Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
xploit has been disclosed to the public and may be used. The identifier VDB-229977 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229977 - https://vuldb.com/?ctiid.229977 - https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/NFine%20rapid%20development%20platform%20Role-GetGridJson%20has%20unauthorized%20access%20vulnerability.md
CVE ID: CVE-2023-2904 State: PUBLISHED Published: 2023-06-07T21:59:24.478Z Last Updated: 2025-01-06T20:55:57.917Z Vendors: HID Global Products: SAFE Problem Types: CWE-471 Description: The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the application programmable interface (API). An attacker could log in using account credentials available through a request generated by an internal user and then manipulate the visitor-id within the web API to access the personal data of other users. There is no limit on the number of requests that can be made to the HID SAFE Web Server, so an attacker could also exploit this vu
o limit on the number of requests that can be made to the HID SAFE Web Server, so an attacker could also exploit this vulnerability to create a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-152-02
CVE ID: CVE-2023-2905 State: PUBLISHED Published: 2023-08-09T04:46:14.972Z Last Updated: 2024-10-10T14:56:29.619Z Vendors: Cesanta Products: Mongoose Problem Types: CWE-122 Description: Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web server, version 7.10 is susceptible to a heap-based buffer overflow vulnerability in the default configuration. Version 7.9 and prior does not appear to be vulnerable. This issue is resolved in version 7.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/CVE-2023-2905.html - https://github
Program Container: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/CVE-2023-2905.html - https://github.com/cesanta/mongoose/pull/2274 - https://github.com/cesanta/mongoose/releases/tag/7.11
CVE ID: CVE-2023-2906 State: PUBLISHED Published: 2023-08-25T20:41:19.403Z Last Updated: 2025-11-03T21:47:44.937Z Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-369 Description: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/CVE-2023-2906.html - https://gitlab.com/wireshark/wireshark/-/issues/19229 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4AVRUYS
-/issues/19229 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRKHFQPWFU7F3OXTL6IEIQSJG6FVXZTZ/
CVE ID: CVE-2023-2907 State: PUBLISHED Published: 2023-06-19T12:41:53.278Z Last Updated: 2024-12-11T20:35:07.826Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Marksoft Products: Marksoft Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection.This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0363
CVE ID: CVE-2023-2908 State: PUBLISHED Published: 2023-06-30T00:00:00.000Z Last Updated: 2025-11-03T20:35:30.709Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: Libtiff, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-476 Description: A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tiffcp utility which triggers a runtime error that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service.
or that causes undefined behavior. This will result in an application crash, eventually leading to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-2908 - https://bugzilla.redhat.com/show_bug.cgi?id=2218830 - https://gitlab.com/libtiff/libtiff/-/commit/9bd48f0dbd64fb94dc2b5b05238fde0bfdd4ff3f - https://gitlab.com/libtiff/libtiff/-/merge_requests/479 - https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html - https://security.netapp.com/advisory/ntap-20230731-0004/
CVE ID: CVE-2023-2909 State: PUBLISHED Published: 2023-05-31T09:26:31.581Z Last Updated: 2025-01-09T21:01:20.049Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ASUSTOR Products: ADM Problem Types: CWE-22 Description: EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.asustor.com/security/security_advisory_detail?id=25
CVE ID: CVE-2023-2910 State: PUBLISHED Published: 2023-08-17T09:25:43.344Z Last Updated: 2024-10-08T17:30:14.795Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUSTOR Products: ADM Problem Types: CWE-77 Description: Improper neutralization of special elements used in a command ('Command Injection') vulnerability in Printer service functionality in ASUSTOR Data Master (ADM) allows remote unauthorized users to execute arbitrary commands via unspecified vectors. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
s ADM 4.2.2.RI61 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.asustor.com/security/security_advisory_detail?id=27
CVE ID: CVE-2023-2911 State: PUBLISHED Published: 2023-06-21T16:26:36.587Z Last Updated: 2025-02-13T16:49:00.351Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Description: If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1. Additional Analyst Notes: - CVE Program Container
.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.isc.org/docs/cve-2023-2911 - http://www.openwall.com/lists/oss-security/2023/06/21/6 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2/ - https://www.debian.org/security/2023/dsa-5439 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEFCEVCTYEMKTWA7V7EYPI5YQQ4JWDLI/ - https://security.netapp.com/advisory/ntap-20230703-0010/
CVE ID: CVE-2023-2912 State: PUBLISHED Published: 2023-07-17T12:31:05.854Z Last Updated: 2024-10-22T13:40:14.960Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Secomea Products: SiteManager Embedded Problem Types: CWE-416 Description: Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2023-2913 State: PUBLISHED Published: 2023-07-18T19:52:45.214Z Last Updated: 2025-03-05T18:48:42.077Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Rockwell Automation Products: ThinManager ThinServer Problem Types: CWE-23 Description: An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings. This feature is disabled by default. When the API is enabled and handling requests, a path traversal vulnerability exists that allows a remote actor to leverage the privileges of the server’s file system and read arbitrary files stored in it. A malicious user could exploit this v
the privileges of the server’s file system and read arbitrary files stored in it. A malicious user could exploit this vulnerability by executing a path that contains manipulating variables. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140160
CVE ID: CVE-2023-2914 State: PUBLISHED Published: 2023-08-17T15:01:25.994Z Last Updated: 2024-10-08T17:08:30.894Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Rockwell Automation Products: ThinManager ThinServer Problem Types: CWE-20 Description: The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, an integer overflow condition exists in the affected products. When the ThinManager processes incoming messages, a read access violation occurs and terminates the process. A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and causing a denial of service cond
ld exploit this vulnerability by sending a crafted synchronization protocol message and causing a denial of service condition in the software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471
CVE ID: CVE-2023-2915 State: PUBLISHED Published: 2023-08-17T15:05:52.368Z Last Updated: 2024-10-08T17:01:54.549Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Rockwell Automation Products: ThinManager ThinServer Problem Types: CWE-20 Description: The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unauthenticated remote threat actor can delete arbitrary files with system privileges. A malicious user could exploit this vulnerability by sending a specifically
ete arbitrary files with system privileges. A malicious user could exploit this vulnerability by sending a specifically crafted synchronization protocol message resulting in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471
CVE ID: CVE-2023-2916 State: PUBLISHED Published: 2023-08-15T08:32:58.963Z Last Updated: 2024-10-08T20:07:36.065Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: infinitewp Products: InfiniteWP Client Problem Types: CWE-200 Information Exposure Description: The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract sensitive data including configuration. It can only be exploited if the plugin has not been configured yet. If combined with another arbitrary plugin in
ration. It can only be exploited if the plugin has not been configured yet. If combined with another arbitrary plugin installation and activation vulnerability, it may be possible to connect a site to InfiniteWP which would make remote management possible and allow for elevation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/aa157c80-447f-4406-9e49-9cc6208b7b19?source=cve - https://plugins.trac.wordpress.org/browser/iwp-client/tags/1.11.1/core.class.php#L365 - https://plugins.trac.wordpress.org/changeset/2925897/iwp-client#file4
CVE ID: CVE-2023-2917 State: PUBLISHED Published: 2023-08-17T15:10:08.696Z Last Updated: 2024-10-08T16:56:43.912Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation Products: ThinManager ThinServer Problem Types: CWE-20 Description: The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability. Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. If exploited, an unauthenticated remote attacker can upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. A malicious
te attacker can upload arbitrary files to any directory on the disk drive where ThinServer.exe is installed. A malicious user could exploit this vulnerability by sending a crafted synchronization protocol message and potentially gain remote code execution abilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140471
CVE ID: CVE-2023-2918 State: REJECTED Published: N/A Last Updated: 2023-06-16T16:54:00.228Z Description: No description available.
CVE ID: CVE-2023-2919 State: PUBLISHED Published: 2024-09-10T09:30:19.274Z Last Updated: 2024-09-10T13:28:13.746Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: themeum Products: Tutor LMS – eLearning and online course solution Problem Types: CWE-352 Description: The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. This is due to missing or incorrect nonce validation on the 'addon_enable_disable' function. This makes it possible for unauthenticated attackers to enable or disable addons via a forged request granted they can trick a site administrator into performing an action such as clicking
sable addons via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/992abd72-2a8e-4bda-94c2-4a7f88487906?source=cve - https://plugins.trac.wordpress.org/changeset/3148621/tutor/tags/2.7.5/classes/Ajax.php - https://plugins.trac.wordpress.org/browser/tutor/trunk/classes/Ajax.php?rev=3128650#L506
CVE ID: CVE-2023-2920 State: REJECTED Published: N/A Last Updated: 2024-08-16T17:43:07.825Z Description: No description available.
CVE ID: CVE-2023-2921 State: PUBLISHED Published: 2025-06-06T06:00:05.014Z Last Updated: 2025-06-09T19:45:35.897Z Vendors: Unknown Products: Short URL Problem Types: CWE-89 SQL Injection Description: The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0f85db4f-8493-4941-8f3c-e5258c581bdc/
CVE ID: CVE-2023-2922 State: PUBLISHED Published: 2023-05-27T07:31:03.391Z Last Updated: 2024-11-21T16:07:47.702Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Comment System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the component GET Parameter Handler. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230076. Additional Analyst Notes: - CVE Pro
d to the public and may be used. The identifier of this vulnerability is VDB-230076. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.230076 - https://vuldb.com/?ctiid.230076 - https://github.com/kanyl6/CVERequest/blob/main/XSS.md
CVE ID: CVE-2023-2923 State: PUBLISHED Published: 2023-05-27T07:31:04.328Z Last Updated: 2024-08-02T06:41:03.803Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tenda Products: AC6 Problem Types: CWE-121 Description: A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability is the function fromDhcpListClient. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230077 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additi
to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230077 - https://vuldb.com/?ctiid.230077 - https://github.com/GleamingEyes/vul/blob/main/1.md
CVE ID: CVE-2023-2924 State: PUBLISHED Published: 2023-05-27T08:00:03.835Z Last Updated: 2024-08-02T06:41:04.102Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Supcon Products: SimField Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in Supcon SimField up to 1.80.00.00. Affected by this issue is some unknown functionality of the file /admin/reportupload.aspx. The manipulation of the argument files[] leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-230078 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early a
lic and may be used. VDB-230078 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230078 - https://vuldb.com/?ctiid.230078 - https://github.com/RCEraser/cve/blob/main/SimField.md
CVE ID: CVE-2023-2925 State: PUBLISHED Published: 2023-05-27T08:31:02.986Z Last Updated: 2024-08-02T06:41:03.586Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Webkul Products: krayin crm Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230079. NOTE: T
has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230079. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230079 - https://vuldb.com/?ctiid.230079 - https://drive.google.com/file/d/1t7JwP0Qyo6ye-2dt6XhA1ENHDwsnYjD3/view?usp=sharing
CVE ID: CVE-2023-2926 State: PUBLISHED Published: 2023-05-27T09:00:03.321Z Last Updated: 2024-08-02T06:41:04.071Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: n/a Products: SeaCMS Problem Types: CWE-404 Description: A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230081 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Referenc
he identifier VDB-230081 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230081 - https://vuldb.com/?ctiid.230081 - https://github.com/xryj920/CVE/blob/main/DEL.md
CVE ID: CVE-2023-2927 State: PUBLISHED Published: 2023-05-27T09:00:04.620Z Last Updated: 2024-08-02T06:41:03.904Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: JIZHICMS Problem Types: CWE-918 Description: A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230082 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https:
s the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230082 - https://vuldb.com/?ctiid.230082 - https://github.com/HuBenLab/HuBenVulList/blob/main/JiZhiCMS%20is%20vulnerable%20to%20Server-side%20request%20forgery%20(SSRF).md
CVE ID: CVE-2023-2928 State: PUBLISHED Published: 2023-05-27T09:31:02.849Z Last Updated: 2025-01-13T21:03:55.401Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: DedeCMS Problem Types: CWE-94 Description: A vulnerability was found in DedeCMS up to 5.7.106. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file uploads/dede/article_allowurl_edit.php. The manipulation of the argument allurls leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230083. Additional Analyst Notes: - CVE Program Con
may be used. The associated identifier of this vulnerability is VDB-230083. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.230083 - https://vuldb.com/?ctiid.230083 - https://github.com/testwordpress123/cve/blob/main/dedecms.md
CVE ID: CVE-2023-2929 State: PUBLISHED Published: 2023-05-30T21:31:38.474Z Last Updated: 2025-05-05T15:59:47.802Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1410191 - https://www.debian.org/security/2023/dsa-5418 - https://lists.fedoraproject.org/archives/list/pac