Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
. The associated identifier of this vulnerability is VDB-225919. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225919 - https://vuldb.com/?ctiid.225919 - https://github.com/langove/llov/blob/main/Novel-Plus%20code%20audit.pdf
CVE ID: CVE-2023-2042 State: PUBLISHED Published: 2023-04-14T09:00:08.369Z Last Updated: 2024-09-16T14:52:04.936Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: DataGear Problem Types: CWE-502 Description: A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Containe
s contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225920 - https://vuldb.com/?ctiid.225920 - https://vuldb.com/?submit.109292 - https://github.com/yangyanglo/ForCVE/blob/main/2023-0x06.md
CVE ID: CVE-2023-2043 State: PUBLISHED Published: 2023-04-14T09:31:03.204Z Last Updated: 2024-08-02T06:12:19.899Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Control iD Products: RHiD Problem Types: CWE-89 Description: A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-225921 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Addi
d to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225921 - https://vuldb.com/?ctiid.225921
CVE ID: CVE-2023-2044 State: PUBLISHED Published: 2023-04-14T10:00:05.920Z Last Updated: 2024-08-02T06:12:19.935Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Control iD Products: iDSecure Problem Types: CWE-79 Description: A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This vulnerability affects unknown code of the component Dispositivos Page. The manipulation of the argument IP-DNS leads to cross site scripting. The attack can be initiated remotely. VDB-225922 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE
TE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225922 - https://vuldb.com/?ctiid.225922
CVE ID: CVE-2023-2045 State: PUBLISHED Published: 2023-05-24T13:35:48.498Z Last Updated: 2025-01-16T15:33:09.947Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Ipekyolu Software Products: Auto Damage Tracking Software Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection.This issue affects Auto Damage Tracking Software: before 4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0289
CVE ID: CVE-2023-2046 State: PUBLISHED Published: 2023-07-09T17:12:48.463Z Last Updated: 2024-11-07T15:51:32.314Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Yontem Informatics Products: Vehicle Tracking System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection.This issue affects Vehicle Tracking System: before 8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0389
CVE ID: CVE-2023-2047 State: PUBLISHED Published: 2023-04-14T10:31:03.924Z Last Updated: 2024-08-02T06:12:19.977Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Advanced Online Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument voter leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225932. Additional Analyst Notes: - CISA ADP Vulnrichment
c and may be used. The identifier of this vulnerability is VDB-225932. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.225932 - https://vuldb.com/?ctiid.225932 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%201.pdf
CVE ID: CVE-2023-2048 State: PUBLISHED Published: 2023-04-14T10:31:05.007Z Last Updated: 2024-08-02T06:12:19.899Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/voters_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225933 was assigned to this vulnerability. Additional Analyst Notes: - CVE Pr
public and may be used. The identifier VDB-225933 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225933 - https://vuldb.com/?ctiid.225933 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%202.pdf
CVE ID: CVE-2023-2049 State: PUBLISHED Published: 2023-04-14T11:00:05.122Z Last Updated: 2024-08-02T06:12:19.849Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ballot_up.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225934 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Progr
blic and may be used. VDB-225934 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225934 - https://vuldb.com/?ctiid.225934 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%203.pdf
CVE ID: CVE-2023-2050 State: PUBLISHED Published: 2023-04-14T11:31:03.679Z Last Updated: 2024-08-02T06:12:19.783Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225935. Additional Analyst Not
sed to the public and may be used. The associated identifier of this vulnerability is VDB-225935. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225935 - https://vuldb.com/?ctiid.225935 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%204.pdf
CVE ID: CVE-2023-2051 State: PUBLISHED Published: 2023-04-14T11:31:04.754Z Last Updated: 2024-08-02T06:12:20.064Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/positions_row.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225936. Additional Analyst Notes: - CVE Program Containe
ic and may be used. The identifier of this vulnerability is VDB-225936. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225936 - https://vuldb.com/?ctiid.225936 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%205.pdf
CVE ID: CVE-2023-2052 State: PUBLISHED Published: 2023-04-14T12:00:06.512Z Last Updated: 2024-11-22T16:07:24.661Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ballot_down.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225937 was assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. The identifier VDB-225937 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225937 - https://vuldb.com/?ctiid.225937 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%206.pdf
CVE ID: CVE-2023-2053 State: PUBLISHED Published: 2023-04-14T12:31:03.691Z Last Updated: 2025-02-06T19:35:48.813Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Campcodes Advanced Online Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/candidates_row.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225938 is the identifier assigned to this vulnerability. Additional Ana
een disclosed to the public and may be used. VDB-225938 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225938 - https://vuldb.com/?ctiid.225938 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%207.pdf
CVE ID: CVE-2023-2054 State: PUBLISHED Published: 2023-04-14T12:31:04.716Z Last Updated: 2024-08-02T06:12:19.883Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /admin/positions_delete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225939. Additional Analyst Notes: -
the public and may be used. The associated identifier of this vulnerability is VDB-225939. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225939 - https://vuldb.com/?ctiid.225939 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%208.pdf
CVE ID: CVE-2023-2055 State: PUBLISHED Published: 2023-04-14T13:00:05.572Z Last Updated: 2024-08-02T06:12:19.884Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-79 Description: A vulnerability has been found in Campcodes Advanced Online Voting System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/config_save.php. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225940. Additional Analyst Notes: - CVE Pro
d to the public and may be used. The identifier of this vulnerability is VDB-225940. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225940 - https://vuldb.com/?ctiid.225940 - https://github.com/E1CHO/cve_hub/blob/main/Advanced%20Online%20Voting%20System/Advanced%20Online%20Voting%20System%20-%20vuln%209.pdf
CVE ID: CVE-2023-2056 State: PUBLISHED Published: 2023-04-14T13:31:03.193Z Last Updated: 2025-02-06T19:24:06.951Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: DedeCMS Problem Types: CWE-94 Description: A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemFile of the file module_main.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225941 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225941 - https://vuldb.com/?ctiid.225941 - https://gitee.com/ashe-king/cve/blob/master/dedecms%20rce2.md
CVE ID: CVE-2023-2057 State: PUBLISHED Published: 2023-04-14T13:31:04.204Z Last Updated: 2024-08-02T06:12:20.194Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: EyouCms Problem Types: CWE-79 Description: A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpic_loca leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225942 is the identifier assigned to this vulnerability. Additional Analyst Note
osed to the public and may be used. VDB-225942 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225942 - https://vuldb.com/?ctiid.225942 - https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS1.md
CVE ID: CVE-2023-2058 State: PUBLISHED Published: 2023-04-14T14:00:05.983Z Last Updated: 2024-08-02T06:12:19.894Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: EyouCms Problem Types: CWE-79 Description: A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument web_ico leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vu
be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225943. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225943 - https://vuldb.com/?ctiid.225943 - https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS2.md
CVE ID: CVE-2023-2059 State: PUBLISHED Published: 2023-04-14T14:00:07.347Z Last Updated: 2025-02-06T19:04:05.814Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: DedeCMS Problem Types: CWE-28 Description: A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/select_templets.php. The manipulation leads to path traversal: '..\filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225944. Additional Analyst Notes: - CVE Program Container: -
nd may be used. The identifier of this vulnerability is VDB-225944. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225944 - https://vuldb.com/?ctiid.225944 - https://github.com/ATZXC-RedTeam/cve/blob/main/dedecms.md
CVE ID: CVE-2023-2060 State: PUBLISHED Published: 2023-06-02T04:02:32.377Z Last Updated: 2025-03-05T18:58:31.287Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series EtherNet/IP module RJ71EIP91, MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP Problem Types: CWE-521 Description: Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to access to the module via FTP by dictionary attack or password sniffing. Additional Analyst
unauthenticated attacker to access to the module via FTP by dictionary attack or password sniffing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2023-004.pdf - https://jvn.jp/vu/JVNVU92908006
CVE ID: CVE-2023-2061 State: PUBLISHED Published: 2023-06-02T04:03:36.665Z Last Updated: 2025-03-05T18:58:23.764Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series EtherNet/IP module RJ71EIP91, MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP Problem Types: CWE-259 Description: Use of Hard-coded Password vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to obtain a hard-coded password and access to the module via FTP. Additional Analyst Notes:
te unauthenticated attacker to obtain a hard-coded password and access to the module via FTP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2023-004.pdf - https://jvn.jp/vu/JVNVU92908006
CVE ID: CVE-2023-2062 State: PUBLISHED Published: 2023-06-02T04:04:28.648Z Last Updated: 2025-03-05T18:58:15.223Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Mitsubishi Electric Corporation Products: EtherNet/IP Configuration tool for RJ71EIP91 SW1DNN-EIPCT-BD, EtherNet/IP Configuration tool for FX5-ENET/IP SW1DNN-EIPCTFX5-BD Problem Types: CWE-549 Description: Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/I
ated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2023-004.pdf - https://jvn.jp/vu/JVNVU92908006 - https://www.cisa.gov/news-events/ics-advisories/icsa-23-157-02
CVE ID: CVE-2023-2063 State: PUBLISHED Published: 2023-06-02T04:05:38.109Z Last Updated: 2025-03-05T18:58:08.629Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series EtherNet/IP module RJ71EIP91, MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, deletion or destruction via
ENET/IP allows a remote unauthenticated attacker to cause information disclosure, tampering, deletion or destruction via file upload/download. As a result, the attacker may be able to exploit this for further attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.co.jp/psirt/vulnerability/pdf/2023-004.pdf - https://jvn.jp/vu/JVNVU92908006
CVE ID: CVE-2023-2064 State: PUBLISHED Published: 2023-05-24T13:15:28.680Z Last Updated: 2025-01-16T15:35:38.165Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Minova Technology Products: eTrace Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Minova Technology eTrace allows SQL Injection.This issue affects eTrace: before 23.05.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0288
CVE ID: CVE-2023-2065 State: PUBLISHED Published: 2023-05-24T12:04:41.020Z Last Updated: 2025-01-16T15:37:12.983Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Armoli Technology Products: Cargo Tracking System Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.usom.gov.tr/bildirim/tr-23-0287
CVE ID: CVE-2023-2066 State: PUBLISHED Published: 2023-06-09T05:33:34.407Z Last Updated: 2024-12-20T23:35:14.323Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: mikewire_rocksolid Products: Announcement & Notification Banner – Bulletin Problem Types: CWE-862 Missing Authorization Description: The Announcement & Notification Banner – Bulletin plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'bulletinwp_update_bulletin_status', 'bulletinwp_update_bulletin', 'bulletinwp_update_settings', 'bulletinwp_update_status', 'bulletinwp_export_bulletins', and 'bulletinwp_import_bulletins' functio