Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE Program Container: - CISA ADP Vulnrichment: References: - https://common-services.com/fr/home-fr/ - https://security.friendsofpresta.org/modules/2023/10/17/sonice_etiquetage.html
CVE ID: CVE-2023-45384 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T19:42:41.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the module "Module One Page Checkout, Social Login & Mailchimp" (supercheckout), a guest can upload files with extensions .php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/fr/processus-rapide-commande/18016-one-page-checkout-social-login-mailchimp.html - https://security.friendsofpresta.org/modules/2023/10/17/supercheckout.html
CVE ID: CVE-2023-45385 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T20:21:16.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProQuality pqprintshippinglabels before v.4.15.0 is vulnerable to Directory Traversal via the pqprintshippinglabels module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://addons.prestashop.com/en/preparation-shipping/16885-print-shipping-labels-pro-address-direct-print.html#overview_description - https://security.friendsofpresta.org/modules/2024/04/29/pqprintshippinglabels.html
CVE ID: CVE-2023-45386 State: PUBLISHED Published: 2023-10-17T00:00:00 Last Updated: 2024-09-13T20:01:53.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searchcategory()`, `extratabspro::searchproduct()` and `extratabspro::searchmanufacturer().' Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/12/extratabspro.html
CVE ID: CVE-2023-45387 State: PUBLISHED Published: 2023-11-17T00:00:00 Last Updated: 2024-08-29T17:32:50.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection via `exportProduct::_addDataToDb().` Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/en/data-import-export/18662-product-catalog-csv-excel-xml-export-pro.html - https://security.friendsofpresta.org/modules/2023/11/16/exportproducts.html
CVE ID: CVE-2023-45391 State: PUBLISHED Published: 2023-10-13T00:00:00 Last Updated: 2024-09-18T14:24:04.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Create A New Employee function of Granding UTime Master v9.0.7-Build:Apr 4,2023 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the First Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://the-it-wonders.blogspot.com/2023/10/granding-utime-master-stored-xss.html
CVE ID: CVE-2023-45393 State: PUBLISHED Published: 2023-10-13T00:00:00 Last Updated: 2024-09-18T14:22:00.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: An indirect object reference (IDOR) in GRANDING UTime Master v9.0.7-Build:Apr 4,2023 allows authenticated attackers to access sensitive information via a crafted cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://the-it-wonders.blogspot.com/2023/10/granding-utime-master-idor.html
CVE ID: CVE-2023-45394 State: PUBLISHED Published: 2023-10-20T00:00:00 Last Updated: 2024-09-12T14:47:39.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-Site Scripting (XSS) vulnerability in the Company field in the "Request a Quote" Section of Small CRM v3.0 allows an attacker to store and execute malicious javascript code in the Admin panel which leads to Admin account takeover. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kartik753/CVE/blob/main/CVE-2023-45394
CVE ID: CVE-2023-45396 State: PUBLISHED Published: 2023-10-11T00:00:00 Last Updated: 2024-09-18T16:05:11.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strik3r0x1/Vulns/blob/main/%28IDOR%29%20leads%20to%20events%20profiles%20access%20-%20Elenos.md
CVE ID: CVE-2023-45463 State: PUBLISHED Published: 2023-10-13T00:00:00 Last Updated: 2024-10-15T17:59:25.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adhikara13/CVE/blob/main/netis_N3/buffer%20overflow%20in%20hostname%20parameter%20leads%20to%20DOS.md
CVE ID: CVE-2023-45464 State: PUBLISHED Published: 2023-10-13T00:00:00 Last Updated: 2024-09-18T14:56:31.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adhikara13/CVE/blob/main/netis_N3/buffer%20overflow%20in%20servDomain%20parameter%20leads%20to%20DOS.md
CVE ID: CVE-2023-45465 State: PUBLISHED Published: 2023-10-13T00:00:00 Last Updated: 2024-09-18T14:55:08.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adhikara13/CVE/blob/main/netis_N3/blind%20command%20injection%20in%20ddnsDomainName%20parameter%20in%20Dynamic%20DNS%20setting.md
CVE ID: CVE-2023-45466 State: PUBLISHED Published: 2023-10-13T00:00:00 Last Updated: 2024-09-18T14:52:55.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adhikara13/CVE/blob/main/netis_N3/blind%20command%20injection%20in%20pin_host%20parameter%20in%20wps%20setting.md
CVE ID: CVE-2023-45467 State: PUBLISHED Published: 2023-10-13T00:00:00 Last Updated: 2024-09-17T20:38:16.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adhikara13/CVE/blob/main/netis_N3/blind%20command%20injection%20in%20ntpServIP%20parameter%20in%20Time%20Settings%20.md
CVE ID: CVE-2023-45468 State: PUBLISHED Published: 2023-10-13T00:00:00 Last Updated: 2024-09-17T20:37:03.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adhikara13/CVE/blob/main/netis_N3/buffer%20overflow%20in%20pingWdogIp%20parameter%20leads%20to%20DOS.md
CVE ID: CVE-2023-45471 State: PUBLISHED Published: 2023-10-20T00:00:00 Last Updated: 2024-09-12T14:46:00.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QAD Search Server is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to, and including, 1.0.0.315 due to insufficient checks on indexes. This makes it possible for unauthenticated attackers to create a new index and inject a malicious web script into its name, that will execute whenever a user accesses the search page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/itsAptx/CVE-2023-45471
CVE ID: CVE-2023-45479 State: PUBLISHED Published: 2023-11-29T00:00:00 Last Updated: 2024-08-02T20:21:16.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49E098. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/l3m0nade/IOTvul/blob/master/assets/sub_49E098_code.png - https://github.com/l3m0nade/IOTvul/blob/master/sub_49E098.md
CVE ID: CVE-2023-45480 State: PUBLISHED Published: 2023-11-29T00:00:00 Last Updated: 2024-08-02T20:21:16.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D878. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/l3m0nade/IOTvul/blob/master/assets/sub_47d878_code.png - https://github.com/l3m0nade/IOTvul/blob/master/sub_47D878.md
CVE ID: CVE-2023-45481 State: PUBLISHED Published: 2023-11-29T00:00:00.000Z Last Updated: 2025-06-05T13:47:53.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter in the function SetFirewallCfg. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/l3m0nade/IOTvul/blob/master/assets/setFirewallCfg_code.png - https://github.com/l3m0nade/IOTvul/blob/master/SetFirewallCfg.md
CVE ID: CVE-2023-45482 State: PUBLISHED Published: 2023-11-29T00:00:00 Last Updated: 2024-08-02T20:21:16.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/l3m0nade/IOTvul/blob/master/assets/get_parentControl_list_Info_code.png - https://github.com/l3m0nade/IOTvul/blob/master/get_parentControl_list_Info.md
CVE ID: CVE-2023-45483 State: PUBLISHED Published: 2023-11-29T00:00:00 Last Updated: 2024-08-02T20:21:16.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compare_parentcontrol_time. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/l3m0nade/IOTvul/blob/master/assets/compare_parentcontrol_time_code.png - https://github.com/l3m0nade/IOTvul/blob/master/compare_parentcontrol_time.md
CVE ID: CVE-2023-45484 State: PUBLISHED Published: 2023-11-29T00:00:00 Last Updated: 2024-08-02T20:21:16.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/l3m0nade/IOTvul/blob/master/assets/fromSetWifiGuestBasic_code.png - https://github.com/l3m0nade/IOTvul/blob/master/fromSetWifiGusetBasic.md
CVE ID: CVE-2023-45485 State: REJECTED Published: N/A Last Updated: 2024-01-19T19:48:15.003043 Description: No description available.
CVE ID: CVE-2023-45498 State: PUBLISHED Published: 2023-10-27T00:00:00.000Z Last Updated: 2025-06-12T14:48:51.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.leakix.net/2023/10/vinchin-backup-rce-chain/ - http://seclists.org/fulldisclosure/2023/Oct/31 - http://packetstormsecurity.com/files/175397/VinChin-VMWare-Backup-7.0-Hardcoded-Credential-Remote-Code-Execution.html - http://packetstormsecurity.com/files/176289/Vinchin-Backup-And-Recovery-Command-Injec
ntial-Remote-Code-Execution.html - http://packetstormsecurity.com/files/176289/Vinchin-Backup-And-Recovery-Command-Injection.html
CVE ID: CVE-2023-45499 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-08-02T20:21:16.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials. Additional Analyst Notes: - CVE Program Container: References: - https://blog.leakix.net/2023/10/vinchin-backup-rce-chain/ - http://seclists.org/fulldisclosure/2023/Oct/31 - http://packetstormsecurity.com/files/175397/VinChin-VMWare-Backup-7.0-Hardcoded-Credential-Remote-Code-Execution.html - http://packetstormsecurity.com/files/176289/Vinchin-Backup-And-Recovery-Command-Injection.html
CVE ID: CVE-2023-45503 State: PUBLISHED Published: 2024-04-15T00:00:00 Last Updated: 2024-08-02T20:21:16.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via crafted payload to resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole, deleteComment, deleteUser, allowComment, saveRole, forgotPasswordProcess, resetPassword, saveUser, addComment, saveRole, and saveUser endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
aveRole, and saveUser endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.google.com/spreadsheets/d/1AzXspN8oBAJ80YQxfN44bpbOuNzA3PZEccQ6IGQMs5E/edit?usp=sharing - https://github.com/ally-petitt/CVE-2023-45503?tab=readme-ov-file
CVE ID: CVE-2023-45510 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T18:25:47.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch (operator new [] vs operator delete) error. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/justdan96/tsMuxer/issues/778 - https://github.com/justdan96/tsMuxer
CVE ID: CVE-2023-45511 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T18:09:16.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in tsMuxer version git-2539d07 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/justdan96/tsMuxer - https://github.com/justdan96/tsMuxer/issues/780
CVE ID: CVE-2023-45539 State: PUBLISHED Published: 2023-11-28T00:00:00 Last Updated: 2024-10-15T17:44:03.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing index.html#.png to a static server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.w3.org/Archives/Public/ietf-http-wg/2023JulSep/0070.html - https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=2eab6d354322932cfec2ed54de261e4347eca9a6 - https://www.mai
.html - https://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=2eab6d354322932cfec2ed54de261e4347eca9a6 - https://www.mail-archive.com/haproxy%40formilux.org/msg43861.html - https://lists.debian.org/debian-lts-announce/2023/12/msg00010.html
CVE ID: CVE-2023-45540 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T18:32:56.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment field of the List of Leave requests page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/soundarkutty/HTML-Injection/blob/main/POC.md
CVE ID: CVE-2023-45542 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T18:29:50.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q parameter in the Search function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ahrixia/CVE-2023-45542
CVE ID: CVE-2023-45552 State: PUBLISHED Published: 2024-04-03T00:00:00.000Z Last Updated: 2025-03-27T18:33:28.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: In VeridiumID before 3.5.0, a stored cross-site scripting (XSS) vulnerability has been discovered in the admin portal that allows an authenticated attacker to take over all accounts by sending malicious input via the self-service portal. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://veridiumid.com/veridium-id-authentication-platform/ - https://docs.veridiumid.com/docs/v3.5/security-advisory#id-%28v3.52%29SecurityAdvisory-Acknowledgement
CVE ID: CVE-2023-45554 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:23:14.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter from jpg, jpeg,gif, and png to jpg, jpeg,gif, png, pphphp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/96xiaopang/Vulnerabilities/blob/main/zzzcms%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0_en.md
CVE ID: CVE-2023-45555 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T17:56:01.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the down_url function in zzz.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/96xiaopang/Vulnerabilities/blob/main/zzzcms%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0_en.md
CVE ID: CVE-2023-45556 State: PUBLISHED Published: 2023-11-06T00:00:00 Last Updated: 2024-09-05T14:16:56.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name parameter in the theme management component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Or4ngm4n/Mybb/blob/main/MyBB%201.8.33%20Cross%20Site%20Scripting.txt - https://raw.githubusercontent.com/Or4ngm4n/Mybb/main/Screenshot%202023-10-08%20012112.png - https://github.com/mybb/mybb/security/advisories/GHSA-4xqm-3cm2-5xgf
CVE ID: CVE-2023-45558 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T20:17:46.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45558.md
CVE ID: CVE-2023-45559 State: PUBLISHED Published: 2024-01-03T00:00:00.000Z Last Updated: 2025-06-03T14:44:39.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Tamaki_hamanoki Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tamakihamanoki.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45559.md
CVE ID: CVE-2023-45560 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T16:04:58.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45560.md
CVE ID: CVE-2023-45561 State: PUBLISHED Published: 2024-01-02T00:00:00.000Z Last Updated: 2025-06-13T18:59:15.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in A-WORLD OIRASE BEER_waiting Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45561.md
CVE ID: CVE-2023-45572 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-08-02T20:21:16.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the fn parameter of the tgfile.htm function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7
onal Analyst Notes: - CVE Program Container: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7xxxx/bug1.md
CVE ID: CVE-2023-45573 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-17T19:39:42.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the n parameter of the mrclfile_del.asp function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bu
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7xxxx/bug7.md
CVE ID: CVE-2023-45574 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-17T19:35:48.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the fn parameter of the file.data function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bul