Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37742 State: PUBLISHED Published: 2023-07-21T00:00:00 Last Updated: 2024-10-24T14:43:24.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://webboss.feedbear.com/updates - https://webboss.io/page/bughunter-acknowledgments.html - https://www.realinfosec.net/advisories/WEBBOSS-XSS-2022-0xd3fcf.html
CVE ID: CVE-2023-37743 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-08-02T17:23:27.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/teacher-subject-allocation-system-using-php-and-mysql/
CVE ID: CVE-2023-37744 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-11-05T16:41:11.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-booking-request.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/maid-hiring-management-system-using-php-and-mysql/
CVE ID: CVE-2023-37745 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-11-05T15:47:46.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/maid-hiring-management-system-using-php-and-mysql/
CVE ID: CVE-2023-37746 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-11-05T15:44:37.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/maid-hiring-management-system-using-php-and-mysql/
CVE ID: CVE-2023-37748 State: PUBLISHED Published: 2023-07-19T00:00:00 Last Updated: 2024-10-28T15:17:10.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/miniupnp/ngiflib/issues/25 - https://github.com/miniupnp/ngiflib/
CVE ID: CVE-2023-37749 State: PUBLISHED Published: 2025-10-27T00:00:00.000Z Last Updated: 2025-10-27T19:50:47.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://app.hubspot.com/api/external-options/v2/pagedFetch/0-1/OWNER?useIndexOffset=true&portalId=22152277&clienttimeout=14000&hs_static_app=settings-ui-users&hs_static_app_version=1.43001&limit=200&q=&offset=0&includeDeleted=true - https://owasp.org/Top10/A01_2021-Broken_Access_Control/ - https://gist.gith
&limit=200&q=&offset=0&includeDeleted=true - https://owasp.org/Top10/A01_2021-Broken_Access_Control/ - https://gist.github.com/0xDBJ/28072f7eea42571d5b4ebaabdcb21cce
CVE ID: CVE-2023-37754 State: PUBLISHED Published: 2023-07-28T00:00:00 Last Updated: 2024-10-23T12:58:35.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PowerJob/PowerJob/ - https://github.com/PowerJob/PowerJob/issues/675 - https://novysodope.github.io/2023/07/02/100/
CVE ID: CVE-2023-37755 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-26T13:44:54.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. Unauthenticated attackers can exploit this vulnerability to obtain Administrator privileges, resulting in them being able to perform arbitrary system operations or cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leekenghwa/C
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leekenghwa/CVE-2023-37755---Hardcoded-Admin-Credential-in-i-doit-Pro-25-and-below/blob/main/README.md - https://medium.com/%40ray.999/d7a54030e055 - https://medium.com/%40ray.999/i-doit-v25-and-below-incorrect-access-control-issue-cve-2023-37755-d7a54030e055
CVE ID: CVE-2023-37756 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T20:32:17.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. Attackers are able to easily guess users' passwords via a bruteforce attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/leekenghwa/CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below/blob/main/README.md - https://medium.com/%40ray.999/idoit-pro-v25-and-below-weak-password-add-on-upload-to-rce-cve-2023-37756
main/README.md - https://medium.com/%40ray.999/idoit-pro-v25-and-below-weak-password-add-on-upload-to-rce-cve-2023-37756-fa1b18433ca3
CVE ID: CVE-2023-37758 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T16:32:47.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://support.dlink.ca/productinfo.aspx?m=dir-815 - https://hackmd.io/%40pSgS7xsnS5a4K7Y0yiB43g/rJr8oNn_n
CVE ID: CVE-2023-37759 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T18:08:51.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin account via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codecanyon.net/item/crypto-currency-tracker-prices-charts-news-icos-info-and-more/21588008 - https://tregix.com/ - https://packetstormsecurity.com/files/174240/Crypto-Currency-Tracker-CCT-9.5-Add-Administrator.html
CVE ID: CVE-2023-37765 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T15:02:05.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2515
CVE ID: CVE-2023-37766 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T15:01:00.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2516
CVE ID: CVE-2023-37767 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-14T18:57:47.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2514
CVE ID: CVE-2023-37769 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-30T15:25:35.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/pixman/pixman/-/issues/76
CVE ID: CVE-2023-37770 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-30T15:24:45.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: faust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared::print() at /boxes/ppbox.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/grame-cncm/faust/issues/922
CVE ID: CVE-2023-37771 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T18:01:05.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anky-123/CVE-2023-37771/blob/main/CVE
CVE ID: CVE-2023-37772 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-17T20:22:58.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/ - http://phpgurukul.com/shopping-portal-free-download/ - https://github.com/anky-123/CVE-2023-37772/blob/main/CVE-2
CVE ID: CVE-2023-37777 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-31T19:20:26.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Synnefo Internet Management Software (IMS) version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation could lead to unauthorized access to database records with DB administrator privileges which can be leveraged to escalate privileges further and execute arbitrary OS commands. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
o escalate privileges further and execute arbitrary OS commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://synnefoims.com/ - https://infosecwriteups.com/how-i-discovered-a-critical-vulnerability-in-an-internet-service-providers-software-56c6cc00f338
CVE ID: CVE-2023-37781 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-30T15:09:25.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/emqx/issues/10419
CVE ID: CVE-2023-37785 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T16:08:19.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the smile_code parameter of the component /editprofile.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CrownZTX/cve-description
CVE ID: CVE-2023-37786 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T19:32:52.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Mail Settings[backend], Mail Settings[host], Mail Settings[port] and Mail Settings[auth] parameters of the /admin/configuration.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CrownZTX/reflectedxss1
CVE ID: CVE-2023-37787 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T20:27:50.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Rule and Route parameters of /admin/router.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/CrownZTX/storedXSS
CVE ID: CVE-2023-37788 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T15:39:57.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/elazarl/goproxy - https://github.com/elazarl/goproxy/issues/502
CVE ID: CVE-2023-37790 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-04T15:19:59.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/173508/Clarity-PPM-14.3.0.298-Cross-Site-Scripting.html
CVE ID: CVE-2023-37791 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-31T15:11:19.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-619L v2.04(TW) was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/naihsin/IoT/tree/main/D-Link/DIR-619L/overflow
CVE ID: CVE-2023-37793 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T19:11:47.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade_filter.asp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PwnYouLin/IOT_vul/blob/main/wayos/2/readme.md
CVE ID: CVE-2023-37794 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-31T16:24:03.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: WAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the component /upgrade_filter.asp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PwnYouLin/IOT_vul/tree/main/wayos/1
CVE ID: CVE-2023-37798 State: PUBLISHED Published: 2023-09-07T00:00:00 Last Updated: 2024-09-26T17:42:52.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the new REDCap project creation function of Vanderbilt REDCap 13.1.35 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the project title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://redcap.com - http://vanderbilt.com - https://www.cyderes.com/blog/cve-2023-37798-stored-cross-site-scripting-in-vanderbilt-redcap/
CVE ID: CVE-2023-37800 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37801 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37802 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37803 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37804 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37805 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37806 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37807 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37808 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37809 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37810 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37811 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-37822 State: PUBLISHED Published: 2024-10-03T00:00:00 Last Updated: 2024-11-25T21:15:25.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial number. Due to the flawed generation process, the WPA2-PSK can be brute forced offline within seconds. This vulnerability allows an attacker in proximity to the dedicated wireless network to gain unauthorized access to the end user's primary network. The only requirement
y to the dedicated wireless network to gain unauthorized access to the end user's primary network. The only requirement of the attack is proximity to the dedicated wireless network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://anker.com - http://eufy.com - https://www.usenix.org/conference/woot24/presentation/goeman - https://www.usenix.org/system/files/woot24-goeman.pdf
CVE ID: CVE-2023-37824 State: PUBLISHED Published: 2023-10-20T00:00:00 Last Updated: 2024-09-12T17:53:11.280Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Sitolog sitologapplicationconnect v7.8.a and before was discovered to contain a SQL injection vulnerability via the component /activate_hook.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/11/sitologapplicationconnect.html
CVE ID: CVE-2023-37826 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:23:09.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fieldname parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://case.contwise.com/php/portal_case.php - https://github.com/Popeye-ITSec/CVEs/blob/main/CVE-2023-37826
CVE ID: CVE-2023-37827 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:22:27.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the executionBlockName parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://case.contwise.com/php/portal_case.php - https://github.com/Popeye-ITSec/CVEs/blob/main/CVE-2023-37827
CVE ID: CVE-2023-37828 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:21:54.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Tasktyp parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://case.contwise.com/php/portal_case.php - https://github.com/Popeye-ITSec/CVEs/blob/main/CVE-2023-37828
CVE ID: CVE-2023-37829 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:21:14.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notification.message parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://case.contwise.com/php/portal_case.php - https://github.com/Popeye-ITSec/CVEs/blob/main/CVE-2023-37829
CVE ID: CVE-2023-37830 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T14:28:35.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://case.contwise.com/php/portal_case.php - https://github.com/Popeye-ITSec/CVEs/blob/main/CVE-2023-37830
CVE ID: CVE-2023-37831 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-12T14:11:21.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strik3r0x1/Vulns/blob/main/User%20enumeration%20-%20Elenos.md
CVE ID: CVE-2023-37832 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-17T13:18:18.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other unspecified impacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strik3r0x1/Vulns/blob/main/Lack%20of%20resources%20and%20rate%20limiting%20-%20Elenos.md