Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-39714 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T14:27:08.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/ - https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.g
/www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html - https://gist.github.com/Arajawat007/141e68161014e832e30d39b1979a8a6c#file-cve-2023-39714
CVE ID: CVE-2023-39726 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-10T16:15:18.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dgl.cx/2023/09/ansi-terminal-security#mintty-osc50
CVE ID: CVE-2023-39731 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-13T14:45:41.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39731.md - https://liff.line.me/1657662489-pwEQNzJ4
CVE ID: CVE-2023-39732 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:33:38.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39732.md - https://liff.line.me/1657574837-elb6bNQj
CVE ID: CVE-2023-39733 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:29:53.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39733.md - https://liff.line.me/1656987103-bk5k9PO4
CVE ID: CVE-2023-39734 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:27:20.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39734.md - https://liff.line.me/1660679145-eMKgg4rJ
CVE ID: CVE-2023-39735 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-12T15:33:13.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39735.md - https://liff.line.me/1657409177-MkPLqO5D
CVE ID: CVE-2023-39736 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-12T15:40:18.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39736.md - https://liff.line.me/1657606123-4Kp0xVrP
CVE ID: CVE-2023-39737 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-12T15:50:23.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39737.md - https://liff.line.me/1657535522-JD5Q5Yp1
CVE ID: CVE-2023-39739 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-12T15:51:28.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39739.md - https://liff.line.me/1656985266-EmlxqQQx
CVE ID: CVE-2023-39740 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:25:14.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39740.md - https://liff.line.me/1657597257-0ozj8DwJ
CVE ID: CVE-2023-39741 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T18:17:07.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ckolivas/lrzip/issues/246 - https://github.com/huanglei3/lrzip_poc/tree/main/lrzip_heap_overflow - https://gist.github.com/huanglei3/ec9090096aa92445cf0a8baa8e929084
CVE ID: CVE-2023-39742 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T16:35:30.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/giflib/bugs/166/ - https://gist.github.com/huanglei3/ec9090096aa92445cf0a8baa8e929084 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O4RLSFGPBPR3FMIUJCWPGVIYIU35YGQX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5WO6WL2
VIYIU35YGQX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5WO6WL2TCGO6T4VKGACDIVSZI74WJAU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPNBOB65TEA4ZEPLVENI26BY4LEX7TEF/
CVE ID: CVE-2023-39743 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T18:14:31.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3_decode_block src/libbz3.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huanglei3/lrzip-next-poc/tree/main - https://github.com/pete4abw/lrzip-next/issues/132 - https://gist.github.com/huanglei3/ec9090096aa92445cf0a8baa8e929084
CVE ID: CVE-2023-39745 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-07T16:38:53.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-b
/16/TP-Link%20WR940N%20WR941ND%20WR841N%20wireless%20router%20userRpmAccessCtrlAccessRulesRpm%20buffer%20read%20out-of-bounds%20vulnerability.md
CVE ID: CVE-2023-39747 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-07T16:34:06.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/17/TP-Link%20WR841N%20wireless%20router%20WlanSecurityRpm%20Stack%20Overflow%20vulnerability.md
CVE ID: CVE-2023-39748 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-04T18:07:41.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service (DoS) via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/19/TL_WR1041N_NetworkCfgRpm_denial_of_service_vulnerability.md
CVE ID: CVE-2023-39749 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-07T16:02:28.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/a101e-IoTvul/iotvul/blob/main/d-link/2/D-Link%20DAP-2660%20adv_resource.md
CVE ID: CVE-2023-39750 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-07T15:59:05.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/a101e-IoTvul/iotvul/blob/main/d-link/1/D-Link%20DAP-2660%20bsc_ipv6.md
CVE ID: CVE-2023-39751 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-07T15:52:38.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR941ND V6 were discovered to contain a buffer overflow via the pSize parameter at /userRpm/PingIframeRpm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/20/WR941ND_userRpm_PingIframeRpm_buffer_write_out-of-bounds_vulnerability.md
CVE ID: CVE-2023-39776 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T19:45:34.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/ticket-support-script - https://medium.com/%40milfortutz/multiple-vulnerabilities-in-phpjabbers-part-2-4fa5e2ccfe2e
CVE ID: CVE-2023-39777 State: PUBLISHED Published: 2023-09-16T00:00:00 Last Updated: 2024-09-25T18:53:27.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/GiongfNef/8fe658dce4c7fcf3a7b4e6387e50141c
CVE ID: CVE-2023-39780 State: PUBLISHED Published: 2023-09-11T00:00:00.000Z Last Updated: 2025-10-21T23:05:39.058Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: RT-AX55 Problem Types: CWE-78 Description: On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the similar "check token module" issue, see CVE-2023-41347; and for the similar "code-authentication module" issue, see CVE-2023-41348. Additional Anal
" issue, see CVE-2023-41347; and for the similar "code-authentication module" issue, see CVE-2023-41348. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/1/EN.md - https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/2/EN.md - https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/3/EN.md - https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/4/EN.md - https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/5/EN.md - https://github.com/D2y6p/CVE/blob/main/asus/CVE-2023-39780/6/EN.md
CVE ID: CVE-2023-39784 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-04T20:13:34.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tenda.com - https://github.com/Xunflash/IOT/tree/main/Tenda_AC8_V4
CVE ID: CVE-2023-39785 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-04T19:22:14.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tenda.com - https://github.com/Xunflash/IOT/tree/main/Tenda_AC8_V4/2
CVE ID: CVE-2023-39786 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-04T19:18:42.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tenda.com - https://github.com/Xunflash/IOT/tree/main/Tenda_AC8_V4/3
CVE ID: CVE-2023-39796 State: PUBLISHED Published: 2023-11-10T00:00:00 Last Updated: 2024-09-03T17:46:14.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WBCE/WBCE_CMS/releases/tag/1.6.1 - https://forum.wbce.org/viewtopic.php?pid=42046#p42046 - https://pastebin.com/PBw5AvGp
CVE ID: CVE-2023-39801 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:32:34.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service (DoS) via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zj3t/Automotive-vulnerabilities/blob/main/RENAULT/ZOE_EV_2021/Vuln%232/README.md
CVE ID: CVE-2023-39804 State: PUBLISHED Published: 2024-03-27T00:00:00.000Z Last Updated: 2025-11-04T18:16:37.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.savannah.gnu.org/cgit/tar.git/commit/?id=a339f05cd269013fa133d2f148d73f6f7d4247e4 - https://git.savannah.gnu.org/cgit/tar.git/tree/src/xheader.c?h=release_1_34#n1723 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1058079
CVE ID: CVE-2023-39805 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T19:44:07.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://icms.com - http://icmsdev.com - https://gist.github.com/ChubbyZ/3ad434bd5fc2ab1242dd32500384cfb5
CVE ID: CVE-2023-39806 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T19:42:16.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://icms.com - http://icmsdev.com - https://gist.github.com/ChubbyZ/27fa6f43699c9964ddfa701614fc4d5e
CVE ID: CVE-2023-39807 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-07T15:49:38.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ibsg.com - http://nvkinter.com
CVE ID: CVE-2023-39808 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-07T15:49:01.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password which allows attackers to login with root privileges via the SSH service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ibsg.com - http://nvkinter.com
CVE ID: CVE-2023-39809 State: PUBLISHED Published: 2023-08-21T00:00:00 Last Updated: 2024-10-03T20:34:59.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a command injection vulnerability via the system_hostname parameter at /manage/network-basic.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ibsg.com - http://nvkinter.com
CVE ID: CVE-2023-39810 State: PUBLISHED Published: 2023-08-28T00:00:00.000Z Last Updated: 2025-04-24T20:03:22.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://busybox.com - https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability/
CVE ID: CVE-2023-39814 State: REJECTED Published: N/A Last Updated: 2023-10-24T02:31:47.510616 Description: No description available.
CVE ID: CVE-2023-39815 State: REJECTED Published: N/A Last Updated: 2023-10-24T02:23:41.918317 Description: No description available.
CVE ID: CVE-2023-39816 State: REJECTED Published: N/A Last Updated: 2023-10-24T02:22:41.637348 Description: No description available.
CVE ID: CVE-2023-39817 State: REJECTED Published: N/A Last Updated: 2023-10-24T02:20:24.333233 Description: No description available.
CVE ID: CVE-2023-39827 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T15:51:41.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/formAddMacfilterRule
CVE ID: CVE-2023-39828 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T15:07:39.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/formWifiBasicSet
CVE ID: CVE-2023-39829 State: PUBLISHED Published: 2023-08-14T00:00:00 Last Updated: 2024-10-09T15:06:32.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lst-oss/Vulnerability/tree/main/Tenda/A18/fromSetWirelessRepeat
CVE ID: CVE-2023-39834 State: PUBLISHED Published: 2023-08-24T00:00:00 Last Updated: 2024-10-03T13:30:45.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Pbootcms/Pbootcms/issues/8
CVE ID: CVE-2023-39841 State: PUBLISHED Published: 2023-08-15T00:00:00 Last Updated: 2024-10-08T20:25:29.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing encryption in the RFID tag of Etekcity 3-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ashallen.net/smart-security-device-rfid-vulnerability-disclosure
CVE ID: CVE-2023-39842 State: PUBLISHED Published: 2023-08-15T00:00:00 Last Updated: 2024-10-08T20:24:24.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing encryption in the RFID tag of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ashallen.net/smart-security-device-rfid-vulnerability-disclosure
CVE ID: CVE-2023-39843 State: PUBLISHED Published: 2023-08-15T00:00:00 Last Updated: 2024-10-08T20:23:22.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing encryption in the RFID tag of Suleve 5-in-1 Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ashallen.net/smart-security-device-rfid-vulnerability-disclosure
CVE ID: CVE-2023-39846 State: PUBLISHED Published: 2023-08-16T00:00:00 Last Updated: 2024-10-08T19:59:43.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://abyssaler.github.io/post/konga%20Unauthorized%20access