Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0648 State: PUBLISHED Published: 2023-02-02T13:29:16.221Z Last Updated: 2024-08-02T05:17:50.271Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: dst-admin Problem Types: CWE-77 Description: A vulnerability, which was classified as critical, was found in dst-admin 1.5.0. This affects an unknown part of the file /home/masterConsole. The manipulation of the argument command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-220035. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.co
r of this vulnerability is VDB-220035. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220035 - https://vuldb.com/?ctiid.220035 - https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0masterConsole%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C
CVE ID: CVE-2023-0649 State: PUBLISHED Published: 2023-02-02T13:33:19.311Z Last Updated: 2025-03-26T14:09:32.191Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: dst-admin Problem Types: CWE-77 Description: A vulnerability has been found in dst-admin 1.5.0 and classified as critical. This vulnerability affects unknown code of the file /home/sendBroadcast. The manipulation of the argument message leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220036. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
nerability is VDB-220036. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220036 - https://vuldb.com/?ctiid.220036 - https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin%201.5.0%E5%90%8E%E5%8F%B0sendBroadcast%E6%8E%A5%E5%8F%A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C
CVE ID: CVE-2023-0650 State: PUBLISHED Published: 2023-02-02T13:38:51.044Z Last Updated: 2024-08-02T05:17:50.332Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: YAFNET Problem Types: CWE-79 Description: A vulnerability was found in YAFNET up to 3.1.11 and classified as problematic. This issue affects some unknown processing of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.12 is able to address this issue. The identifier of the patch is a1442a2bacc3335461b44c250e81f8d99c60735f. It is recommended to upgrade the
ss this issue. The identifier of the patch is a1442a2bacc3335461b44c250e81f8d99c60735f. It is recommended to upgrade the affected component. The identifier VDB-220037 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220037 - https://vuldb.com/?ctiid.220037 - https://drive.google.com/drive/folders/1iJuhjLQy3QPIgKKgWUzEEfr_q0boaR00?usp=sharing - https://github.com/YAFNET/YAFNET/security/advisories/GHSA-mg6p-jjff-7g5m - https://github.com/YAFNET/YAFNET/commit/a1442a2bacc3335461b44c250e81f8d99c60735f - https://github.com/YAFNET/YAFNET/releases/tag/v3.1.12
CVE ID: CVE-2023-0651 State: PUBLISHED Published: 2023-02-02T13:42:18.871Z Last Updated: 2024-09-12T19:36:47.658Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: FastCMS Problem Types: CWE-434 Description: A vulnerability was found in FastCMS 0.1.0. It has been classified as critical. Affected is an unknown function of the component Template Management. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220038 - https://vuldb.com/?ctiid.220038 - https://vuldb.com/?submit.82316
ntainer: References: - https://vuldb.com/?id.220038 - https://vuldb.com/?ctiid.220038 - https://vuldb.com/?submit.82316 - https://github.com/linmoren/fastcms_bug/blob/main/template_files_upload.md - https://github.com/linmoren/fastcms_bug/blob/main/password.zip
CVE ID: CVE-2023-0652 State: PUBLISHED Published: 2023-04-06T09:42:33.513Z Last Updated: 2025-02-10T20:21:08.886Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cloudflare Products: WARP Problem Types: CWE-59 Description: Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0) allowed a malicious attacker to forge the destination of the hardlink and escalate privileges, overwriting SYSTEM protected files. As Cloudflare WARP client for Windows (up to version 2022.5.309.0) allowed creation of mount points from its ProgramData folder, during installation of the
ws (up to version 2022.5.309.0) allowed creation of mount points from its ProgramData folder, during installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://install.appcenter.ms/orgs/cloudflare/apps/1.1.1.1-windows-1/distribution_groups/release - https://developers.cloudflare.com/warp-client/get-started/windows/ - https://github.com/cloudflare/advisories/security/advisories/GHSA-xmhj-9p83-xvw9
CVE ID: CVE-2023-0654 State: PUBLISHED Published: 2023-08-29T15:05:19.623Z Last Updated: 2024-09-30T17:46:56.466Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Cloudflare Products: WARP Client Problem Types: CWE-1021 Description: Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the event that an attacker built a malicious application and managed to install it on a victim's device, the attacker would be able to trick the user into believing that the app shown on the screen was the WARP client when in reality it was the attacker's app. Additional Analyst Notes: - CVE Program Container: - CISA ADP
he WARP client when in reality it was the attacker's app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/advisories/security/advisories/GHSA-5r97-pqv6-xpx7 - https://developers.cloudflare.com/warp-client/
CVE ID: CVE-2023-0655 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T20:39:54.971Z Vendors: SonicWall Products: SonicWall Email Security Problem Types: CWE-209 Description: SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email addresses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0002
CVE ID: CVE-2023-0656 State: PUBLISHED Published: 2023-03-02T00:00:00.000Z Last Updated: 2025-03-07T17:28:09.794Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-121 Description: A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004
CVE ID: CVE-2023-0657 State: PUBLISHED Published: 2024-11-17T10:19:03.717Z Last Updated: 2024-11-17T16:18:51.475Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat build of Keycloak 22, Red Hat build of Keycloak 22.0.10, Red Hat Single Sign-On 7 Problem Types: CWE-273 Description: A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow an authenticated attacker to exchange a logout token for an access token and possibly gain access to data outside of enforced permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.red
ata outside of enforced permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:1867 - https://access.redhat.com/errata/RHSA-2024:1868 - https://access.redhat.com/security/cve/CVE-2023-0657 - https://bugzilla.redhat.com/show_bug.cgi?id=2166728
CVE ID: CVE-2023-0658 State: PUBLISHED Published: 2023-02-02T19:42:09.183Z Last Updated: 2024-08-02T05:17:50.360Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Multilaser Products: RE057, RE170 Problem Types: CWE-200 Description: A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-220053 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.
0053 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220053 - https://vuldb.com/?ctiid.220053
CVE ID: CVE-2023-0659 State: PUBLISHED Published: 2023-02-03T13:03:29.786Z Last Updated: 2025-03-25T20:46:03.850Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: BDCOM Products: 1704-WGL Problem Types: CWE-200 Description: A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has been classified as critical. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-220101 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
o this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220101 - https://vuldb.com/?ctiid.220101
CVE ID: CVE-2023-0660 State: PUBLISHED Published: 2023-03-27T15:37:19.768Z Last Updated: 2025-02-19T19:01:04.954Z Vendors: Unknown Products: Smart Slider 3 Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Smart Slider 3 WordPress plugin before 3.5.1.14 does not properly validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3fe712bc-ce7f-4b30-9fc7-1ff15aa5b6ce
CVE ID: CVE-2023-0661 State: PUBLISHED Published: 2023-02-03T15:48:17.672Z Last Updated: 2025-03-25T20:45:31.167Z Vendors: Devolutions Products: Devolutions Server Problem Types: n/a Description: Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0002
CVE ID: CVE-2023-0662 State: PUBLISHED Published: 2023-02-16T06:24:01.692Z Last Updated: 2025-03-18T14:58:15.370Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: PHP Group Products: PHP Problem Types: CWE-400 Description: In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-
ram Container: - CISA ADP Vulnrichment: References: - https://github.com/php/php-src/security/advisories/GHSA-54hq-v5wp-fqgv - https://security.netapp.com/advisory/ntap-20230517-0001/
CVE ID: CVE-2023-0663 State: PUBLISHED Published: 2023-02-03T20:40:32.253Z Last Updated: 2024-08-02T05:17:50.335Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: Calendar Event Management System Problem Types: CWE-89 Description: A vulnerability was found in Calendar Event Management System 2.3.0. It has been rated as critical. This issue affects some unknown processing of the component Login Page. The manipulation of the argument name/pwd leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-220175. Additional Analyst Notes: - CVE Program Co
d may be used. The associated identifier of this vulnerability is VDB-220175. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220175 - https://vuldb.com/?ctiid.220175 - https://www.youtube.com/watch?v=UsSZU6EWB1E
CVE ID: CVE-2023-0664 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-18T19:15:55.070Z Vendors: n/a Products: QEMU Problem Types: CWE-250 Description: A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2167423 - https://lists.nongnu.org/archive/html/qemu-devel/2023-03/msg01445.html - https://gitlab.com/qemu-project/qemu/-/commit/88288c2a51faa7c795f053fc8b31b1c16ff
tml/qemu-devel/2023-03/msg01445.html - https://gitlab.com/qemu-project/qemu/-/commit/88288c2a51faa7c795f053fc8b31b1c16ff804c5 - https://gitlab.com/qemu-project/qemu/-/commit/07ce178a2b0768eb9e712bb5ad0cf6dc7fcf0158 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEOC7SRJWLZSXCND2ADFW6C76ZMTZLE4/ - https://security.netapp.com/advisory/ntap-20230517-0005/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MURWGXDIF2WTDXV36T6HFJDBL632AO7R/
CVE ID: CVE-2023-0665 State: PUBLISHED Published: 2023-03-30T00:21:47.676Z Last Updated: 2025-02-13T16:39:04.425Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-285 Description: HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://d
1.12.5, and 1.11.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-11-vault-s-pki-issuer-endpoint-did-not-correctly-authorize-access-to-issuer-metadata/52079/1 - https://security.netapp.com/advisory/ntap-20230526-0008/
CVE ID: CVE-2023-0666 State: PUBLISHED Published: 2023-06-07T02:25:27.974Z Last Updated: 2025-11-03T21:47:00.575Z Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-122 Description: Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/CVE-2023-0666.html - https://gitlab.com/wireshark/wireshark/-/issues/19085 - https://www.wireshark.org/docs/relnotes/wireshark-
3-0666.html - https://gitlab.com/wireshark/wireshark/-/issues/19085 - https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html - https://www.wireshark.org/security/wnpa-sec-2023-18.html - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-0667 State: PUBLISHED Published: 2023-06-07T02:38:07.798Z Last Updated: 2025-11-03T21:47:02.095Z Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-122 Description: Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/CVE-2023-0667.html - https://gitlab.com/wireshark/wireshark/-/issues/19086 - https://security.gentoo.org/glsa/
.org/cves/CVE-2023-0667.html - https://gitlab.com/wireshark/wireshark/-/issues/19086 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-0668 State: PUBLISHED Published: 2023-06-07T02:32:45.095Z Last Updated: 2025-11-03T21:47:03.617Z Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-125 Description: Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, is susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/CVE-2023-0668.html - https://gitlab.com/wireshark/wireshark/-/issues/19087 - https://www.wireshark.org/docs/relnotes/wi
/CVE-2023-0668.html - https://gitlab.com/wireshark/wireshark/-/issues/19087 - https://www.wireshark.org/docs/relnotes/wireshark-4.0.6.html - https://www.wireshark.org/security/wnpa-sec-2023-19.html - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-0669 State: PUBLISHED Published: 2023-02-06T19:16:19.265Z Last Updated: 2025-10-21T23:15:27.683Z Vendors: Fortra Products: Goanywhere MFT Problem Types: CWE-502 Description: Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml#zerodayfeb1 - https://infosec.exchange/@briankrebs/109795710941843934 - https://www.rapid7.com/blog/post/20
sories.xhtml#zerodayfeb1 - https://infosec.exchange/@briankrebs/109795710941843934 - https://www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/ - https://attackerkb.com/topics/mg883Nbeva/cve-2023-0669/rapid7-analysis - https://github.com/rapid7/metasploit-framework/pull/17607 - https://duo.com/decipher/fortra-patches-actively-exploited-zero-day-in-goanywhere-mft - https://frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.html - http://packetstormsecurity.com/files/171789/Goanywhere-Encryption-Helper-7.1.1-Remote-Code-Execution.html
CVE ID: CVE-2023-0670 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-13T19:35:48.795Z Vendors: n/a Products: Ulearn Problem Types: Insecure file upload Description: Ulearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator permissions to obtain remote code execution on the server through the image upload functionality. This occurs because the application does not validate that the uploaded image is actually an image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/scott/
CVE ID: CVE-2023-0671 State: PUBLISHED Published: 2023-02-04T00:00:00.000Z Last Updated: 2025-03-25T20:12:58.599Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: froxlor Products: froxlor/froxlor Problem Types: CWE-94 Description: Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/c2a84917-7ac0-4169-81c1-b61e617023de - https://github.com/froxlor/froxlor/commit/0034681412057fef2dfe9cce9f8a6e3321f52edc
CVE ID: CVE-2023-0673 State: PUBLISHED Published: 2023-02-04T07:29:30.815Z Last Updated: 2024-08-02T05:17:50.339Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Online Eyewear Shop Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/view_product.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The associated identifier of this vulnerabili
ity of an attack is rather high. The exploitation appears to be difficult. The associated identifier of this vulnerability is VDB-220195. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220195 - https://vuldb.com/?ctiid.220195
CVE ID: CVE-2023-0674 State: PUBLISHED Published: 2023-02-04T07:34:05.519Z Last Updated: 2024-08-02T05:17:50.458Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: XXL-JOB Problem Types: CWE-352 Description: A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220196. Additional Analyst Notes: - CVE Program Container: Refere
y be used. The identifier of this vulnerability is VDB-220196. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220196 - https://vuldb.com/?ctiid.220196 - https://github.com/boyi0508/xxl-job-explain/blob/main/README.md
CVE ID: CVE-2023-0675 State: PUBLISHED Published: 2023-02-04T07:36:32.302Z Last Updated: 2024-08-02T05:17:50.395Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Calendar Event Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Calendar Event Management System 2.3.0. This affects an unknown part. The manipulation of the argument start/end leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220197 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https
er VDB-220197 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220197 - https://vuldb.com/?ctiid.220197 - https://www.youtube.com/watch?v=eoPuINHWjHo
CVE ID: CVE-2023-0676 State: PUBLISHED Published: 2023-02-04T00:00:00.000Z Last Updated: 2025-03-26T14:47:18.504Z Severity: LOW (CVSS 2.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: phpipam Products: phpipam/phpipam Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/b72d4f0c-8a96-4b40-a031-7d469c6ab93b - https://github.com/phpipam/phpipam/commit/94ec73ff1d33926b75b811ded6f0b4a46088a7ec