Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237561 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237561 - https://vuldb.com/?ctiid.237561 - https://github.com/CookedMelon/cve/tree/master/hospital/patient
CVE ID: CVE-2023-4441 State: PUBLISHED Published: 2023-08-20T23:31:04.095Z Last Updated: 2024-08-02T07:24:04.720Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /patient/appointment.php. The manipulation of the argument sheduledate leads to sql injection. The attack can be initiated remotely. VDB-237562 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE
can be initiated remotely. VDB-237562 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237562 - https://vuldb.com/?ctiid.237562
CVE ID: CVE-2023-4442 State: PUBLISHED Published: 2023-08-21T00:00:06.047Z Last Updated: 2024-08-02T07:24:04.666Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been rated as critical. This issue affects some unknown processing of the file \vm\patient\booking-complete.php. The manipulation of the argument userid/apponum/scheduleid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The assoc
injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237563. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237563 - https://vuldb.com/?ctiid.237563 - https://github.com/CookedMelon/cve/tree/master/hospital/patient-book
CVE ID: CVE-2023-4443 State: PUBLISHED Published: 2023-08-21T00:31:04.258Z Last Updated: 2024-08-02T07:24:04.705Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0/5.0.12. Affected is an unknown function of the file vm\doctor\edit-doc.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identi
. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237564. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237564 - https://vuldb.com/?ctiid.237564 - https://github.com/CookedMelon/cve/tree/master/hospital/doctor-edit
CVE ID: CVE-2023-4444 State: PUBLISHED Published: 2023-08-21T00:31:05.331Z Last Updated: 2024-08-02T07:24:04.935Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file vm\patient\edit-user.php. The manipulation of the argument id00/nic/oldemail/email/spec/Tele leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Th
to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237565 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237565 - https://vuldb.com/?ctiid.237565 - https://github.com/CookedMelon/cve/tree/master/hospital/patient-edit
CVE ID: CVE-2023-4445 State: PUBLISHED Published: 2023-08-21T01:00:08.120Z Last Updated: 2024-08-02T07:24:04.695Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Mini-Tmall Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237566 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container:
be used. VDB-237566 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237566 - https://vuldb.com/?ctiid.237566 - https://github.com/FFR66/Mini-Tmall_SQL/blob/main/README.md
CVE ID: CVE-2023-4446 State: PUBLISHED Published: 2023-08-21T01:00:09.670Z Last Updated: 2024-11-21T14:56:01.297Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file template/default/category.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237567. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
lnerability is VDB-237567. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.237567 - https://vuldb.com/?ctiid.237567 - https://github.com/OpenRapid/rapidcms/issues/3
CVE ID: CVE-2023-4447 State: PUBLISHED Published: 2023-08-21T01:31:03.592Z Last Updated: 2024-08-02T07:24:04.674Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-89 Description: A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237568. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id
this vulnerability is VDB-237568. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237568 - https://vuldb.com/?ctiid.237568 - https://github.com/OpenRapid/rapidcms/issues/4
CVE ID: CVE-2023-4448 State: PUBLISHED Published: 2023-08-21T02:00:04.791Z Last Updated: 2024-10-04T18:00:12.455Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-640 Description: A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown processing of the file admin/run-movepass.php. The manipulation of the argument password/password2 leads to weak password recovery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix
used. The identifier of the patch is 4dff387283060961c362d50105ff8da8ea40bcbe. It is recommended to apply a patch to fix this issue. The identifier VDB-237569 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.237569 - https://vuldb.com/?ctiid.237569 - https://github.com/OpenRapid/rapidcms/issues/5 - https://github.com/OpenRapid/rapidcms/commit/4dff387283060961c362d50105ff8da8ea40bcbe#diff-fc57d4c69cf5912c6edb5233c6df069a91106ebd481c115faf1ea124478b26d0
CVE ID: CVE-2023-4449 State: PUBLISHED Published: 2023-08-21T02:00:06.150Z Last Updated: 2024-08-02T07:24:05.075Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Free and Open Source Inventory Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php?page=member. The manipulation of the argument columns[0][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237570 is the identifier ass
unch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237570 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237570 - https://vuldb.com/?ctiid.237570 - https://github.com/Jacky-Y/vuls/blob/main/README.md
CVE ID: CVE-2023-4450 State: PUBLISHED Published: 2023-08-21T02:31:03.644Z Last Updated: 2025-07-02T14:52:31.798Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: jeecgboot Products: JimuReport Problem Types: CWE-74 Description: A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identi
version 1.6.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-237571. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.237571 - https://vuldb.com/?ctiid.237571 - https://github.com/keecth/bug/blob/main/jimureport%20ssti(RCE).md
CVE ID: CVE-2023-4451 State: PUBLISHED Published: 2023-08-20T14:04:35.553Z Last Updated: 2024-10-02T15:17:48.851Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/4e111c3e-6cf3-4b4c-b3c1-a540bf30f8fa - https://github.com/cockpit-hq/cockpit/commit/30609466c817e39f9de1871559603e93cd4d0d0c
CVE ID: CVE-2023-4452 State: PUBLISHED Published: 2023-11-01T14:24:05.658Z Last Updated: 2024-09-06T18:51:24.564Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Moxa Products: EDR-810 Series , EDR G902 Series , EDR G903 Series Problem Types: CWE-120 Description: A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/sup
t. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability
CVE ID: CVE-2023-4453 State: PUBLISHED Published: 2023-08-21T09:22:03.718Z Last Updated: 2024-10-03T14:06:28.730Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/245a8785-0fc0-4561-b181-fa20f869d993 - https://github.com/pimcore/pimcore/commit/234c0c02ea7502071b00ab673fbe4a6ac253080e
CVE ID: CVE-2023-4454 State: PUBLISHED Published: 2023-08-21T09:26:54.715Z Last Updated: 2024-10-03T14:05:10.524Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: wallabag Products: wallabag/wallabag Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/4ee0ef74-e4d4-46e7-a05c-076bce522299 - https://github.com/wallabag/wallabag/commit/78b0b55c40511e1f22d5bbb4897aa10fca68441c
CVE ID: CVE-2023-4455 State: PUBLISHED Published: 2023-08-21T09:27:12.072Z Last Updated: 2024-10-03T14:03:58.869Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: wallabag Products: wallabag/wallabag Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/5ab1b206-5fe8-4737-b275-d705e76f193a - https://github.com/wallabag/wallabag/commit/ffcc5c9062fcc8cd922d7d6d65edbe5efae96806
CVE ID: CVE-2023-4456 State: PUBLISHED Published: 2023-08-21T15:19:22.208Z Last Updated: 2025-11-20T18:27:42.202Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: RHOL-5.5-RHEL-8, RHOL-5.6-RHEL-8, RHOL-5.7-RHEL-8 Problem Types: CWE-1220 Description: A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user with a token valid for one action to execute other actions as long as the authorization allowing the original action is still cached. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA
nal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:4933 - https://access.redhat.com/errata/RHSA-2023:5095 - https://access.redhat.com/errata/RHSA-2023:5096 - https://access.redhat.com/security/cve/CVE-2023-4456 - https://bugzilla.redhat.com/show_bug.cgi?id=2233087
CVE ID: CVE-2023-4457 State: PUBLISHED Published: 2023-10-16T09:45:46.131Z Last Updated: 2024-09-16T16:38:55.837Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Grafana Products: google-sheets-datasource Problem Types: CWE-209 Description: Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, versions 0.9.0 to 1.2.2 are vulnerable to an information disclosure vulnerability. The plugin did not properly sanitize error messages, making it potentially expose the Google Sheet API-key that is configured for the data source. This vulnerability was fixed in version 1.2.2. Additional Analyst Notes: - C
key that is configured for the data source. This vulnerability was fixed in version 1.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2023-4457/
CVE ID: CVE-2023-4458 State: PUBLISHED Published: 2024-11-14T12:09:13.182Z Last Updated: 2024-11-14T19:33:07.493Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-125 Description: A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems w
ffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-4458 - https://bugzilla.redhat.com/show_bug.cgi?id=2325516 - https://www.zerodayinitiative.com/advisories/ZDI-24-590/
CVE ID: CVE-2023-4459 State: PUBLISHED Published: 2023-08-21T18:49:13.172Z Last Updated: 2025-11-15T08:17:03.994Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 9.0 Extended Update Suppor
SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup. Additional Analyst Notes: - CVE Program Container: References: - htt
rvice due to a missing sanity check during cleanup. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:0412 - https://access.redhat.com/errata/RHSA-2024:1250 - https://access.redhat.com/errata/RHSA-2024:1306 - https://access.redhat.com/errata/RHSA-2024:1367 - https://access.redhat.com/errata/RHSA-2024:1382 - https://access.redhat.com/errata/RHSA-2024:2006 - https://access.redhat.com/errata/RHSA-2024:2008 - https://access.redhat.com/security/cve/CVE-2023-4459 - https://bugzilla.redhat.com/show_bug.cgi?id=2219268 - https://github.com/torvalds/linux/commit/edf410cb74dc612fd47ef5be319c5a0bcd6e6ccd
CVE ID: CVE-2023-4460 State: PUBLISHED Published: 2023-12-04T21:28:50.774Z Last Updated: 2024-10-01T15:48:08.232Z Vendors: Unknown Products: Uploading SVG, WEBP and ICO files Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/82f8d425-449a-471f-94df-8439924fd628
CVE ID: CVE-2023-4462 State: PUBLISHED Published: 2023-12-29T09:31:03.494Z Last Updated: 2024-08-02T07:31:05.383Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Poly Products: Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250, VVX 300, VVX 301, VVX 310, VVX 311, VVX 350, VVX 400, VVX 401, VVX 410, VVX 411, VVX 450, VVX 500, VVX 501, VVX 600, VVX 601 Problem Types: CWE-330 Description: A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, T
CWE-330 Description: A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250, VVX 300, VVX 301, VVX 310, VVX 311, VVX 350, VVX 400, VVX 401, VVX 410, VVX 411, VVX 450, VVX 500, VVX 501, VVX 600 and VVX 601. This affects an unknown part of the component Web Configuration Application. The manipulation leads to insufficiently random values. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told t
It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249255. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249255 - https://vuldb.com/?ctiid.249255 - https://modzero.com/en/advisories/mz-23-01-poly-voip/ - https://support.hp.com/us-en/document/ish_9929296-9929329-16/hpsbpy03896 - https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices - https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html
CVE ID: CVE-2023-4463 State: PUBLISHED Published: 2023-12-29T09:37:55.980Z Last Updated: 2024-08-02T07:31:05.440Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Poly Products: CCX 400, CCX 600, Trio 8800, Trio C60 Problem Types: CWE-404 Description: A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249256. Additional Anal
it has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249256. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.249256 - https://vuldb.com/?ctiid.249256 - https://modzero.com/en/advisories/mz-23-01-poly-voip/ - https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices - https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html
CVE ID: CVE-2023-4464 State: PUBLISHED Published: 2023-12-29T09:37:57.839Z Last Updated: 2024-08-02T07:31:05.501Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: Poly Products: Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250, VVX 300, VVX 301, VVX 310, VVX 311, VVX 350, VVX 400, VVX 401, VVX 410, VVX 411, VVX 450, VVX 500, VVX 501, VVX 600, VVX 601 Problem Types: CWE-78 Description: A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, C
: A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250, VVX 300, VVX 301, VVX 310, VVX 311, VVX 350, VVX 400, VVX 401, VVX 410, VVX 411, VVX 450, VVX 500, VVX 501, VVX 600 and VVX 601. This issue affects some unknown processing of the component Diagnostic Telnet Mode. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade th