Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4149 State: PUBLISHED Published: 2023-11-21T07:00:25.240Z Last Updated: 2024-08-02T07:17:12.285Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WAGO Products: Industrial Managed Switch (0852-0602), Industrial Managed Switch (0852-0603), Industrial Managed Switch (0852-1605) Problem Types: CWE-78 Description: A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management. Additional Analyst Notes: - CVE Program Contain
ity is located in the user request handling of the web-based management. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2023-037
CVE ID: CVE-2023-4150 State: PUBLISHED Published: 2023-08-30T14:22:04.733Z Last Updated: 2025-04-23T16:18:40.446Z Vendors: Unknown Products: User Activity Tracking and Log Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/381ef15b-aafe-4ef4-a0bc-867d891f7f44
CVE ID: CVE-2023-4151 State: PUBLISHED Published: 2023-09-04T11:26:58.445Z Last Updated: 2025-03-06T16:05:18.419Z Vendors: Unknown Products: Store Locator WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c9d80aa4-a26d-4b3f-b7bf-9d2fb0560d7b
CVE ID: CVE-2023-4152 State: PUBLISHED Published: 2023-09-21T06:18:21.444Z Last Updated: 2024-09-24T16:21:57.187Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Frauscher Products: FDS101 for FAdC/FAdCi Problem Types: CWE-22 Description: Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-038/
CVE ID: CVE-2023-4153 State: PUBLISHED Published: 2023-09-13T02:54:12.332Z Last Updated: 2025-02-05T19:29:17.777Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: webxmedia Products: BAN Users Problem Types: CWE-266 Incorrect Privilege Assignment Description: The BAN Users plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.5.3 due to a missing capability check on the 'w3dev_save_ban_user_settings_callback' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify the plugin settings to access the ban and unban functionality and set the role of the unbanned u
a subscriber, to modify the plugin settings to access the ban and unban functionality and set the role of the unbanned user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/af6bd2db-47a4-4381-a881-d5f97a159f8d?source=cve - https://plugins.trac.wordpress.org/browser/ban-users/tags/1.5.3/include/ajax.php#L199 - https://plugins.trac.wordpress.org/browser/ban-users/tags/1.5.3/include/ajax.php#L109
CVE ID: CVE-2023-4154 State: PUBLISHED Published: 2023-11-07T19:14:28.305Z Last Updated: 2024-08-02T07:17:12.144Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a, Red Hat, Fedora Products: samba, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Storage 3, Fedora Problem Types: CWE-787 Description: A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs). This flaw allows RODCs and users possessing the GET_CHANGES right to access all attributes, including sensiti
s (RODCs). This flaw allows RODCs and users possessing the GET_CHANGES right to access all attributes, including sensitive secrets and passwords. Even in a default setup, RODC DC accounts, which should only replicate some passwords, can gain access to all domain secrets, including the vital krbtgt, effectively eliminating the RODC / DC distinction. Furthermore, the vulnerability fails to account for error conditions (fail open), like out-of-memory situations, potentially granting access to secret attributes, even under low-privileged attacker influence. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-4154 - https://bugzilla.red
otes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-4154 - https://bugzilla.redhat.com/show_bug.cgi?id=2241883 - https://bugzilla.samba.org/show_bug.cgi?id=15424 - https://security.netapp.com/advisory/ntap-20231124-0002/ - https://www.samba.org/samba/security/CVE-2023-4154.html
CVE ID: CVE-2023-4155 State: PUBLISHED Published: 2023-09-13T16:11:39.213Z Last Updated: 2025-02-27T20:52:55.595Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-367 Description: A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they c
rability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-4155 - https://bugzilla.redhat.com/show_bug.cgi?id=2213802
CVE ID: CVE-2023-4156 State: PUBLISHED Published: 2023-09-25T17:20:19.377Z Last Updated: 2024-09-24T15:36:52.766Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: n/a, Red Hat, Fedora Products: gawk, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-125 Description: A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-4156 - https://bugz
am Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-4156 - https://bugzilla.redhat.com/show_bug.cgi?id=2215930
CVE ID: CVE-2023-4157 State: PUBLISHED Published: 2023-08-04T17:15:29.215Z Last Updated: 2024-10-09T19:46:42.648Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: omeka Products: omeka/omeka-s Problem Types: CWE-74 Description: CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in GitHub repository omeka/omeka-s prior to version 4.0.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/abc3521b-1238-4c4e-97f1-2957db670014 - https://github.com/omeka/omeka-s/commit/8b72619d9731b32dd21ab6dcaa01ccc3bbf0db63
CVE ID: CVE-2023-4158 State: PUBLISHED Published: 2023-08-04T17:16:44.572Z Last Updated: 2024-10-09T19:46:08.007Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: omeka Products: omeka/omeka-s Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e0e462ae-d7cb-4a84-b6fe-5f5de20e3d15 - https://github.com/omeka/omeka-s/commit/2a7fb26452167c8a1d95f207ae5328c6b1b0fcf8
CVE ID: CVE-2023-4159 State: PUBLISHED Published: 2023-08-04T17:17:21.972Z Last Updated: 2024-10-09T19:14:28.321Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: omeka Products: omeka/omeka-s Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e2e2365e-6a5f-4ca4-9ef1-297e3ed41f9c - https://github.com/omeka/omeka-s/commit/2a7fb26452167c8a1d95f207ae5328c6b1b0fcf8
CVE ID: CVE-2023-4160 State: PUBLISHED Published: 2023-08-31T05:33:09.925Z Last Updated: 2025-02-05T19:33:18.320Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: edgarrojas Products: WooCommerce PDF Invoice Builder, Create invoices, packing slips and more Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.90 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrat
nsufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6a765360-8603-4ba1-a6db-dd0175ff3ddf?source=cve - https://plugins.trac.wordpress.org/browser/woo-pdf-invoice-builder/trunk/woocommerce-pdf-invoice-ajax.php?rev=2935371#L654 - https://plugins.trac.
ress.org/browser/woo-pdf-invoice-builder/trunk/woocommerce-pdf-invoice-ajax.php?rev=2935371#L654 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2953379%40woo-pdf-invoice-builder%2Ftrunk&old=2951617%40woo-pdf-invoice-builder%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2023-4161 State: PUBLISHED Published: 2023-08-31T05:33:06.237Z Last Updated: 2025-02-05T19:33:50.771Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: edgarrojas Products: WooCommerce PDF Invoice Builder, Create invoices, packing slips and more Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WooCommerce PDF Invoice Builder for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the SaveCustomField function in versions up to, and including, 1.2.90. This makes it possible for unauthenticated attackers to create invoice fields provided they can trick an admin into performing an action such a
for unauthenticated attackers to create invoice fields provided they can trick an admin into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3b7aac1c-6962-49cf-850f-ab7b1d220090?source=cve - https://plugins.trac.wordpress.org/browser/woo-pdf-invoice-builder/trunk/woocommerce-pdf-invoice-ajax.php?rev=2935371#L654 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2953379%40woo-pdf-invoice-builder%2Ftrunk&old=2951617%40woo-pdf-invoice-builder%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2023-4162 State: PUBLISHED Published: 2023-08-31T00:14:15.612Z Last Updated: 2024-09-30T15:47:48.730Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Brocade Products: Fabric OS Problem Types: CWE-252 Description: A segmentation fault can occur in Brocade Fabric OS after Brocade Fabric OS v9.0 and before Brocade Fabric OS v9.2.0a through the passwdcfg command. This could allow an authenticated privileged user local user to crash a Brocade Fabric OS swith using the cli “passwdcfg --set -expire -minDiff“. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-no
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22513 - https://security.netapp.com/advisory/ntap-20231124-0010/
CVE ID: CVE-2023-4163 State: PUBLISHED Published: 2023-08-31T00:04:39.287Z Last Updated: 2025-06-26T14:21:55.181Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Brocade Products: Brocade Fabric OS Problem Types: CWE-120 Description: In Brocade Fabric OS before v9.2.0a, a local authenticated privileged user can trigger a buffer overflow condition, leading to a kernel panic with large input to buffers in the portcfgfportbuffers command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22514 - https://security.netap
broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22514 - https://security.netapp.com/advisory/ntap-20231130-0001/
CVE ID: CVE-2023-4164 State: PUBLISHED Published: 2024-01-02T21:20:15.891Z Last Updated: 2024-09-06T17:52:41.023Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Google Products: Pixel Watch Problem Types: CWE-200 Description: There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://source.android.com/docs/security/bulletin/pixel-watch/2023/2023-12-01
CVE ID: CVE-2023-4165 State: PUBLISHED Published: 2023-08-05T13:31:03.946Z Last Updated: 2024-10-10T19:53:37.203Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/seal_manage/iweboffice/delete_seal.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-236181 was assigne
s able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-236181 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.236181 - https://vuldb.com/?ctiid.236181 - https://github.com/nagenanhai/cve/blob/main/sql.md
CVE ID: CVE-2023-4166 State: PUBLISHED Published: 2023-08-05T15:31:04.037Z Last Updated: 2024-10-15T16:36:04.562Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/seal_manage/dianju/delete_log.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. VDB-236182 is the identifier assig
0 is able to address this issue. It is recommended to upgrade the affected component. VDB-236182 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.236182 - https://vuldb.com/?ctiid.236182 - https://github.com/Das1yGa0/cve/blob/main/sql.md
CVE ID: CVE-2023-4167 State: PUBLISHED Published: 2023-08-05T16:00:06.053Z Last Updated: 2024-08-02T07:17:12.287Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Media Browser Products: Emby Server Problem Types: CWE-79 Description: A vulnerability was found in Media Browser Emby Server 4.7.13.0 and classified as problematic. This issue affects some unknown processing of the file /web/. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-236183. Additional Analyst Notes: - CVE Pro
e affected component. The associated identifier of this vulnerability is VDB-236183. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236183 - https://vuldb.com/?ctiid.236183 - https://github.com/whoamiecho/vuls/blob/main/emby.md
CVE ID: CVE-2023-4168 State: PUBLISHED Published: 2023-08-05T17:31:03.910Z Last Updated: 2024-08-02T07:17:12.204Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Templatecookie Products: Adlisting Problem Types: CWE-200 Description: A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unknown function of the file /ad-list of the component Redirect Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Addit
rability is VDB-236184. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236184 - https://vuldb.com/?ctiid.236184 - http://packetstormsecurity.com/files/174015/Adlisting-Classified-Ads-2.14.0-Information-Disclosure.html
CVE ID: CVE-2023-4169 State: PUBLISHED Published: 2023-08-05T18:00:06.874Z Last Updated: 2024-08-02T07:17:12.329Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Ruijie Products: RG-EW1200G Problem Types: CWE-284 Description: A vulnerability was found in Ruijie RG-EW1200G 1.0(1)B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/set_passwd of the component Administrator Password Handler. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-236185 was assigned to this vulnerability. NOTE: The vendo
n disclosed to the public and may be used. The identifier VDB-236185 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236185 - https://vuldb.com/?ctiid.236185 - https://github.com/blakespire/repoforcve/tree/main/RG-EW1200G
CVE ID: CVE-2023-4170 State: PUBLISHED Published: 2023-08-05T18:31:04.271Z Last Updated: 2024-08-02T07:17:12.172Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: DedeBIZ Problem Types: CWE-79 Description: A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-236186 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Addit
to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236186 - https://vuldb.com/?ctiid.236186 - https://github.com/Wkingxc/CVE/blob/master/dedebiz_XSS.pdf
CVE ID: CVE-2023-4171 State: PUBLISHED Published: 2023-08-05T21:00:06.077Z Last Updated: 2024-11-21T15:11:21.977Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Chengdu Products: Flash Flood Disaster Monitoring and Warning System Problem Types: CWE-24 Description: A vulnerability classified as problematic was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This vulnerability affects unknown code of the file \Service\FileDownload.ashx. The manipulation of the argument Files leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-236206 is the ident
attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-236206 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.236206 - https://vuldb.com/?ctiid.236206 - https://github.com/nagenanhai/cve/blob/main/duqu.md
CVE ID: CVE-2023-4172 State: PUBLISHED Published: 2023-08-05T23:00:05.984Z Last Updated: 2024-08-02T07:17:12.163Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Chengdu Products: Flash Flood Disaster Monitoring and Warning System Problem Types: CWE-36 Description: A vulnerability, which was classified as problematic, has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This issue affects some unknown processing of the file \Service\FileHandler.ashx. The manipulation of the argument FileDirectory leads to absolute path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. T
te path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236207. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236207 - https://vuldb.com/?ctiid.236207 - https://github.com/nagenanhai/cve/blob/main/duqu2.md
CVE ID: CVE-2023-4173 State: PUBLISHED Published: 2023-08-06T00:00:07.020Z Last Updated: 2024-08-02T07:17:11.942Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: mooSocial Products: mooStore Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in mooSocial mooStore 3.1.6. Affected is an unknown function of the file /search/index. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236208. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.236208 - https://vuldb.com/?ctiid.236208 - http://packetstor