Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24613 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T14:55:05.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privileges. A successful exploit could leverage this vulnerability in the backend binary file that handles the user interface to a cause denial of service attack. This is fixed in AG 9.4.0.481. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.arraynetwor
1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_UI_Stack_Overflow_Vulnerability_ID-128285_V1.0.pdf
CVE ID: CVE-2023-24619 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:06:40.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk binary logs an AWS Access Key ID and Secret in cleartext to standard output, allowing a local user to view the key in the console, or in Kubernetes logs if stdout output is collected. The fixed versions are 22.3.12, 22.2.10, and 22.1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/redpanda-data/redpanda/pull/8339
CVE ID: CVE-2023-24620 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T18:08:16.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, when read, is expanded to a large size, causing CPU and memory consumption, such as a Java Out-of-Memory exception. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EsotericSoftware - https://contrastsecurity.com
am Container: - CISA ADP Vulnrichment: References: - https://github.com/EsotericSoftware - https://contrastsecurity.com - https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md
CVE ID: CVE-2023-24621 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T18:06:24.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/EsotericSoftware - https://contrastsecurity.com - https://github.com/Contrast-Security-OSS/yamlbeans/blob/main/SECURITY.md
CVE ID: CVE-2023-24622 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-03-28T14:27:49.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IncludeSecurity/safeurl-python/security/advisories/GHSA-jgh8-vchw-q3g7
CVE ID: CVE-2023-24623 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-03-28T14:26:27.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hakobe/paranoidhttp/blob/master/CHANGELOG.md#v030-2023-01-19 - https://github.com/hakobe/paranoidhttp/commit/07f671da14ce63a80f4e52432b32e8d178d75fd3 - https://github.com/hakobe/paranoidhttp/compare/v0.2.0...v0.3.0
CVE ID: CVE-2023-24625 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-21T17:46:43.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.faveohelpdesk.com/servicedesk/ - https://medium.com/%40cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896 - https://cupc4k3.lol/cve-2023-24625-idor-in-faveo-service-desk-37a63f53d896
CVE ID: CVE-2023-24626 State: PUBLISHED Published: 2023-04-08T00:00:00.000Z Last Updated: 2025-05-09T20:03:31.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://savannah.gnu.org/bugs/?63195 - https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7 - https://www.exploit-db.com/exploits/512
nah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7 - https://www.exploit-db.com/exploits/51252
CVE ID: CVE-2023-24641 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T16:35:46.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateview.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-1.md
CVE ID: CVE-2023-24642 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T16:37:29.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateTxtview.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-2.md
CVE ID: CVE-2023-24643 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-06T19:57:50.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateBlankTxtview.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/594238758/mycve/blob/main/judging-management-system/SQLi-3.md
CVE ID: CVE-2023-24646 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:05:50.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Food-Ordering-System-v2.0
CVE ID: CVE-2023-24647 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:05:12.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2023/Food-Ordering-System-v2.0/SQLi
CVE ID: CVE-2023-24648 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:04:11.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/zippy/zstore-6.6.0
CVE ID: CVE-2023-24651 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:28:45.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-24651/CVE-20
ites/default/files/download/oretnom23/php-scrm.zip - https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-24651/CVE-2023-24651.txt
CVE ID: CVE-2023-24652 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:34:20.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f02
ecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739
CVE ID: CVE-2023-24653 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:35:25.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294
odester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739
CVE ID: CVE-2023-24654 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:36:23.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Request a Quote function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a61
ster.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739
CVE ID: CVE-2023-24655 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:28:00.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739 - https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-24655/CVE-2023-2
/y0gesh-verma/a9e83220f268f0294a611b82cf266739 - https://github.com/y0gesh-verma/CVE/blob/main/CVE-2023-24655/CVE-2023-24655.txt
CVE ID: CVE-2023-24656 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:38:37.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15895/simple-customer-relationship-management-crm-system-using-php-free-source-coude.html - https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a6
ester.com/sites/default/files/download/oretnom23/php-scrm.zip - https://gist.github.com/y0gesh-verma/a9e83220f268f0294a611b82cf266739
CVE ID: CVE-2023-24657 State: PUBLISHED Published: 2023-03-08T00:00:00.000Z Last Updated: 2025-03-05T18:47:09.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/phpipam/phpipam/issues/3738
CVE ID: CVE-2023-24671 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:47:20.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40SumitVerma101/windows-privilege-escalation-part-1-unquoted-service-path-c7a011a8d8ae - https://packetstormsecurity.com/files/171300/VX-Search-13.8-Unquoted-Service-Path.html
CVE ID: CVE-2023-24674 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:37:29.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40cupc4k3/privilege-scalation-in-bludit-cms-dcf86c41107 - https://cupc4k3.medium.com/cve-2023-24674-uncovering-a-privilege-escalation-vulnerability-in-bludit-cms-dcf86c41107
CVE ID: CVE-2023-24675 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:36:56.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting Vulnerability in BluditCMS v.3.14.1 allows attackers to execute arbitrary code via the Categories Friendly URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40cupc4k3/xss-stored-in-friendly-url-field-on-bludit-cms-641a9dd653f - https://cupc4k3.medium.com/cve-2023-24674-uncovering-a-privilege-escalation-vulnerability-in-bludit-cms-dcf86c41107
CVE ID: CVE-2023-24676 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-10-17T17:24:39.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parameter when installing a new module. NOTE: this is disputed because exploitation requires that the attacker is able to enter requests as an admin; however, a ProcessWire admin is intentionally allowed to install any module that contains any arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40cupc4k3/reverse-shel
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40cupc4k3/reverse-shell-via-remote-file-inlusion-in-proccesswire-cms-a8fa5ace3255
CVE ID: CVE-2023-24678 State: PUBLISHED Published: 2023-03-17T00:00:00.000Z Last Updated: 2025-05-05T16:05:15.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Centralite Pearl Thermostat 0x04075010 allows attackers to cause a Denial of Service (DoS) via a crafted Zigbee message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.centralite.com/%3B - https://github.com/iot-sec23/IoT-CVE/blob/main/Centralite%20Pearl%20Thermostat%20Vulnerability%20Report.pdf
CVE ID: CVE-2023-24684 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:54:07.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChurchCRM/CRM - http://churchcrm.io/ - https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md
CVE ID: CVE-2023-24685 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:52:30.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the Event parameter under the Event Attendance reports module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://churchcrm.io/ - https://github.com/ChurchCRM/CRM/ - https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md - http://packetstormsecurity.com/files/172047/ChurchCRM-4.5.3-SQL-Injection.html
CVE ID: CVE-2023-24686 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:46:18.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChurchCRM/CRM - http://churchcrm.io/ - https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md
CVE ID: CVE-2023-24687 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:45:08.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Company Info Settings component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtCompanyName parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mojoportal.com/ - https://github.com/i7MEDIA/mojoportal/ - https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md
CVE ID: CVE-2023-24688 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:42:37.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Mojoportal v2.7.0.0 allows an unauthenticated attacker to register a new user even if the Allow User Registrations feature is disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mojoportal.com/ - https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md
CVE ID: CVE-2023-24689 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:32:21.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path of the webserver via manipulation of the "s" parameter in /DesignTools/ManageSkin.aspx Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mojoportal.com/ - https://github.com/blakduk/Advisories/blob/main/Mojoportal/README.md
CVE ID: CVE-2023-24690 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T18:12:42.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://churchcrm.io/ - https://github.com/blakduk/Advisories/blob/main/ChurchCRM/README.md
CVE ID: CVE-2023-24698 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-15T18:07:11.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://foswiki.org/Support/SecurityAlert-CVE-2023-24698
CVE ID: CVE-2023-24709 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-28T21:44:11.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sunktitanic/Injection-vulnerability-in-Paradox-Security-Systems-IPR512 - https://github.com/SlashXzerozero/Injection-vulnerability-in-Paradox-Security-Systems-IPR512 - http://packetstormsecurity.com/files/171783/Paradox-Security-Systems-IPR512-Denial-Of-Service.html
CVE ID: CVE-2023-24720 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-11T19:47:49.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://infosec.zeyu2001.com/2023/readiumjs-cloud-reader-everybody-gets-an-xss
CVE ID: CVE-2023-24721 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-02-11T15:56:33.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://liveaction.com - https://github.com/marcovntr/CVE/blob/main/2023/CVE-2023-24721/CVE-2023-24721.md
CVE ID: CVE-2023-24724 State: PUBLISHED Published: 2023-04-03T00:00:00.000Z Last Updated: 2025-02-18T15:11:17.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface (SASAdmin). For the product release, the reported version is 9.4_M2 and the fixed version is 9.4_M3. For the SAS release, the reported version is 9.4 TS1M2 and the fixed version is 9.4 TS1M3. Additional Analyst Notes: - CVE Program Contai