Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
dentifier of this vulnerability is VDB-243588. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.243588 - https://vuldb.com/?ctiid.243588 - https://github.com/Charmeeeeee/Tongda-OA-repo/blob/main/Tongda_OA_Vulnerability_Report.md
CVE ID: CVE-2023-5783 State: PUBLISHED Published: 2023-10-26T14:00:06.232Z Last Updated: 2025-06-12T14:52:00.592Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/system/approve_center/flow_sort/flow/delete.php. The manipulation of the argument id/sort_parent leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to
disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-243589 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243589 - https://vuldb.com/?ctiid.243589 - https://github.com/halleyakina/cve/blob/main/sql.md
CVE ID: CVE-2023-5784 State: PUBLISHED Published: 2023-10-26T14:31:05.173Z Last Updated: 2024-09-17T13:55:45.147Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Netentsec Products: NS-ASG Application Security Gateway Problem Types: CWE-89 Description: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-243590 is the identifier assigned to this vulnerability. NOTE: T
t has been disclosed to the public and may be used. VDB-243590 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243590 - https://vuldb.com/?ctiid.243590 - https://github.com/gb111d/ns-asg_poc/
CVE ID: CVE-2023-5785 State: PUBLISHED Published: 2023-10-26T15:00:05.916Z Last Updated: 2024-08-27T18:33:59.479Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Netentsec Products: NS-ASG Application Security Gateway Problem Types: CWE-89 Description: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddress_interpret.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243591. NOTE: The vend
n disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243591. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.243591 - https://vuldb.com/?ctiid.243591 - https://github.com/ggg48966/cve/blob/main/NS-ASG-sql-addaddress_interpret.md
CVE ID: CVE-2023-5786 State: PUBLISHED Published: 2023-10-26T15:31:04.617Z Last Updated: 2024-08-02T08:07:32.705Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GeoServer Products: GeoWebCache Problem Types: CWE-425 Description: A vulnerability was found in GeoServer GeoWebCache up to 1.15.1. It has been declared as problematic. This vulnerability affects unknown code of the file /geoserver/gwc/rest.html. The manipulation leads to direct request. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243592. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
used. The identifier of this vulnerability is VDB-243592. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.243592 - https://vuldb.com/?ctiid.243592 - https://github.com/Qxyday/GeoServe---unauthorized
CVE ID: CVE-2023-5787 State: PUBLISHED Published: 2023-10-26T15:31:05.733Z Last Updated: 2024-08-02T08:07:32.734Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Shaanxi Chanming Education Technology Products: Score Query System Problem Types: CWE-89 Description: A vulnerability was found in Shaanxi Chanming Education Technology Score Query System 5.0. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument stuIdCard leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243593 was assigned to this vulnerability. Additional Analyst Notes: -
o the public and may be used. The identifier VDB-243593 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.243593 - https://vuldb.com/?ctiid.243593 - https://github.com/Echosssy/-SQL-injection-exists-in-the-score-query-system/blob/main/README.md
CVE ID: CVE-2023-5789 State: PUBLISHED Published: 2023-10-26T16:00:08.217Z Last Updated: 2024-08-02T08:07:32.704Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Dragon Path Products: 707GR1 Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Dragon Path 707GR1 up to 20231022. Affected is an unknown function of the component Ping Diagnostics. The manipulation of the argument Host Address with the input >><img/src/onerror=alert(1)> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-243594 is the identifier assigned to this vulnerability. Additiona
has been disclosed to the public and may be used. VDB-243594 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.243594 - https://vuldb.com/?ctiid.243594 - https://drive.google.com/file/d/1s_NzD0Z6lMvRoo9sLXqRvYRaF7XTAYBE/view?usp=sharing
CVE ID: CVE-2023-5790 State: PUBLISHED Published: 2023-10-26T16:00:09.954Z Last Updated: 2024-09-17T13:25:11.805Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: File Manager App Problem Types: CWE-434 Description: A vulnerability classified as critical was found in SourceCodester File Manager App 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-file.php. The manipulation of the argument uploadedFileName leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243595. Additional Analyst Not
sed to the public and may be used. The associated identifier of this vulnerability is VDB-243595. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243595 - https://vuldb.com/?ctiid.243595 - https://github.com/Yp1oneer/cve_hub/blob/main/File%20Manager%20App/Unrestricted%20File%20Upload.pdf
CVE ID: CVE-2023-5791 State: PUBLISHED Published: 2023-10-26T16:31:04.854Z Last Updated: 2024-08-02T08:07:32.849Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Sticky Notes App Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an unknown part of the file endpoint/add-note.php. The manipulation of the argument noteTitle/noteContent leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243597 was assigned to this vulnerability. Additional Analyst Notes
ed to the public and may be used. The identifier VDB-243597 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.243597 - https://vuldb.com/?ctiid.243597 - https://github.com/Yp1oneer/cve_hub/blob/main/Sticky%20Notes%20App/Cross%20Site%20Scripting.pdf
CVE ID: CVE-2023-5792 State: PUBLISHED Published: 2023-10-26T16:31:05.967Z Last Updated: 2024-08-02T08:07:32.705Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Sticky Notes App Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability affects unknown code of the file endpoint/delete-note.php. The manipulation of the argument note leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-243598 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment
be used. VDB-243598 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.243598 - https://vuldb.com/?ctiid.243598 - https://github.com/Yp1oneer/cve_hub/blob/main/Sticky%20Notes%20App/SQL%20Injection-1.pdf
CVE ID: CVE-2023-5793 State: PUBLISHED Published: 2023-10-26T17:00:06.939Z Last Updated: 2025-06-12T14:51:11.238Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: flusity Products: CMS Problem Types: CWE-79 Description: A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblock_place leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected
the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 81252bc764e1de2422e79e36194bba1289e7a0a5. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-243599. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243599 - https://vuldb.com/?ctiid.243599 - https://github.com/flusity/flusity-CMS/issues/1 - https://github.com/flusity/flusity-CMS/commit/81252bc764e1de2422e79e36194bba1289e7a0a5
CVE ID: CVE-2023-5794 State: PUBLISHED Published: 2023-10-26T17:00:08.188Z Last Updated: 2024-08-02T08:07:32.660Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Railway Catering System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-243600. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?
f this vulnerability is VDB-243600. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.243600 - https://vuldb.com/?ctiid.243600 - https://github.com/JacksonStonee/Online-Railway-Catering-System-1.0-has-a-SQL-injection-vulnerability-in-index.php/tree/main
CVE ID: CVE-2023-5795 State: PUBLISHED Published: 2023-10-26T17:31:03.942Z Last Updated: 2024-09-09T16:21:47.285Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeAstro Products: POS System Problem Types: CWE-434 Description: A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243601 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
and may be used. The identifier VDB-243601 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243601 - https://vuldb.com/?ctiid.243601 - https://drive.google.com/file/d/1bjDpJdG28Q5-RGJB89Dzw6YzZ1VHN23X/view?usp=sharing
CVE ID: CVE-2023-5796 State: PUBLISHED Published: 2023-10-26T17:31:05.052Z Last Updated: 2024-09-09T16:19:02.349Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeAstro Products: POS System Problem Types: CWE-434 Description: A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-243602 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA AD
DB-243602 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243602 - https://vuldb.com/?ctiid.243602 - https://drive.google.com/file/d/1LIXuVmxby4QTY7v7dD-F0oRnwVVOwlmJ/view?usp=sharing
CVE ID: CVE-2023-5797 State: PUBLISHED Published: 2023-11-28T02:00:59.801Z Last Updated: 2024-12-02T19:31:49.340Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Zyxel Products: ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware, VPN series firmware, NWA50AX firmware, WAC500 firmware, WAX300H firmware, WBE660S firmware Problem Types: CWE-269 Description: An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W
USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN series firmware versions 4.16 through 5.37, VPN series firmware versions 4.30 through 5.37, NWA50AX firmware version 6.29(ABYW.2), WAC500 firmware version 6.65(ABVS.1), WAX300H firmware version 6.60(ACHF.1), and WBE660S firmware version 6.65(ACGG.1), could allow an authenticated local attacker to access the administrator’s logs on an affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-a
.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-aps
CVE ID: CVE-2023-5798 State: PUBLISHED Published: 2023-10-26T09:08:53.640Z Last Updated: 2025-04-23T16:10:51.697Z Vendors: Unknown Products: Assistant Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_get(), which could allow users with a role as low as Editor to perform SSRF attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/bbb4c98c-4dd7-421e-9666-98f15acde761
CVE ID: CVE-2023-5799 State: PUBLISHED Published: 2023-11-20T18:55:07.999Z Last Updated: 2024-08-02T08:14:24.001Z Vendors: Unknown Products: WP Hotel Booking Problem Types: CWE-863 Incorrect Authorization Description: The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3061f85e-a70e-49e5-bccf-ae9240f51178
CVE ID: CVE-2023-5800 State: PUBLISHED Published: 2024-02-05T05:20:38.668Z Last Updated: 2025-06-17T21:29:24.981Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-35 Description: Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more in
s has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/89/d9/99/cve-2023-5800-en-US-424339.pdf
CVE ID: CVE-2023-5801 State: PUBLISHED Published: 2023-11-08T02:48:14.529Z Last Updated: 2024-09-04T15:00:19.886Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnerability will affect integrity and confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-5802 State: PUBLISHED Published: 2023-10-26T11:47:49.745Z Last Updated: 2025-02-19T21:19:56.606Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Mihai Iova Products: WordPress Knowledge base & Documentation Plugin – WP Knowledgebase Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mihai Iova WordPress Knowledge base & Documentation Plugin – WP Knowledgebase plugin <= 1.3.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-knowledgebase/wordpress-wp-knowledgebase-plugin-1-3-4-cross-site-request-forgery-csrf-
ack.com/database/vulnerability/wp-knowledgebase/wordpress-wp-knowledgebase-plugin-1-3-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-5803 State: PUBLISHED Published: 2023-11-30T15:57:05.929Z Last Updated: 2024-08-02T08:14:24.925Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Business Directory Team Products: Business Directory Plugin – Easy Listing Directories for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Business Directory Team Business Directory Plugin – Easy Listing Directories for WordPress allows Cross-Site Request Forgery.This issue affects Business Directory Plugin – Easy Listing Directories for WordPress: from n/a through 6.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://patchs
for WordPress: from n/a through 6.3.10. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/business-directory-plugin/wordpress-business-directory-plugin-easy-listing-directories-for-wordpress-plugin-6-3-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-5804 State: PUBLISHED Published: 2023-10-26T20:00:06.279Z Last Updated: 2024-08-02T08:14:24.043Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The identifier VDB-243617 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.24
ssigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.243617 - https://vuldb.com/?ctiid.243617 - https://github.com/JacksonStonee/Nipah-virus-NiV-Testing-Management-System-Using-PHP-and-MySQL-1.0-has-a-SQL-injection-vuln-login.php/blob/main/README.md
CVE ID: CVE-2023-5805 State: PUBLISHED Published: 2023-10-26T21:00:07.515Z Last Updated: 2024-09-09T16:08:13.726Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Real Estate Portal System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Affected is an unknown function of the file view_estate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-243618 is the identifier assigned to this vulnerability. Additional Analyst Notes
sed to the public and may be used. VDB-243618 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243618 - https://vuldb.com/?ctiid.243618 - https://github.com/lxxcute/Bug/blob/main/Real%20Estate%20Portal%20System%20view_estate.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-5806 State: PUBLISHED Published: 2024-01-18T12:58:31.264Z Last Updated: 2024-11-13T19:21:50.573Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mergen Software Products: Quality Management System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection.This issue affects Quality Management System: before v1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-0040
CVE ID: CVE-2023-5807 State: PUBLISHED Published: 2023-10-27T12:37:32.112Z Last Updated: 2024-09-09T15:11:24.522Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TRtek Software Products: Education Portal Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Education Portal allows SQL Injection.This issue affects Education Portal: before 3.2023.29. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0608
CVE ID: CVE-2023-5808 State: PUBLISHED Published: 2023-12-04T23:53:33.743Z Last Updated: 2024-08-28T17:34:56.347Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Hitachi Vantara Products: System Management Unit (SMU) Problem Types: CWE-285 Description: SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage administrative role are able to access HNAS configuration backup and diagnostic data, that would normally be barred to that specific administrative role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://knowledge.hitac