Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-49402 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/w30e/tenda_w30e_localMsg/w30e_localMsg.md
CVE ID: CVE-2023-49403 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/w30e/tenda_w30e_setFixTools/w30e_setFixTools.md
CVE ID: CVE-2023-49404 State: PUBLISHED Published: 2023-12-07T00:00:00.000Z Last Updated: 2025-05-28T15:13:18.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GD008/TENDA/blob/main/w30e/tenda_w30e_setAdvancedSetList/w30e_setAdvancedSetList.md
CVE ID: CVE-2023-49405 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/w30e/tenda_w30e_UploadCfg/w30e_UploadCfg.md
CVE ID: CVE-2023-49406 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/w30e/tenda_w30e_telnet/w30e_telnet.md
CVE ID: CVE-2023-49408 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/AX3/tenda_AX3_setBlackRule/AX3-setBlackRule.md
CVE ID: CVE-2023-49409 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/AX3/tenda_AX3_telnet/AX3_telnet.md
CVE ID: CVE-2023-49410 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/w30e/tenda_w30e_setIPv6Status/w30e_setIPv6Status.md
CVE ID: CVE-2023-49411 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/TENDA/blob/main/w30e/tenda_w30e_deleteMesh/w30e_deleteMesh.md
CVE ID: CVE-2023-49417 State: PUBLISHED Published: 2023-12-11T00:00:00.000Z Last Updated: 2025-05-27T14:45:48.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cnitlrt/iot_vuln/tree/master/totolink/A7000R/setOpModeCfg
CVE ID: CVE-2023-49418 State: PUBLISHED Published: 2023-12-11T00:00:00 Last Updated: 2024-08-02T21:53:45.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cnitlrt/iot_vuln/tree/master/totolink/A7000R/setIpPortFilterRules
CVE ID: CVE-2023-49424 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-09-13T18:57:02.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX12/SetVirtualServerCfg.md
CVE ID: CVE-2023-49425 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:44.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX12/setMacFilterCfg.md
CVE ID: CVE-2023-49426 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX12/SetStaticRouteCfg.md
CVE ID: CVE-2023-49427 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-16T19:49:30.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in SetNetControlList function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX12/SetNetControlList.md
CVE ID: CVE-2023-49428 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-09-13T18:55:46.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX12/SetOnlineDevName.md
CVE ID: CVE-2023-49429 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-28T17:19:42.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX9/setDeviceInfo.md
CVE ID: CVE-2023-49430 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetStaticRouteCfg.md
CVE ID: CVE-2023-49431 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetOnlineDevName.md
CVE ID: CVE-2023-49432 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-11-26T15:35:40.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX9/setMacFilterCfg.md
CVE ID: CVE-2023-49433 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetVirtualServerCfg.md
CVE ID: CVE-2023-49434 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetNetControlList.md
CVE ID: CVE-2023-49435 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX9 V22.03.01.46 is vulnerable to command injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetNetControlList-3.md
CVE ID: CVE-2023-49436 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX9/SetNetControlList-2.md
CVE ID: CVE-2023-49437 State: PUBLISHED Published: 2023-12-07T00:00:00.000Z Last Updated: 2025-05-28T15:24:55.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ef4tless/vuln/blob/master/iot/AX12/SetNetControlList-3.md
CVE ID: CVE-2023-49438 State: PUBLISHED Published: 2023-12-26T00:00:00.000Z Last Updated: 2025-11-04T18:19:40.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Flask-Middleware/flask-security - https://github.com/brandon-t-elliott/CVE-2023-49438 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HCYH377TPUMUHELPI36PDS2Z
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HCYH377TPUMUHELPI36PDS2ZM4VFIXM/
CVE ID: CVE-2023-49440 State: PUBLISHED Published: 2025-10-27T00:00:00.000Z Last Updated: 2025-10-29T13:41:43.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://ahnlab.com - https://github.com/KernelCipher/CVE-2023-49440-POC
CVE ID: CVE-2023-49441 State: PUBLISHED Published: 2024-06-06T21:20:59.871Z Last Updated: 2025-03-14T15:19:01.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: dnsmasq 2.9 is vulnerable to Integer Overflow via forward_query. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2023q4/017332.html - https://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commit%3Bh=65c2d6afd67a032f45f40d7e4d620f5d73e5f07d
CVE ID: CVE-2023-49442 State: PUBLISHED Published: 2024-01-03T00:00:00.000Z Last Updated: 2025-04-17T18:27:45.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lemono.fun/thoughts/JEECG-RCE.html
CVE ID: CVE-2023-49443 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-02T21:53:45.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/woshinibaba222/DoraCMS-Verification-Code-Reuse
CVE ID: CVE-2023-49444 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-02T21:53:45.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability
CVE ID: CVE-2023-49446 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ysuzhangbin/cms/blob/main/There%20is%20a%20CSRF%20in%20the%20newly%20added%20navigation%20management%20area.md
CVE ID: CVE-2023-49447 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ysuzhangbin/cms/blob/main/CSRF%20exists%20at%20the%20navigation%20management%20modification%20location.md
CVE ID: CVE-2023-49448 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ysuzhangbin/cms/blob/main/CSRF%20exists%20at%20the%20deletion%20point%20of%20navigation%20management.md
CVE ID: CVE-2023-49453 State: PUBLISHED Published: 2024-03-12T00:00:00.000Z Last Updated: 2025-09-29T14:15:56.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nitipoom-jar.github.io/CVE-2023-49453/ - https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-49453
CVE ID: CVE-2023-49460 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-10-09T13:58:47.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decode_uncompressed_image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libheif/issues/1046
CVE ID: CVE-2023-49462 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-11-26T15:24:00.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libheif/issues/1043
CVE ID: CVE-2023-49463 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: libheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag at /libheif/exif.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libheif/issues/1042 - https://github.com/strukturag/libheif
CVE ID: CVE-2023-49464 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::get_luma_bits_per_pixel_from_configuration_unci. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libheif/issues/1044
CVE ID: CVE-2023-49465 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function at motion.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/435 - https://lists.debian.org/debian-lts-announce/2023/12/msg00022.html
CVE ID: CVE-2023-49467 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:53:45.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates function at motion.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/434 - https://lists.debian.org/debian-lts-announce/2023/12/msg00022.html
CVE ID: CVE-2023-49468 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-28T16:22:18.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/432 - https://lists.debian.org/debian-lts-announce/2023/12/msg00022.html
CVE ID: CVE-2023-49469 State: PUBLISHED Published: 2023-12-28T00:00:00 Last Updated: 2024-08-02T21:53:45.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) vulnerability in Shaarli v0.12.2, allows remote attackers to execute arbitrary code via search tag function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shaarli/Shaarli/issues/2038 - https://github.com/shaarli/Shaarli/releases/tag/v0.13.0
CVE ID: CVE-2023-49471 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-03T14:29:12.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zunak/CVE-2023-49471
CVE ID: CVE-2023-49473 State: PUBLISHED Published: 2024-04-30T00:00:00 Last Updated: 2024-08-02T21:53:45.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 and software version V2.0.0 build 6245 is vulnerable to Incorrect Access Control. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hack404-007/cves-info/blob/main/JF6000-exp
CVE ID: CVE-2023-49484 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-02T21:53:45.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the article management department. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jiaofj/cms/blob/main/There%20is%20a%20storage%20based%20XSS%20in%20the%20article%20management%20department.md
CVE ID: CVE-2023-49485 State: PUBLISHED Published: 2023-12-08T00:00:00.000Z Last Updated: 2025-05-27T15:28:35.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20storage%20type%20XSS%20in%20the%20column%20management%20department.md
CVE ID: CVE-2023-49486 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-02T21:53:45.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20model%20management%20department.md
CVE ID: CVE-2023-49487 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-02T21:53:45.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20navigation%20management%20office.md
CVE ID: CVE-2023-49488 State: PUBLISHED Published: 2023-12-11T00:00:00 Last Updated: 2024-08-02T21:53:45.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/1
CVE ID: CVE-2023-49489 State: PUBLISHED Published: 2023-12-19T00:00:00.000Z Last Updated: 2025-05-07T20:27:20.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST parameter at config/i18n/en/main.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kalcaddle/KodExplorer/issues/526
CVE ID: CVE-2023-49490 State: PUBLISHED Published: 2023-12-11T00:00:00 Last Updated: 2024-11-26T17:57:54.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dayrui/xunruicms/issues/2