Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31530 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:42:35.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leetsun/IoT/tree/main/Motorola-CX2L/CI4
CVE ID: CVE-2023-31531 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:41:56.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leetsun/IoT/tree/main/Motorola-CX2L/CI3
CVE ID: CVE-2023-31541 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T19:28:07.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://redmine.com - http://redmineckeditor.com - https://github.com/DreamD2v/CVE-2023-31541/blob/main/CVE-2023-31541.md
CVE ID: CVE-2023-31543 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-26T19:58:33.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bndr/pipreqs/pull/364 - https://gist.github.com/adeadfed/ccc834440af354a5638f889bee34bafe
CVE ID: CVE-2023-31544 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T17:11:36.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field under the Upload Image module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/alkacon/opencms-core/issues/652 - https://github.com/alkacon/opencms-core/commit/21bfbeaf6b038e2c03bb421ce7f0933dd7a7633e
CVE ID: CVE-2023-31546 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-08-02T14:53:31.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ran9ege/CVE-2023-31546/blob/main/CVE-2023-31546.md
CVE ID: CVE-2023-31548 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T16:23:42.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored Cross-site scripting (XSS) vulnerability in the FundRaiserEditor.php component of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-31548
CVE ID: CVE-2023-31554 State: REJECTED Published: 2023-05-10T00:00:00 Last Updated: 2023-07-21T21:36:59.674Z Description: No description available.
CVE ID: CVE-2023-31555 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T19:02:15.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/podofo/podofo/issues/67
CVE ID: CVE-2023-31556 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T17:24:29.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/podofo/podofo/issues/66
CVE ID: CVE-2023-31557 State: REJECTED Published: 2023-05-10T00:00:00 Last Updated: 2023-07-21T21:37:25.887Z Description: No description available.
CVE ID: CVE-2023-31566 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T17:22:48.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/podofo/podofo/issues/70
CVE ID: CVE-2023-31567 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T17:21:09.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/podofo/podofo/issues/71
CVE ID: CVE-2023-31568 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T17:18:47.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/podofo/podofo/issues/72
CVE ID: CVE-2023-31569 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T15:43:10.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://totolink.com - https://github.com/JeeseenSec/Report/tree/main/TOTOLINK%2CThanks - https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/218.html - https://github.com/JeeseenSec/Report/tree/main/TOTOLINK/CVE-2023-31569
CVE ID: CVE-2023-31572 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T14:57:44.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Bludit 4.0.0-rc-2 allows authenticated attackers to change the Administrator password and escalate privileges via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/bludit/2023/Bludit-v4.0.0-Release-candidate-2
CVE ID: CVE-2023-31576 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T17:07:41.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute arbitrary code via a crafted HTML or Javascript file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/s9y/2023/Serendipity-2.4-beta-1
CVE ID: CVE-2023-31579 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-17T13:35:02.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/lamp-cloud/issues/183 - https://github.com/xubowenW/JWTissues/blob/main/lamp%20issue.md
CVE ID: CVE-2023-31580 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-17T13:42:54.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/networknt/light-oauth2/issues/369 - https://github.com/KANIXB/JWTIssues/blob/main/Certification%20Verification%20issue%20in%20light-oauth2.md
CVE ID: CVE-2023-31581 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-17T13:42:21.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dromara Sureness before v1.0.8 was discovered to use a hardcoded key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/sureness/issues/164 - https://github.com/xubowenW/JWTissues/blob/main/sureness%20secure%20issues.md
CVE ID: CVE-2023-31582 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:37:34.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bitbucket.org/b_c/jose4j/issues/203/insecure-support-of-setting-pbe-less-then - https://github.com/KANIXB/JWTIssues/blob/main/jose4j%20issue.md
CVE ID: CVE-2023-31584 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T21:35:51.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the User Input field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cu/silicon - https://github.com/rootd4ddy/CVE-2023-31584
CVE ID: CVE-2023-31585 State: PUBLISHED Published: 2025-05-08T00:00:00.000Z Last Updated: 2025-05-12T22:08:17.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ajayrandhawa/Grocery-CMS-PHP-Restful-API/issues/5 - https://gist.github.com/f1rstb100d/487f27964a28b100bd57f38e144f2d35
CVE ID: CVE-2023-31587 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-27T21:07:10.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenda.com.cn/product/AC5.html - https://www.tenda.com.cn/download/detail-2740.html - https://github.com/yanbushuang/CVE/blob/main/TendaAC5.md
CVE ID: CVE-2023-31594 State: PUBLISHED Published: 2023-05-25T00:00:00 Last Updated: 2025-01-16T15:04:11.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ic.com - https://github.com/Yozarseef95/CVE-2023-31594
CVE ID: CVE-2023-31595 State: PUBLISHED Published: 2023-05-24T00:00:00.000Z Last Updated: 2025-01-31T14:05:24.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ic.com - https://github.com/Yozarseef95/CVE-2023-31595
CVE ID: CVE-2023-31597 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2025-01-22T14:38:04.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zammad.com/de/advisories/zaa-2023-03
CVE ID: CVE-2023-31606 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2024-08-02T14:53:30.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jgarber/redcloth/issues/73 - https://github.com/jgarber/redcloth - https://github.com/e23e/CVE-2023-31606#readme - https://lists.debian.org/debian-lts-announce/2023/07/msg00002.html - https://security.gentoo.org/glsa/2024
1606#readme - https://lists.debian.org/debian-lts-announce/2023/07/msg00002.html - https://security.gentoo.org/glsa/202401-14
CVE ID: CVE-2023-31607 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T18:51:46.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the __libc_malloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1120
CVE ID: CVE-2023-31608 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T18:50:08.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the artm_div_int component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1123
CVE ID: CVE-2023-31609 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T16:53:40.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the dfe_unit_col_loci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1126
CVE ID: CVE-2023-31610 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T16:52:14.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the _IO_default_xsputn component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1118
CVE ID: CVE-2023-31611 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T16:51:03.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the __libc_longjmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1119
CVE ID: CVE-2023-31612 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T16:49:32.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the dfe_qexp_list component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1125
CVE ID: CVE-2023-31613 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T16:47:14.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the __nss_database_lookup component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1121
CVE ID: CVE-2023-31614 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-31T14:05:41.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the mp_box_deserialize_string function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1117
CVE ID: CVE-2023-31615 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-31T14:04:33.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the chash_array component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1124
CVE ID: CVE-2023-31616 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T20:07:52.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the bif_mod component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1122
CVE ID: CVE-2023-31617 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:01:05.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the dk_set_delete component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1127
CVE ID: CVE-2023-31618 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T17:00:22.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the sqlc_union_dt_wrap component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1136
CVE ID: CVE-2023-31619 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T16:59:28.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the sch_name_to_object component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1133
CVE ID: CVE-2023-31620 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T15:06:56.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the dv_compare component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1128
CVE ID: CVE-2023-31621 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-24T14:57:46.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the kc_var_col component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1130
CVE ID: CVE-2023-31622 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T21:30:21.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the sqlc_make_policy_trig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1135
CVE ID: CVE-2023-31623 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T21:06:53.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the mp_box_copy component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1131
CVE ID: CVE-2023-31624 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T20:21:02.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the sinv_check_exp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1134
CVE ID: CVE-2023-31625 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T20:18:22.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the psiginfo component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1132
CVE ID: CVE-2023-31626 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T20:01:23.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the gpf_notice component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1129
CVE ID: CVE-2023-31627 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:55:46.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1140
CVE ID: CVE-2023-31628 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:53:43.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the stricmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1141