Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-36308 State: PUBLISHED Published: 2023-09-05T00:00:00.000Z Last Updated: 2025-11-04T17:12:35.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/disintegration/imaging/releases/tag/v1.6.2 - https://github.com/disintegration/imaging/issues/165 - https://lists.fe
com/disintegration/imaging/releases/tag/v1.6.2 - https://github.com/disintegration/imaging/issues/165 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3GX2SYGRCNFUAGELLDOBIERCSCYSGKFY/
CVE ID: CVE-2023-36309 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:44:29.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Document Creator v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/document-creator - https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4
CVE ID: CVE-2023-36310 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-10T14:35:16.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/document-creator - https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4
CVE ID: CVE-2023-36311 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:42:55.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/document-creator - https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4
CVE ID: CVE-2023-36312 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:22:14.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in PHPJabbers Callback Widget v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/callback-widget/ - https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4
CVE ID: CVE-2023-36313 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:17:13.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Requests" aside from "request_feed". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/document-creator - https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4
CVE ID: CVE-2023-36314 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:15:43.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.php in PHPJabbers Callback Widget v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/callback-widget - https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4
CVE ID: CVE-2023-36315 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:38:41.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/callback-widget - https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-1-6703becb4cd4
CVE ID: CVE-2023-36317 State: PUBLISHED Published: 2023-08-23T00:00:00 Last Updated: 2024-10-03T14:03:22.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com - https://www.sourcecodester.com/php/16298/student-study-center-desk-management-system-using-php-oop-and-mysql-db-free-source-code - https://github.com/oye-ujjwal/CVE/blob/main/CVE-2023-36317
CVE ID: CVE-2023-36319 State: PUBLISHED Published: 2023-09-19T00:00:00 Last Updated: 2024-09-24T20:47:30.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action parameter of the compress-inc.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://openupload.sourceforge.net/ - https://github.com/Lowalu/CVE-2023-36319
CVE ID: CVE-2023-36321 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-08-02T16:45:56.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Connected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dlt_common.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/michael-methner/dlt-daemon/commit/8ac9a080bee25e67e49bd138d81c992ce7b6d899 - https://github.com/COVESA/dlt-daemon/issues/436 - https://lists.debian.org/debian-lts-announce/2024/06/msg00021.html
CVE ID: CVE-2023-36325 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-11-04T21:26:16.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://xeiaso.net/blog/CVE-2023-36325 - https://geti2p.net/en/blog/post/2023/06/25/new_release_2.3.0 - htt
eferences: - https://xeiaso.net/blog/CVE-2023-36325 - https://geti2p.net/en/blog/post/2023/06/25/new_release_2.3.0 - https://i2pgit.org/i2p-hackers/i2p.i2p/-/commit/82aa4e19fbb37ca1bd752ec1b836120beec0985f
CVE ID: CVE-2023-36326 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:25:09.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bn_grow function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/relic-discuss/c/A_J2-ArVIAo/m/qgFiXsUJBQAJ?utm_medium=email&utm_source=footer - https://github.com/relic-toolkit/relic/commit/34580d840469361ba9b5f001361cad659687b9ab
CVE ID: CVE-2023-36327 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:23:54.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bn_get_prime function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/relic-discuss/c/A_J2-ArVIAo/m/qgFiXsUJBQAJ?utm_medium=email&utm_source=footer - https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e
CVE ID: CVE-2023-36328 State: PUBLISHED Published: 2023-09-01T00:00:00.000Z Last Updated: 2025-06-26T13:55:14.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libtom/libtommath/pull/546 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3H2PFUTBKQUDSOJXQQS7LUSZQWT3JTW2/ - https://lists.fedoraproject.org/archives/list/package-an
s.fedoraproject.org/message/3H2PFUTBKQUDSOJXQQS7LUSZQWT3JTW2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ZUPWZGPFJ4JOI2NIP7YLRKZD5YXQTBK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46GORAXZ34MHQNUGJBKS7PJ5NSMIAJGC/
CVE ID: CVE-2023-36339 State: PUBLISHED Published: 2023-07-21T00:00:00 Last Updated: 2024-10-24T14:45:02.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://webboss.feedbear.com/updates - https://www.realinfosec.net/advisories/WEBBOSS-CMS-IDOR-2023-0xv3jsv.html
CVE ID: CVE-2023-36340 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T18:53:35.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/TOTOLINK-NR1800X.md
CVE ID: CVE-2023-36344 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-15T17:59:29.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/view/ - https://packetstormsecurity.com/files/173990/Diebold-Nixdorf-Vynamic-View-Console-5.3.1-DLL-Hijacking.html
CVE ID: CVE-2023-36345 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-11-29T19:29:39.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in POS Codekop v2.0 allows attackers to escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/KxjsEqNWU9E - https://yuyudhn.github.io/pos-codekop-vulnerability/
CVE ID: CVE-2023-36346 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T19:05:33.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the nm_member parameter at print.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=bbbA-q1syrA - https://yuyudhn.github.io/pos-codekop-vulnerability/ - http://packetstormsecurity.com/files/173280/Sales-Of-Cashier-Goods-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2023-36347 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-27T15:30:46.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=7qaIeE2cyO4 - https://yuyudhn.github.io/pos-codekop-vulnerability/
CVE ID: CVE-2023-36348 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T15:02:37.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: POS Codekop v2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the filename parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=Ge0zqY0sGiQ - https://yuyudhn.github.io/pos-codekop-vulnerability/ - http://packetstormsecurity.com/files/173278/POS-Codekop-2.0-Shell-Upload.html
CVE ID: CVE-2023-36351 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-17T20:30:56.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Viatom Health ViHealth for Android v.2.74.58 and before allows a remote attacker to execute arbitrary code via the com.viatom.baselib.mvvm.webWebViewActivity component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/cve/blob/main/vihealth.md - https://github.com/actuator/cve/blob/main/CVE-2023-36351
CVE ID: CVE-2023-36354 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T21:17:28.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/7/TL-WR940N_TL-WR841N_TL-WR740N_TL-WR941ND_userRpm_AccessCtrlTimeSchedRpm.md
CVE ID: CVE-2023-36355 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T19:02:22.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/9/TP-Link%20TL-WR940N%20wireless%20router%20userRpmWanDynamicIpV6CfgRpm%20buffer%20write%20out-of-bounds%20vulnerability.md - http://packetstormsecurity.com/file
%20userRpmWanDynamicIpV6CfgRpm%20buffer%20write%20out-of-bounds%20vulnerability.md - http://packetstormsecurity.com/files/173294/TP-Link-TL-WR940N-4-Buffer-Overflow.html
CVE ID: CVE-2023-36356 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T18:41:14.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/4/TL-WR941ND_TL-WR940N_TL-WR740N_userRpm_VirtualServerRpm.md
CVE ID: CVE-2023-36357 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T18:49:25.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/5/TL-WR941ND_TL-WR940N_TL-WR841N_userRpm_LocalManageControlRpm.md
CVE ID: CVE-2023-36358 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-10T21:12:28.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/6/TL-WR940N_WR941ND_WR743ND_WR841N_userRpm_AccessCtrlAccessTargetsRpm.md
CVE ID: CVE-2023-36359 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-10T21:03:24.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/8/TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds
TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds%20vulnerability.md
CVE ID: CVE-2023-36360 State: REJECTED Published: N/A Last Updated: 2023-07-09T00:00:00 Description: No description available.
CVE ID: CVE-2023-36361 State: PUBLISHED Published: 2023-09-05T00:00:00.000Z Last Updated: 2025-04-04T18:34:51.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://audimex.com - http://audimexee.com - https://gist.github.com/Cameleon037/40b3b6f6729d1d0984d6ce5b6837c46b - https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2023-36361
CVE ID: CVE-2023-36362 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T16:47:59.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the rel_sequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7387
CVE ID: CVE-2023-36363 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T16:29:44.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the __nss_database_lookup component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7384
CVE ID: CVE-2023-36364 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T16:22:40.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the rel_deps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7386
CVE ID: CVE-2023-36365 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T16:21:29.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the sql_trans_copy_key component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7378
CVE ID: CVE-2023-36366 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T16:19:53.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the log_create_delta component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7381
CVE ID: CVE-2023-36367 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T16:18:30.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7380
CVE ID: CVE-2023-36368 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-02T16:17:24.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the cs_bind_ubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7379
CVE ID: CVE-2023-36369 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T18:24:09.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the list_append component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7383
CVE ID: CVE-2023-36370 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T19:51:18.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the gc_col component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7382
CVE ID: CVE-2023-36371 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T19:48:53.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MonetDB/MonetDB/issues/7385
CVE ID: CVE-2023-36375 State: PUBLISHED Published: 2023-07-10T00:00:00.000Z Last Updated: 2025-11-11T17:09:35.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the Guardian name, Guardian relation, complimentary address, city, permanent address, and city parameters in the Book Hostel & Room Details page. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com - https://medium.com/@ridheshgohil1092/cve-2023-36375-xss-on-hostel-management-system-d654e6df26bc - https://www.exploit-db.com/exploits/50628