Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-33553 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T14:28:44.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/0xfml/poc/blob/main/PLANET/WDRT-1800AX.md - https://www.planet.com.tw/en/product/wdrt-1800ax
CVE ID: CVE-2023-33556 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T14:24:42.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting/setWanIeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Am1ngl/ttt/tree/main/37
CVE ID: CVE-2023-33557 State: PUBLISHED Published: 2023-06-09T00:00:00 Last Updated: 2025-01-06T17:40:54.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bcvgh/fuel-cms-sqlinjection/blob/main/README.md - https://github.com/daylightstudio/FUEL-CMS/issues/604
CVE ID: CVE-2023-33558 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-10T16:27:09.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ninj4c0d3r/OcoMon-Research/commit/6357def478b11119270b89329fceb115f12c69fc - https://github.com/ninj4c0d3r/OcoMon-Research
CVE ID: CVE-2023-33559 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-10T16:19:59.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ninj4c0d3r/OcoMon-Research - https://github.com/ninj4c0d3r/OcoMon-Research/commit/7459ff397f48b5356930c16c522331e39158461dv
CVE ID: CVE-2023-33560 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-21T13:48:05.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/time-slots-booking-calendar/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-33561 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-21T13:47:40.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/time-slots-booking-calendar/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-33562 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-21T13:47:08.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/time-slots-booking-calendar/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-33563 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-21T13:45:28.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/time-slots-booking-calendar/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-33564 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-21T13:44:32.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/time-slots-booking-calendar/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-33565 State: REJECTED Published: 2023-06-23T00:00:00 Last Updated: 2024-05-27T00:14:00.821Z Description: No description available.
CVE ID: CVE-2023-33566 State: REJECTED Published: 2023-06-27T00:00:00 Last Updated: 2024-05-27T00:14:00.989Z Description: No description available.
CVE ID: CVE-2023-33567 State: REJECTED Published: 2023-06-27T00:00:00 Last Updated: 2024-05-27T00:14:01.144Z Description: No description available.
CVE ID: CVE-2023-33568 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T02:27:36.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dsecbypass.com/en/dolibarr-pre-auth-contact-database-dump/ - https://www.dolibarr.org/forum/t/dolibarr-16-0-security-breach/23471/1 - https://github.com/Dolibarr/dolibarr/commit/bb7b69ef43673ed403436eac05e0bc31d50
/dolibarr-16-0-security-breach/23471/1 - https://github.com/Dolibarr/dolibarr/commit/bb7b69ef43673ed403436eac05e0bc31d5033ff7 - https://github.com/Dolibarr/dolibarr/commit/be82f51f68d738cce205f4ce5b469ef42ed82d9e - https://www.dolibarr.org/forum/t/dolibarr-16-0-security-breach/23471
CVE ID: CVE-2023-33569 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T16:22:21.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=update_user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cr4at0r/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/RCE-1.md
CVE ID: CVE-2023-33570 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T16:34:15.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://siltonrenato02.medium.com/a-brief-summary-about-a-ssti-to-rce-in-bagisto-e900ac450490
CVE ID: CVE-2023-33580 State: PUBLISHED Published: 2023-06-26T00:00:00 Last Updated: 2024-08-02T15:47:05.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpgurukul Student Study Center Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in the "Admin Name" field on Admin Profile page. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/student-study-center-management-system-using-php-and-mysql/ - http://packetstormsecurity.com/files/173030/Student-Study-Center-Management-System-1.0-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/51528 - https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33580_exploit.md
CVE ID: CVE-2023-33584 State: PUBLISHED Published: 2023-06-21T00:00:00 Last Updated: 2024-09-16T21:38:47.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the username and password fields during the login process, enabling an attacker to inject malicious SQL code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpm
ogram Container: References: - https://www.sourcecodester.com/php/14444/enrollment-system-project-source-code-using-phpmysql.html - http://packetstormsecurity.com/files/172718/Enrollment-System-Project-1.0-Authentication-Bypass-SQL-Injection.html - https://www.exploit-db.com/exploits/51501 - https://packetstormsecurity.com/files/cve/CVE-2023-33584 - https://github.com/sudovivek/My-CVE/blob/main/CVE-2023-33584_exploit.md
CVE ID: CVE-2023-33591 State: PUBLISHED Published: 2023-06-21T00:00:00 Last Updated: 2024-12-06T17:12:51.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-result.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ - https://github.com/DARSHANAGUPTA10/CVE/blob/main/CVE%202023-33591
CVE ID: CVE-2023-33592 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T15:03:54.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html - https://github.com/DARSHANAGUPTA10/CVE/blob/main/CVE-2023-33592 - http://packetstormsecurity.com/files/173331/Lost-And-Found-Information-Syste
SHANAGUPTA10/CVE/blob/main/CVE-2023-33592 - http://packetstormsecurity.com/files/173331/Lost-And-Found-Information-System-1.0-SQL-Injection.html
CVE ID: CVE-2023-33595 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2024-08-02T15:47:05.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python/cpython/issues/103824 - https://github.com/python/cpython/pull/103993/commits/c120bc2d354ca3d27d0c7a53bf65574ddaabaf3a
CVE ID: CVE-2023-33599 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T17:34:21.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: EasyImages2.0 ≤ 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/icret/EasyImages2.0/issues/115
CVE ID: CVE-2023-33601 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T14:23:38.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/phpok/phpok/issues/I72D24
CVE ID: CVE-2023-33604 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T14:20:01.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php. This vulnerability is exploited by attackers via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mubucm.com/doc/38rCUPucWz
CVE ID: CVE-2023-33613 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T16:17:25.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to cause a Denial of Service (DoS) when parsing a private key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/axtls/mailman/message/37843071/
CVE ID: CVE-2023-33617 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T17:37:34.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS Command Injection vulnerability in Parks Fiberlink 210 firmware version V2.1.14_X000 was found via the /boaform/admin/formPing target_addr parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/gbrls/58a5032bc58510abb908386124d1b4d2
CVE ID: CVE-2023-33620 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T02:26:09.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdrop via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://glinet.com - http://gl-ar750s-ext.com - https://justinapplegate.me/2023/glinet-CVE-2023-33620/
CVE ID: CVE-2023-33621 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T02:24:34.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: GL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request when the OpenVPN Server config file is downloaded. The token is then left in the browser history or access logs, potentially allowing attackers to bypass authentication via session replay. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://glinet.com - http://gl-ar750s-ext.com - https://justinapplegate.me/2023/glinet-CVE-2023-33621/
CVE ID: CVE-2023-33622 State: REJECTED Published: N/A Last Updated: 2023-06-12T00:00:00 Description: No description available.
CVE ID: CVE-2023-33623 State: REJECTED Published: N/A Last Updated: 2023-06-12T00:00:00 Description: No description available.
CVE ID: CVE-2023-33624 State: REJECTED Published: N/A Last Updated: 2023-06-12T00:00:00 Description: No description available.
CVE ID: CVE-2023-33625 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:37:13.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/naihsin/IoT/tree/main/D-Link/DIR-600/cmd%20injection - https://hackmd.io/%40naihsin/By2datZD2 - https://github.com/naihsin/IoT/blob/main/D-Link/DIR-600/cmd%20injection/README.md
CVE ID: CVE-2023-33626 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:35:27.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/naihsin/IoT/tree/main/D-Link/DIR-600/overflow - https://github.com/naihsin/IoT/blob/main/D-Link/DIR-600/overflow/README.md
CVE ID: CVE-2023-33627 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:11:23.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/UpdateSnat
CVE ID: CVE-2023-33628 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:20:14.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/DelvsList_R300
CVE ID: CVE-2023-33629 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:19:42.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/r1UjggZfh
CVE ID: CVE-2023-33630 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-16T16:06:22.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditvsList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/HkUA31-Mh
CVE ID: CVE-2023-33631 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:18:44.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelSTList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/DelSTList
CVE ID: CVE-2023-33632 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:18:18.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/r1N7fg-fn
CVE ID: CVE-2023-33633 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:17:45.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/UpdateWanParams
CVE ID: CVE-2023-33634 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:10:47.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/r1g5bl-Mn
CVE ID: CVE-2023-33635 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:10:06.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/UpdateMacClone
CVE ID: CVE-2023-33636 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:09:32.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/HyX6mgWz2
CVE ID: CVE-2023-33637 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:08:56.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/r1azLeWz3
CVE ID: CVE-2023-33638 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:08:06.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/ryyALdiV3
CVE ID: CVE-2023-33639 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:07:26.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/Bk2hvYkH3
CVE ID: CVE-2023-33640 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:06:49.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/S1twOtyrh
CVE ID: CVE-2023-33641 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:05:40.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/SycYkOj42
CVE ID: CVE-2023-33642 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:05:00.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/Skg0zOsVh
CVE ID: CVE-2023-33643 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:03:44.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/S1N5bdsE2