Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-48051 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-02T21:23:37.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Carglglz/upydev/issues/38
CVE ID: CVE-2023-48052 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-14T18:16:44.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gxx777.github.io/HTTPie_3.2.2_Cryptographic_API_Misuse_Vulnerability.md
CVE ID: CVE-2023-48053 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-12T14:17:04.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gxx777.github.io/Archery_v1.10.0_Cryptographic_API_Misuse_Vulnerability.md
CVE ID: CVE-2023-48054 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-29T14:55:19.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gxx777.github.io/localstack_v_2.3.2_Cryptographic_API_Misuse_Vulnerability.md
CVE ID: CVE-2023-48055 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-29T14:52:56.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This vulnerability can lead to the disclosure of information and communications. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gxx777.github.io/SuperAGI_v0.0.13_Cryptographic_API_Misuse_Vulnerability.md
CVE ID: CVE-2023-48056 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2025-01-07T18:45:49.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://bandoche.com - http://pypinksign.com - https://gxx777.github.io/PyPinkSign_v0.5.1_Cryptographic_API_Misuse_Vulnerability.md
CVE ID: CVE-2023-48058 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T18:45:03.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CP1379767017/cms/blob/main/CSRF%20exists%20at%20the%20task%20management%20execution%20task%20location.md
CVE ID: CVE-2023-48060 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T18:46:20.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CP1379767017/cms/blob/main/CSRF%20exists%20at%20the%20location%20where%20task%20management%20adds%20tasks.md
CVE ID: CVE-2023-48063 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T17:18:33.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CP1379767017/cms/blob/dreamcms_vul/There%20is%20a%20CSRF%20vulnerability%20at%20th%20menu%20management%20location.md
CVE ID: CVE-2023-48068 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T17:17:09.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CP1379767017/cms/blob/dreamcms_vul/dedevCMS/dedeCMS_XSS.md
CVE ID: CVE-2023-48078 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-14T18:12:59.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/esasadam06/Simple-CRUD-Functionality-SQLi-POC
CVE ID: CVE-2023-48082 State: PUBLISHED Published: 2024-10-14T00:00:00.000Z Last Updated: 2025-03-13T14:42:51.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/change-log/
CVE ID: CVE-2023-48084 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-08-28T14:17:11.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/
CVE ID: CVE-2023-48085 State: PUBLISHED Published: 2023-12-14T00:00:00.000Z Last Updated: 2025-05-22T17:59:06.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/
CVE ID: CVE-2023-48087 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-12T14:31:11.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuxueli/xxl-job/issues/3330
CVE ID: CVE-2023-48088 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:52:00.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuxueli/xxl-job/issues/3329
CVE ID: CVE-2023-48089 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T20:06:57.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: xxl-job-admin 2.4.0 is vulnerable to Remote Code Execution (RCE) via /xxl-job-admin/jobcode/save. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xuxueli/xxl-job/issues/3333
CVE ID: CVE-2023-48090 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-02T21:23:37.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2680
CVE ID: CVE-2023-48094 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-08-02T21:23:38.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of the victim's browser via sending a crafted payload to /container_files/public_html/doc/index.html. NOTE: the vendor’s position is that Apps/Sandcastle/standalone.html is part of the CesiumGS/cesium GitHub repository, but is demo code that is not part of the CesiumJS JavaScript library product. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/cd80/33ab71cc49c42feb55d
oduct. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/cd80/33ab71cc49c42feb55de3e574753320f
CVE ID: CVE-2023-48104 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-20T17:09:16.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alinto SOGo before 5.9.1 is vulnerable to HTML Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Alinto/sogo/commit/7481ccf37087c3f456d7e5a844da01d0f8883098 - https://github.com/E1tex/CVE-2023-48104 - https://habr.com/ru/articles/804863/
CVE ID: CVE-2023-48105 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-11-26T19:40:38.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasm_loader_prepare_bytecode function in core/iwasm/interpreter/wasm_loader.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://bytecode.com - http://wasm-micro-runtime.com - https://github.com/bytecodealliance/wasm-micro-runtime/issues/2726 - https://github.com/bytecodealliance/wasm-micro-runtime/pull/2734/commits/4785d91b16
nce/wasm-micro-runtime/issues/2726 - https://github.com/bytecodealliance/wasm-micro-runtime/pull/2734/commits/4785d91b16dd49c09a96835de2d9c7b077543fa4
CVE ID: CVE-2023-48106 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:23:38.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_resolve function in the mz_os.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zlib-ng/minizip-ng/issues/740
CVE ID: CVE-2023-48107 State: PUBLISHED Published: 2023-11-22T00:00:00.000Z Last Updated: 2025-11-04T22:05:18.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_has_slash function in the mz_os.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zlib-ng/minizip-ng/issues/739 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2P3BFGECWPSK5RYDI5GCSW6N2VIXBTUO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X
YDI5GCSW6N2VIXBTUO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4BNF4ZDYQZP4JWEY6DBSYKALXQC5QM4/
CVE ID: CVE-2023-48109 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-28T20:03:58.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tjr181.com/index.php/archives/13/
CVE ID: CVE-2023-48110 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-29T13:53:01.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tjr181.com/index.php/archives/13/
CVE ID: CVE-2023-48111 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-29T13:51:48.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tjr181.com/index.php/archives/13/
CVE ID: CVE-2023-48114 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T21:23:39.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This occurs because the application tries to allow youtube.com URLs, but actually allows youtube.com followed by an @ character and an attacker-controlled domain name. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartertools.com/smartermail/release-notes/current - https://co3us.gitbook.io/write-ups/stored-xss-in-email-body-of-smartermail-cve-2023-48114
CVE ID: CVE-2023-48115 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T21:23:38.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartertools.com/smartermail/release-notes/current - https://co3us.gitbook.io/write-ups/stored-dom-xss-in-email-body-of-smartermail
CVE ID: CVE-2023-48116 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T21:23:38.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment. Additional Analyst Notes: - CVE Program Container: References: - https://www.smartertools.com/smartermail/release-notes/current - https://co3us.gitbook.io/write-ups/stored-xss-in-calendar-component-of-smartermail-cve-2023-48116
CVE ID: CVE-2023-48118 State: PUBLISHED Published: 2024-01-22T00:00:00.000Z Last Updated: 2025-06-20T18:36:47.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.quest-analytics.com/ - https://github.com/el-dud3rino/CVE-Disclosures/blob/main/Quest%20Analytics%20IQCRM/Proof%20of%20Concept - https://github.com/el-dud3rino/CVE-Disclosures/blob/main/README.md
CVE ID: CVE-2023-48121 State: PUBLISHED Published: 2023-11-28T00:00:00 Last Updated: 2024-08-02T21:23:38.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 20230401, Ezviz CS-C3N-xxx prior to v5.3.x build 20230401 allows remote attackers to obtain sensitive information by sending crafted messages to the affected devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.ezviz.com/data-security/security-notice/detail/911 - https://joerngermany
E Program Container: References: - https://www.ezviz.com/data-security/security-notice/detail/911 - https://joerngermany.github.io/ezviz_vulnerability/ - https://www.hikvision.com/hk/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-products/
CVE ID: CVE-2023-48122 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-02T21:23:38.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/microweber/microweber/issues/1042 - https://gist.github.com/grozdniyandy/1847ad48126d6bba39bdeb49114bc300
CVE ID: CVE-2023-48123 State: PUBLISHED Published: 2023-12-06T00:00:00 Last Updated: 2024-08-02T21:23:38.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file. Additional Analyst Notes: - CVE Program Container: References: - https://redmine.pfsense.org/issues/14809 - https://github.com/pfsense/pfsense/commit/f72618c4abb61ea6346938d0c93df9078736b775 - https://docs.netgate.com/downloads/pfSense-SA-23_11.webgui.asc
CVE ID: CVE-2023-48124 State: PUBLISHED Published: 2023-11-21T00:00:00 Last Updated: 2024-08-02T21:23:38.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address parameters in the Register New Account component. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/ - https://patelvarshil.medium.com/cve-2023-48124-xss-vulnerability-in-an-e-commerce-platform-ad7d4ab77af4
CVE ID: CVE-2023-48126 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-05-29T15:18:11.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/Luxe%20Beauty%20Clinic.md
CVE ID: CVE-2023-48127 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-06-11T16:57:22.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/myGAKUYA.md
CVE ID: CVE-2023-48128 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-05-29T15:18:00.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/UNITED%20BOXING%20GYM.md
CVE ID: CVE-2023-48129 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-06-20T19:39:02.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/kimono-oldnew.md
CVE ID: CVE-2023-48130 State: PUBLISHED Published: 2024-01-26T00:00:00 Last Updated: 2024-09-04T19:24:59.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/GINZA%20CAFE.md
CVE ID: CVE-2023-48131 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-06-17T15:20:50.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CHIGASAKI%20BAKERY.md
CVE ID: CVE-2023-48132 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-06-20T19:39:44.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/esportsstudioLegends.md
CVE ID: CVE-2023-48133 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-06-16T18:19:18.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/angel%20coffee.md
CVE ID: CVE-2023-48134 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-14T18:14:52.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: nagayama_copabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/nagayama_copabowl.md
CVE ID: CVE-2023-48135 State: PUBLISHED Published: 2024-01-26T00:00:00.000Z Last Updated: 2025-06-17T15:22:52.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in mimasaka_farm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/mimasaka_farm.md
CVE ID: CVE-2023-48161 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:23:39.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/giflib/bugs/167/ - https://github.com/tacetool/TACE#cve-2023-48161