Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-50433 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-11-01T20:08:49.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: marshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious DHCP packet. The crash is caused by a type confusion bug that results in a large memory allocation; when this memory allocation fails the DHCP server will crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://papers.mathyvanhoef.com/esorics2024.pdf
CVE ID: CVE-2023-50434 State: PUBLISHED Published: 2024-04-29T00:00:00 Last Updated: 2024-08-02T22:16:46.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system libraries, compiler, and processor architecture. Code before be565c3 is unaffected. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://papers.mathyvanhoef.com/esorics2024.pdf
CVE ID: CVE-2023-50436 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-11-14T20:00:20.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2023-50437 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-08-13T19:34:51.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2023-50439 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T22:16:46.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows before 2023.5 disclose the original path in which the containers were created, which allows an unauthenticated attacker to obtain some information regarding the context of use (project name, etc.). Additional Analyst Notes: - CV
ed attacker to obtain some information regarding the context of use (project name, etc.). Additional Analyst Notes: - CVE Program Container: References: - https://www.primx.eu/fr/blog/ - https://www.primx.eu/en/bulletins/security-bulletin-23B30930/
CVE ID: CVE-2023-50440 State: PUBLISHED Published: 2023-12-13T00:00:00.000Z Last Updated: 2025-06-03T13:43:44.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; ZED! for Windows, Mac, Linux before 2023.5; ZEDFREE for Windows, Mac, Linux before 2023.5; or ZEDPRO for Windows, Mac, Linux before 2023.5 can be modified by an unauthenticated attacker to include a UNC referenc
or ZEDPRO for Windows, Mac, Linux before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger network access to an attacker-controlled computer when opened by the victim. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.primx.eu/fr/blog/ - https://www.primx.eu/en/bulletins/security-bulletin-23B30931/
CVE ID: CVE-2023-50441 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-10-08T14:31:51.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which folders are opened. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.primx.eu/fr/blog/ - https://www.primx.eu/en/bulletins/security-bulletin-23B3093A/
CVE ID: CVE-2023-50442 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T22:16:46.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate privileges) so that specific file types are excluded from encryption temporarily. (This modification can, however, be detected, as described in the Administrator Guide.) Additional Analyst Notes: - CVE Program Container: References: - https://www.primx.eu/fr/blog/ - https://www.primx.eu/en/bulletins/security-bulletin-23B30933/
CVE ID: CVE-2023-50443 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T22:16:46.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are opened. Additional Analyst Notes: - CVE Program Container: References: - https://www.primx.eu/fr/blog/ - https://www.primx.eu/en/bulletins/security-bulletin-23B3093B/
CVE ID: CVE-2023-50444 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-11-26T15:22:48.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force. Additional Analyst N
itive user information, which could allow an unauthenticated attacker to obtain it via brute force. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.primx.eu/fr/blog/ - https://www.primx.eu/en/bulletins/security-bulletin-23B30874/
CVE ID: CVE-2023-50445 State: PUBLISHED Published: 2023-12-28T00:00:00 Last Updated: 2024-08-02T22:16:46.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.7, MT300N-V2 v4.3.7, AR750S v4.3.7, AR750 v4.3.7, AR300M v4.3.7, and B1300 v4.3.7., allows local attackers to execute arbitrary code via the get_system_log and get_crash_log functions of the logread module, as well as the upgrade_online function of the upgrade module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/gl-inet/CVE-i
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Using%20Shell%20Metacharacter%20Injection%20via%20API.md - http://packetstormsecurity.com/files/176708/GL.iNet-Unauthenticated-Remote-Command-Execution.html
CVE ID: CVE-2023-50446 State: PUBLISHED Published: 2023-12-10T00:00:00 Last Updated: 2024-08-02T22:16:46.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mullvad/mullvadvpn-app/pull/5398 - https://github.com/mullvad/mullvadvpn-app/releases/tag/2023.6-beta1 - https://github.com/mullvad/mullvadvpn-app/releases/tag/2023.6
CVE ID: CVE-2023-50447 State: PUBLISHED Published: 2024-01-19T00:00:00 Last Updated: 2024-08-02T22:16:46.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/python-pillow/Pillow/releases - https://devhub.checkmarx.com/cve-details/CVE-2023-50447/ - http://www.openwall.com/lists/oss-security/2024/01/20/1 - https://lists.debian.org/debian-lts-announce/2024/01/msg00019.html - https://du
ll.com/lists/oss-security/2024/01/20/1 - https://lists.debian.org/debian-lts-announce/2024/01/msg00019.html - https://duartecsantos.github.io/2024-01-02-CVE-2023-50447/
CVE ID: CVE-2023-50448 State: PUBLISHED Published: 2023-12-28T00:00:00 Last Updated: 2024-08-02T22:16:46.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user) by making CSV export requests at certain specific times. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/activeadmin/activeadmin/pull/7336 - https://github.com/activeadmin/activeadmin/security/advisories/GHSA-356j-hg45-x525
CVE ID: CVE-2023-50449 State: PUBLISHED Published: 2023-12-10T00:00:00 Last Updated: 2024-08-02T22:16:46.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/heyewei/JFinalcms/issues/I7WGC6
CVE ID: CVE-2023-50450 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-26T15:14:19.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-50453 State: PUBLISHED Published: 2023-12-10T00:00:00 Last Updated: 2024-08-02T22:16:46.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This endpoint returns internal configuration data of user object attributes, such as selectable values, which should not be visible to the public. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2023-08
CVE ID: CVE-2023-50454 State: PUBLISHED Published: 2023-12-10T00:00:00 Last Updated: 2024-08-02T22:16:46.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish connections to external services without proper validation of hostname and certificate authority. This is exploitable by man-in-the-middle attackers. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2023-04
CVE ID: CVE-2023-50455 State: PUBLISHED Published: 2023-12-10T00:00:00 Last Updated: 2024-08-28T15:21:46.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature, an attacker could send many requests for a known address to cause Denial Of Service (generation of many emails, which would also spam the victim). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zammad.com/en/advisories/zaa-2023-06
CVE ID: CVE-2023-50456 State: PUBLISHED Published: 2023-12-10T00:00:00.000Z Last Updated: 2025-05-27T15:08:57.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zammad.com/en/advisories/zaa-2023-07
CVE ID: CVE-2023-50457 State: PUBLISHED Published: 2023-12-10T00:00:00 Last Updated: 2024-08-02T22:16:46.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge base answers of a ticket, a user could see entries for which they lack permissions. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2023-05
CVE ID: CVE-2023-50458 State: PUBLISHED Published: 2025-07-10T00:00:00.000Z Last Updated: 2025-07-10T13:13:48.494Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: dradisframework Products: Dradis Problem Types: CWE-1230 Description: In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dradis/dradis-ce/tags - https://securiteam.io/2025/07/03/cve-2023-50458-dradis-information-disclosure-output-console/
CVE ID: CVE-2023-50463 State: PUBLISHED Published: 2023-12-10T00:00:00 Last Updated: 2024-08-02T22:16:46.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an X-Forwarded-For header, which may bypass a protection mechanism (trusted_proxy directive in reverse_proxy or IP address range restrictions). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shift72/caddy-geo-ip/issues/4 - https://github.com/shift72/caddy-geo-ip/tags - https://caddyserver.com/v2
CVE ID: CVE-2023-50465 State: PUBLISHED Published: 2023-12-11T00:00:00 Last Updated: 2024-08-02T22:16:46.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monicahq/monica/releases - https://github.com/Crypt0Cr33py/monicahqvuln - https://www.monicahq.com
CVE ID: CVE-2023-50466 State: PUBLISHED Published: 2023-12-19T00:00:00 Last Updated: 2024-08-02T22:16:46.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute arbitrary code or access sensitive information via injecting a crafted payload into the HMI Name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://literate-bakery-10b.notion.site/Weintek-EasyWeb-cMT-Reports-3fc0b10798b54f51a61d719395c408da?pvs=4
CVE ID: CVE-2023-50469 State: PUBLISHED Published: 2023-12-15T00:00:00 Last Updated: 2024-08-02T22:16:46.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter at /apply.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forever-more-cjy/overflow/blob/main/LBT-T310%20Buffer%20overflow.md
CVE ID: CVE-2023-50470 State: PUBLISHED Published: 2023-12-28T00:00:00 Last Updated: 2024-11-26T14:47:19.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seacms.com - https://www.seacms.net/ - https://blog.csdn.net/weixin_72610998/article/details/134784075?spm=1001.2014.3001.5502
CVE ID: CVE-2023-50471 State: PUBLISHED Published: 2023-12-14T00:00:00.000Z Last Updated: 2025-11-04T22:05:22.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/DaveGamble/cJSON/issues/802 - https://lists.debian.org/debian-lts-announce/2023/12/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EO4XCUTY3ZMVW4YBG6DBYVS5NSMNP6JY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mes
3ZMVW4YBG6DBYVS5NSMNP6JY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQOQ7CAOYBNHGAMNOR7ELGLC22HV3ZQV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSI3LL6ZNKYNM5JKPA5FKZTATL4MPF7V/
CVE ID: CVE-2023-50472 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-08-28T14:15:13.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DaveGamble/cJSON/issues/803
CVE ID: CVE-2023-50473 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T22:16:46.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in bill-ahmed qbit-matUI version 1.16.4, allows remote attackers to obtain sensitive information via fixed session identifiers (SID) in index.js file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bill-ahmed/qbit-matUI/issues/207 - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-50473.md
CVE ID: CVE-2023-50475 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-11-26T16:16:08.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in bcoin-org bcoin version 2.2.0, allows remote attackers to obtain sensitive information via weak hashing algorithms in the component \vendor\faye-websocket.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bcoin-org/bcoin/issues/1174 - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-50475.md
CVE ID: CVE-2023-50477 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T22:16:46.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nos/client/issues/1485 - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-50477.md
CVE ID: CVE-2023-50481 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-08-02T22:16:46.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blinksocks/blinksocks/issues/108 - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-50481.md
CVE ID: CVE-2023-50488 State: PUBLISHED Published: 2024-02-02T00:00:00.000Z Last Updated: 2025-06-17T16:01:03.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Blurams Lumi Security Camera (A31C) v23.0406.435.4120 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/roman-mueller/PoC/tree/master/CVE-2023-50488 - https://infosec.rm-it.de/2024/02/01/blurams-lumi-security-camera-analysis/
CVE ID: CVE-2023-50495 State: PUBLISHED Published: 2023-12-12T00:00:00.000Z Last Updated: 2025-11-04T18:20:36.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html - https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html - https://security.netapp.com/advisory/ntap-20240119-0008/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
CVE ID: CVE-2023-50550 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T22:16:46.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/layui/layui/issues?utf8=%E2%9C%93&state=all&issue_search=xss
CVE ID: CVE-2023-50559 State: PUBLISHED Published: 2023-12-29T00:00:00 Last Updated: 2024-08-02T22:16:46.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenXiangShan/XiangShan/issues/2534 - https://gist.github.com/nieeka/5edb552e7cf62cdb18decd9c4292d429
CVE ID: CVE-2023-50563 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-08-02T22:16:46.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SecBridge/Cms_Vuls_test/blob/main/Semcms/Semcms_Sql_Inject.md
CVE ID: CVE-2023-50564 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-10-08T14:22:58.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SecBridge/Cms_Vuls_test/blob/main/Pluckcms/Pluck_v4.7.18_Any_File_Upload_Getshell.md
CVE ID: CVE-2023-50565 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-11-26T15:12:39.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /logs/dopost.html in RPCMS v3.5.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ralap-z/rpcms/issues/7