Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-26615 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:57:26.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1 - https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1/SetMultipleActions
CVE ID: CVE-2023-26616 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T15:43:33.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1/SetParentsControlInfo
CVE ID: CVE-2023-26686 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T17:12:44.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cs-cart.com/multivendor.html - https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26686%20-%20File%20Upload%20vulnerability%20in%20product%20image%20of%20CS-Cart%20MultiVendor%204.16.1
CVE ID: CVE-2023-26687 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T18:47:00.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information via the product_data parameter in the PDF Add-on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26687%20-%20Local%20File%20Inclusion%20vulnerability%20in%20CS-Cart%20MultiVendor
CVE ID: CVE-2023-26688 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T17:23:13.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the product_data parameter of add/edit product in the administration interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cs-cart.com/multivendor.html - https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26688%20-%20Cross%20Site%20Scripting%20%28XSS%29%20vulnerability%20in%20CS-Cart%20MultiVendor%204.16.1
CVE ID: CVE-2023-26689 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T18:58:26.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26689%20-%20Insufficient%20Authorization%20for%20API%20key%20creation%20in%20CS-Cart%20MultiVendor%204.16.1
CVE ID: CVE-2023-26690 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T18:21:43.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/Editor component in the vendor or admin menu. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cs-cart.com/multivendor.html - https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26690%20-%20%20File%20Upload%20vulnerability%20in%20File%20Manager%20of%20CS-Cart%20MultiVendor%204.16.1
CVE ID: CVE-2023-26691 State: PUBLISHED Published: 2024-09-24T00:00:00 Last Updated: 2024-09-24T18:24:14.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cs-cart.com/multivendor.html - https://github.com/cybrops-io/CVEs/tree/main/CVE-2023-26691%20-%20Zip%20Slip%20in%20CS-Cart%20MultiVendor%204.16.1
CVE ID: CVE-2023-26692 State: PUBLISHED Published: 2023-03-30T00:00:00.000Z Last Updated: 2025-02-18T19:04:20.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Management System (ZBBS) 4.14k is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bigzooooz/CVE-2023-26692#readme - http://packetstormsecurity.com/files/171787/ZCBS-ZBBS-ZPBS-4.14k-Cross-Site-Scripting.html
CVE ID: CVE-2023-26733 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T15:45:58.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame function in tinytiffreader.c file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF/blob/main/README.md - https://github.com/jkriege2/TinyTIFF/issues/19
CVE ID: CVE-2023-26735 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-04T15:12:46.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blackboxexporter.com - http://prometheus.com - https://github.com/prometheus/blackbox_exporter/issues/1024 - https://github.com/prometheus/bl
- http://prometheus.com - https://github.com/prometheus/blackbox_exporter/issues/1024 - https://github.com/prometheus/blackbox_exporter/issues/1025 - https://github.com/prometheus/blackbox_exporter/issues/1026 - https://github.com/prometheus/blackbox_exporter#tls-and-basic-authentication
CVE ID: CVE-2023-26750 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T15:43:32.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code via the runAction function. NOTE: the software maintainer's position is that the vulnerability is in third-party code, not in the framework. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yiisoft/yii2/issues/19755 - https://github.com/yiisoft/yii2/issues/19755#issuecomment-1426155955 - https://github.com/yiisoft/yii2/issues/
s/19755 - https://github.com/yiisoft/yii2/issues/19755#issuecomment-1426155955 - https://github.com/yiisoft/yii2/issues/19755#issuecomment-1505390813 - https://github.com/yiisoft/yii2/issues/19755#issuecomment-1505560351
CVE ID: CVE-2023-26756 State: PUBLISHED Published: 2023-04-14T00:00:00 Last Updated: 2024-08-02T11:53:54.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. NOTE: The vendor's position is that this is effectively mitigated by rate limits and password-quality features. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://googleinformationsworld.blogspot.com/2023/04/revive-adserver-541-vulnerable-to-brute.html - https://www.esecforte.com/login-page-brute-force-attack/ - http://seclists.org/fulldisclosure/2024/Apr/27 - https://www.revive-adserver.com/security/r
n-page-brute-force-attack/ - http://seclists.org/fulldisclosure/2024/Apr/27 - https://www.revive-adserver.com/security/response-to-cve-2023-26756/
CVE ID: CVE-2023-26758 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:43:29.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.swascan.com/it/security-advisory-sme-up-erp/
CVE ID: CVE-2023-26759 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T02:59:07.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.swascan.com/it/security-advisory-sme-up-erp/
CVE ID: CVE-2023-26760 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T02:57:17.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.swascan.com/it/security-advisory-sme-up-erp/
CVE ID: CVE-2023-26762 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T02:56:02.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.swascan.com/it/security-advisory-sme-up-erp/
CVE ID: CVE-2023-26767 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:32:53.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liblouis/liblouis/issues/1292 - https://github.com/liblouis/liblouis/pull/1297
CVE ID: CVE-2023-26768 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T15:46:04.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liblouis/liblouis/issues/1301 - https://github.com/liblouis/liblouis/pull/1302
CVE ID: CVE-2023-26769 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:31:26.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://loutrace.com - https://github.com/liblouis/liblouis - https://github.com/liblouis/liblouis/pull/1300
CVE ID: CVE-2023-26770 State: PUBLISHED Published: 2024-10-04T00:00:00 Last Updated: 2024-10-04T22:17:08.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: TaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a registered UserID can change the password of that user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/JordanKnott/taskcafe - https://bishopfox.com/blog/taskcafe-version-0-3-2-advisory
CVE ID: CVE-2023-26771 State: PUBLISHED Published: 2024-10-04T00:00:00 Last Updated: 2024-10-04T22:16:58.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS). There is a lack of validation in the filetype when uploading a SVG profile picture with a XSS payload on it. An authenticated attacker can exploit this vulnerability by uploading a malicious picture which will trigger the payload when the victim opens the file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/JordanKnott/taskcafe - https://bishopfox.com/blog/taskcafe-version-0-3-2-advisory
CVE ID: CVE-2023-26773 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-02-11T16:23:34.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/users/tips23 - https://twitter.com/retrymp3 - https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html - https://packetstormsecurity.com/files/171686/Sales-Tracker-Management-Sy
gement-system-using-php-free-source-code.html - https://packetstormsecurity.com/files/171686/Sales-Tracker-Management-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-26774 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-02-11T16:40:15.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://twitter.com/retrymp3 - https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html - https://www.sourcecodester.com/download-code?nid=16061&title=Sales+Tracker+Management+System+using+PHP+Free+Source+Code - https://
w.sourcecodester.com/download-code?nid=16061&title=Sales+Tracker+Management+System+using+PHP+Free+Source+Code - https://packetstormsecurity.com/files/171692/Sales-Tracker-Management-System-1.0-Insecure-Direct-Object-Reference.html
CVE ID: CVE-2023-26775 State: PUBLISHED Published: 2023-04-04T00:00:00 Last Updated: 2024-08-02T11:53:54.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/retrymp3 - https://github.com/Monitorr/ - https://github.com/Monitorr/Monitorr - https://github.com/Monitorr/Monitorr/blob/3ebfd915bfb02aae2ded08c5e4ba6b1bea3009f2/assets/php/upload.php - http://packetstormsecurity.com/files/171705/Monitorr-1.7.6-Cross-Site-Scripting.html
CVE ID: CVE-2023-26776 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T15:41:10.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of the post_receiver-services.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://twitter.com/retrymp3 - https://github.com/Monitorr/Monitorr - https://github.com/Monitorr - https://github.com/Monitorr/Monitorr/blob/3ebfd915bfb02aae2ded08c5e4ba6b1bea3009f2/assets/php/post_receiver-services.php - http://packetstormsecurity.com/files/
b/3ebfd915bfb02aae2ded08c5e4ba6b1bea3009f2/assets/php/post_receiver-services.php - http://packetstormsecurity.com/files/171705/Monitorr-1.7.6-Cross-Site-Scripting.html
CVE ID: CVE-2023-26777 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T15:37:08.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in : louislam Uptime Kuma v.1.19.6 and before allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the status_page.js endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/louislam/uptime-kuma/issues/2186 - http://packetstormsecurity.com/files/171699/Uptime-Kuma-1.19.6-Cross-Site-Scripting.html
CVE ID: CVE-2023-26779 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-06T20:36:39.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CleverStupidDog/yf-exam/issues/3 - https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26779
CVE ID: CVE-2023-26780 State: PUBLISHED Published: 2023-03-02T00:00:00.000Z Last Updated: 2025-03-07T17:22:47.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CleverStupidDog/yf-exam/issues/4 - https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26780
CVE ID: CVE-2023-26781 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T16:42:04.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chshcms/mccms/issues/1
CVE ID: CVE-2023-26782 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-31T16:39:13.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface ->System Configuration->Cache Configuration->Cache security characters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chshcms/mccms/issues/2
CVE ID: CVE-2023-26784 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:28:45.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tosec.com.cn - https://gist.github.com/yinfei6/b13e7527887ac0eb809fa0b6f36305e1
CVE ID: CVE-2023-26785 State: PUBLISHED Published: 2024-10-17T00:00:00 Last Updated: 2024-10-20T23:39:53.553411 Vendors: n/a Products: n/a Problem Types: n/a Description: MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ant1sec-ops/CVE-2023-26785 - https://seclists.org/fulldisclosure/2012/Dec/39
CVE ID: CVE-2023-26788 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-02-11T16:44:10.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/Veritas-Technologies - https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20Appliance%20v4.1.0.1/HHI/HHI_CV
as-Technologies - https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20Appliance%20v4.1.0.1/HHI/HHI_CVE-2023-26788.txt
CVE ID: CVE-2023-26789 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-13T16:26:54.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/Veritas-Technologies - https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Ve
Veritas-Technologies - https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS.txt - https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20NetBackUp%20OpsCenter%20Version%209.1.0.1/Reflected%20XSS/XSS_CVE-2023-26789.txt
CVE ID: CVE-2023-26793 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T11:53:54.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/stephane/libmodbus/issues/683
CVE ID: CVE-2023-26800 State: PUBLISHED Published: 2023-03-26T00:00:00.000Z Last Updated: 2025-02-20T15:37:47.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/winmt/my-vuls/tree/main/RG-EW1200
CVE ID: CVE-2023-26801 State: PUBLISHED Published: 2023-03-26T00:00:00.000Z Last Updated: 2025-05-05T16:03:35.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/winmt/my-vuls/tree/main/LB-LINK%20BL-AC1900%2C%20BL-WR9000%2C%20BL-X26%20and%20BL-LTE300%20Wireless%20Routers - https://www.akamai.com/blog/security-research/cve-2023-26801-ex
000%2C%20BL-X26%20and%20BL-LTE300%20Wireless%20Routers - https://www.akamai.com/blog/security-research/cve-2023-26801-exploited-spreading-mirai-botnet
CVE ID: CVE-2023-26802 State: PUBLISHED Published: 2023-03-26T00:00:00.000Z Last Updated: 2025-05-05T16:03:26.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/winmt/my-vuls/tree/main/DCN%20DCBI-Netlog-LAB