Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3607 State: PUBLISHED Published: 2023-07-10T21:00:05.507Z Last Updated: 2024-08-02T07:01:56.692Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: kodbox Problem Types: CWE-78 Description: A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Execute of the file webconsole.php.txt of the component WebConsole Plug-In. The manipulation leads to os command injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-233476. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Add
nerability is VDB-233476. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233476 - https://vuldb.com/?ctiid.233476 - https://github.com/mohdkey/cve/blob/main/kodbox.md
CVE ID: CVE-2023-3608 State: PUBLISHED Published: 2023-07-10T21:31:03.835Z Last Updated: 2024-08-02T07:01:56.817Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Ruijie Products: BCR810W Problem Types: CWE-78 Description: A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233477 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additio
o this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233477 - https://vuldb.com/?ctiid.233477 - https://github.com/cq535454518/cve/blob/main/RG-BCR810W.md
CVE ID: CVE-2023-3609 State: PUBLISHED Published: 2023-07-21T20:47:12.172Z Last Updated: 2025-03-05T18:48:12.763Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability
eference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=04c55383fa5689357bcdd2c8036725a55ed632bc - https://kernel.dance/04c55383fa5689357bcdd2c8036725a55ed632bc - https://security.netapp.com/advisory/ntap-20230818-0005/ - https://www.debian.org/security/2023/dsa-5480 - http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html - https://lists.debian.org
http://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-3610 State: PUBLISHED Published: 2023-07-21T20:48:13.121Z Last Updated: 2025-02-13T16:56:15.002Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered. We recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795. Additional Analyst Notes: - CVE Program Container: References: - ht
ast commit 4bedf9eee016286c835e3d8fa981ddece5338795. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=4bedf9eee016286c835e3d8fa981ddece5338795 - https://kernel.dance/4bedf9eee016286c835e3d8fa981ddece5338795 - https://www.debian.org/security/2023/dsa-5461 - https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html - https://security.netapp.com/advisory/ntap-20230818-0005/
CVE ID: CVE-2023-3611 State: PUBLISHED Published: 2023-07-21T20:49:10.812Z Last Updated: 2025-02-13T16:56:15.625Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-787 Description: An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks. We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrich
commit 3e337087c3b5805fe0b8a46ba622a962880b5d64. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e337087c3b5805fe0b8a46ba622a962880b5d64 - https://kernel.dance/3e337087c3b5805fe0b8a46ba622a962880b5d64 - https://www.debian.org/security/2023/dsa-5480 - https://security.netapp.com/advisory/ntap-20230908-0002/ - https://www.debian.org/security/2023/dsa-5492 - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-3612 State: PUBLISHED Published: 2023-09-11T09:04:09.924Z Last Updated: 2024-09-26T14:32:25.277Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: Govee Products: Govee Home Problem Types: CWE-749 Description: Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sk-cert.sk/threat/sk-cert-bezpecnostne-varovanie-v20230811-10
CVE ID: CVE-2023-3613 State: PUBLISHED Published: 2023-07-17T15:31:23.674Z Last Updated: 2024-10-21T19:39:44.854Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Plugins Problem Types: CWE-863 Description: Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3614 State: PUBLISHED Published: 2023-07-17T15:32:16.646Z Last Updated: 2024-10-21T19:39:59.068Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: Mattermost fails to properly validate a gif image file, allowing an attacker to consume a significant amount of server resources, making the server unresponsive for an extended period of time by linking to specially crafted image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3615 State: PUBLISHED Published: 2023-07-17T15:33:25.752Z Last Updated: 2024-10-30T15:21:49.715Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mattermost Products: Mattermost iOS app Problem Types: CWE-295 Description: Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a network attacker to intercept the WebSockets connection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-3616 State: PUBLISHED Published: 2023-09-05T17:59:11.573Z Last Updated: 2024-09-27T13:29:00.965Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mava Software Products: Hotel Management System Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mava Software Hotel Management System allows SQL Injection.This issue affects Hotel Management System: before 2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0493
CVE ID: CVE-2023-3617 State: PUBLISHED Published: 2023-07-11T15:00:03.716Z Last Updated: 2024-08-02T07:01:57.274Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Best POS Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin_class.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233565 was assigned to this vulnerability. Ad
ploit has been disclosed to the public and may be used. The identifier VDB-233565 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233565 - https://vuldb.com/?ctiid.233565 - https://github.com/movonow/demo/blob/main/kruxton.md
CVE ID: CVE-2023-3618 State: PUBLISHED Published: 2023-07-12T14:06:04.572Z Last Updated: 2025-11-03T20:35:36.763Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: libtiff, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-120 Description: A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.red
of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-3618 - https://bugzilla.redhat.com/show_bug.cgi?id=2215865 - https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html - https://security.netapp.com/advisory/ntap-20230824-0012/ - https://support.apple.com/kb/HT214038 - https://support.apple.com/kb/HT214036 - https://support.apple.com/kb/HT214037
CVE ID: CVE-2023-3619 State: PUBLISHED Published: 2023-07-11T15:31:03.841Z Last Updated: 2024-08-02T07:01:56.627Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file Master.php?f=save_service of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The identifier VDB-233573 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Cont
ted remotely. The identifier VDB-233573 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233573 - https://vuldb.com/?ctiid.233573
CVE ID: CVE-2023-3620 State: PUBLISHED Published: 2023-07-11T14:55:43.561Z Last Updated: 2024-10-30T14:24:01.442Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: amauric Products: amauric/tarteaucitron.js Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/a0fd0671-f051-4d41-8928-9b19819084c9 - https://github.com/amauric/tarteaucitron.js/commit/c4c2fcf2b2212ce968bdcae145bb74283c441e5f
CVE ID: CVE-2023-3621 State: PUBLISHED Published: 2023-07-11T16:00:04.367Z Last Updated: 2024-08-02T07:01:57.089Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: IBOS Products: OA Problem Types: CWE-89 Description: A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is the function createDeleteCommand of the file ?r=article/default/delete of the component Delete Packet. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-233574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did
74 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233574 - https://vuldb.com/?ctiid.233574 - https://github.com/jack-521/cve/blob/main/ibos%20oa.md
CVE ID: CVE-2023-3622 State: PUBLISHED Published: 2023-07-26T14:45:18.257Z Last Updated: 2024-08-02T07:01:56.721Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SolarWinds Products: SolarWinds Platform Problem Types: CWE-287 Description: Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource Additional Analyst Notes: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm - https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-3622
CVE ID: CVE-2023-3623 State: PUBLISHED Published: 2023-07-11T16:31:03.123Z Last Updated: 2024-11-07T17:17:51.988Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Suncreate Products: Mountain Flood Disaster Prevention Monitoring and Early Warning System Problem Types: CWE-434 Description: A vulnerability was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230704. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Duty/AjaxHandle/UploadHandler.ashx of the component Duty Module. The manipulation of the argument Filedata leads to unrestricted upload. The attack may be launched remotely. T
y Module. The manipulation of the argument Filedata leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-233576. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.233576 - https://vuldb.com/?ctiid.233576 - https://github.com/luoshaokai/cve/blob/main/one.md
CVE ID: CVE-2023-3624 State: PUBLISHED Published: 2023-07-11T17:00:04.438Z Last Updated: 2024-08-02T07:01:57.200Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Nesote Products: Inout Blockchain FiatExchanger Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Nesote Inout Blockchain FiatExchanger 3.0. This affects an unknown part of the file /index.php/coins/update_marketboxslider of the component POST Parameter Handler. The manipulation of the argument marketcurrency leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-233577 was assigned to this vulnerability. NOTE: The vendor was contacted early a
he attack remotely. The identifier VDB-233577 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233577 - https://vuldb.com/?ctiid.233577
CVE ID: CVE-2023-3625 State: PUBLISHED Published: 2023-07-11T17:31:03.567Z Last Updated: 2024-08-02T07:01:57.172Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Suncreate Products: Mountain Flood Disaster Prevention Monitoring and Early Warning System Problem Types: CWE-434 Description: A vulnerability classified as critical was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This vulnerability affects unknown code of the file /Duty/AjaxHandle/Write/UploadFile.ashx of the component Duty Write-UploadFile. The manipulation of the argument Filedata leads to unrestricted upload. The attack can be initiated remotely. The expl
. The manipulation of the argument Filedata leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-233578 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233578 - https://vuldb.com/?ctiid.233578 - https://github.com/MoeMion233/cve/blob/main/1.md
CVE ID: CVE-2023-3626 State: PUBLISHED Published: 2023-07-11T18:00:04.259Z Last Updated: 2024-08-02T07:01:57.076Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Suncreate Products: Mountain Flood Disaster Prevention Monitoring and Early Warning System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This issue affects some unknown processing of the file /Duty/AjaxHandle/UpLoadFloodPlanFile.ashx of the component UpLoadFloodPlanFile. The manipulation of the argument Filedata leads to unrestricted upload. The attack may be initiat
t UpLoadFloodPlanFile. The manipulation of the argument Filedata leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233579. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.233579 - https://vuldb.com/?ctiid.233579 - https://github.com/MoeMion233/cve/blob/main/2.md
CVE ID: CVE-2023-3627 State: PUBLISHED Published: 2023-07-11T16:08:59.618Z Last Updated: 2024-10-30T14:22:45.960Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: salesagility Products: salesagility/suitecrm-core Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/558b3dce-db03-47ba-b60b-c6eb578e04f1 - https://github.com/salesagility/suitecrm-core/commit/78285702d76317f081b1fbc59cb2754e93b9a4c3
CVE ID: CVE-2023-3628 State: PUBLISHED Published: 2023-12-18T13:43:07.750Z Last Updated: 2025-11-07T10:41:24.777Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Data Grid 8.4.4, Red Hat JBoss Enterprise Application Platform 6 Problem Types: CWE-304 Description: A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:5396 - https://access.redhat.com/security/c
Program Container: References: - https://access.redhat.com/errata/RHSA-2023:5396 - https://access.redhat.com/security/cve/CVE-2023-3628 - https://bugzilla.redhat.com/show_bug.cgi?id=2217924
CVE ID: CVE-2023-3629 State: PUBLISHED Published: 2023-12-18T13:43:07.770Z Last Updated: 2025-11-07T10:41:28.830Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Data Grid 8.4.4, Red Hat JBoss Enterprise Application Platform 6 Problem Types: CWE-304 Description: A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-20
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:5396 - https://access.redhat.com/security/cve/CVE-2023-3629 - https://bugzilla.redhat.com/show_bug.cgi?id=2217926
CVE ID: CVE-2023-3631 State: PUBLISHED Published: 2023-11-23T09:13:25.667Z Last Updated: 2024-08-02T07:01:57.104Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Medart Health Services Products: Medart Notification Panel Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Medart Health Services Medart Notification Panel allows SQL Injection.This issue affects Medart Notification Panel: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://https://
losure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://https://www.usom.gov.tr/bildirim/tr-23-0656
CVE ID: CVE-2023-3632 State: PUBLISHED Published: 2023-08-09T08:05:57.144Z Last Updated: 2024-10-10T14:55:50.339Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sifir Bes Education and Informatics Products: Kunduz - Homework Helper App Problem Types: CWE-321 Description: Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass.This issue affects Kunduz - Homework Helper App: before 6.2.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0446
CVE ID: CVE-2023-3633 State: PUBLISHED Published: 2023-07-14T19:29:34.392Z Last Updated: 2024-10-30T19:10:05.990Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Bitdefender Products: Engines Problem Types: CWE-787 Description: An out-of-bounds write vulnerability in Bitdefender Engines on Windows causes the engine to crash. This issue affects Bitdefender Engines version 7.94791 and lower. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bitdefender.com/support/security-advisories/out-of-bounds-memory-corruption-issue-in-ceva-engine-va-11010