/hc/en-us/categories/201553005-Downloads-Installing?product=gog - https://github.com/anvilsecure/gog-galaxy-app-research - https://github.com/anvilsecure/gog-galaxy-app-research/blob/main/advisories/CVE-2023-50915%20-%20DoS.md
CVE ID: CVE-2023-50916 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-03T14:28:45.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a UNC path via the GUI is rejected due to the use of a \ (backslash) character, which is supposed to be disallowed in a pathname. Intercepting and modifying this request via a proxy, or sending the request directly to the applicati
wed in a pathname. Intercepting and modifying this request via a proxy, or sending the request directly to the application endpoint, allows UNC paths to be set for the backup location. Once such a location is set, Kyocera Device Manager attempts to confirm access and will try to authenticate to the UNC path; depending on the configuration of the environment, this may authenticate to the UNC with Windows NTLM hashes. This could allow NTLM credential relaying or cracking attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ - https://www.kyoceradocumentsolutions.us/en/
/www.trustwave.com/en-us/resources/security-resources/security-advisories/ - https://www.kyoceradocumentsolutions.us/en/about-us/pr-and-award-certifications/press/kyocera-device-manager-cve-2023-50196-vulnerability-solution-update.html - https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-001_kyocera-v2.txt
CVE ID: CVE-2023-50917 State: PUBLISHED Published: 2023-12-15T00:00:00 Last Updated: 2024-08-02T22:23:44.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sergejey/majordomo/commit/0662e5ebfb133445ff6154b69c61019357092178 - https://github.com/sergejey/majordomo/commit/3ec3ffb863ea3c2661ab27d398776c551f4daaac - http://seclists.org/fulldisclosure/2023/Dec/19 - http://packetstormsecurity.com/files/176273/MajorDoMo-Remote-Cod
aaac - http://seclists.org/fulldisclosure/2023/Dec/19 - http://packetstormsecurity.com/files/176273/MajorDoMo-Remote-Code-Execution.html - http://packetstormsecurity.com/files/176669/MajorDoMo-Command-Injection.html
CVE ID: CVE-2023-50918 State: PUBLISHED Published: 2023-12-15T00:00:00 Last Updated: 2024-08-02T22:23:44.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/92888b1376246c0f20c256aaa3c57b6f12115fa1 - https://github.com/MISP/MISP/compare/v2.4.181...v2.4.182
CVE ID: CVE-2023-50919 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-03T14:06:33.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string pattern matching. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Authentication-bypass.md - http://packetstormsecurity.com/
nces: - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Authentication-bypass.md - http://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html
CVE ID: CVE-2023-50920 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-17T16:05:04.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass authentication or access control measures. Attackers can impersonate legitimate users or perform unauthorized actions. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7. Additional Ana
6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Authentication-bypass-seesion-ID.md
CVE ID: CVE-2023-50921 State: PUBLISHED Published: 2024-01-03T00:00:00.000Z Last Updated: 2025-06-18T15:35:30.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Add_user_vulnerability.md
CVE ID: CVE-2023-50922 State: PUBLISHED Published: 2024-01-03T00:00:00.000Z Last Updated: 2025-06-03T14:44:56.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the AdminToken cookie can execute arbitrary code by uploading a crontab-formatted file to a specific directory and waiting for its execution. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750 4.3.7, AR300M 4.3.7, and B1300 4.3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com
1300 4.3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Remote%20code%20execution%20due%20to%20gl_crontabs.md
CVE ID: CVE-2023-50923 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-12-04T21:02:20.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: In QUIC in RFC 9000, the Latency Spin Bit specification (section 17.4) does not strictly constrain the bit value when the feature is disabled, which might allow remote attackers to construct a covert channel with data represented as changes to the bit value. NOTE: The "Sheridan, S., Keane, A. (2015). In Proceedings of the 14th European Conference on Cyber Warfare and Security (ECCWS), University of Hertfordshire, Hatfield, UK." paper says "Modern Internet communication protocols provide an almost infinite number of ways in wh
hire, Hatfield, UK." paper says "Modern Internet communication protocols provide an almost infinite number of ways in which data can be hidden or embed whithin seemingly normal network traffic." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rfc-editor.org/rfc/rfc9000.html - https://ieeexplore.ieee.org/document/10427406 - https://arrow.tudublin.ie/nsdcon/2/