Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37635 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-11T19:52:39.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-37635-login-bruteforce/
CVE ID: CVE-2023-37636 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-12T15:43:21.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in UVDesk Community Skeleton v1.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field when creating a ticket. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-37636-stored-cross-site-scripting/
CVE ID: CVE-2023-37637 State: REJECTED Published: N/A Last Updated: 2023-10-12T17:21:42.030575 Description: No description available.
CVE ID: CVE-2023-37644 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-03T14:26:11.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/202
CVE ID: CVE-2023-37645 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-24T19:45:53.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/50
CVE ID: CVE-2023-37646 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-11T13:55:10.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to execute a directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://bitberry.com - https://gist.github.com/Decamark/868e88aa6aae6b8f4a1dc1991efb83ca
CVE ID: CVE-2023-37647 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T18:03:32.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://semcms.com - https://www.sem-cms.cn/ - https://gitee.com/ants12/sem-cms_-shop_210918_v1.5-sql-injection-exists-s/tree/master/
CVE ID: CVE-2023-37649 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-24T19:45:21.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ghostccamm.com/blog/multi_cockpit_vulns/ - https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.6.0
CVE ID: CVE-2023-37650 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-24T19:39:08.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ghostccamm.com/blog/multi_cockpit_vulns/ - https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.6.0
CVE ID: CVE-2023-37656 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T18:21:03.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mizhexiaoxiao/WebsiteGuide/issues/12
CVE ID: CVE-2023-37657 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T15:08:26.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tznb1/TwoNav/issues/3
CVE ID: CVE-2023-37658 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T15:03:15.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img, but without strictly check file suffix at /server/fast.py -> ApiUploadHandler.post causes stored XSS Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/psoho/fast-poster/issues/13
CVE ID: CVE-2023-37659 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T15:02:36.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/refraction-ray/xalpha/issues/175
CVE ID: CVE-2023-37677 State: PUBLISHED Published: 2023-07-25T00:00:00 Last Updated: 2024-10-23T19:55:56.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kliqqi-CMS/Kliqqi-CMS/issues/264
CVE ID: CVE-2023-37679 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-08-02T17:16:30.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server. Additional Analyst Notes: - CVE Program Container: References: - http://mirth.com - http://nextgen.com - https://www.ihteam.net/advisory/mirth-connect - http://packetstormsecurity.com/files/176920/Mirth-Connect-4.4.0-Remote-Command-Execution.html
CVE ID: CVE-2023-37682 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:29:09.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/deductScores.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15910/judging-management-system-using-php-and-mysql-free-source-code.html - https://github.com/rt122001/CVES/blob/main/CVE-2023-37682.txt
CVE ID: CVE-2023-37683 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:25:24.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://online.com - https://github.com/rt122001/CVES/blob/main/CVE-2023-37683.txt
CVE ID: CVE-2023-37684 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:24:04.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Admin portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://online.com - https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql/ - https://github.com/rt122001/CVES/blob/main/CVE-2023-37684.txt
CVE ID: CVE-2023-37685 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:21:15.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://online.com - https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql/ - https://github.com/rt122001/CVES/blob/main/CVE-2023-37685.txt
CVE ID: CVE-2023-37686 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:09:36.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://online.com - https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql/ - https://github.com/rt122001/CVES/blob/main/CVE-2023-37686.txt
CVE ID: CVE-2023-37687 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:08:58.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in the Admin portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://online.com - https://github.com/rt122001/CVES/blob/main/CVE-2023-37687.txt
CVE ID: CVE-2023-37688 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:08:11.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - https://phpgurukul.com/maid-hiring-management-system-using-php-and-mysql/ - http://maid.com - https://github.com/rt122001/CVES/blob/main/CVE-2023-37688.txt
CVE ID: CVE-2023-37689 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:07:09.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - https://phpgurukul.com/maid-hiring-management-system-using-php-and-mysql/ - http://maid.com - https://github.com/rt122001/CVES/blob/main/CVE-2023-37689.txt
CVE ID: CVE-2023-37690 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T20:05:14.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Search Maid page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - https://phpgurukul.com/maid-hiring-management-system-using-php-and-mysql/ - http://maid.com - https://github.com/rt122001/CVES/blob/main/CVE-2023-37690.txt
CVE ID: CVE-2023-37692 State: PUBLISHED Published: 2023-07-26T00:00:00 Last Updated: 2024-10-23T15:43:34.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://okankurtulus.com.tr/2023/07/24/october-cms-v3-4-4-stored-cross-site-scripting-xss-authenticated/
CVE ID: CVE-2023-37700 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T19:26:01.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6905
CVE ID: CVE-2023-37701 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T19:24:46.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6908
CVE ID: CVE-2023-37702 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T19:18:25.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6801
CVE ID: CVE-2023-37703 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T14:31:17.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6907
CVE ID: CVE-2023-37704 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T19:17:26.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6901
CVE ID: CVE-2023-37705 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T14:27:19.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromAddressNat function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6902
CVE ID: CVE-2023-37706 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T14:37:07.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the entrys parameter in the fromAddressNat function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6903
CVE ID: CVE-2023-37707 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T14:35:26.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/6904
CVE ID: CVE-2023-37710 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T14:34:39.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the wpapsk_crypto parameter in the fromSetWirelessRepeat function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/fromSetWirelessRepeat
CVE ID: CVE-2023-37711 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-11-12T14:33:31.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/saveParentControlInfo
CVE ID: CVE-2023-37712 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2025-01-06T17:04:54.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC1206 V15.03.06.23, F1202 V1.2.0.20(408), and FH1202 V1.2.0.20(408) were discovered to contain a stack overflow in the page parameter in the fromSetIpBind function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/tree/main/tenda/fromSetIpBind
CVE ID: CVE-2023-37714 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:47:50.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromRouteStatic/report.md
CVE ID: CVE-2023-37715 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:45:50.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtForm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fmL7ProtForm/reprot.md
CVE ID: CVE-2023-37716 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:44:13.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromNatStaticSetting/report.md
CVE ID: CVE-2023-37717 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:39:40.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromDhcpListClient/repot.md
CVE ID: CVE-2023-37718 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T18:45:33.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeClientFilter/report.md
CVE ID: CVE-2023-37719 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T18:40:04.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromP2pListFilter/report.md
CVE ID: CVE-2023-37721 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T18:36:46.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeMacFilter/report.md
CVE ID: CVE-2023-37722 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T18:35:06.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromSafeUrlFilter/report.md
CVE ID: CVE-2023-37723 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T19:14:20.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tenda/fromqossetting/report.md
CVE ID: CVE-2023-37728 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-24T20:34:32.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://icewarp.com - http://icearp.com - https://medium.com/%40ayush.engr29/cve-2023-37728-6dfb7586311
CVE ID: CVE-2023-37732 State: PUBLISHED Published: 2023-07-26T00:00:00 Last Updated: 2024-10-23T15:42:57.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/233 - https://gist.github.com/ChanStormstout/02eea9cf5c002b42b2ff3de5ca939520
CVE ID: CVE-2023-37733 State: PUBLISHED Published: 2023-07-19T00:00:00 Last Updated: 2024-10-28T15:17:53.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted HTML file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://v40.com - https://github.com/TDuckCloud/tduck-platform - https://github.com/TDuckCloud/tduck-platform/issues/17
CVE ID: CVE-2023-37734 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:32:38.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/10374 - https://medium.com/%40jraiv02/cve-2023-37734-buffer-overflow-in-mp3-audio-converter-318fd8271911
CVE ID: CVE-2023-37739 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-26T13:46:35.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: i-doit Pro v25 and below was discovered to be vulnerable to path traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leekenghwa/CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below/blob/main/README.md - https://medium.com/%40ray.999/i-doit-pro-v25-path-traversal-cve-2023-37739-4ebb695664bb