Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nticated attackers, with subscriber-level capabilities or above, to retrieve arbitrary sensitive user meta. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/562fe11f-36a0-4f23-9eed-50ada7ab2961?source=cve - https://plugins.trac.wordpress.org/browser/easy-registration-forms/tags/2.1.1/includes/class-user.php#L835
CVE ID: CVE-2023-5135 State: PUBLISHED Published: 2023-09-26T01:51:14.743Z Last Updated: 2025-02-05T19:18:45.132Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: elliotvs Products: Simple Cloudflare Turnstile – CAPTCHA Alternative Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-turnstile' shortcode in versions up to, and including, 1.23.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attack
ient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/91f6c9d3-641d-42f7-bf11-e3c3a44eeb76?source=cve - https://plugins.trac.wordpress.org/browser/simple-cloudflare-turnstile/tags/1.23.0/inc/integrations/forms/gravity-forms.php#L14 - https://plugins.trac.wordpress.org/browser/simple-cloudflare-turnstile/tags/1.23.0/inc/integrations/f
ty-forms.php#L14 - https://plugins.trac.wordpress.org/browser/simple-cloudflare-turnstile/tags/1.23.0/inc/integrations/forms/gravity-forms.php#L23 - https://plugins.trac.wordpress.org/browser/simple-cloudflare-turnstile/tags/1.23.0/simple-cloudflare-turnstile.php#L72 - https://plugins.trac.wordpress.org/changeset/2970368/simple-cloudflare-turnstile#file1
CVE ID: CVE-2023-5136 State: PUBLISHED Published: 2023-11-08T15:24:10.867Z Last Updated: 2025-06-11T14:34:24.037Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: NI Products: TopoGrafix DataPlugin for GPX, DIAdem, VeriStand, FlexLogger Problem Types: CWE-611 Description: An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/documentation/supplemental/23/incorrect-permission-assignmen
P Vulnrichment: References: - https://www.ni.com/en/support/documentation/supplemental/23/incorrect-permission-assignment-in-the-topografix-dataplug-for-gpx.html
CVE ID: CVE-2023-5137 State: PUBLISHED Published: 2023-12-04T21:28:33.766Z Last Updated: 2025-05-29T13:51:32.153Z Vendors: Unknown Products: Simply Excerpts Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simply Excerpts WordPress plugin through 1.4 does not sanitize and escape some fields in the plugin settings, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfiltered_html capability is disallowed (for example in a multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/79b79e9c-ea4f-4188-a1b5-61dda0b5d434
CVE ID: CVE-2023-5138 State: PUBLISHED Published: 2024-01-03T22:31:04.433Z Last Updated: 2025-06-03T14:43:09.428Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: silabs.com Products: GSDK Problem Types: CWE-1319 Description: Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SiliconLabs/gecko_sdk - https://community.silabs.com/069Vm0000004f6DIAQ
CVE ID: CVE-2023-5139 State: PUBLISHED Published: 2023-10-26T04:40:36.930Z Last Updated: 2025-02-13T17:19:43.583Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-120 Description: Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-rhrc-pcxp-4453 - http://www.openwall.com/lists/oss-security/2023/11/07/1 - http://seclists.org/fulldisclosure/2023/Nov/1 - http://packetstormsecurity.com/files/175657/Zephy
ecurity/2023/11/07/1 - http://seclists.org/fulldisclosure/2023/Nov/1 - http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
CVE ID: CVE-2023-5140 State: PUBLISHED Published: 2023-11-20T18:55:02.911Z Last Updated: 2024-08-02T07:52:07.537Z Vendors: Unknown Products: Bonus for Woo Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Bonus for Woo WordPress plugin before 5.8.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ee1824e8-09a6-4763-b65e-03701dc3e171
CVE ID: CVE-2023-5141 State: PUBLISHED Published: 2023-12-04T21:29:50.002Z Last Updated: 2024-08-02T07:52:06.671Z Vendors: Unknown Products: BSK Contact Form 7 Blacklist Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The BSK Contact Form 7 Blacklist WordPress plugin through 1.0.1 does not sanitise and escape the inserted_count parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9997fe8d-8027-4ae0-9885-a1f5565f2d1a
CVE ID: CVE-2023-5142 State: PUBLISHED Published: 2023-09-24T22:00:06.432Z Last Updated: 2024-08-02T07:52:07.533Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: H3C Products: GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2, ER6300G2 Problem Types: CWE-22 Description: A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Co
00G2 and ER6300G2 up to 20230908. This vulnerability affects unknown code of the file /userLogin.asp of the component Config File Handler. The manipulation leads to path traversal. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-240238 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.240238 - https://vuldb.com/?ctiid.240238 - https://github.com/yinsel/CVE-H3C-Report - https://
: - https://vuldb.com/?id.240238 - https://vuldb.com/?ctiid.240238 - https://github.com/yinsel/CVE-H3C-Report - https://github.com/CJCniubi666/H3C-ER/blob/main/README.md
CVE ID: CVE-2023-5143 State: PUBLISHED Published: 2023-09-24T22:31:04.295Z Last Updated: 2025-03-06T15:43:32.437Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000 Problem Types: Privilege Escalation Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name leads to an unknown weakness. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240239. N
ploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240239. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.240239 - https://vuldb.com/?ctiid.240239 - https://github.com/ggg48966/cve/blob/main/D-LINK%20-DAR-7000_rce_%20webmailattach.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354
CVE ID: CVE-2023-5144 State: PUBLISHED Published: 2023-09-24T23:00:06.505Z Last Updated: 2024-08-02T07:52:06.678Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000, DAR-8000 Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240240. NOTE: Th
e exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240240. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.240240 - https://vuldb.com/?ctiid.240240 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20changelogo.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8
ncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20updateos.md
CVE ID: CVE-2023-5145 State: PUBLISHED Published: 2023-09-24T23:31:05.183Z Last Updated: 2024-08-02T07:52:07.509Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000 Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240241 was assigned to this vulnerability. NOTE: T
has been disclosed to the public and may be used. The identifier VDB-240241 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.240241 - https://vuldb.com/?ctiid.240241 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20licence.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354
CVE ID: CVE-2023-5146 State: PUBLISHED Published: 2023-09-25T00:00:09.044Z Last Updated: 2024-08-02T07:52:07.568Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000, DAR-8000 Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-240242 is the identifier assigned to this vulnerabi
y. The exploit has been disclosed to the public and may be used. VDB-240242 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.240242 - https://vuldb.com/?ctiid.240242 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20updatelib.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 - https://github.com/llixixi/c
md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20updatelib.md
CVE ID: CVE-2023-5147 State: PUBLISHED Published: 2023-09-25T00:31:05.290Z Last Updated: 2024-08-02T07:52:07.301Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000 Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240243. NOTE: This vulnera
sclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240243. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.240243 - https://vuldb.com/?ctiid.240243 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20updateos.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354
CVE ID: CVE-2023-5148 State: PUBLISHED Published: 2023-09-25T01:00:08.452Z Last Updated: 2024-09-24T19:16:04.891Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000, DAR-8000 Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240244. NOTE: This v
ploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240244. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.240244 - https://vuldb.com/?ctiid.240244 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20uploadfile.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 - https://github.com/llixixi/cve/blob/main/D-LI
ortannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20uploadfile.md
CVE ID: CVE-2023-5149 State: PUBLISHED Published: 2023-09-25T01:00:09.724Z Last Updated: 2024-08-02T07:52:07.574Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000 Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240245 was assigned to this vulnerability. NOTE: This vulnerabi
closed to the public and may be used. The identifier VDB-240245 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.240245 - https://vuldb.com/?ctiid.240245 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20userattestation.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354
CVE ID: CVE-2023-5150 State: PUBLISHED Published: 2023-09-25T01:31:04.725Z Last Updated: 2025-06-18T14:22:04.770Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000, DAR-8000 Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-240246 is the identifier assigned to this vulnerability. NOTE: This v
been disclosed to the public and may be used. VDB-240246 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.240246 - https://vuldb.com/?ctiid.240246 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20web.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-
uncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20web.md
CVE ID: CVE-2023-5151 State: PUBLISHED Published: 2023-09-25T01:31:05.778Z Last Updated: 2024-09-24T19:20:42.387Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-8000 Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-8000 up to 20151231. Affected by this vulnerability is an unknown functionality of the file /autheditpwd.php. The manipulation of the argument hid_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240247. NOTE: This vulnerability only aff
public and may be used. The associated identifier of this vulnerability is VDB-240247. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.240247 - https://vuldb.com/?ctiid.240247 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_sql_%20autheditpwd.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354
CVE ID: CVE-2023-5152 State: PUBLISHED Published: 2023-09-25T02:00:05.853Z Last Updated: 2024-09-24T19:23:55.134Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-7000, DAR-8000 Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation of the argument sql leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240248. NOTE: This v
ploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240248. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.240248 - https://vuldb.com/?ctiid.240248 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_sql_%20importexport.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354
CVE ID: CVE-2023-5153 State: PUBLISHED Published: 2023-09-25T02:31:04.442Z Last Updated: 2024-08-02T07:52:07.236Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-8000 Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240249 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no lon
identifier VDB-240249 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.240249 - https://vuldb.com/?ctiid.240249 - https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_sql_%20querysql.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354
CVE ID: CVE-2023-5154 State: PUBLISHED Published: 2023-09-25T03:00:07.651Z Last Updated: 2024-08-02T07:52:07.508Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DAR-8000 Problem Types: CWE-434 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-240250 is the identifier assigned to this vulnerability. NOTE: This vulnerabilit