Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4516 State: PUBLISHED Published: 2023-09-14T08:54:53.673Z Last Updated: 2025-02-27T20:52:17.879Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: IGSS Update Service (IGSSupdateservice.exe) Problem Types: CWE-306 Description: A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-255-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-255-01.pdf
CVE ID: CVE-2023-4517 State: PUBLISHED Published: 2023-10-13T12:24:14.214Z Last Updated: 2024-09-17T17:02:42.249Z Severity: LOW (CVSS 3.2 CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: hestiacp Products: hestiacp/hestiacp Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/508d1d21-c45d-47ff-833f-50c671882e51 - https://github.com/hestiacp/hestiacp/commit/d30e3edbca5915235643e46ab222cb7aed9b319a
CVE ID: CVE-2023-4518 State: PUBLISHED Published: 2023-12-01T14:18:47.387Z Last Updated: 2024-09-23T12:21:46.914Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Hitachi Energy Products: Relion670 Problem Types: CWE-1284 Description: A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device. In order for an attacker to exploit the vulnerability, goose receiving blocks need to be configured. Additional Analyst Notes: - CVE Program Container: References: - https://publisher.hitachienergy.com/preview?DocumentId=8DBD000170&languageCode=en&Preview=true
CVE ID: CVE-2023-4520 State: PUBLISHED Published: 2023-08-25T02:40:08.903Z Last Updated: 2025-02-05T19:35:18.348Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: foliovision Products: FV Flowplayer Video Player Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_fv_player_user_video’ parameter saved via the 'save' function hooked via init, and the plugin is also vulnerable to Arbitrary Usermeta Update via the 'save' function in versions up to, and including, 7.5.37.7212 due to insuffici
able to Arbitrary Usermeta Update via the 'save' function in versions up to, and including, 7.5.37.7212 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page, and makes it possible to update the user metas arbitrarily, but the meta value can only be a string. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c55ca7d4-6bc0-49c9-8ce0-50fff8775a76?source=cve - https://plugins.trac.wordpress.org/changeset/2957322/fv-wordpress-flowplayer#file2
0-49c9-8ce0-50fff8775a76?source=cve - https://plugins.trac.wordpress.org/changeset/2957322/fv-wordpress-flowplayer#file2 - https://plugins.trac.wordpress.org/browser/fv-wordpress-flowplayer/tags/7.5.36.7212/models/custom-videos.php#L341
CVE ID: CVE-2023-4521 State: PUBLISHED Published: 2023-09-25T15:56:53.965Z Last Updated: 2025-04-23T16:15:47.593Z Vendors: Unknown Products: Import XML and RSS Feeds Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not compromised and the files are the result of running a PoC for a previously reported issue (https://wpscan.com/vulnerability/d4220025-2272-4d5f-9703-4b2ac4a51c42) and not deleting the created files when releasing the new version. Additional Analyst Notes: - CVE Program Container: - C
nd not deleting the created files when releasing the new version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/de2cdb38-3a9f-448e-b564-a798d1e93481
CVE ID: CVE-2023-4522 State: PUBLISHED Published: 2023-08-30T07:01:19.117Z Last Updated: 2025-11-20T04:09:38.263Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-1287 Description: An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/406817 - https://hackerone.com/reports/1937213
CVE ID: CVE-2023-4523 State: PUBLISHED Published: 2023-09-27T18:08:26.220Z Last Updated: 2025-01-16T21:29:44.293Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Real Time Automation Products: 460 Series Problem Types: CWE-79 Description: Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-264-01
CVE ID: CVE-2023-4524 State: REJECTED Published: N/A Last Updated: 2023-08-25T21:05:45.878Z Description: No description available.
CVE ID: CVE-2023-4525 State: REJECTED Published: N/A Last Updated: 2023-08-30T01:14:05.033034Z Description: No description available.
CVE ID: CVE-2023-4526 State: REJECTED Published: N/A Last Updated: 2023-08-30T01:14:09.825007Z Description: No description available.
CVE ID: CVE-2023-4527 State: PUBLISHED Published: 2023-09-18T16:32:18.597Z Last Updated: 2025-11-20T18:27:44.022Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-121 Description: A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash. Additional Analy
potentially disclose stack contents through the function returned address data, and may cause a crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:5453 - https://access.redhat.com/errata/RHSA-2023:5455 - https://access.redhat.com/security/cve/CVE-2023-4527 - https://bugzilla.redhat.com/show_bug.cgi?id=2234712
CVE ID: CVE-2023-4528 State: PUBLISHED Published: 2023-09-07T17:39:42.355Z Last Updated: 2025-04-23T16:17:27.633Z Vendors: Redwood Software Products: JSCAPE MFT Server Problem Types: CWE-502 Description: Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS commands) via its management interface Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jscape.com/blog/binary-management-service-patch-cve-2023-4528 - https://www.rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/
CVE ID: CVE-2023-4530 State: PUBLISHED Published: 2023-10-06T09:16:01.277Z Last Updated: 2024-09-19T18:32:00.451Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Turna Products: Advertising Administration Panel Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Turna Advertising Administration Panel allows SQL Injection.This issue affects Advertising Administration Panel: before 1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0571
CVE ID: CVE-2023-4531 State: PUBLISHED Published: 2023-09-05T18:33:36.048Z Last Updated: 2024-09-30T17:40:13.793Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mestav Software Products: E-commerce Software Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0495
CVE ID: CVE-2023-4532 State: PUBLISHED Published: 2023-09-29T06:02:01.299Z Last Updated: 2025-11-20T04:09:43.683Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were capable of linking CI/CD jobs of private projects which they are not a member of. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/423357 - https://hackeron
richment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/423357 - https://hackerone.com/reports/2084199
CVE ID: CVE-2023-4533 State: REJECTED Published: N/A Last Updated: 2025-04-30T21:40:42.281Z Description: No description available.
CVE ID: CVE-2023-4534 State: PUBLISHED Published: 2023-08-25T14:00:09.445Z Last Updated: 2024-10-02T15:07:45.610Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: NeoMind Products: Fusion Platform Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in NeoMind Fusion Platform up to 20230731. Affected is an unknown function of the file /fusion/portal/action/Link. The manipulation of the argument link leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238026 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early abou
and may be used. VDB-238026 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.238026 - https://vuldb.com/?ctiid.238026 - https://l6x.notion.site/PoC-9f23bb9757374f82981de81604500d98?pvs=4
CVE ID: CVE-2023-4535 State: PUBLISHED Published: 2023-11-06T16:57:45.785Z Last Updated: 2025-11-21T06:36:21.112Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-125 Description: An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sen
r smart card. This flaw allows the attacker to manipulate APDU responses and potentially gain unauthorized access to sensitive data, compromising the system's security. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:7879 - https://access.redhat.com/security/cve/CVE-2023-4535 - https://bugzilla.redhat.com/show_bug.cgi?id=2240914 - https://github.com/OpenSC/OpenSC/commit/f1993dc4e0b33050b8f72a3558ee88b24c4063b2 - https://github.com/OpenSC/OpenSC/issues/2792#issuecomment-1674806651 - https://github.com/OpenSC/OpenSC/releases/tag/0.24.0-rc1 - https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisories
CVE ID: CVE-2023-4536 State: PUBLISHED Published: 2024-01-16T15:56:33.488Z Last Updated: 2025-06-20T17:04:16.414Z Vendors: Unknown Products: My Account Page Editor Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such as subscriber to upload arbitrary files to the server, leading to RCE Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/80e0e21c-9e6e-406d-b598-18eb222b3e3e/
CVE ID: CVE-2023-4537 State: PUBLISHED Published: 2024-02-15T08:27:07.579Z Last Updated: 2024-10-10T15:35:58.278Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Comarch Products: ERP XL Problem Types: CWE-755 Description: Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/02/CVE-2023-4537/ - https://cert.pl/posts/2024/02/CVE-2023-4537/
CVE ID: CVE-2023-4538 State: PUBLISHED Published: 2024-02-15T08:32:44.440Z Last Updated: 2024-08-29T18:01:40.861Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Comarch Products: ERP XL Problem Types: CWE-522 Description: The database access credentials configured during installation are stored in a special table, and are encrypted with a shared key, same among all Comarch ERP XL client installations. This could allow an attacker with access to that table to retrieve plain text passwords. This issue affects ERP XL: from 2020.2.2 through 2023.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts
23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/02/CVE-2023-4537/ - https://cert.pl/posts/2024/02/CVE-2023-4537/
CVE ID: CVE-2023-4539 State: PUBLISHED Published: 2024-02-15T08:32:53.376Z Last Updated: 2024-08-02T07:31:05.517Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Comarch Products: ERP XL Problem Types: CWE-798 Description: Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Comarch ERP XL installations. This issue affects ERP XL: from 2020.2.2 through 2023.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/02/CVE-2023-4537/ - https
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert.pl/en/posts/2024/02/CVE-2023-4537/ - https://cert.pl/posts/2024/02/CVE-2023-4537/
CVE ID: CVE-2023-4540 State: PUBLISHED Published: 2023-09-05T07:46:45.194Z Last Updated: 2025-04-04T18:33:32.557Z Vendors: Daurnimator Products: lua-http Problem Types: CWE-755 Description: Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service (DoS) attack to be executed by sending a properly crafted request to the server. Such a request causes the program to enter an infinite loop. This issue affects lua-http: all versions before commit ddab283. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680c
ontainer: - CISA ADP Vulnrichment: References: - https://github.com/daurnimator/lua-http/commit/ddab2835c583d45dec62680ca8d3cbde55e0bae6 - https://cert.pl/posts/2023/09/CVE-2023-4540/ - https://cert.pl/en/posts/2023/09/CVE-2023-4540/
CVE ID: CVE-2023-4541 State: PUBLISHED Published: 2023-12-29T14:34:05.937Z Last Updated: 2024-08-02T07:31:06.113Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ween Software Products: Admin Panel Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ween Software Admin Panel allows SQL Injection.This issue affects Admin Panel: through 20231229. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-23-0740
CVE ID: CVE-2023-4542 State: PUBLISHED Published: 2023-08-25T21:31:04.605Z Last Updated: 2024-08-02T07:31:06.464Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-8000-10 Problem Types: CWE-78 Description: A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238047. NOTE: The vendor was contacted early about thi
y be used. The associated identifier of this vulnerability is VDB-238047. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238047 - https://vuldb.com/?ctiid.238047 - https://github.com/PumpkinBridge/cve/blob/main/rce.md
CVE ID: CVE-2023-4543 State: PUBLISHED Published: 2023-08-25T21:31:05.699Z Last Updated: 2024-08-02T07:31:06.466Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. This vulnerability affects unknown code of the file ?r=recruit/contact/export&contactids=x. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238048. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
DB-238048. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238048 - https://vuldb.com/?ctiid.238048 - https://github.com/spcck/cve/blob/main/sql.md
CVE ID: CVE-2023-4544 State: PUBLISHED Published: 2023-08-26T05:00:06.286Z Last Updated: 2025-07-01T13:50:44.934Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Byzoro Products: Smart S85F Management Platform Problem Types: CWE-425 Description: A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238049 was assigned to this vulnerability. NOTE: The vendor was contac
to the public and may be used. The identifier VDB-238049 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.238049 - https://vuldb.com/?ctiid.238049 - https://vuldb.com/?submit.193047 - https://github.com/jo1995hn/cve/blob/main/s856.md
CVE ID: CVE-2023-4545 State: PUBLISHED Published: 2023-08-26T07:00:06.640Z Last Updated: 2024-08-02T07:31:06.048Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is an unknown function of the file ?r=recruit/bgchecks/export&checkids=x. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analys
VDB-238056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238056 - https://vuldb.com/?ctiid.238056 - https://github.com/siyu15/cve/blob/main/sql.md
CVE ID: CVE-2023-4546 State: PUBLISHED Published: 2023-08-26T07:31:04.979Z Last Updated: 2024-08-02T07:31:06.483Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Byzoro Products: Smart S85F Management Platform Problem Types: CWE-284 Description: A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230816. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation leads to improper access controls. The exploit has been disclosed to the public and may be used. The identifier VDB-238057 was assigned to this vulnerability. Additional Analyst Notes: - CVE
e public and may be used. The identifier VDB-238057 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238057 - https://vuldb.com/?ctiid.238057 - https://vuldb.com/?submit.195836 - https://github.com/hutianshuai/CVE/blob/main/information_disclosure.md
CVE ID: CVE-2023-4547 State: PUBLISHED Published: 2023-08-26T09:00:06.615Z Last Updated: 2024-08-02T07:31:06.445Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SPA-Cart Products: eCommerce CMS Problem Types: CWE-79 Description: A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filter[brandid]/filter[price] leads to cross site scripting. The attack may be launched remotely. VDB-238058 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238058 - ht
o this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238058 - https://vuldb.com/?ctiid.238058 - http://packetstormsecurity.com/files/174343/SPA-Cart-eCommerce-CMS-1.9.0.3-Cross-Site-Scripting.html