Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41336 State: PUBLISHED Published: 2023-09-11T19:21:48.938Z Last Updated: 2024-09-26T15:37:18.042Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: symfony Products: ux-autocomplete Problem Types: CWE-20 Description: ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an `EntityType` that is *not* part of the valid choices. The problem has been fixed in `symfony/ux-autocomplete` version 2.11.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/symfony/ux-autocomplete/security/advisor
VE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/symfony/ux-autocomplete/security/advisories/GHSA-4cpv-669c-r79x - https://github.com/symfony/ux-autocomplete/commit/fabcb2eee14b9e84a45b276711853a560b5d770c - https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/ux-autocomplete/CVE-2023-41336.yaml - https://symfony.com/bundles/ux-autocomplete/current/index.html#usage-in-a-form-with-ajax
CVE ID: CVE-2023-41337 State: PUBLISHED Published: 2023-12-12T19:42:35.210Z Last Updated: 2024-08-02T19:01:34.582Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: h2o Products: h2o Problem Types: CWE-347 Description: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. In version 2.3.0-beta2 and prior, when h2o is configured to listen to multiple addresses or ports with each of them using different backend servers managed by multiple entities, a malicious backend entity that also has the opportunity to observe or inject packets exchanged between the client and h2o may misdirect HTTPS requests going to other backends and observe the contents of
ts exchanged between the client and h2o may misdirect HTTPS requests going to other backends and observe the contents of that HTTPS request being sent. The attack involves a victim client trying to resume a TLS connection and an attacker redirecting the packets to a different address or port than that intended by the client. The attacker must already have been configured by the administrator of h2o to act as a backend to one of the addresses or ports that the h2o instance listens to. Session IDs and tickets generated by h2o are not bound to information specific to the server address, port, or the X.509 certificate, and therefore it is possible for an attacker to force the victim connection t
r address, port, or the X.509 certificate, and therefore it is possible for an attacker to force the victim connection to wrongfully resume against a different server address or port on which the same h2o instance is listening. Once a TLS session is misdirected to resume to a server address / port that is configured to use an attacker-controlled server as the backend, depending on the configuration, HTTPS requests from the victim client may be forwarded to the attacker's server. An H2O instance is vulnerable to this attack only if the instance is configured to listen to different addresses or ports using the listen directive at the host level and the instance is configured to connect to back
ferent addresses or ports using the listen directive at the host level and the instance is configured to connect to backend servers managed by multiple entities. A patch is available at commit 35760540337a47e5150da0f4a66a609fad2ef0ab. As a workaround, one may stop using using host-level listen directives in favor of global-level ones. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h2o/h2o/security/advisories/GHSA-5v5r-rghf-rm6q - https://github.com/h2o/h2o/commit/35760540337a47e5150da0f4a66a609fad2ef0ab
CVE ID: CVE-2023-41338 State: PUBLISHED Published: 2023-09-08T18:17:18.044Z Last Updated: 2024-09-26T14:05:03.642Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: gofiber Products: fiber Problem Types: CWE-670 Description: Fiber is an Express inspired web framework built in the go language. Versions of gofiber prior to 2.49.2 did not properly restrict access to localhost. This issue impacts users of our project who rely on the `ctx.IsFromLocal` method to restrict access to localhost requests. If exploited, it could allow unauthorized access to resources intended only for localhost. Setting `X-Forwarded-For: 127.0.0.1` in a request from a foreign host, will r
to resources intended only for localhost. Setting `X-Forwarded-For: 127.0.0.1` in a request from a foreign host, will result in true for `ctx.IsFromLocal`. Access is limited to the scope of the affected process. This issue has been patched in version `2.49.2` with commit `b8c9ede6`. Users are advised to upgrade. There are no known workarounds to remediate this vulnerability without upgrading to the patched version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gofiber/fiber/security/advisories/GHSA-3q5p-3558-364f - https://github.com/gofiber/fiber/commit/b8c9ede6efa231116c4bd8bb9d5e03eac1cb76dc - https://developer.mozilla.org/en
4f - https://github.com/gofiber/fiber/commit/b8c9ede6efa231116c4bd8bb9d5e03eac1cb76dc - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For - https://docs.gofiber.io/api/ctx#isfromlocal
CVE ID: CVE-2023-41339 State: PUBLISHED Published: 2023-10-24T20:15:17.428Z Last Updated: 2024-09-11T18:00:37.015Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: geoserver Products: geoserver Problem Types: CWE-918 Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The WMS specification defines an ``sld=<url>`` parameter for GetMap, GetLegendGraphic and GetFeatureInfo operations for user supplied "dynamic styling". Enabling the use of dynamic styles, without also configuring URL checks, provides the opportunity for Service Side Request Forgery. This vulnerability can be used to steal u
iguring URL checks, provides the opportunity for Service Side Request Forgery. This vulnerability can be used to steal user NetNTLMv2 hashes which could be relayed or cracked externally to gain further access. This vulnerability has been patched in versions 2.22.5 and 2.23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/geoserver/geoserver/security/advisories/GHSA-cqpc-x2c6-2gmf - https://github.com/geoserver/geoserver/releases/tag/2.22.5 - https://github.com/geoserver/geoserver/releases/tag/2.23.2
CVE ID: CVE-2023-41343 State: PUBLISHED Published: 2023-11-03T04:11:29.131Z Last Updated: 2024-09-05T13:59:35.463Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Ragic Products: No-Code Database Builder Problem Types: CWE-79 Description: Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters. A remote attacker with regular user privilege can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7509-5b734-1.html
CVE ID: CVE-2023-41344 State: PUBLISHED Published: 2023-11-03T06:03:33.323Z Last Updated: 2024-09-05T19:29:50.768Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NCSIST ManageEngine Products: MDM Problem Types: CWE-22 Description: NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7507-55b28-1.html
CVE ID: CVE-2023-41345 State: PUBLISHED Published: 2023-11-03T04:16:47.501Z Last Updated: 2024-09-06T18:37:02.939Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: RT-AX55 Problem Types: CWE-78 Description: ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7496-96e2c-1.html
CVE ID: CVE-2023-41346 State: PUBLISHED Published: 2023-11-03T04:21:26.406Z Last Updated: 2024-09-06T18:35:57.286Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: RT-AX55 Problem Types: CWE-78 Description: ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-13
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7497-f92ac-1.html
CVE ID: CVE-2023-41347 State: PUBLISHED Published: 2023-11-03T04:29:39.109Z Last Updated: 2024-09-04T20:21:02.091Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: RT-AX55 Problem Types: CWE-78 Description: ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7498-18012-1.html
CVE ID: CVE-2023-41348 State: PUBLISHED Published: 2023-11-03T04:32:01.829Z Last Updated: 2024-09-06T18:34:47.829Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: RT-AX55 Problem Types: CWE-78 Description: ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7499-63907-1.html
CVE ID: CVE-2023-41349 State: PUBLISHED Published: 2023-09-18T02:36:30.234Z Last Updated: 2024-09-25T15:39:19.468Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: RT-AX88U Problem Types: CWE-134 Description: ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in sensitivity information leakage, or forcing the device to reset and permanent denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
e device to reset and permanent denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7371-aecf1-1.html
CVE ID: CVE-2023-41350 State: PUBLISHED Published: 2023-11-03T04:44:04.122Z Last Updated: 2024-09-06T19:56:30.968Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Chunghwa Telecom Products: NOKIA G-040W-Q Problem Types: CWE-307 Description: Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote attacker can execute a crafted Javascript to expose captcha in page, making it very easy for bots to bypass the captcha check and more susceptible to brute force attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
ute force attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7500-0c544-1.html
CVE ID: CVE-2023-41351 State: PUBLISHED Published: 2023-11-03T05:41:26.852Z Last Updated: 2024-09-04T20:10:05.622Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Chunghwa Telecom Products: NOKIA G-040W-Q Problem Types: CWE-288 Description: Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to the device by an alternative URL. This makes it possible for unauthenticated remote attackers to log in as any existing users, such as an administrator, to perform arbitrary system operations or disrupt service. Additional Analyst Notes: - CVE P
, such as an administrator, to perform arbitrary system operations or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7501-6155a-1.html
CVE ID: CVE-2023-41352 State: PUBLISHED Published: 2023-11-03T05:44:39.924Z Last Updated: 2024-09-06T19:55:40.699Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Chunghwa Telecom Products: NOKIA G-040W-Q Problem Types: CWE-78 Description: Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7502-287ec-1.html
CVE ID: CVE-2023-41353 State: PUBLISHED Published: 2023-11-03T05:48:22.031Z Last Updated: 2024-09-06T19:54:18.201Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Chunghwa Telecom Products: NOKIA G-040W-Q Problem Types: CWE-521 Description: Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information after logging system, resulting in admin access and performing arbitrary system operations or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7503-a27ed-1.html
CVE ID: CVE-2023-41354 State: PUBLISHED Published: 2023-11-03T05:52:33.724Z Last Updated: 2024-09-05T14:33:15.250Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Chunghwa Telecom Products: NOKIA G-040W-Q Problem Types: CWE-200 Description: Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a crafted package, resulting in partially sensitive information exposed to an actor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7504-c6a5e-1.html
CVE ID: CVE-2023-41355 State: PUBLISHED Published: 2023-11-03T05:55:07.221Z Last Updated: 2024-10-14T04:02:18.834Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Chunghwa Telecom Products: NOKIA G-040W-Q Problem Types: CWE-940 Description: Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting in a denial of service or sensitive information leaking. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twce
tion leaking. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7505-a0c94-1.html
CVE ID: CVE-2023-41356 State: PUBLISHED Published: 2023-11-03T06:18:37.853Z Last Updated: 2024-10-14T03:37:24.477Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WisdomGarden Products: Tronclass ilearn Problem Types: CWE-22 Description: NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7506-b4e29-1.html
CVE ID: CVE-2023-41357 State: PUBLISHED Published: 2023-11-03T06:09:18.072Z Last Updated: 2024-09-05T15:19:03.974Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Galaxy Software Services Products: Vitals ESP Problem Types: CWE-434 Description: Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system operations or disrupt service. Additional Analyst Notes: - CVE Program Container: - CI
ories to perform arbitrary system operations or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7508-6d1ef-1.html
CVE ID: CVE-2023-41358 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-08-02T19:01:35.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/14260 - https://www.debian.org/security/2023/dsa-5495 - https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/list/pac
%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
CVE ID: CVE-2023-41359 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-08-02T19:01:34.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FRRouting/frr/pull/14232 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedor
message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
CVE ID: CVE-2023-41360 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-15T18:32:41.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FRRouting/frr/pull/14245 - https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/lis
ounce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXR6PIVY4SWO7HDT4EY733H4X32SCPM4/
CVE ID: CVE-2023-41361 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-02T13:17:49.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FRRouting/frr/pull/14241 - https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html
CVE ID: CVE-2023-41362 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-01T20:41:29.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling interfered with this when using PCRE within PHP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mybb.com/versions/1.8.36/ - https://github.com/mybb/mybb/security/advisories/GHSA-pr74-wvp3-q6f5 - https://github.com/mybb/mybb/commit/a43a6f22944e769a6eabc58c39e7bc18c1cab4ca.patch - http
visories/GHSA-pr74-wvp3-q6f5 - https://github.com/mybb/mybb/commit/a43a6f22944e769a6eabc58c39e7bc18c1cab4ca.patch - https://blog.sorcery.ie/posts/mybb_acp_rce/
CVE ID: CVE-2023-41363 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-01T20:40:43.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cerebrate-project/cerebrate/commit/8e616180ba0d6a1fcb8326dbe39307960ee1946c
CVE ID: CVE-2023-41364 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-09-30T20:28:18.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/ - https://www.tine-groupware.de/ - https://herolab.usd.de/security-advisories/usd-2023-0002/