Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1174 State: PUBLISHED Published: 2023-05-24T00:00:00 Last Updated: 2025-01-16T20:57:36.573Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: minikube Problem Types: CWE-266 Description: This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/kubernetes-security-announce/c/2ZkJFMDTKbM
CVE ID: CVE-2023-1175 State: PUBLISHED Published: 2023-03-04T00:00:00.000Z Last Updated: 2025-11-03T20:35:17.121Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-131 Description: Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e - https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/
sts.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/ - https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html
CVE ID: CVE-2023-1176 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-19T20:58:08.395Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-36 Description: Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/ae92f814-6a08-435c-8445-eec0ef4f1085 - https://github.com/mlflow/mlflow/commit/63ef72aa4334a6473ce7f889573c92fcae0b3c0d
CVE ID: CVE-2023-1177 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-19T20:56:12.814Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-29 Description: Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28 - https://github.com/mlflow/mlflow/pull/7891/commits/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e
CVE ID: CVE-2023-1178 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-02-12T16:24:29.956Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper control of generation of code ('code injection') in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a release containing a ref to another commit. Additional Analyst Notes: - CVE Program Co
s are pulled from a tag or from a release containing a ref to another commit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1778009 - https://gitlab.com/gitlab-org/gitlab/-/issues/381815 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1178.json
CVE ID: CVE-2023-1179 State: PUBLISHED Published: 2023-03-05T09:48:42.798Z Last Updated: 2024-08-02T05:40:58.273Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Computer Parts Sales and Inventory System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument company_name/province/city/phone_number leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222330 is
t is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222330 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222330 - https://vuldb.com/?ctiid.222330 - https://github.com/Amat0eur/MyCve/blob/main/Computer-Parts-Sales-And-Inventory-System-Xss.pdf
CVE ID: CVE-2023-1180 State: PUBLISHED Published: 2023-03-05T09:50:24.242Z Last Updated: 2025-03-05T15:54:41.444Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Health Center Patient Record Management System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file hematology_print.php. The manipulation of the argument hem_id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier
ttack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222331. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222331 - https://vuldb.com/?ctiid.222331 - https://github.com/Yuuuhd/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md
CVE ID: CVE-2023-1181 State: PUBLISHED Published: 2023-03-05T00:00:00.000Z Last Updated: 2025-03-06T16:12:19.254Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L) Vendors: icret Products: icret/easyimages2.0 Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f5cb8816-fc12-4282-9571-81f25670e04a - https://github.com/icret/easyimages2.0/commit/95a6caf1c660a7342a8f11d70c2dbf7ebcbe2966
CVE ID: CVE-2023-1183 State: PUBLISHED Published: 2023-07-10T15:04:30.740Z Last Updated: 2025-02-13T16:39:16.576Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: n/a, Red Hat, Fedora Products: libreoffice, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-20 Description: A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker. Additional Analyst Notes: - CVE Program Container: References: - ht
file whose location was determined by the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-1183 - https://bugzilla.redhat.com/show_bug.cgi?id=2208506 - https://www.libreoffice.org/about-us/security/advisories/cve-2023-1183/ - http://www.openwall.com/lists/oss-security/2023/12/28/4 - http://www.openwall.com/lists/oss-security/2024/01/03/4
CVE ID: CVE-2023-1184 State: PUBLISHED Published: 2023-03-06T07:04:26.820Z Last Updated: 2024-08-02T05:40:59.417Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: ECshop Problem Types: CWE-434 Description: A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionality of the file admin/database.php of the component Backup Database Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222356. Additional Analyst Notes: - CVE Program Container: R
nd may be used. The identifier of this vulnerability is VDB-222356. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222356 - https://vuldb.com/?ctiid.222356 - https://github.com/wjzdalao/ecshop4.1.8/issues/1
CVE ID: CVE-2023-1185 State: PUBLISHED Published: 2023-03-06T07:06:01.813Z Last Updated: 2024-08-02T05:40:59.854Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: ECshop Problem Types: CWE-434 Description: A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222357 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222357 -
d to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222357 - https://vuldb.com/?ctiid.222357 - https://github.com/wjzdalao/ecshop4.1.8/issues/2
CVE ID: CVE-2023-1186 State: PUBLISHED Published: 2023-03-06T07:09:57.318Z Last Updated: 2024-11-25T15:22:56.220Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: FabulaTech Products: Webcam for Remote Desktop Problem Types: CWE-476 Description: A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this v
quirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222358 - https://vuldb.com/?ctiid.222358 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186
CVE ID: CVE-2023-1187 State: PUBLISHED Published: 2023-03-06T07:09:59.304Z Last Updated: 2024-08-02T05:40:58.243Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: FabulaTech Products: Webcam for Remote Desktop Problem Types: CWE-404 Description: A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the library ftwebcam.sys of the component Global Variable Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerabili
local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222359. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222359 - https://vuldb.com/?ctiid.222359 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1187
CVE ID: CVE-2023-1188 State: PUBLISHED Published: 2023-03-06T07:10:01.518Z Last Updated: 2025-03-05T19:24:54.606Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: FabulaTech Products: Webcam for Remote Desktop Problem Types: CWE-404 Description: A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0x222018 in the library ftwebcam.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222360. Additio
he exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222360. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222360 - https://vuldb.com/?ctiid.222360 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1188 - https://drive.google.com/file/d/1_gVQtfbpywhh8Z6g4Y03Qg7UT3Aobz2e/view?usp=sharing
CVE ID: CVE-2023-1189 State: PUBLISHED Published: 2023-03-06T07:11:52.584Z Last Updated: 2025-03-05T19:41:43.433Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: WiseCleaner Products: Wise Folder Hider Problem Types: CWE-404 Description: A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-222361 was assig
be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-222361 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222361 - https://vuldb.com/?ctiid.222361 - https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1189
CVE ID: CVE-2023-1190 State: PUBLISHED Published: 2023-03-06T07:17:50.676Z Last Updated: 2024-08-02T05:40:58.381Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: xiaozhuai Products: imageinfo Problem Types: CWE-120 Description: A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file imageinfo.hpp. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-222362 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Contai
may be used. VDB-222362 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222362 - https://vuldb.com/?ctiid.222362 - https://github.com/xiaozhuai/imageinfo/issues/1 - https://github.com/10cksYiqiyinHangzhouTechnology/imageinfo_poc
CVE ID: CVE-2023-1191 State: PUBLISHED Published: 2023-03-06T07:21:45.248Z Last Updated: 2024-08-02T05:40:58.789Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: fastcms Problem Types: CWE-22 Description: A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifi
use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-222363. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222363 - https://vuldb.com/?ctiid.222363 - https://github.com/my-fastcms/fastcms/issues/1 - https://github.com/ha1yuYiqiyinHangzhouTechn0logy/fastcms/blob/main/README.md
CVE ID: CVE-2023-1192 State: PUBLISHED Published: 2023-11-01T19:01:47.336Z Last Updated: 2025-02-27T20:36:33.776Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-416 Description: A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading
memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-1192 - https://bugzilla.redhat.com/show_bug.cgi?id=2154178 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686f
CVE ID: CVE-2023-1193 State: PUBLISHED Published: 2023-11-01T19:10:14.210Z Last Updated: 2025-02-27T20:36:18.738Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: Kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-416 Description: A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
stem by accessing freed work. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-1193 - https://bugzilla.redhat.com/show_bug.cgi?id=2154177 - https://lkml.kernel.org/linux-cifs/20230401084951.6085-2-linkinjeon@kernel.org/T/
CVE ID: CVE-2023-1194 State: PUBLISHED Published: 2023-11-03T07:41:35.083Z Last Updated: 2025-02-13T16:39:17.173Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-416 Description: An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function
command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-1194 - https://bugzilla.redhat.com/show_bug.cgi?id=2154176 - https://www.spinics.net/lists/stable-commits/msg303065.html - https://security.netapp.com/advisory/ntap-20231221-0006/
CVE ID: CVE-2023-1195 State: PUBLISHED Published: 2023-05-18T00:00:00.000Z Last Updated: 2025-03-18T18:38:15.861Z Vendors: n/a Products: Kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free pointer server->hostname to NULL, leading to an invalid pointer request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/153695d36ead0ccc4d0256953c751cabf673e621
CVE ID: CVE-2023-1196 State: PUBLISHED Published: 2023-05-02T08:39:29.005Z Last Updated: 2025-01-30T14:21:42.963Z Vendors: Unknown Products: Advanced Custom Fields (ACF), Advanced Custom Fields (ACF) Pro Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cf376ca2-92f6-44ff-929a-ace809460a33
Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cf376ca2-92f6-44ff-929a-ace809460a33 - https://wpscan.com/vulnerability/8e5ec88e-0e66-44e4-bbf2-74155d849ede
CVE ID: CVE-2023-1197 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T19:27:56.402Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: uvdesk Products: uvdesk/community-skeleton Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/97d226ea-2cd8-4f4d-9360-aa46c37fdd26 - https://github.com/uvdesk/community-skeleton/commit/6fae9442361c8a216611d3622bec26249a8c48a0
CVE ID: CVE-2023-1198 State: PUBLISHED Published: 2023-03-10T10:54:41.097Z Last Updated: 2025-03-03T20:49:08.235Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Saysis Products: Starcities Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection.This issue affects Starcities: through 1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0140
CVE ID: CVE-2023-1200 State: PUBLISHED Published: 2023-03-06T15:49:43.418Z Last Updated: 2024-08-02T05:40:58.345Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: ehuacui Products: bbs Problem Types: CWE-79 Description: A vulnerability was found in ehuacui bbs. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vul
ious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-222388. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222388 - https://vuldb.com/?ctiid.222388 - https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCB
CVE ID: CVE-2023-1201 State: PUBLISHED Published: 2023-03-06T17:15:00.735Z Last Updated: 2025-03-06T14:53:59.575Z Vendors: Devolutions Products: Devolutions Server Problem Types: n/a Description: Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0005
CVE ID: CVE-2023-1202 State: PUBLISHED Published: 2023-03-23T17:12:47.824Z Last Updated: 2025-02-20T20:54:27.768Z Vendors: Devolutions Products: Remote Desktop Manager Problem Types: n/a Description: Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0008