Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-38738 State: PUBLISHED Published: 2024-01-19T00:41:22.409Z Last Updated: 2025-06-16T19:50:19.730Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: IBM Products: OpenPages with Watson Problem Types: CWE-257 Description: IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is using Native authentication an attacker with access to the OpenPages database could through a series of specially crafted steps could exploit this weakness and gain unauthorized access to other OpenPages accounts. IBM X-Force ID: 262594. Additional Analyst Notes: - CVE Program
nd gain unauthorized access to other OpenPages accounts. IBM X-Force ID: 262594. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7107775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/262594
CVE ID: CVE-2023-38739 State: PUBLISHED Published: 2025-01-31T15:19:20.155Z Last Updated: 2025-01-31T15:28:28.703Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Problem Types: CWE-352 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7182004
CVE ID: CVE-2023-38740 State: PUBLISHED Published: 2023-10-16T21:24:15.155Z Last Updated: 2025-02-13T17:02:35.932Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/262613 - https://security.netapp.com/advisory/ntap-202311
7047489 - https://exchange.xforce.ibmcloud.com/vulnerabilities/262613 - https://security.netapp.com/advisory/ntap-20231116-0007/
CVE ID: CVE-2023-38741 State: PUBLISHED Published: 2023-08-14T17:19:00.370Z Last Updated: 2024-10-09T16:10:24.018Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: TXSeries for Multiplatforms Problem Types: CWE-400 Description: IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 262905. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support
5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7025476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/262905
CVE ID: CVE-2023-38743 State: PUBLISHED Published: 2023-09-11T00:00:00.000Z Last Updated: 2025-05-05T15:18:09.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-38743.html
CVE ID: CVE-2023-38744 State: PUBLISHED Published: 2023-08-03T04:55:52.423Z Last Updated: 2024-10-17T15:17:34.756Z Vendors: OMRON Corporation Products: CJ2M CPU Unit, CJ2H CPU Unit, CS/CJ Series EtherNet/IP Unit Problem Types: Denial-of-service (DoS) Description: Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected
unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier, CJ2H CPU Unit CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier, CS/CJ Series EtherNet/IP Unit CS1W-EIP21 V3.04 and earlier, and CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 V3.04 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ia.omron.com/product/vulnerability/OMSR-2023-006_en.pdf - https://jvn.jp/en/vu/JVNVU92193064/
CVE ID: CVE-2023-38745 State: PUBLISHED Published: 2023-07-25T00:00:00.000Z Last Updated: 2025-11-04T18:16:11.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of the process running Pandoc. It only affects systems that pass untrusted user input to Pandoc and allow Pandoc to be used to produce a PDF or with the --extract-media option. NOTE: this issue exists because of an incomplete fix f
c to be used to produce a PDF or with the --extract-media option. NOTE: this issue exists because of an incomplete fix for CVE-2023-35936 (failure to properly account for double encoded path names). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jgm/pandoc/commit/eddedbfc14916aa06fc01ff04b38aeb30ae2e625 - https://github.com/jgm/pandoc/compare/3.1.5...3.1.6 - https://lists.debian.org/debian-lts-announce/2023/07/msg00029.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI6RBP6ZKVC2OOCV6SU2FUHPMAXDDJFU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
/message/QI6RBP6ZKVC2OOCV6SU2FUHPMAXDDJFU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGRJHU2FTSGTHHRTNDF7STEKLKKA25JN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYP3FKDS3KAYMQUZVVL73IUI4CWSKLKP/
CVE ID: CVE-2023-38746 State: PUBLISHED Published: 2023-08-03T04:58:30.228Z Last Updated: 2024-10-17T15:03:39.363Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Out-of-bounds read Description: Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ia.omron.com/product/vulnerability/OMSR-2023-005_en.pdf - https://jvn.jp/en/vu/JVNVU93286117/
CVE ID: CVE-2023-38747 State: PUBLISHED Published: 2023-08-03T05:00:34.672Z Last Updated: 2024-10-21T19:34:50.342Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Heap-based buffer overflow Description: Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ia.omron.com/product/vulnerability/OMSR-2023-005_en.pdf - https://jvn.jp/en/vu/JVNVU93286117/
CVE ID: CVE-2023-38748 State: PUBLISHED Published: 2023-08-03T05:09:16.186Z Last Updated: 2024-10-17T15:44:46.018Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Use after free Description: Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ia.omron.com/product/vulnerability/OMSR-2023-005_en.pdf - https://jvn.jp/en/vu/JVNVU93286117/
CVE ID: CVE-2023-38750 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T17:42:37.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE ID: CVE-2023-38751 State: PUBLISHED Published: 2023-08-09T03:29:37.666Z Last Updated: 2024-10-17T14:18:01.982Z Vendors: Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Products: Special Interest Group Network for Analysis and Liaison Problem Types: Improper authorization Description: Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the organization information of the information receiver that is set as "non-disclosure" in the information provision operation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://w
provision operation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jpcert.or.jp/press/2023/PR20230807_notice.html - https://jvn.jp/en/jp/JVN83334799/
CVE ID: CVE-2023-38752 State: PUBLISHED Published: 2023-08-09T03:29:51.888Z Last Updated: 2024-10-10T18:05:51.064Z Vendors: Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Products: Special Interest Group Network for Analysis and Liaison Problem Types: Improper authorization Description: Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jpcert.or.jp/press/2023/PR20230
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jpcert.or.jp/press/2023/PR20230807_notice.html - https://jvn.jp/en/jp/JVN83334799/
CVE ID: CVE-2023-38758 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T18:53:47.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in the add-ingredient function in the templates/ingredients/view.html, models/ingredients.py, and views/ingredients.py components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wger.de - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38759 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T19:00:13.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-management feature in the gym/views/gym.py, templates/gym/reset_user_password.html, templates/user/overview.html, core/views/user.py, and templates/user/preferences.html, core/forms.py components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wger.de - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38760 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-15T18:20:35.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters within the /QueryView.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38761 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T18:28:30.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to the systemSettings.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38762 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-15T18:20:10.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38763 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-15T18:19:46.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the FundRaiserID parameter within the /FundRaiserEditor.php endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38764 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-15T18:18:09.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38765 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-15T18:17:42.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38766 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T18:27:24.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to the PersonView.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38767 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T18:25:13.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value' and 'custom' parameters within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38768 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T18:23:52.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38769 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T18:23:10.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38770 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-15T18:14:07.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38771 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T18:52:43.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp parameter within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38773 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:03:47.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within the /QueryView.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://churchcrm.io/ - https://demo.churchcrm.io/master - https://github.com/ChurchCRM/CRM/wiki - https://github.com/0x72303074/CVE-Disclosures
CVE ID: CVE-2023-38802 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-02T14:46:51.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling - https://news.ycombinator.com/item?id=37305800 - https://www.debian.org/security/2023/dsa-5495 - https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html - https://lists
w.debian.org/security/2023/dsa-5495 - https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
CVE ID: CVE-2023-38812 State: REJECTED Published: N/A Last Updated: 2023-08-03T00:00:00 Description: No description available.
CVE ID: CVE-2023-38814 State: REJECTED Published: N/A Last Updated: 2023-08-08T00:00:00 Description: No description available.
CVE ID: CVE-2023-38815 State: REJECTED Published: N/A Last Updated: 2023-08-08T00:00:00 Description: No description available.
CVE ID: CVE-2023-38817 State: PUBLISHED Published: 2023-10-11T00:00:00 Last Updated: 2024-08-02T17:54:38.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echo_driver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by Microsoft itself." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ioctl.fail/echo-ac-writeup/
CVE ID: CVE-2023-38823 State: PUBLISHED Published: 2023-11-20T00:00:00.000Z Last Updated: 2025-06-10T13:53:51.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/johnathanhuutri/CVE_report/blob/master/CVE-2023-38823/README.md
CVE ID: CVE-2023-38825 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-05T17:07:27.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in MyCapMobileApp/update.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.project-redcap.org/ - https://github.com/ntrampham/REDCap
CVE ID: CVE-2023-38826 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T17:54:38.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability exists in Follet Learning Solutions Destiny through 20.0_1U. via the handlewpesearchform.do. searchString. Additional Analyst Notes: - CVE Program Container: References: - https://www.follettlearning.com/ - https://github.com/Oracle-Security/CVEs/tree/main/Follett%20Learning%20Solutions/Destiny/CVE-2023-38826
CVE ID: CVE-2023-38827 State: PUBLISHED Published: 2024-01-09T00:00:00.000Z Last Updated: 2025-06-03T14:33:57.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Follet School Solutions Destiny v.20_0_1_AU4 and later allows a remote attacker to run arbitrary code via presentonesearchresultsform.do. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/tree/main/Follett%20Learning%20Solutions/Destiny/CVE-2023-38827