Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-29804 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T20:45:49.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys_smb_pwdmod function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sore-pail-31b.notion.site/command-injection-WFS-SR03-7cddf0ac85e54f8ba81d9b26b00ca5cd
CVE ID: CVE-2023-29805 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T20:40:53.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sore-pail-31b.notion.site/Command-Injection-2-WFS-SR03-436d09790c2f4e31b197c39711e17775
CVE ID: CVE-2023-29808 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:41:32.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vogtmh/cmaps - https://github.com/zPrototype/CVE-2023-29808 - https://packetstormsecurity.com/files/172145/Companymaps-8.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-29809 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:39:15.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafted script in the request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51422 - https://packetstormsecurity.com/files/172146/Companymaps-8.0-SQL-Injection.html - https://github.com/zPrototype/CVE-2023-29809
CVE ID: CVE-2023-29815 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T20:40:39.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chshcms/mccms/issues/3
CVE ID: CVE-2023-29818 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:37:39.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via the default allowlist feature being stored as non-admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secureanywhere.com - http://webroot.com - https://www.spenceralessi.com/CVEs/2023-05-10-Webroot-SecureAnywhere/
CVE ID: CVE-2023-29819 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:35:26.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secureanywhere.com - http://webroot.com - https://www.spenceralessi.com/CVEs/2023-05-10-Webroot-SecureAnywhere/
CVE ID: CVE-2023-29820 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:32:14.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secureanywhere.com - http://webroot.com - https://www.spenceralessi.com/CVEs/2023-05-10-Webroot-SecureAnywhere/
CVE ID: CVE-2023-29824 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-08-02T14:14:40.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/scipy/scipy/issues/14713 - https://github.com/scipy/scipy/pull/15013 - http://www.square16.org/achievement/cve-2023-29824/ - https://github.com/scipy/scipy/issues/14713#issuecomment-1629468565
CVE ID: CVE-2023-29827 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T20:47:30.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter. NOTE: this is disputed by the vendor because the render function is not intended to be used with untrusted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mde/ejs/issues/720 - https://github.com/mde/ejs/blob/main/SECURITY.md#out-of-scope-vulnerabilities
CVE ID: CVE-2023-29835 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:36:30.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/Wondershare/tree/main/Dr.Fone
CVE ID: CVE-2023-29836 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T17:32:55.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions (EUCS) v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/Exelysis - https://github.com/IthacaLabs/Exelysis/blob/main/EUCS%20Admin%20Login%20XSS.txt
CVE ID: CVE-2023-29837 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-22T19:42:59.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution (EUCS) v.1.0 allows a remote attacker to gain privileges via the URL path of the eucsAdmin login web page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/Exelysis - https://github.com/IthacaLabs/Exelysis/blob/main/EUCS%20Admin%20Login%20XSS_CVE-2023-29836_CVE-2023-29837.txt
CVE ID: CVE-2023-29838 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T15:24:20.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate privileges via the SyncService.exe file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/Botkind/tree/main/Botkind_SyncApp - https://github.com/IthacaLabs/Botkind/blob/main/Botkind_SyncApp/WeakServicePermissions_InsecureServiceExecutable_CVE-2023-29838.txt
CVE ID: CVE-2023-29839 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-01-30T17:14:26.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jichngan/CVE-2023-29839
CVE ID: CVE-2023-29842 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:58:15.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection (Time-based) via the EN_tyid POST parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChurchCRM/CRM - https://github.com/arvandy/CVE/blob/main/CVE-2023-29842/CVE-2023-29842.py - https://github.com/arvandy/CVE/blob/main/CVE-2023-29842/CVE-2023-29842.md - http://packetstormsecurity.com/files/175105/ChurchCRM-4.5.4-SQL-Injection.html
CVE ID: CVE-2023-29845 State: REJECTED Published: N/A Last Updated: 2023-07-27T00:00:00 Description: No description available.
CVE ID: CVE-2023-29847 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T20:39:41.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_content parameters at /post.php. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MegaTKC/AeroCMS/issues/11
CVE ID: CVE-2023-29848 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:10:15.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the itemName parameter in the admin/menu.php Add New Menu function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mesinkasir/bangresto/issues/2 - http://packetstormsecurity.com/files/171899/Bang-Resto-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-29849 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T16:07:48.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mesinkasir/bangresto/issues/3 - http://packetstormsecurity.com/files/171900/Bang-Resto-1.0-SQL-Injection.html
CVE ID: CVE-2023-29850 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-06T20:37:56.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/slims/slims9_bulian/issues/186
CVE ID: CVE-2023-29854 State: PUBLISHED Published: 2023-04-18T00:00:00.000Z Last Updated: 2025-03-05T18:48:04.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/secflag/Vulnerabilitys/blob/main/DirCMS_V6.0.0_XSS_vulnerability.md
CVE ID: CVE-2023-29855 State: PUBLISHED Published: 2023-04-18T00:00:00.000Z Last Updated: 2025-02-06T14:59:33.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS/issues/544
CVE ID: CVE-2023-29856 State: PUBLISHED Published: 2023-05-02T00:00:00 Last Updated: 2024-08-02T14:14:39.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in scandir.sgi binary. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10325
CVE ID: CVE-2023-29857 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2025-01-22T16:26:57.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://leegt.synology.me:4000/ - https://github.com/Langangago/Cve-number/blob/main/README.md
CVE ID: CVE-2023-29860 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T16:50:03.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DTStack/Taier/issues/1003
CVE ID: CVE-2023-29861 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-31T14:56:00.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the management page of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://woolly-espadrille-ed5.notion.site/The-FLIR-DVTEL-camera-device-has-a-logic-flaw-vulnerability-363a2158e372440b80a2be739271c6f3 - https://github.com/Duke1410/CVE/blob/main/CVE-2023-29861
CVE ID: CVE-2023-29862 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T18:58:46.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://woolly-espadrille-ed5.notion.site/Agasio-Camera-device-has-a-logic-flaw-vulnerability-d4514e7217c54dd7ac62582b6664aa66 - https://github.com/Duke1410/CVE/blob/main/CVE-2023-29862
CVE ID: CVE-2023-29863 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:54:14.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://medical.com - http://weblab.com - https://medium.com/%40waadalbyalii5/sql-injection-in-wsdl-file-c66fa00042f5
CVE ID: CVE-2023-29867 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T16:37:41.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zammad.com/en/advisories/zaa-2023-02
CVE ID: CVE-2023-29868 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T16:32:39.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zammad.com/en/advisories/zaa-2023-01
CVE ID: CVE-2023-29881 State: PUBLISHED Published: 2024-05-09T17:56:33.033Z Last Updated: 2025-02-13T15:46:41.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/qinggan/phpok/issues/15 - https://gist.github.com/Northind/97522a49ae4bb0c8e6e2a49e75fd637a
CVE ID: CVE-2023-29887 State: PUBLISHED Published: 2023-04-18T00:00:00.000Z Last Updated: 2025-02-06T14:52:21.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.hisolutions.com/2023/01/arbitrary-file-read-vulnerability-php-library-nuovo-spreadsheet-reader-0-5-11/
CVE ID: CVE-2023-29905 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T15:43:54.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/H1IFt1Jgn
CVE ID: CVE-2023-29906 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T15:51:10.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/rk1uu20Jh
CVE ID: CVE-2023-29907 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T15:53:08.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/rk-6aRRyn
CVE ID: CVE-2023-29908 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T15:55:24.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/Ski-S20J2
CVE ID: CVE-2023-29909 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T16:03:40.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/r1FC0AAy2
CVE ID: CVE-2023-29910 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T16:11:26.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/S1aGs1Jl2
CVE ID: CVE-2023-29911 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T16:16:01.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/SyTaRoCJn
CVE ID: CVE-2023-29912 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T16:23:48.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 R200V100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/S1TusiR1n
CVE ID: CVE-2023-29913 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T14:33:32.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/HyvnMn013
CVE ID: CVE-2023-29914 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T14:31:12.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/H1Cn2sAk3
CVE ID: CVE-2023-29915 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T20:08:47.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via CMD parameter at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/HJBc2lyl2
CVE ID: CVE-2023-29916 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T20:04:59.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/rkpbC1Jgh
CVE ID: CVE-2023-29917 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T16:00:12.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/rJJzEg1e3
CVE ID: CVE-2023-29918 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T16:30:03.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.google.com/document/d/1JAhJOlfKKD5Y5zEKo0_8a3A-nQ7Dz_GIMmlXmOvXV48/edit?usp=sharing
CVE ID: CVE-2023-29919 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T18:26:54.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.solarview.io/ - https://github.com/xiaosed/CVE-2023-29919/