Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-42118 State: PUBLISHED Published: 2024-05-03T02:13:26.055Z Last Updated: 2025-03-28T12:04:20.804Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Exim Products: libspf2 Problem Types: CWE-191 Description: Exim libspf2 Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Exim libspf2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of SPF macros. When parsing SPF macros, the process does not properly validate user-supplied data, which can result in an integer underflow before wri
F macros, the process does not properly validate user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17578. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1472/
CVE ID: CVE-2023-42119 State: PUBLISHED Published: 2024-05-03T02:13:26.751Z Last Updated: 2025-11-03T21:49:33.830Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Exim Products: Exim Problem Types: CWE-125 Description: Exim dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a read past
by default. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. . Was ZDI-CAN-17643. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1473/
CVE ID: CVE-2023-42120 State: PUBLISHED Published: 2024-05-03T02:13:27.486Z Last Updated: 2024-08-02T19:16:50.617Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Control Web Panel Products: Control Web Panel Problem Types: CWE-78 Description: Control Web Panel dns_zone_editor Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific flaw exists within the dns_zone_editor module. The issue results from the lack of proper validation of a user-supplied string before using it to ex
zone_editor module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20581. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1477/
CVE ID: CVE-2023-42121 State: PUBLISHED Published: 2024-05-03T02:13:28.202Z Last Updated: 2024-08-02T19:16:50.476Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Control Web Panel Products: Control Web Panel Problem Types: CWE-306 Description: Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of authentication within the web interface. The issue results from the lack of authentication prior to allowing
entation of authentication within the web interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of a valid CWP user. Was ZDI-CAN-20582. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1478/
CVE ID: CVE-2023-42122 State: PUBLISHED Published: 2024-05-03T02:13:29.018Z Last Updated: 2024-08-02T19:16:50.408Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Control Web Panel Products: Control Web Panel Problem Types: CWE-78 Description: Control Web Panel wloggui Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Control Web Panel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the cwpsrv process, which listens on the loopback interface
exploit this vulnerability. The specific flaw exists within the cwpsrv process, which listens on the loopback interface. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-21079. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1479/
CVE ID: CVE-2023-42123 State: PUBLISHED Published: 2024-05-03T02:13:29.824Z Last Updated: 2024-08-02T19:16:50.463Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Control Web Panel Products: Control Web Panel Problem Types: CWE-78 Description: Control Web Panel mysql_manager Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is required to exploit this vulnerability. The specific flaw exists within the mysql_manager module. The issue results from the lack of proper validation of a user-supplied string before using it to execut
manager module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21080. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1476/
CVE ID: CVE-2023-42124 State: PUBLISHED Published: 2024-05-03T02:13:30.533Z Last Updated: 2024-09-18T18:30:13.039Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Avast Products: Premium Security Problem Types: CWE-863 Description: Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Premium Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation of the sandbox feature. The i
in order to exploit this vulnerability. The specific flaw exists within the implementation of the sandbox feature. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code outside the sandbox at medium integrity. . Was ZDI-CAN-20178. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1474/
CVE ID: CVE-2023-42125 State: PUBLISHED Published: 2024-05-03T02:13:31.242Z Last Updated: 2024-09-20T19:07:41.026Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Avast Products: Premium Security Problem Types: CWE-706 Description: Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Premium Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation of the sandbox feature. By creating a sy
exploit this vulnerability. The specific flaw exists within the implementation of the sandbox feature. By creating a symbolic link, an attacker can abuse the service to create arbitrary namespace objects. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. . Was ZDI-CAN-20383. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1475/
CVE ID: CVE-2023-42126 State: PUBLISHED Published: 2024-05-03T02:13:32.063Z Last Updated: 2024-08-02T19:16:50.529Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: G DATA Products: Total Security Problem Types: CWE-59 Description: G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the GDBackupSvc service. By creating a symbolic link, an
to exploit this vulnerability. The specific flaw exists within the GDBackupSvc service. By creating a symbolic link, an attacker can abuse the service to create a file with a permissive DACL. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-20694. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1493/
CVE ID: CVE-2023-42127 State: PUBLISHED Published: 2024-05-03T02:13:32.815Z Last Updated: 2024-09-18T18:30:14.610Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Kofax Products: Power PDF Problem Types: CWE-787 Description: Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper valida
licious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21585. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1536/
CVE ID: CVE-2023-42128 State: PUBLISHED Published: 2024-05-03T02:13:33.540Z Last Updated: 2024-08-02T19:16:50.560Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Magnet Forensics Products: AXIOM Problem Types: CWE-78 Description: Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must acquire data from a malicious mobile device. The specific flaw exists within the Android device image acquisition functionality. The issue results
ous mobile device. The specific flaw exists within the Android device image acquisition functionality. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-21255. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1533/
CVE ID: CVE-2023-42129 State: PUBLISHED Published: 2024-05-03T02:13:34.257Z Last Updated: 2024-09-18T18:30:15.330Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: A10 Products: Thunder ADC Problem Types: CWE-22 Description: A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability. The specific flaw exists within the ShowTechDownloadView class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file
wnloadView class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17899. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1495/ - https://support.a10networks.com/support/security_advisory/a10-acos-file-access-vulnerability/
CVE ID: CVE-2023-42130 State: PUBLISHED Published: 2024-05-03T02:13:34.969Z Last Updated: 2024-09-18T18:30:16.120Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: A10 Products: Thunder ADC Problem Types: CWE-22 Description: A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability. This vulnerability allows remote attackers to read and delete arbitrary files on affected installations of A10 Thunder ADC. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileMgmtExport class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file op
tExport class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to read and delete files in the context of the service account. . Was ZDI-CAN-17905. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1496/ - https://support.a10networks.com/support/security_advisory/a10-acos-file-access-vulnerability/
CVE ID: CVE-2023-42131 State: PUBLISHED Published: 2024-05-03T02:13:35.701Z Last Updated: 2024-09-18T18:30:16.892Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ansys Products: SpaceClaim Problem Types: CWE-787 Description: Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper val
malicious file. The specific flaw exists within the parsing of X_B files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-17827. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-23-1498/
CVE ID: CVE-2023-42132 State: PUBLISHED Published: 2023-10-02T04:12:32.133Z Last Updated: 2024-09-20T16:49:53.053Z Vendors: Ministry of Health, Labour and Welfare Products: FD Application Problem Types: XML external entities (XXE) Description: FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://web.fd-shinsei.mhlw.go.jp/download/software/index.html - https://jvn.jp/en/jp/JVN39596244/
CVE ID: CVE-2023-42133 State: PUBLISHED Published: 2024-10-11T12:01:13.299Z Last Updated: 2024-10-11T14:42:04.239Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: PAX Products: POS terminals Problem Types: CWE-276 Description: PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was included in firmware version PayDroid_8.1.0_Sagittarius_V11.1.61_20240226. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development? - https://blo
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development? - https://blog.stmcyber.com/pax-pos-cves-2023/ - https://cert.pl/en/posts/2024/10/CVE-2023-42133 - https://cert.pl/posts/2024/10/CVE-2023-42133
CVE ID: CVE-2023-42134 State: PUBLISHED Published: 2024-01-15T13:28:53.397Z Last Updated: 2025-06-17T21:09:22.365Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PAX Technology Products: POS terminals Problem Types: CWE-912 Description: PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partition overwrite and subsequently local code execution via hidden command. The attacker must have physical USB access to the device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development - htt
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development - https://blog.stmcyber.com/pax-pos-cves-2023/ - https://cert.pl/en/posts/2024/01/CVE-2023-4818/ - https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE ID: CVE-2023-42135 State: PUBLISHED Published: 2024-01-15T13:28:55.478Z Last Updated: 2025-06-17T21:09:22.557Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: PAX Technology Products: A920 Pro, A50 Problem Types: CWE-74 Description: PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via parameter injection by bypassing the input validation when flashing a specific partition. The attacker must have physical USB access to the device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/releas
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development - https://blog.stmcyber.com/pax-pos-cves-2023/ - https://cert.pl/en/posts/2024/01/CVE-2023-4818/ - https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE ID: CVE-2023-42136 State: PUBLISHED Published: 2024-01-15T13:28:57.814Z Last Updated: 2024-10-10T15:35:55.315Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PAX Technology Products: POS terminals Problem Types: CWE-77 Description: PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of arbitrary commands with system account privilege by shell injection starting with a specific word. The attacker must have shell access to the device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development - https://blog.stmcyber.com/pax-pos-cves-2023/ - https://cert.pl/en/posts/2024/01/CVE-2023-4818/ - https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE ID: CVE-2023-42137 State: PUBLISHED Published: 2024-01-15T13:28:59.106Z Last Updated: 2025-06-17T21:09:22.709Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PAX Technology Products: POS terminals Problem Types: CWE-59 Description: PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malicious symlinks. The attacker must have shell access to the device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development - https://blog.stmcyber.com/pax-
r: - CISA ADP Vulnrichment: References: - https://ppn.paxengine.com/release/development - https://blog.stmcyber.com/pax-pos-cves-2023/ - https://cert.pl/en/posts/2024/01/CVE-2023-4818/ - https://cert.pl/posts/2024/01/CVE-2023-4818/
CVE ID: CVE-2023-42138 State: PUBLISHED Published: 2023-10-11T08:53:24.872Z Last Updated: 2024-09-18T15:56:54.316Z Vendors: KEYENCE CORPORATION Products: KV STUDIO, KV REPLAY VIEWER Problem Types: Out-of-bounds read Description: Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.keyence.com/vulnerability231001 - https://jvn.jp/en/vu/JVNVU94752076/index.html
CVE ID: CVE-2023-42143 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-05-30T14:20:57.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by redirecting the device to an attacker-controlled machine which serves the manipulated firmware file. The device is updated with the manipulated firmware. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kth.se/cs/nse/research/software-systems-architecture-and-security/projects/ethical-hacking-1.1279219
CVE ID: CVE-2023-42144 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-06-20T18:48:07.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local attacker to obtain the Wi-Fi password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kth.se/cs/nse/research/software-systems-architecture-and-security/projects/ethical-hacking-1.1279219
CVE ID: CVE-2023-42147 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:14:54.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/xyhz/p/17667095.html
CVE ID: CVE-2023-42178 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T18:56:13.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenosp 1.0.0-1.2.0 is vulnerable to SQL Injection via the log query module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/zzdevelop/lenosp - https://gitee.com/zzdevelop/lenosp/issues/I7X5QL