Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1652 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T16:38:32.638Z Vendors: n/a Products: Linux Kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/cve-2023-1652 - https://security.netapp.com/advisory/ntap-20230511-0006/
CVE ID: CVE-2023-1654 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:30:13.981Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: gpac Products: gpac/gpac Problem Types: CWE-400 Description: Denial of Service in GitHub repository gpac/gpac prior to 2.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/33652b56-128f-41a7-afcc-10641f69ff14 - https://github.com/gpac/gpac/commit/2c055153d401b8c49422971e3a0159869652d3da - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2023-1655 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:29:26.828Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: gpac Products: gpac/gpac Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/05f1d1de-bbfd-43fe-bdf9-7f73419ce7c9 - https://github.com/gpac/gpac/commit/e7f96c2d3774e4ea25f952bcdf55af1dd6e919f4
CVE ID: CVE-2023-1656 State: PUBLISHED Published: 2023-03-29T19:55:13.974Z Last Updated: 2025-04-14T17:04:02.162Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ForgeRock Inc. Products: OpenIDM and Java Remote Connector Server (RCS) Problem Types: CWE-319 Description: Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
): from 1.5.20.9 through 1.5.20.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://backstage.forgerock.com/knowledge/kb/article/a14149722 - https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14
CVE ID: CVE-2023-1659 State: REJECTED Published: 2023-03-27T14:47:13.880Z Last Updated: 2023-03-27T14:49:49.603Z Description: No description available.
CVE ID: CVE-2023-1660 State: PUBLISHED Published: 2023-05-08T13:58:05.324Z Last Updated: 2025-05-05T16:06:29.204Z Vendors: Unknown Products: AI ChatBot Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to Stored XSS due to the lack of escaping when outputting them in the admin dashboard Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1a5cbcfc-fa55-433a-a76b-3881b6c4bea2
CVE ID: CVE-2023-1661 State: PUBLISHED Published: 2023-05-31T03:36:10.338Z Last Updated: 2025-01-13T16:31:10.789Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: trasweb Products: Display post meta, term meta, comment meta, and user meta Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contr
e to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6f90c0d8-ede6-4f24-870f-19e888238e93?source=cve - https://wordpress.org/plugins/display-metadata/#developers
CVE ID: CVE-2023-1663 State: PUBLISHED Published: 2023-03-29T13:16:40.269Z Last Updated: 2025-02-12T16:19:38.925Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Synopsys Products: Coverity Problem Types: CWE-425 Description: Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vulnerability is an insecurely configured servlet mapping for the underlying Apache Tomcat server. As a result, the downloads directory and its contents are accessible. 5.9 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C) Additional Analyst Notes: - CVE Program Container:
ble. 5.9 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2023-1663-Affecting-Coverity-Platform - https://community.synopsys.com/s/article/Mitigation-for-Coverity-Platforms-Exposure-to-CVE-2023-1663
CVE ID: CVE-2023-1664 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T21:34:51.378Z Vendors: n/a Products: Keycloak Problem Types: CWE-295 Description: A flaw was found in Keycloak. This flaw depends on a non-default configuration "Revalidate Client Certificate" to be enabled and the reverse proxy is not validating the certificate before Keycloak. Using this method an attacker may choose the certificate which will be validated by the server. If this happens and the KC_SPI_TRUSTSTORE_FILE_FILE variable is missing/misconfigured, any trustfile may be accepted with the logging information of "Cannot validate client certificate trust: Truststore not available". This may n
ccepted with the logging information of "Cannot validate client certificate trust: Truststore not available". This may not impact availability as the attacker would have no access to the server, but consumer applications Integrity or Confidentiality may be impacted considering a possible access to them. Considering the environment is correctly set to use "Revalidate Client Certificate" this flaw is avoidable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2182196&comment#0
CVE ID: CVE-2023-1665 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T19:06:33.029Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: linagora Products: linagora/twake Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/db8fcbab-6ef0-44ba-b5c6-3b0f17ca22a2 - https://github.com/linagora/twake/commit/599f397561a771251dfc7cafb8cecda5ab22b8b3
CVE ID: CVE-2023-1666 State: PUBLISHED Published: 2023-03-27T21:00:04.519Z Last Updated: 2024-08-02T05:57:24.610Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Automatic Question Paper Generator System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. This vulnerability affects unknown code of the file users/classes/view_class.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of t
The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224104. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224104 - https://vuldb.com/?ctiid.224104 - https://github.com/si-xiao-kai/bug_report/blob/main/SQLi-1.md
CVE ID: CVE-2023-1667 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2024-08-02T05:57:24.326Z Vendors: n/a Products: libssh Problem Types: CWE-476 Description: A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-1667 - https://bugzilla.redhat.com/show_bug.cgi?id=2182199 - http://www.libssh.org/security/advisories/CVE-2023-1667.txt - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27PD44ALQTZXX7K6JAM3BXBUHYA6
://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27PD44ALQTZXX7K6JAM3BXBUHYA6DFFN/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00029.html - https://security.gentoo.org/glsa/202312-05
CVE ID: CVE-2023-1668 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-04-23T16:22:48.998Z Vendors: n/a Products: openvswitch Problem Types: CWE-670 Description: A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow. Additional Analyst Notes: - CVE Program Container: - CISA
IP packets with a != 0 IP protocol that matches this dp flow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2137666 - https://www.openwall.com/lists/oss-security/2023/04/06/1 - https://www.debian.org/security/2023/dsa-5387 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2GUNS3WSJG4TUDKZ5L7FXGJMVOD6EJZ/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00000.html - https://security.gentoo.org/glsa/202311-16
CVE ID: CVE-2023-1669 State: PUBLISHED Published: 2023-05-02T07:04:55.190Z Last Updated: 2025-01-30T14:42:20.073Z Vendors: Unknown Products: SEOPress Problem Types: CWE-502 Deserialization of Untrusted Data Description: The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fb8791f5-2879-431e-9afc-06d5839e4b9d
CVE ID: CVE-2023-1670 State: PUBLISHED Published: 2023-03-30T00:00:00.000Z Last Updated: 2025-02-14T15:41:37.370Z Vendors: n/a Products: Kernel Problem Types: CWE-416 Description: A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz%40163.com/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - https://
ebian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - https://security.netapp.com/advisory/ntap-20230526-0010/
CVE ID: CVE-2023-1671 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-10-21T23:15:21.081Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sophos Products: Sophos Web Appliance Problem Types: n/a Description: A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce - http://packetstormsecurity.com/files/172016/Sophos-Web-Appliance-4.3.10.4-Command-Injection.html
CVE ID: CVE-2023-1672 State: PUBLISHED Published: 2023-07-11T11:47:35.363Z Last Updated: 2025-02-13T16:39:29.669Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a, Red Hat, Fedora Products: tang, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-362 Description: A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-1672 - https://bugzilla.redhat.com/show_bug.cgi?id=2180999 - https://github.com/latchset/tang/commit/8dbbed10870378f1b2c3cf3df2ea7edca7617096 - https://www.openwall.com/lists/oss-security/2023/06/15/1 - https://lists.debian.org/debian-lts-announce/2023/11/msg00004.html
CVE ID: CVE-2023-1673 State: REJECTED Published: N/A Last Updated: 2024-08-20T17:44:19.720Z Description: No description available.
CVE ID: CVE-2023-1674 State: PUBLISHED Published: 2023-03-28T20:31:02.797Z Last Updated: 2024-08-02T05:57:24.670Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: School Registration and Fee System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issue affects some unknown processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this
be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224231. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224231 - https://vuldb.com/?ctiid.224231 - https://github.com/saintone98/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md
CVE ID: CVE-2023-1675 State: PUBLISHED Published: 2023-03-28T21:00:04.724Z Last Updated: 2025-02-11T21:32:19.194Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: School Registration and Fee System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester School Registration and Fee System 1.0. It has been classified as critical. Affected is an unknown function of the file /bilal final/edit_stud.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerab
aunch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224232. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224232 - https://vuldb.com/?ctiid.224232 - https://github.com/saintone98/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-2.md
CVE ID: CVE-2023-1676 State: PUBLISHED Published: 2023-03-28T21:00:06.183Z Last Updated: 2025-02-12T19:33:57.955Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: DriverGenius Problem Types: CWE-119 Description: A vulnerability was found in DriverGenius 9.70.0.346. It has been declared as critical. Affected by this vulnerability is the function 0x9C402088 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224233 was assigned to this vulnerability. Additional Analyst Notes: - C
the public and may be used. The identifier VDB-224233 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224233 - https://vuldb.com/?ctiid.224233 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1676 - https://drive.google.com/file/d/1kYCec3kYCzD9s2Vnclp_aW5jLneWqHC_/view
CVE ID: CVE-2023-1677 State: PUBLISHED Published: 2023-03-28T21:31:02.900Z Last Updated: 2024-08-02T05:57:24.810Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: DriverGenius Problem Types: CWE-404 Description: A vulnerability was found in DriverGenius 9.70.0.346. It has been rated as problematic. Affected by this issue is the function 0x9c40a0c8/0x9c40a0dc/0x9c40a0e0/0x9c40a0d8/0x9c4060d4/0x9c402004/0x9c402088/0x9c40208c/0x9c4060d0/0x9c4060cc/0x9c4060c4/0x9c402084 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has bee
The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-224234 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224234 - https://vuldb.com/?ctiid.224234 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1677 - https://drive.google.com/file/d/1C7afiLbOOLuYZVeeslPW3AdNeOIwUea9/view
CVE ID: CVE-2023-1678 State: PUBLISHED Published: 2023-03-28T22:00:05.144Z Last Updated: 2024-08-02T05:57:24.828Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: DriverGenius Problem Types: CWE-119 Description: A vulnerability classified as critical has been found in DriverGenius 9.70.0.346. This affects the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224235. Additional Analyst Notes
d to the public and may be used. The associated identifier of this vulnerability is VDB-224235. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224235 - https://vuldb.com/?ctiid.224235 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1678 - https://drive.google.com/file/d/1VWI0i6Zq-Fi55kbZI6l3dHCeBq-NOlJc/view
CVE ID: CVE-2023-1679 State: PUBLISHED Published: 2023-03-28T22:00:06.484Z Last Updated: 2024-08-02T05:57:24.510Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: DriverGenius Problem Types: CWE-119 Description: A vulnerability classified as critical was found in DriverGenius 9.70.0.346. This vulnerability affects the function 0x9C406104/0x9C40A108 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224236. Additional Analyst Notes: - CVE Program
the public and may be used. The identifier of this vulnerability is VDB-224236. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224236 - https://vuldb.com/?ctiid.224236 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1679 - https://drive.google.com/file/d/1Iz4VTUUVDveZlgtxN9WkvdygHkD1BUCr/view
CVE ID: CVE-2023-1680 State: PUBLISHED Published: 2023-03-29T14:10:11.259Z Last Updated: 2024-11-22T20:27:21.293Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Xunrui Products: CMS Problem Types: CWE-200 Description: A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown processing of the file /dayrui/My/View/main.html. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224237 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
entifier VDB-224237 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224237 - https://vuldb.com/?ctiid.224237 - https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md
CVE ID: CVE-2023-1681 State: PUBLISHED Published: 2023-03-28T23:00:05.838Z Last Updated: 2024-11-22T20:57:01.436Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Xunrui Products: CMS Problem Types: CWE-200 Description: A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224238 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
he identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224238 - https://vuldb.com/?ctiid.224238 - https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md
CVE ID: CVE-2023-1682 State: PUBLISHED Published: 2023-03-28T23:31:05.404Z Last Updated: 2024-08-02T05:57:24.970Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Xunrui Products: CMS Problem Types: CWE-425 Description: A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224239. Additional Analyst Notes: - CVE Program Container: Reference
associated identifier of this vulnerability is VDB-224239. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224239 - https://vuldb.com/?ctiid.224239 - https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md