Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-36028 State: PUBLISHED Published: 2023-11-14T17:57:34.892Z Last Updated: 2025-10-09T00:00:07.155Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-122
507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-122 Description: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36028
CVE ID: CVE-2023-36029 State: PUBLISHED Published: 2023-11-03T00:22:00.953Z Last Updated: 2025-10-08T23:59:58.317Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:T/RC:C) Vendors: Microsoft Products: Microsoft Edge for Android Problem Types: Spoofing Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36029
CVE ID: CVE-2023-36030 State: PUBLISHED Published: 2023-11-14T17:57:36.095Z Last Updated: 2025-10-08T23:59:58.966Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1, Microsoft Dynamics 365 (on-premises) version 9.0 Problem Types: CWE-79 Description: Microsoft Dynamics 365 Sales Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36030
CVE ID: CVE-2023-36031 State: PUBLISHED Published: 2023-11-14T17:57:36.652Z Last Updated: 2025-10-08T23:59:59.919Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: CWE-79 Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36031
CVE ID: CVE-2023-36033 State: PUBLISHED Published: 2023-11-14T17:57:37.286Z Last Updated: 2025-10-21T23:05:32.497Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-822 Description: Windows DWM Core Library Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichme
scription: Windows DWM Core Library Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36033
CVE ID: CVE-2023-36034 State: PUBLISHED Published: 2023-11-03T00:22:00.162Z Last Updated: 2025-10-08T23:59:37.418Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based), Microsoft Edge (Chromium-based) Extended Stable Problem Types: CWE-416 Description: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36034
CVE ID: CVE-2023-36035 State: PUBLISHED Published: 2023-11-14T17:57:34.325Z Last Updated: 2025-10-08T23:59:57.691Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2019 Cumulative Update 13 Problem Types: CWE-502 Description: Microsoft Exchange Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36035
CVE ID: CVE-2023-36036 State: PUBLISHED Published: 2023-11-14T17:57:13.188Z Last Updated: 2025-10-21T23:05:32.648Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Wi
08 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 11 version 22H3, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 23H2 Problem Types: CWE-122 Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microso
erability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36036
CVE ID: CVE-2023-36037 State: PUBLISHED Published: 2023-11-14T17:57:33.136Z Last Updated: 2025-10-08T23:59:57.136Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Excel 2016 Problem Types: Security Feature Bypass Description: Microsoft Excel Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36037
CVE ID: CVE-2023-36038 State: PUBLISHED Published: 2023-11-14T21:35:48.071Z Last Updated: 2025-10-09T00:00:13.478Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: ASP.NET Core 8.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.7, .NET 8.0 Problem Types: CWE-400 Description: ASP.NET Core Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36038
CVE ID: CVE-2023-36039 State: PUBLISHED Published: 2023-11-14T17:57:30.641Z Last Updated: 2025-10-08T23:59:54.959Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2019 Cumulative Update 13 Problem Types: CWE-502 Description: Microsoft Exchange Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36039
CVE ID: CVE-2023-36041 State: PUBLISHED Published: 2023-11-14T17:57:31.280Z Last Updated: 2025-10-08T23:59:55.431Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Excel 2016 Problem Types: CWE-416 Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36041
CVE ID: CVE-2023-36042 State: PUBLISHED Published: 2023-11-14T17:57:31.934Z Last Updated: 2025-10-08T23:59:55.996Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.7, Microsoft .NET Framework 3.5 AND 4.8.1 Problem Types: CWE-122 Description: Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36042
CVE ID: CVE-2023-36043 State: PUBLISHED Published: 2023-11-14T17:57:12.619Z Last Updated: 2025-10-08T23:59:36.748Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:F/RL:T/RC:C) Vendors: Microsoft Products: System Center Operations Manager (SCOM) 2022, System Center Operations Manager (SCOM) 2019, System Center Operations Manager (SCOM) 2016 Problem Types: CWE-200 Description: Open Management Infrastructure Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36043
CVE ID: CVE-2023-36045 State: PUBLISHED Published: 2023-11-14T17:57:32.529Z Last Updated: 2025-10-08T23:59:56.491Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 Problem Types: CWE-822 Description: Microsoft Office Graphics Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36045
CVE ID: CVE-2023-36046 State: PUBLISHED Published: 2023-11-14T17:57:28.205Z Last Updated: 2025-10-08T23:59:53.210Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 21H2, Windows 11 version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-59 Description: Windows Authentication Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36046
CVE ID: CVE-2023-36047 State: PUBLISHED Published: 2023-11-14T17:57:28.823Z Last Updated: 2025-10-08T23:59:53.817Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation) Problem Types: CWE-59 Description: Windows Authentication Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment:
cription: Windows Authentication Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36047
CVE ID: CVE-2023-36049 State: PUBLISHED Published: 2023-11-14T20:18:04.925Z Last Updated: 2025-10-09T00:00:12.865Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.7, Microsoft Visual Studio 2022 version 17.6, .NET 8.0, .NET 6.0, .NET 7.0, Microsoft .NET Framework 3.5 AND 4.8.1, Microsoft .NET Framework 4.8, Microsoft .NET Framework 3.5 AND 4.8, Microsoft .NET Framework 3.5 AND 4.7.2, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Fr
icrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6.2, Microsoft .NET Framework 3.5 AND 4.6/4.6.2, Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.0 Service Pack 2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1 Problem Types: CWE-20 Description: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36049
CVE ID: CVE-2023-36050 State: PUBLISHED Published: 2023-11-14T17:57:30.038Z Last Updated: 2025-10-08T23:59:54.384Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 13 Problem Types: CWE-502 Description: Microsoft Exchange Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36050
CVE ID: CVE-2023-36052 State: PUBLISHED Published: 2023-11-14T17:57:12.013Z Last Updated: 2025-10-08T23:59:36.189Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure App Service, Azure Function App, Azure Logic App Problem Types: CWE-359 Description: Azure CLI REST Command Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36052
CVE ID: CVE-2023-36053 State: PUBLISHED Published: 2023-07-03T00:00:00.000Z Last Updated: 2025-11-04T17:12:33.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/django-announce - https://docs.djangoproject.com/en/4.2/releases/security/ - https://www.djangoproject.com/weblog/2023/jul/03/security-releases/ - ht
s.djangoproject.com/en/4.2/releases/security/ - https://www.djangoproject.com/weblog/2023/jul/03/security-releases/ - https://lists.debian.org/debian-lts-announce/2023/07/msg00022.html - https://www.debian.org/security/2023/dsa-5465 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XG5DYKPNDCEHJQ3TKPJQO7QGSR4FAYMS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NRDGTUN4LTI6HG4TWR3JYLSFVXPZT42A/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQJOMNRMVPCN5WMIZ7YSX5LQ7IR2NY4D/
CVE ID: CVE-2023-36054 State: PUBLISHED Published: 2023-08-07T00:00:00 Last Updated: 2024-10-11T13:57:10.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://web.mit.edu/kerberos/www/advisories/ - https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final - http
//web.mit.edu/kerberos/www/advisories/ - https://github.com/krb5/krb5/compare/krb5-1.21-final...krb5-1.21.1-final - https://github.com/krb5/krb5/compare/krb5-1.20.1-final...krb5-1.20.2-final - https://github.com/krb5/krb5/commit/ef08b09c9459551aabbe7924fb176f1583053cdd - https://security.netapp.com/advisory/ntap-20230908-0004/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00031.html
CVE ID: CVE-2023-36076 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:30:54.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lkw199711/smanga/issues/100
CVE ID: CVE-2023-36081 State: PUBLISHED Published: 2023-08-02T00:00:00 Last Updated: 2024-10-17T18:23:21.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to execute arbitrary code via a crafted script to the web application dashboard. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://flexiva.com - http://gatesair.com - https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-36081
CVE ID: CVE-2023-36082 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T16:26:39.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://flexiva.com - http://gatesair.com - https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-36082
CVE ID: CVE-2023-36085 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-08-02T16:37:41.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/omershaik0/Handmade_Exploits/tree/main/SISQUALWFM-Host-Header-
- CVE Program Container: References: - https://github.com/omershaik0/Handmade_Exploits/tree/main/SISQUALWFM-Host-Header-Injection-CVE-2023-36085 - http://packetstormsecurity.com/files/176991/SISQUAL-WFM-7.1.319.103-Host-Header-Injection.html
CVE ID: CVE-2023-36088 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:30:07.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nebulagraph.com - https://github.com/vesoft-inc/nebula-studio - https://github.com/vesoft-inc/nebula-studio/issues/571
CVE ID: CVE-2023-36089 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T18:06:25.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en/support
CVE ID: CVE-2023-36090 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-08-02T16:37:41.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en/support
CVE ID: CVE-2023-36091 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-28T19:09:00.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en/support
CVE ID: CVE-2023-36092 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-08-02T16:37:41.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en/support
CVE ID: CVE-2023-36093 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T21:10:39.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/44
CVE ID: CVE-2023-36095 State: PUBLISHED Published: 2023-08-05T00:00:00 Last Updated: 2024-10-17T14:47:07.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hwchase17/langchain - http://langchain.com - https://github.com/langchain-ai/langchain/issues/5872
CVE ID: CVE-2023-36097 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T18:38:55.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funadmin/funadmin/issues/17