Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3775 State: PUBLISHED Published: 2023-09-28T23:17:24.349Z Last Updated: 2024-09-26T21:50:59.474Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H) Vendors: HashiCorp Products: Vault Enterprise Problem Types: CWE-266 Description: A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in denial of service. Fixed in Vault Enterprise 1.15.0, 1.14.4, 1.13.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-29-vault-e
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-29-vault-enterprise-s-sentinel-rgp-policies-allowed-for-cross-namespace-denial-of-service/58653
CVE ID: CVE-2023-3776 State: PUBLISHED Published: 2023-07-21T20:49:53.667Z Last Updated: 2025-03-05T18:48:04.229Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
erence counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0323bce598eea038714f941ce2b22541c46d488f - https://kernel.dance/0323bce598eea038714f941ce2b22541c46d488f - https://www.debian.org/security/2023/dsa-5480 - https://www.debian.org/security/2023/dsa-5492 - http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html - https://lists.debian.org/debian-lts-a
stormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://security.netapp.com/advisory/ntap-20240202-0003/
CVE ID: CVE-2023-3777 State: PUBLISHED Published: 2023-09-06T13:50:26.344Z Last Updated: 2025-02-13T17:01:35.796Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. When nf_tables_delrule() is flushing table rules, it is not checked whether the chain is bound and the chain's owner rule can also release the objects in certain circumstances. We recommend upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8. Additional Analyst Notes: - CVE Program Container: Re
nd upgrading past commit 6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8 - https://kernel.dance/6eaf41e87a223ae6f8e7a28d6e78384ad7e407f8 - https://www.debian.org/security/2023/dsa-5492 - http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html - http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
CVE ID: CVE-2023-3779 State: PUBLISHED Published: 2023-07-20T05:38:59.848Z Last Updated: 2025-02-05T19:38:58.410Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wpdevteam Products: Essential Addons for Elementor Problem Types: CWE-200 Information Exposure Description: The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers to obtain a site's MailChimp API key. We recommend resetting any MailChimp API keys if running a v
thenticated attackers to obtain a site's MailChimp API key. We recommend resetting any MailChimp API keys if running a vulnerable version of this plugin with the MailChimp block enabled as the API key may have been compromised. This only affects sites running the premium version of the plugin and that have the Mailchimp block enabled on a page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e007c713-74bc-4ff5-a198-70dcc8a8ee68?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2938177%40essential-addons-for-elementor-lite&new=2938177%40essential-addo
changeset?sfp_email=&sfph_mail=&reponame=&old=2938177%40essential-addons-for-elementor-lite&new=2938177%40essential-addons-for-elementor-lite&sfp_email=&sfph_mail=
CVE ID: CVE-2023-3781 State: PUBLISHED Published: 2023-10-11T20:37:08.490Z Last Updated: 2024-09-18T14:39:24.180Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/pixel/2023-10-01
CVE ID: CVE-2023-3782 State: PUBLISHED Published: 2023-07-19T20:57:16.170Z Last Updated: 2024-10-28T15:09:37.728Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Problem Types: CWE-400 Description: DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/square/okhttp/issues/7738 - https://research.jfrog.com/vulnerabilities/okhttp-client-brotli-dos/
CVE ID: CVE-2023-3783 State: PUBLISHED Published: 2023-07-20T07:22:18.602Z Last Updated: 2024-10-24T18:40:59.768Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Webile Problem Types: CWE-79 Description: A vulnerability was found in Webile 1.0.1. It has been classified as problematic. Affected is an unknown function of the component HTTP POST Request Handler. The manipulation of the argument new_file_name/c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235050 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
35050 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235050 - https://vuldb.com/?ctiid.235050 - https://www.vulnerability-lab.com/get_content.php?id=2321 - https://seclists.org/fulldisclosure/2023/Jul/38
CVE ID: CVE-2023-3784 State: PUBLISHED Published: 2023-07-20T08:02:02.627Z Last Updated: 2024-08-02T07:08:50.783Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Dooblou Products: WiFi File Explorer Problem Types: CWE-79 Description: A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235051. Additional Analyst Notes: - CVE Program C
nd may be used. The associated identifier of this vulnerability is VDB-235051. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235051 - https://vuldb.com/?ctiid.235051 - https://www.vulnerability-lab.com/get_content.php?id=2317 - https://seclists.org/fulldisclosure/2023/Jul/37
CVE ID: CVE-2023-3785 State: PUBLISHED Published: 2023-07-20T10:34:09.100Z Last Updated: 2024-10-24T18:04:11.822Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PaulPrinting Products: CMS Problem Types: CWE-79 Description: A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument firstname/lastname/address/city/state leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235052. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
identifier of this vulnerability is VDB-235052. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235052 - https://vuldb.com/?ctiid.235052 - https://www.vulnerability-lab.com/get_content.php?id=2285 - https://seclists.org/fulldisclosure/2023/Jul/39
CVE ID: CVE-2023-3786 State: PUBLISHED Published: 2023-07-20T13:00:05.904Z Last Updated: 2024-08-02T07:08:50.289Z Severity: N/A (CVSS 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P) Vendors: Aures Products: Komet Problem Types: CWE-284 Description: A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The identifier VDB-235053 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?i
as assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235053 - https://vuldb.com/?ctiid.235053 - https://www.vulnerability-lab.com/get_content.php?id=2323 - https://seclists.org/fulldisclosure/2023/Jul/40
CVE ID: CVE-2023-3787 State: PUBLISHED Published: 2023-07-20T14:52:18.673Z Last Updated: 2024-11-22T15:35:31.546Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Codecanyon Products: Tiva Events Calender Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4. This vulnerability affects unknown code. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235054 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235054 - https://vuldb.com/?ctiid.235054 - https://www.vulnerability-lab.com/get_content.php?id=2276 - https://seclists.org/fulldisclosure/2023/Jul/35
CVE ID: CVE-2023-3788 State: PUBLISHED Published: 2023-07-20T15:31:03.892Z Last Updated: 2024-08-02T07:08:50.392Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: ActiveITzone Products: Active Super Shop CMS Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in ActiveITzone Active Super Shop CMS 2.5. This issue affects some unknown processing of the component Manage Details Page. The manipulation of the argument name/phone/address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235055. Addition
as been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235055. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235055 - https://vuldb.com/?ctiid.235055 - https://www.vulnerability-lab.com/get_content.php?id=2278 - https://seclists.org/fulldisclosure/2023/Jul/34
CVE ID: CVE-2023-3789 State: PUBLISHED Published: 2023-07-20T16:00:05.408Z Last Updated: 2024-08-02T07:08:50.680Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PaulPrinting Products: CMS Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in PaulPrinting CMS 2018. Affected is an unknown function of the file /account/delivery of the component Search. The manipulation of the argument s leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235056. Additional Analyst Notes: - CVE Program Container: References:
used. The identifier of this vulnerability is VDB-235056. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235056 - https://vuldb.com/?ctiid.235056 - https://www.vulnerability-lab.com/get_content.php?id=2286 - https://seclists.org/fulldisclosure/2023/Jul/36
CVE ID: CVE-2023-3790 State: PUBLISHED Published: 2023-07-20T16:31:03.961Z Last Updated: 2024-08-02T07:08:50.537Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Boom Products: CMS Problem Types: CWE-79 Description: A vulnerability has been found in Boom CMS 8.0.7 and classified as problematic. Affected by this vulnerability is the function add of the component assets-manager. The manipulation of the argument title/description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235057 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - h
tifier VDB-235057 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235057 - https://vuldb.com/?ctiid.235057 - https://www.vulnerability-lab.com/get_content.php?id=2274 - https://seclists.org/fulldisclosure/2023/Jul/33
CVE ID: CVE-2023-3791 State: PUBLISHED Published: 2023-07-20T18:00:05.088Z Last Updated: 2024-08-02T07:08:49.938Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability was found in IBOS OA 4.5.5 and classified as critical. Affected by this issue is the function actionExport of the file ?r=contact/default/export of the component Personal Office Address Book. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-235058 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but
235058 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235058 - https://vuldb.com/?ctiid.235058 - https://github.com/zry-wyj/cve/blob/main/ibos.md
CVE ID: CVE-2023-3792 State: PUBLISHED Published: 2023-07-20T19:00:04.971Z Last Updated: 2024-08-02T07:08:50.059Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Beijing Netcon Products: NS-ASG Problem Types: CWE-425 Description: A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown part of the file /admin/test_status.php. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235059. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
DB-235059. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235059 - https://vuldb.com/?ctiid.235059 - https://github.com/CYN521/cve/blob/main/NS-ASG.md
CVE ID: CVE-2023-3793 State: PUBLISHED Published: 2023-07-20T19:31:04.068Z Last Updated: 2024-10-21T13:06:18.440Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Weaver Products: e-cology Problem Types: CWE-89 Description: A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc.class of the component HTTP POST Request Handler. The manipulation of the argument fileid with the input 1+WAITFOR+DELAY leads to sql injection. Upgrading to version 10.58.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-235061
n 10.58.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-235061 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235061 - https://vuldb.com/?ctiid.235061
CVE ID: CVE-2023-3794 State: PUBLISHED Published: 2023-07-20T20:00:06.153Z Last Updated: 2024-08-02T07:08:50.159Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Bug Finder Products: ChainCity Real Estate Investment Platform Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected is an unknown function of the file /chaincity/user/ticket/create of the component New Ticket Handler. The manipulation of the argument subject leads to cross site scripting. It is possible to launch the attack remotely. VDB-235062 is the identifier assigned to this vulnerability. NOTE: The vendor was
ssible to launch the attack remotely. VDB-235062 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235062 - https://vuldb.com/?ctiid.235062
CVE ID: CVE-2023-3795 State: PUBLISHED Published: 2023-07-20T20:31:04.016Z Last Updated: 2024-10-21T13:06:37.955Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Bug Finder Products: ChainCity Real Estate Investment Platform Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /property of the component GET Parameter Handler. The manipulation of the argument name leads to sql injection. The associated identifier of this vulnerability is VDB-235063. NOTE: The vendor was contacted early about this di
ction. The associated identifier of this vulnerability is VDB-235063. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235063 - https://vuldb.com/?ctiid.235063
CVE ID: CVE-2023-3796 State: PUBLISHED Published: 2023-07-20T21:00:04.735Z Last Updated: 2024-08-02T07:08:50.184Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Bug Finder Products: Foody Friend Problem Types: CWE-434 Description: A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profile_picture leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-235064. NOTE: The vendor was contacted early about t
y be launched remotely. The identifier of this vulnerability is VDB-235064. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235064 - https://vuldb.com/?ctiid.235064
CVE ID: CVE-2023-3797 State: PUBLISHED Published: 2023-07-20T21:31:03.877Z Last Updated: 2024-11-22T15:33:26.596Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Gen Technology Products: Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in Gen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System up to 20230712. This affects an unknown part of the file /Duty/AjaxHandle/UploadFloodPlanFileUpdate.ashx. The manipulation of the argument Filedata leads to unrestricted upload.
Duty/AjaxHandle/UploadFloodPlanFileUpdate.ashx. The manipulation of the argument Filedata leads to unrestricted upload. The exploit has been disclosed to the public and may be used. The identifier VDB-235065 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.235065 - https://vuldb.com/?ctiid.235065 - https://github.com/segonse/cve/blob/main/sichuang/sichuang.md
CVE ID: CVE-2023-3798 State: PUBLISHED Published: 2023-07-20T22:00:05.350Z Last Updated: 2024-08-02T07:08:50.204Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Chengdu Products: Flash Flood Disaster Monitoring and Warning System Problem Types: CWE-434 Description: A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as critical. This vulnerability affects unknown code of the file /App_Resource/UEditor/server/upload.aspx. The manipulation of the argument file leads to unrestricted upload. The exploit has been disclosed to the public and may be used. VDB-235066 is the identifier assigned to this vuln
upload. The exploit has been disclosed to the public and may be used. VDB-235066 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235066 - https://vuldb.com/?ctiid.235066 - https://github.com/RCEraser/cve/blob/main/wanjiang.md
CVE ID: CVE-2023-3799 State: PUBLISHED Published: 2023-07-20T22:31:03.897Z Last Updated: 2024-08-02T07:08:50.260Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=article/category/del of the component Delete Category Handler. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235067. NOTE: The vendor was contacted early about this disclosure but did not respo
tifier of this vulnerability is VDB-235067. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.235067 - https://vuldb.com/?ctiid.235067 - https://github.com/GUIqizsq/cve/blob/main/sql.md