Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
The exploit has been disclosed to the public and may be used. The identifier VDB-239857 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239857 - https://vuldb.com/?ctiid.239857 - https://github.com/bayuncao/vul-cve - https://github.com/bayuncao/vul-cve/blob/main/spider-flow%20fastjson%20jdbc%20deserialization
CVE ID: CVE-2023-5017 State: PUBLISHED Published: 2023-09-17T03:00:07.410Z Last Updated: 2024-08-02T07:44:53.765Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: lmxcms Problem Types: CWE-89 Description: A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin.php. The manipulation of the argument lid leads to sql injection. VDB-239858 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
closure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239858 - https://vuldb.com/?ctiid.239858
CVE ID: CVE-2023-5018 State: PUBLISHED Published: 2023-09-17T03:31:04.553Z Last Updated: 2024-08-02T07:44:53.511Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Lost and Found Information System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=save_category of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-239859. Additional Analyst Notes: - CIS
iate the attack remotely. The associated identifier of this vulnerability is VDB-239859. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239859 - https://vuldb.com/?ctiid.239859
CVE ID: CVE-2023-5019 State: PUBLISHED Published: 2023-09-17T04:00:06.950Z Last Updated: 2024-08-02T07:44:53.778Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Tongda OA. This vulnerability affects unknown code of the file general/hr/manage/staff_reinstatement/delete.php. The manipulation of the argument REINSTATEMENT_ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier of th
o version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-239860. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239860 - https://vuldb.com/?ctiid.239860 - https://github.com/ggg48966/cve/blob/main/sql.md
CVE ID: CVE-2023-5020 State: PUBLISHED Published: 2023-09-17T04:31:04.139Z Last Updated: 2024-08-02T07:44:53.531Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 07FLY Products: CRM Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/login_auth/ of the component Administrator Login Page. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239861 was assigned to this vulnerability. Additional Analyst Note
sed to the public and may be used. The identifier VDB-239861 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239861 - https://vuldb.com/?ctiid.239861 - https://github.com/chosir/exp/tree/main
CVE ID: CVE-2023-5021 State: PUBLISHED Published: 2023-09-17T05:00:06.960Z Last Updated: 2024-08-02T07:44:53.510Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file admin/?page=system_info/contact_information. The manipulation of the argument telephone/mobile/address leads to cross site scripting. It is possible to launch the attack remotely. VDB-239862 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA AD
ch the attack remotely. VDB-239862 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239862 - https://vuldb.com/?ctiid.239862
CVE ID: CVE-2023-5022 State: PUBLISHED Published: 2023-09-17T05:31:04.908Z Last Updated: 2025-06-18T14:36:45.598Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: DedeCMS Problem Types: CWE-36 Description: A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_templets_post.php. The manipulation of the argument activepath leads to absolute path traversal. The associated identifier of this vulnerability is VDB-239863. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
DB-239863. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239863 - https://vuldb.com/?ctiid.239863 - https://github.com/bayuncao/DEDEcms
CVE ID: CVE-2023-5023 State: PUBLISHED Published: 2023-09-17T06:00:10.673Z Last Updated: 2024-08-02T07:44:53.781Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability was found in Tongda OA 2017 and classified as critical. Affected by this issue is some unknown functionality of the file general/hr/manage/staff_relatives/delete.php. The manipulation of the argument RELATIVES_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239864. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com
of this vulnerability is VDB-239864. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239864 - https://vuldb.com/?ctiid.239864 - https://github.com/RCEraser/cve/blob/main/sql_inject_3.md
CVE ID: CVE-2023-5024 State: PUBLISHED Published: 2023-09-17T06:31:04.839Z Last Updated: 2024-09-25T14:08:24.859Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Planno Problem Types: CWE-79 Description: A vulnerability was found in Planno 23.04.04. It has been classified as problematic. This affects an unknown part of the component Comment Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239865 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb
s vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239865 - https://vuldb.com/?ctiid.239865 - https://youtu.be/evdhcUlD1EQ - https://www.planno.fr/
CVE ID: CVE-2023-5025 State: PUBLISHED Published: 2023-09-17T07:00:07.258Z Last Updated: 2024-08-02T07:44:53.733Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: KOHA Problem Types: CWE-79 Description: A vulnerability was found in KOHA up to 23.05.03. It has been declared as problematic. This vulnerability affects unknown code of the file /cgi-bin/koha/catalogue/search.pl of the component MARC. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239866 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - htt
6 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239866 - https://vuldb.com/?ctiid.239866 - https://www.youtube.com/watch?v=b5107YkpgaM
CVE ID: CVE-2023-5026 State: PUBLISHED Published: 2023-09-17T09:31:04.435Z Last Updated: 2024-08-02T07:44:53.811Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Tongda Products: OA Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menu_code.php?MENU_TYPE=FAV. The manipulation of the argument OA_SUB_WINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239868. Additional Analyst Notes: - CVE Program Container: References: - htt
The identifier of this vulnerability is VDB-239868. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.239868 - https://vuldb.com/?ctiid.239868 - https://github.com/Mykonos-x/cve/tree/main/cve/tongda/v11/xss
CVE ID: CVE-2023-5027 State: PUBLISHED Published: 2023-09-17T16:31:05.163Z Last Updated: 2024-08-02T07:44:53.672Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple Membership System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknown functionality of the file club_validator.php. The manipulation of the argument club leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239869 was assigned to this vulnerability. Additional Analyst Notes: - C
the public and may be used. The identifier VDB-239869 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239869 - https://vuldb.com/?ctiid.239869 - https://github.com/LianghaoW/CveHub/blob/main/Simple-Membership-System%20club_validator.php%20has%20Sqlinjection.pdf
CVE ID: CVE-2023-5028 State: PUBLISHED Published: 2023-09-17T11:00:06.404Z Last Updated: 2025-06-18T14:33:22.062Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: China Unicom Products: TEWA-800G Problem Types: CWE-534 Description: A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04_CT2015_Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log file. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and m
an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-239870 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239870 - https://vuldb.com/?ctiid.239870 - https://github.com/pinglan123/-/wiki/%E4%B8%AD%E5%9B%BD%E8%81%94%E9%80%9A%E5%AE%B6%E7%94%A8%E7%BD%91%E5%85%B3
CVE ID: CVE-2023-5029 State: PUBLISHED Published: 2023-09-17T21:31:04.605Z Last Updated: 2024-09-25T14:06:10.813Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: mccms Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in mccms 2.6. This affects an unknown part of the file /category/order/hits/copyright/46/finish/1/list/1. The manipulation with the input '"1 leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239871. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
ability is VDB-239871. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239871 - https://vuldb.com/?ctiid.239871 - https://github.com/1541284314/cve/blob/main/README.md
CVE ID: CVE-2023-5030 State: PUBLISHED Published: 2023-09-17T22:00:07.471Z Last Updated: 2025-06-18T14:31:24.755Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tongda Products: OA Problem Types: CWE-89 Description: A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239872. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
bility is VDB-239872. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239872 - https://vuldb.com/?ctiid.239872 - https://github.com/husterdjx/cve/blob/main/sql1.md
CVE ID: CVE-2023-5031 State: PUBLISHED Published: 2023-09-18T01:31:06.536Z Last Updated: 2024-09-25T15:46:26.221Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-89 Description: A vulnerability was found in OpenRapid RapidCMS 1.3.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/article/article-add.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239875. Additional Analyst Notes: - CVE Program Contain
be used. The associated identifier of this vulnerability is VDB-239875. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.239875 - https://vuldb.com/?ctiid.239875 - https://github.com/yhy217/rapidcms-vul/issues/1
CVE ID: CVE-2023-5032 State: PUBLISHED Published: 2023-09-18T03:31:04.782Z Last Updated: 2024-08-02T07:44:53.672Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-89 Description: A vulnerability was found in OpenRapid RapidCMS 1.3.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/article/article-edit-run.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239876. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progr
used. The identifier of this vulnerability is VDB-239876. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239876 - https://vuldb.com/?ctiid.239876 - https://github.com/yhy217/rapidcms-vul/issues/2
CVE ID: CVE-2023-5033 State: PUBLISHED Published: 2023-09-18T04:31:04.707Z Last Updated: 2024-08-02T07:44:53.777Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: OpenRapid Products: RapidCMS Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file /admin/category/cate-edit-run.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239877 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Conta
er VDB-239877 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239877 - https://vuldb.com/?ctiid.239877 - https://github.com/yhy217/rapidcms-vul/issues/3
CVE ID: CVE-2023-5034 State: PUBLISHED Published: 2023-09-18T05:00:07.127Z Last Updated: 2024-08-02T07:44:53.508Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: My Food Recipe Problem Types: CWE-434 Description: A vulnerability classified as problematic was found in SourceCodester My Food Recipe 1.0. This vulnerability affects unknown code of the file index.php of the component Image Upload Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239878 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment:
be used. VDB-239878 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.239878 - https://vuldb.com/?ctiid.239878 - https://uploaddeimagens.com.br/imagens/bLNdiUE
CVE ID: CVE-2023-5035 State: PUBLISHED Published: 2023-11-02T16:11:13.854Z Last Updated: 2024-09-05T14:35:38.588Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Moxa Products: PT-G503 Series Problem Types: CWE-614 Description: A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the cookie to be transmitted in plaintext over an HTTP session. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
ession data to unauthorized access and manipulation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230203-pt-g503-series-multiple-vulnerabilities
CVE ID: CVE-2023-5036 State: PUBLISHED Published: 2023-09-18T05:46:44.541Z Last Updated: 2024-09-25T14:06:54.622Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/46881df7-eb41-4ce2-a78f-82de9bc4fc2d - https://github.com/usememos/memos/commit/97b434722cf0abe3cfcad5ac9e3d520233bf1536
CVE ID: CVE-2023-5037 State: PUBLISHED Published: 2023-11-13T07:42:00.337Z Last Updated: 2024-08-02T07:44:53.823Z Vendors: Hanwha Vision Co., Ltd. Products: A-Series, Q-Series, PNM-series Camera Problem Types: CWE-78 Description: badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hanwhavision.com/wp-content/uploads/2024/06/Cam
ISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf
CVE ID: CVE-2023-5038 State: PUBLISHED Published: 2024-06-25T02:14:06.610Z Last Updated: 2024-08-02T07:44:53.791Z Vendors: Hanwha Vision Co., Ltd. Products: A-Series, Q-Series, PNM-series Camera Problem Types: CWE-703, CWE-248 Description: badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacker runs a crafted URL, nobody can access the web management page of the camera. and must manually restart the device or re-power it. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Re
rer's report for details and workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hanwhavision.com/wp-content/uploads/2024/06/Camera-Vulnerability-Report-CVE-2023-5037-5038.pdf
CVE ID: CVE-2023-5041 State: PUBLISHED Published: 2024-01-17T14:27:26.529Z Last Updated: 2025-06-17T14:13:37.961Z Vendors: Unknown Products: Track The Click Problem Types: CWE-89 SQL Injection Description: The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/45194442-6eea-4e07-85a5-4a1e2fde3523
CVE ID: CVE-2023-5042 State: PUBLISHED Published: 2023-09-20T11:03:34.796Z Last Updated: 2024-09-24T15:12:51.418Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect Home Office Problem Types: CWE-276 Description: Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-5330
CVE ID: CVE-2023-5043 State: PUBLISHED Published: 2023-10-25T19:18:57.704Z Last Updated: 2025-02-13T17:19:26.664Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Kubernetes Products: ingress-nginx Problem Types: CWE-20 Description: Ingress nginx annotation injection causes arbitrary command execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/ingress-nginx/issues/10571 - https://groups.google.com/g/kubernetes-security-announce/c/pVsXsOpxYZo - http://www.openwall.com/lists/oss-security/2023/10/25/4 - https://security.netapp.com/advisory/ntap-20240307-0012/
CVE ID: CVE-2023-5044 State: PUBLISHED Published: 2023-10-25T19:19:08.139Z Last Updated: 2025-06-12T14:53:17.540Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Kubernetes Products: ingress-nginx Problem Types: CWE-20 Description: Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kubernetes/ingress-nginx/issues/10572 - https://groups.google.com/g/kubernetes-security-announce/c/ukuYYvRNel0 - http://www.openwall.com/lists/oss-security/2023/10/25/3 - https://security.netapp.com/advisory/ntap-20240307-0012/
CVE ID: CVE-2023-5045 State: PUBLISHED Published: 2023-10-12T11:58:30.709Z Last Updated: 2024-08-02T07:44:53.774Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Biltay Technology Products: Kayisi Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Kayisi: before 1286. Additional Analyst Notes: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-23-0580