Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1744 State: PUBLISHED Published: 2023-03-30T22:31:03.950Z Last Updated: 2024-08-02T05:57:25.001Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: IBOS Problem Types: CWE-434 Description: A vulnerability classified as critical was found in IBOS 4.5.5. This vulnerability affects unknown code of the component htaccess Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224632. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224632 - https://vuldb.com/?ctiid.224632 - ht
nalyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224632 - https://vuldb.com/?ctiid.224632 - https://gitee.com/xieqiangweb/cve/blob/master/cve/IBOS%20oa%20v4.5.5%20upload.md
CVE ID: CVE-2023-1745 State: PUBLISHED Published: 2023-03-30T23:00:05.358Z Last Updated: 2024-08-02T05:57:25.126Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: KMPlayer Problem Types: CWE-427 Description: A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unknown processing in the library SHFOLDER.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224633 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https
er VDB-224633 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224633 - https://vuldb.com/?ctiid.224633 - https://github.com/10cksYiqiyinHangzhouTechnology/KMPlayer_Poc - https://drive.google.com/file/d/1bdYaDmtWhnjaHkzv3bZ4PUSMzDJ8JjSV/view - https://youtu.be/7bh2BQOqxFo
CVE ID: CVE-2023-1746 State: PUBLISHED Published: 2023-03-30T23:00:06.477Z Last Updated: 2024-11-22T21:49:38.257Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Dreamer CMS Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0. Affected is an unknown function of the component File Upload Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-224634 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224634 - https://vuldb.com/?ctiid.224
VE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224634 - https://vuldb.com/?ctiid.224634 - https://github.com/iteachyou-wjn/dreamer_cms/issues/11
CVE ID: CVE-2023-1747 State: PUBLISHED Published: 2023-03-30T23:31:03.207Z Last Updated: 2025-02-12T14:53:17.818Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: IBOS Problem Types: CWE-89 Description: A vulnerability has been found in IBOS up to 4.5.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=email/api/mark&op=delFromSend. The manipulation of the argument emailids leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.5.5 is able to address this issue. It is recommended to upgrade the affected component. The associ
pgrading to version 4.5.5 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-224635. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224635 - https://vuldb.com/?ctiid.224635 - https://gitee.com/wkstestete/cve/blob/master/sql/ibos%20sql%20injection.md
CVE ID: CVE-2023-1748 State: PUBLISHED Published: 2023-04-04T16:56:27.851Z Last Updated: 2025-01-16T21:36:21.307Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Nexx Products: Smart Alarm NXAL-100, Smart Plug NXPG-100W, Garage Door Controller NXG-100B, NXG-200 Problem Types: CWE-798 Use of Hard-coded Credentials Description: The listed versions of Nexx Smart Home devices use hard-coded credentials. An attacker with unauthenticated access to the Nexx Home mobile application or the affected firmware could view the credentials and access the MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer. Ad
e MQ Telemetry Server (MQTT) server and the ability to remotely control garage doors or smart plugs for any customer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01
CVE ID: CVE-2023-1749 State: PUBLISHED Published: 2023-04-04T16:54:46.115Z Last Updated: 2025-01-16T21:36:36.545Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Nexx Products: Smart Alarm NXAL-100, Smart Plug NXPG-100W, Garage Door Controller NXG-100B, NXG-200 Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API requests that the affected devices would execute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/ne
ecute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01
CVE ID: CVE-2023-1750 State: PUBLISHED Published: 2023-04-04T16:52:59.453Z Last Updated: 2025-01-16T21:36:53.482Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Nexx Products: Smart Alarm NXAL-100, Smart Plug NXPG-100W, Garage Door Controller NXG-100B, NXG-200 Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve device history, set device settings, and retrieve device information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
ieve device information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01
CVE ID: CVE-2023-1751 State: PUBLISHED Published: 2023-04-04T16:54:06.709Z Last Updated: 2025-01-16T21:36:44.458Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Nexx Products: Smart Alarm NXAL-100, Smart Plug NXPG-100W, Garage Door Controller NXG-100B, NXG-200 Problem Types: CWE-20 Improper Input Validation Description: The listed versions of Nexx Smart Home devices use a WebSocket server that does not validate if the bearer token in the Authorization header belongs to the device attempting to associate. This could allow any authorized user to receive alarm information and signals meant for other devices which leak a deviceId. Additional Analyst Notes: - CVE
to receive alarm information and signals meant for other devices which leak a deviceId. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01
CVE ID: CVE-2023-1752 State: PUBLISHED Published: 2023-04-04T16:55:40.229Z Last Updated: 2025-01-16T21:36:28.116Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: Nexx Products: Smart Alarm NXAL-100, Smart Plug NXPG-100W, Garage Door Controller NXG-100B, NXG-200 Problem Types: CWE-287 Improper Authentication Description: The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01
CVE ID: CVE-2023-1753 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-11T19:01:59.055Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-521 Description: Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/01d6ae23-3a8f-42a8-99f4-10246187d71b - https://github.com/thorsten/phpmyfaq/commit/f612a72494080e04947da7028340fee4493fe8a5
CVE ID: CVE-2023-1754 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-11T19:01:25.386Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/529f2361-eb2e-476f-b7ef-4e561a712e28 - https://github.com/thorsten/phpmyfaq/commit/d773df925cb74e874527458beed1f66f966ec491
CVE ID: CVE-2023-1755 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-11T18:59:18.867Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/882ffa07-5397-4dbb-886f-4626859d711a - https://github.com/thorsten/phpmyfaq/commit/2156573100fd3abf4c65270def77aed20ffc8994
CVE ID: CVE-2023-1756 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T20:43:41.051Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e495b443-b328-42f5-aed5-d68b929b4cb9 - https://github.com/thorsten/phpmyfaq/commit/ca75f4688a8b0f14d5d0697b9f4b6ea66088f726
CVE ID: CVE-2023-1757 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T20:43:15.800Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/584a200a-6ff8-4d53-a3c0-e7893edff60c - https://github.com/thorsten/phpmyfaq/commit/5061e5841be6c218ebb0de0cbf7b7f195dc46d19
CVE ID: CVE-2023-1758 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T20:42:40.540Z Severity: HIGH (CVSS 8.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-75 Description: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0854328e-eb00-41a3-9573-8da8f00e369c - https://github.com/thorsten/phpmyfaq/commit/f3380f46c464d1bc6f3ded29213c79be0de8fc57
CVE ID: CVE-2023-1759 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-11T18:45:36.906Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e8109aed-d364-4c0c-9545-4de0347b10e1 - https://github.com/thorsten/phpmyfaq/commit/ecbd8107fe954b6be95dab315862d1caa0b94efa
CVE ID: CVE-2023-1760 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-11T18:45:03.435Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/2d0ac48a-490d-4548-8d98-7447042dd1b5 - https://github.com/thorsten/phpmyfaq/commit/56295b54062a284020fccce12a5044f9fa7d2770
CVE ID: CVE-2023-1761 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-11T18:44:23.612Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/24c0a65f-0751-4ff8-af63-4b325ac8879f - https://github.com/thorsten/phpmyfaq/commit/128ef85f8e3ab7869d3107aa4d0b6867b53391d7
CVE ID: CVE-2023-1762 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-12T16:00:48.751Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-269 Description: Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3c2374cc-7082-44b7-a6a6-ccff7a650a3a - https://github.com/thorsten/phpmyfaq/commit/ae6c1d8c3eab05d6e2227c7a9998707f4f891514
CVE ID: CVE-2023-1763 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-22T19:47:54.570Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Canon Inc. Products: Canon IJ NW Tool Problem Types: CWE-549 Description: Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.canon/advisory-information/cp2023-002/ - https://psir
am Container: - CISA ADP Vulnrichment: References: - https://psirt.canon/advisory-information/cp2023-002/ - https://psirt.canon/hardening/
CVE ID: CVE-2023-1764 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-22T19:47:20.955Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Canon Inc. Products: Canon IJ NW Tool Problem Types: CWE-326 Description: Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the communication of the software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.canon/advisory-information/cp202
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.canon/advisory-information/cp2023-002/ - https://psirt.canon/hardening/
CVE ID: CVE-2023-1765 State: PUBLISHED Published: 2023-04-03T13:27:25.218Z Last Updated: 2025-02-11T15:55:53.554Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Akbim Computer Products: Panon Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akbim Computer Panon allows SQL Injection.This issue affects Panon: before 1.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0193
CVE ID: CVE-2023-1766 State: PUBLISHED Published: 2023-04-03T13:28:14.893Z Last Updated: 2025-02-11T15:53:33.532Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Akbim Computer Products: Panon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Akbim Computer Panon allows Reflected XSS.This issue affects Panon: before 1.0.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0193
CVE ID: CVE-2023-1767 State: PUBLISHED Published: 2023-04-20T09:20:05.667Z Last Updated: 2025-02-05T16:09:37.635Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Snyk Products: Snyk Advisor Problem Types: CWE-79 Description: The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an associated markdown README file containing XSS-able HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package's pa
HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package's page on Snyk Advisor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.snyk.io/hc/en-us/articles/10146704933405 - https://weizman.github.io/2023/04/10/snyk-xss/
CVE ID: CVE-2023-1768 State: PUBLISHED Published: 2023-04-04T06:30:29.538Z Last Updated: 2025-02-11T17:07:22.757Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tribe29 Products: Checkmk Problem Types: CWE-446 Description: Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/15423
CVE ID: CVE-2023-1769 State: PUBLISHED Published: 2023-03-31T11:00:04.796Z Last Updated: 2024-08-02T05:57:25.249Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Grade Point Average GPA Calculator Problem Types: CWE-200 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=grade_table leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the
le leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224670 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224670 - https://vuldb.com/?ctiid.224670 - https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/README.md
CVE ID: CVE-2023-1770 State: PUBLISHED Published: 2023-03-31T11:00:06.022Z Last Updated: 2024-08-02T05:57:25.190Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Grade Point Average GPA Calculator Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function get_scale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224671. Additiona
s been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224671. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224671 - https://vuldb.com/?ctiid.224671 - https://github.com/Pe4cefulSnow/SQL-Injection/blob/main/README.md
CVE ID: CVE-2023-1771 State: PUBLISHED Published: 2023-03-31T11:31:03.593Z Last Updated: 2024-08-02T05:57:24.985Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Grade Point Average GPA Calculator Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function get_scale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224672. Additional Analyst Notes:
n disclosed to the public and may be used. The identifier of this vulnerability is VDB-224672. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224672 - https://vuldb.com/?ctiid.224672 - https://github.com/E1CHO/cve_hub/blob/main/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3/Grade%20Point%20Average%20(GPA)%20Calculator%20in%20PHP%20and%20SQLite3%20vlun%201.pdf
CVE ID: CVE-2023-1772 State: PUBLISHED Published: 2023-03-31T11:31:04.580Z Last Updated: 2025-02-11T18:41:55.590Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: DataGear Problem Types: CWE-79 Description: A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224673 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
igned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224673 - https://vuldb.com/?ctiid.224673 - https://github.com/yangyanglo/ForCVE/blob/main/2023-0x02.md
CVE ID: CVE-2023-1773 State: PUBLISHED Published: 2023-03-31T12:00:06.260Z Last Updated: 2025-02-11T18:41:37.334Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Rockoa Problem Types: CWE-94 Description: A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224674 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
he identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224674 - https://vuldb.com/?ctiid.224674 - https://gitee.com/galaxies2580/cve/blob/master/xinhuv2.3.2.md