Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0619 State: PUBLISHED Published: 2023-02-01T19:03:40.110Z Last Updated: 2025-01-13T17:09:25.898Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: karim79 Products: Kraken.io Image Optimizer Problem Types: CWE-862 Missing Authorization Description: The Kraken.io Image Optimizer plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to reset image optimizations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
o reset image optimizations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f94eabc5-6e3b-46df-9e36-d7d0fad833de - https://plugins.trac.wordpress.org/browser/kraken-image-optimizer/tags/2.6.6/kraken.php#L705
CVE ID: CVE-2023-0620 State: PUBLISHED Published: 2023-03-30T00:28:13.301Z Last Updated: 2025-02-13T16:39:02.965Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-89 Description: HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command. This issue is fixed in versions
L database. An attacker may modify these parameters to execute a malicious SQL command. This issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-12-vault-s-microsoft-sql-database-storage-backend-vulnerable-to-sql-injection-via-configuration-file/52080/1 - https://security.netapp.com/advisory/ntap-20230526-0008/
CVE ID: CVE-2023-0621 State: PUBLISHED Published: 2023-03-09T21:13:06.983Z Last Updated: 2025-01-17T22:09:20.608Z Vendors: Horner Automation Products: Cscape Envision RV Problem Types: CWE-125 Out-of-bounds Read Description: Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.
ent process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04
CVE ID: CVE-2023-0622 State: PUBLISHED Published: 2023-03-09T21:10:55.755Z Last Updated: 2025-01-17T22:10:45.410Z Vendors: Horner Automation Products: Cscape Envision RV Problem Types: CWE-787 Out-of-bounds Write Description: Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ci
urrent process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04
CVE ID: CVE-2023-0623 State: PUBLISHED Published: 2023-03-09T21:12:00.661Z Last Updated: 2025-01-17T22:09:58.228Z Vendors: Horner Automation Products: Cscape Envision RV Problem Types: CWE-787 Out-of-bounds Write Description: Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ci
CVE ID: CVE-2023-0624 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-24T20:32:46.534Z Vendors: n/a Products: OrangeScrum Problem Types: Reflected cross-site scripting (XSS) Description: OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the application returns malicious user input in the response with the content-type set to text/html. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Orangescrum/orangescrum/ - https://fluidattacks.com/advisories/oberhofer/
CVE ID: CVE-2023-0625 State: PUBLISHED Published: 2023-09-25T15:31:09.114Z Last Updated: 2024-09-24T15:39:13.171Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Docker Inc. Products: Docker Desktop Problem Types: CWE-79, CWE-94, CWE-829 Description: Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects Docker Desktop: before 4.12.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4120
CVE ID: CVE-2023-0626 State: PUBLISHED Published: 2023-09-25T15:31:38.283Z Last Updated: 2024-09-24T15:38:38.480Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Docker Inc. Products: Docker Desktop Problem Types: CWE-94 Description: Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route. This issue affects Docker Desktop: before 4.12.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4120
CVE ID: CVE-2023-0627 State: PUBLISHED Published: 2023-09-25T15:31:58.782Z Last Updated: 2024-09-24T15:37:48.589Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Docker Inc. Products: Docker Desktop Problem Types: CWE-501 Description: Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4120
CVE ID: CVE-2023-0628 State: PUBLISHED Published: 2023-03-13T11:16:30.426Z Last Updated: 2025-02-27T19:58:18.915Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: Docker Inc. Products: Docker Desktop Problem Types: CWE-77 Description: Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4170
CVE ID: CVE-2023-0629 State: PUBLISHED Published: 2023-03-13T11:16:41.171Z Last Updated: 2025-02-27T20:12:56.479Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Docker Inc. Products: Docker Desktop Problem Types: CWE-424, CWE-501 Description: Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the -H (--host) CLI flag or the DOCKER_HOST environment variable and launch containers without the additional hardening features provided by ECI. This would not affect already running containers, nor contain
without the additional hardening features provided by ECI. This would not affect already running containers, nor containers launched through the usual approach (without Docker's raw socket). The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges. This issue has been fixed in Docker Desktop 4.17.0. Affected Docker Desktop versions: from 4.13.0 before 4.17.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4170
CVE ID: CVE-2023-0630 State: PUBLISHED Published: 2023-03-20T15:52:13.523Z Last Updated: 2025-02-26T14:37:24.198Z Vendors: Unknown Products: Slimstat Analytics Problem Types: CWE-89 SQL Injection Description: The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b82bdd02-b699-4527-86cc-d60b56ab0c55
CVE ID: CVE-2023-0631 State: PUBLISHED Published: 2023-03-20T15:52:10.755Z Last Updated: 2025-02-26T14:44:50.619Z Vendors: Unknown Products: Paid Memberships Pro Problem Types: CWE-89 SQL Injection Description: The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/19ef92fd-b493-4488-91f0-e6ba51362f79
CVE ID: CVE-2023-0632 State: PUBLISHED Published: 2023-08-01T23:36:30.662Z Last Updated: 2025-11-20T04:06:03.830Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-1333 Description: An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible by using crafted payloads to search Harbor Registry. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/390148 - htt
CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/390148 - https://hackerone.com/reports/1852677
CVE ID: CVE-2023-0633 State: PUBLISHED Published: 2023-09-25T15:32:20.271Z Last Updated: 2024-09-24T14:59:18.568Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Docker Inc. Products: Docker Desktop Problem Types: CWE-88 Description: In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.docker.com/desktop/release-notes/#4120
CVE ID: CVE-2023-0634 State: REJECTED Published: 2023-02-02T22:25:04.261Z Last Updated: 2025-02-13T15:46:35.971Z Description: No description available.
CVE ID: CVE-2023-0635 State: PUBLISHED Published: 2023-06-05T03:42:04.704Z Last Updated: 2025-01-08T16:42:53.322Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Ltd. Products: ASPECT®-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-1391 Description: Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG
G100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Privilege Escalation.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.01; NEXUS Series: from 3.0;0 before 3.07.01; MATRIX Series: from 3.0;0 before 3.07.01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=2CKA000073B5403&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2023-0636 State: PUBLISHED Published: 2023-06-05T03:45:09.898Z Last Updated: 2025-01-08T17:40:16.541Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Ltd. Products: ASPECT®-Enterprise, NEXUS Series, MATRIX Series Problem Types: CWE-77 Description: Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2CQG103202S3021, 2CQG103203S3021, 2CQG103204S3021 modules), ABB Ltd. NEXUS Series on NEXUS Series, Linux (2CQG100102R2021, 2CQG100104R2021, 2CQG100105R2021, 2CQG100106R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111
6R2021, 2CQG100110R2021, 2CQG100112R2021, 2CQG100103R2021, 2CQG100107R2021, 2CQG100108R2021, 2CQG100109R2021, 2CQG100111R2021, 2CQG100113R2021 modules), ABB Ltd. MATRIX Series on MATRIX Series, Linux (2CQG100102R1021, 2CQG100103R1021, 2CQG100104R1021, 2CQG100105R1021, 2CQG100106R1021 modules) allows Command Injection.This issue affects ASPECT®-Enterprise: from 3.0;0 before 3.07.0; NEXUS Series: from 3.0;0 before 3.07.0; MATRIX Series: from 3.0;0 before 3.07.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=2CKA000073B5403&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2023-0637 State: PUBLISHED Published: 2023-02-02T08:00:48.824Z Last Updated: 2025-03-26T18:52:44.644Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: TRENDnet Products: TEW-811DRU Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. This affects an unknown part of the file wan.asp of the component Web Management Interface. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220017 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CIS
. The identifier VDB-220017 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220017 - https://vuldb.com/?ctiid.220017
CVE ID: CVE-2023-0638 State: PUBLISHED Published: 2023-02-02T08:05:07.549Z Last Updated: 2024-08-02T05:17:50.346Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: TRENDnet Products: TEW-811DRU Problem Types: CWE-77 Description: A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-220018 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.2200
igned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220018 - https://vuldb.com/?ctiid.220018
CVE ID: CVE-2023-0639 State: PUBLISHED Published: 2023-02-02T08:10:13.488Z Last Updated: 2024-08-02T05:17:50.320Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: TRENDnet Products: TEW-652BRP Problem Types: CWE-79 Description: A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-220019. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.2
is vulnerability is VDB-220019. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220019 - https://vuldb.com/?ctiid.220019
CVE ID: CVE-2023-0640 State: PUBLISHED Published: 2023-02-02T08:14:07.356Z Last Updated: 2025-03-26T18:52:17.947Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: TRENDnet Products: TEW-652BRP Problem Types: CWE-77 Description: A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220020. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
tifier of this vulnerability is VDB-220020. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220020 - https://vuldb.com/?ctiid.220020
CVE ID: CVE-2023-0641 State: PUBLISHED Published: 2023-02-02T08:16:53.067Z Last Updated: 2024-08-02T05:17:50.385Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHPGurukul Products: Employee Leaves Management System Problem Types: CWE-521 Description: A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirmpassword leads to weak password requirements. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be
rements. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220021 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220021 - https://vuldb.com/?ctiid.220021 - https://github.com/ctflearner/Vulnerability/blob/main/Employee%20Leaves%20Management%20System/ELMS.md
CVE ID: CVE-2023-0642 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-26T17:45:33.491Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: squidex Products: squidex/squidex Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository squidex/squidex prior to 7.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3bbdafe6-e152-47bb-88a7-fd031725323d - https://github.com/squidex/squidex/commit/2da3c41da82eb945832f22bb70dba567ac6ce969
CVE ID: CVE-2023-0643 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-26T17:45:04.382Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: squidex Products: squidex/squidex Problem Types: CWE-167 Description: Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/ea90f8b9-d8fe-4432-9a52-4d663400c52f - https://github.com/squidex/squidex/commit/cf4efc52eab17098474d73ccff6c136fc2f737db
CVE ID: CVE-2023-0644 State: PUBLISHED Published: 2023-05-15T12:15:40.717Z Last Updated: 2025-01-14T18:21:36.964Z Vendors: Unknown Products: Push Notifications for WordPress by PushAssist Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Push Notifications for WordPress by PushAssist WordPress plugin through 3.0.8 does not sanitise and escape various parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/08f5089c-36f3-4d12-bca5-99cd3ae78f67
CVE ID: CVE-2023-0645 State: PUBLISHED Published: 2023-04-11T13:22:06.779Z Last Updated: 2025-02-07T16:32:10.243Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Libjxl Products: Libjxl Problem Types: CWE-125 Description: An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgrading to version 0.8.1 or past commit https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
l/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libjxl/libjxl/pull/2101/commits/d95b050c1822a5b1ede9e0dc937e43fca1b10159 - https://github.com/libjxl/libjxl/pull/2101
CVE ID: CVE-2023-0646 State: PUBLISHED Published: 2023-02-02T13:26:30.361Z Last Updated: 2024-11-25T16:29:25.758Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: dst-admin Problem Types: CWE-77 Description: A vulnerability classified as critical was found in dst-admin 1.5.0. Affected by this vulnerability is an unknown functionality of the file /home/cavesConsole. The manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220033 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
-220033 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220033 - https://vuldb.com/?ctiid.220033 - https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0cavesConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C
CVE ID: CVE-2023-0647 State: PUBLISHED Published: 2023-02-02T13:27:57.263Z Last Updated: 2024-08-02T05:17:50.330Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: dst-admin Problem Types: CWE-77 Description: A vulnerability, which was classified as critical, has been found in dst-admin 1.5.0. Affected by this issue is some unknown functionality of the file /home/kickPlayer. The manipulation of the argument userId leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-220034 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http
is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220034 - https://vuldb.com/?ctiid.220034 - https://github.com/Ha0Liu/cveAdd/blob/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0kickPlayer%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C/Dst-admin%201.5.0%20background%20kickPlayer%20interface%20remote%20command%20execution.md