Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-40771 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T14:24:28.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dataease/dataease/issues/5861
CVE ID: CVE-2023-40779 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T19:47:24.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40muthumohanprasath.r/open-redirection-vulnerability-on-icewarp-webclient-product-cve-2023-40779-61176503710
CVE ID: CVE-2023-40781 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T16:25:11.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/288
CVE ID: CVE-2023-40784 State: PUBLISHED Published: 2023-09-12T00:00:00 Last Updated: 2024-09-26T19:10:14.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cnblogs.com/SFYHAC/articles/17619123.html
CVE ID: CVE-2023-40786 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:54:27.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/Hk_Cms/HkCms/issues/I7S3VC - https://www.hkcms.cn/index/index/uplogs.html
CVE ID: CVE-2023-40787 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-02T13:20:28.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sword.bladex.cn/ - https://gist.github.com/kaliwin/9d6cf58bb6ec06765cdf7b75e13ee460
CVE ID: CVE-2023-40788 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:27:04.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/chillzhuang/SpringBlade - https://github.com/chillzhuang/SpringBlade/blob/master/blade-gateway/src/main/java/org/springblade/gateway/provider/AuthProvider.java - https://gist.github.com/kaliwin/89276ec7e97f9529c989bd77706c29c7
CVE ID: CVE-2023-40790 State: REJECTED Published: N/A Last Updated: 2023-10-16T03:07:27.056420 Description: No description available.
CVE ID: CVE-2023-40791 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-08-02T18:46:10.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for try_grab_page. Additional Analyst Notes: - CVE Program Container: References: - https://lkml.org/lkml/2023/8/3/323 - https://lore.kernel.org/linux-crypto/20571.1690369076%40warthog.procyon.org.uk/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f443fd5af5dbd531f880d3645d5dd36976cf087f - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.
ux.git/commit/?id=f443fd5af5dbd531f880d3645d5dd36976cf087f - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.12 - https://security.netapp.com/advisory/ntap-20231110-0009/
CVE ID: CVE-2023-40796 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T16:26:33.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Phicomm/k2
CVE ID: CVE-2023-40797 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T18:04:27.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting in a post-authentication stack overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Tenda/AC23/sub_4781A4
CVE ID: CVE-2023-40798 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T17:45:18.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Tenda/AC23/formSetIPv6status-formGetWanParameter
CVE ID: CVE-2023-40799 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T15:35:18.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/blob/main/Tenda/AC23/sub_450A4C
CVE ID: CVE-2023-40800 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T15:32:44.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Tenda/AC23/compare_parentcontrol_time
CVE ID: CVE-2023-40801 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T15:30:13.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sub_451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16.03.07.45_cn Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Tenda/AC23/sub_451784
CVE ID: CVE-2023-40802 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T15:27:25.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vulnerability in Tenda AC23 v16.03.07.45_cn Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Tenda/AC23/get_parentControl_list_Info
CVE ID: CVE-2023-40809 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-10T15:45:46.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-40809-html-injection-search/
CVE ID: CVE-2023-40810 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-29T13:56:43.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-40810-html-injection-product-creation/
CVE ID: CVE-2023-40812 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-29T13:52:19.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-40812-html-injection-accounts-group/
CVE ID: CVE-2023-40813 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-29T13:50:34.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-40813-html-injection-saved-search/
CVE ID: CVE-2023-40814 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-29T13:46:54.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-40814-html-injection-accounts/
CVE ID: CVE-2023-40815 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-28T20:10:49.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-40815-html-injection-category/
CVE ID: CVE-2023-40816 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-28T20:08:48.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-40816-html-injection-activity-milestone/
CVE ID: CVE-2023-40817 State: PUBLISHED Published: 2023-11-18T00:00:00 Last Updated: 2024-08-14T18:03:57.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-40817-html-injection-product-configuration/
CVE ID: CVE-2023-40819 State: PUBLISHED Published: 2024-08-06T00:00:00 Last Updated: 2024-08-07T15:47:04.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: ID4Portais in version < V.2022.837.002a returns message parameter unsanitized in the response, resulting in a HTML Injection vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.id4software.com/ - https://miguelsantareno.github.io/id4Portais.txt
CVE ID: CVE-2023-40825 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:24:44.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/perfree/PerfreeBlog/issues/15
CVE ID: CVE-2023-40826 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:21:54.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pf4j/pf4j/issues/536
CVE ID: CVE-2023-40827 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:18:32.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pf4j/pf4j/issues/536 - https://github.com/pf4j/pf4j/pull/537 - https://github.com/pf4j/pf4j/pull/537/commits/ed9392069fe14c6c30d9f876710e5ad40f7ea8c1
CVE ID: CVE-2023-40828 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T13:56:55.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pf4j/pf4j/pull/537 - https://github.com/pf4j/pf4j/pull/538 - https://github.com/pf4j/pf4j/commit/8e0aa198c4e652cfc1eb9e05ca9b64397f67cc72
CVE ID: CVE-2023-40829 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T14:27:17.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x and 2.6.930000. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/wwwziziyu/85bdf8d56b415974c4827a5668f493e9
CVE ID: CVE-2023-40830 State: PUBLISHED Published: 2023-10-03T00:00:00.000Z Last Updated: 2025-06-17T15:10:00.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BugAlice01/CVE/tree/main/CVE-2023-40830
CVE ID: CVE-2023-40833 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-08-02T18:46:10.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/Sholway/93f05987dbf35c15c26de32b1e5590ec
CVE ID: CVE-2023-40834 State: PUBLISHED Published: 2023-09-12T00:00:00 Last Updated: 2024-09-26T14:29:50.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.opencart.com/ - https://packetstormsecurity.com/files/174525/OpenCart-CMS-4.0.2.2-Brute-Force.html
CVE ID: CVE-2023-40837 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:15:10.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/2/2.md
CVE ID: CVE-2023-40838 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:13:53.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_3A1D0' contains a command execution vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/1/1.md
CVE ID: CVE-2023-40839 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:12:05.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADF3C" function to execute commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/cmd/3/3.md
CVE ID: CVE-2023-40840 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:09:56.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "fromGetWirelessRepeat." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/6/6.md
CVE ID: CVE-2023-40841 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:08:37.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "add_white_node," Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/5/5.md
CVE ID: CVE-2023-40842 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:05:45.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tengda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "R7WebsSecurityHandler." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/4/4.md
CVE ID: CVE-2023-40843 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:02:30.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function "sub_73004." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/8/8.md
CVE ID: CVE-2023-40844 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:00:13.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.' Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/2/2.md
CVE ID: CVE-2023-40845 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T19:58:07.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'sub_34FD0.' In the function, it reads user provided parameters and passes variables to the function without any length checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/14/14.md
CVE ID: CVE-2023-40846 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:15:48.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/9/9.md
CVE ID: CVE-2023-40847 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-02T13:54:30.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "initIpAddrInfo." In the function, it reads in a user-provided parameter, and the variable is passed to the function without any length check. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/12/12.md
CVE ID: CVE-2023-40848 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-02T13:53:10.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via the function "sub_7D858." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/11/11.md
CVE ID: CVE-2023-40850 State: PUBLISHED Published: 2023-09-13T00:00:00 Last Updated: 2024-09-26T13:25:35.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the application security gateway. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flyyue2001/cve/blob/main/NS-ASG-bak-leakage.md
CVE ID: CVE-2023-40851 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T19:57:32.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51694
CVE ID: CVE-2023-40852 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T19:56:50.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51695
CVE ID: CVE-2023-40857 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T15:12:16.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the exe.c component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/VirusTotal/yara/issues/1945
CVE ID: CVE-2023-40868 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T19:45:50.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Delete Account and Deactivate functions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MinoTauro2020/CVE-2023-40868