Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1301 State: PUBLISHED Published: 2023-03-09T21:31:48.150Z Last Updated: 2025-02-28T15:44:02.299Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Friendly Island Pizza Website and Ordering System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be us
leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222662 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222662 - https://vuldb.com/?ctiid.222662 - https://github.com/a-xsg/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md
CVE ID: CVE-2023-1302 State: PUBLISHED Published: 2023-03-09T21:33:42.294Z Last Updated: 2024-08-02T05:41:00.042Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: File Tracker Manager System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file normal/borrow1.php. The manipulation of the argument id with the input 1"><script>alert(1111)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulne
e attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222663. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222663 - https://vuldb.com/?ctiid.222663 - https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/XSS-1.md
CVE ID: CVE-2023-1303 State: PUBLISHED Published: 2023-03-09T21:48:49.584Z Last Updated: 2024-08-02T05:41:00.001Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: UCMS Problem Types: CWE-434 Description: A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-222683. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222683 - https://vuldb.co
222683. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222683 - https://vuldb.com/?ctiid.222683 - https://github.com/yztale/taley/blob/main/README.md
CVE ID: CVE-2023-1304 State: PUBLISHED Published: 2023-03-21T16:45:49.560Z Last Updated: 2025-02-25T18:54:46.491Z Vendors: Rapid7 Products: InsightCloudSec Problem Types: CWE-94 Description: An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.divvycloud.com/changelog/23321-release-notes - https://nephosec.com/
- CISA ADP Vulnrichment: References: - https://docs.divvycloud.com/changelog/23321-release-notes - https://nephosec.com/exploiting-rapid7s-insightcloudsec/
CVE ID: CVE-2023-1305 State: PUBLISHED Published: 2023-03-21T16:51:43.225Z Last Updated: 2025-02-26T16:41:01.279Z Vendors: Rapid7 Products: InsightCloudSec Problem Types: CWE-653 Description: An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided those files can be parsed as yaml or JSON. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.divvycloud.com/changelog/23321-release-notes - https://nephosec.com/exploiting-rapid7s-insight
eferences: - https://docs.divvycloud.com/changelog/23321-release-notes - https://nephosec.com/exploiting-rapid7s-insightcloudsec/
CVE ID: CVE-2023-1306 State: PUBLISHED Published: 2023-03-21T16:53:17.567Z Last Updated: 2025-02-26T16:39:23.347Z Vendors: Rapid7 Products: InsightCloudSec Problem Types: CWE-94 Description: An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.divvycloud.com/changelog/23321-release-notes - https://nephosec.com/exploiting-rapid7s-i
ent: References: - https://docs.divvycloud.com/changelog/23321-release-notes - https://nephosec.com/exploiting-rapid7s-insightcloudsec/
CVE ID: CVE-2023-1307 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T17:06:06.135Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: froxlor Products: froxlor/froxlor Problem Types: CWE-305 Description: Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1 - https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e186548391219ab23
CVE ID: CVE-2023-1308 State: PUBLISHED Published: 2023-03-10T07:35:22.681Z Last Updated: 2024-08-02T05:40:59.865Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Graduate Tracer System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222696. Additional Analyst Notes: - CVE Program Co
e public and may be used. The identifier of this vulnerability is VDB-222696. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222696 - https://vuldb.com/?ctiid.222696 - https://github.com/gtest1112/111/blob/main/sqli-1.md
CVE ID: CVE-2023-1309 State: PUBLISHED Published: 2023-03-10T07:35:24.435Z Last Updated: 2024-08-02T05:41:00.049Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Graduate Tracer System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/search_it.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222697 was assigned to this vulnerability. Additional Analys
disclosed to the public and may be used. The identifier VDB-222697 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222697 - https://vuldb.com/?ctiid.222697 - https://github.com/gtest1112/111/blob/main/sqli-2.md
CVE ID: CVE-2023-1310 State: PUBLISHED Published: 2023-03-10T07:35:25.987Z Last Updated: 2024-08-02T05:41:00.086Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Graduate Tracer System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222698 is the identifier assigned to this vulnerability. Additional Anal
en disclosed to the public and may be used. VDB-222698 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222698 - https://vuldb.com/?ctiid.222698 - https://github.com/gtest1112/111/blob/main/sqli-3.md
CVE ID: CVE-2023-1311 State: PUBLISHED Published: 2023-03-10T07:39:49.218Z Last Updated: 2025-02-27T21:03:14.398Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Friendly Island Pizza Website and Ordering System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This affects an unknown part of the file large.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated ident
ible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222699. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222699 - https://vuldb.com/?ctiid.222699 - https://github.com/tangtangtang123456/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md
CVE ID: CVE-2023-1312 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T15:37:20.260Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356 - https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb
CVE ID: CVE-2023-1313 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-03-03T20:58:13.684Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f73eef49-004f-4b3b-9717-90525e65ba61 - https://github.com/cockpit-hq/cockpit/commit/becca806c7071ecc732521bb5ad0bb9c64299592
CVE ID: CVE-2023-1314 State: PUBLISHED Published: 2023-03-21T11:01:14.062Z Last Updated: 2025-02-26T16:53:31.567Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Cloudflare Products: cloudflared Problem Types: CWE-59 Description: A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied on a world-writable directory. An attacker with local access to the device (without Administrator rights) can use symbolic links to trick
le directory. An attacker with local access to the device (without Administrator rights) can use symbolic links to trick the MSI installer into deleting files in locations that the attacker would otherwise have no access to. By creating a symlink from the world-writable directory to the target file, the attacker can manipulate the MSI installer's repair functionality to delete the target file during the repair process. Exploitation of this vulnerability could allow an attacker to delete important system files or replace them with malicious files, potentially leading to the affected device being compromised. The cloudflared client itself is not affected by this vulnerability, only the install
affected device being compromised. The cloudflared client itself is not affected by this vulnerability, only the installer for 32-bit Windows devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/cloudflared/security/advisories/GHSA-7mjv-x3jf-545x - https://github.com/cloudflare/cloudflared/releases
CVE ID: CVE-2023-1315 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-03-03T20:57:18.083Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: osticket Products: osticket/osticket Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/70a7fd8c-7e6f-4a43-9f8c-163b8967b16e - https://github.com/osticket/osticket/commit/ec6043935b4e30b5c0dfa544e256717182808a2e
CVE ID: CVE-2023-1316 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-03-03T20:53:26.670Z Severity: MEDIUM (CVSS 4.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: osticket Products: osticket/osticket Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/c6353bab-c382-47f6-937b-56d253f2e8d3 - https://github.com/osticket/osticket/commit/091ddba965132d26bdbeb004fcc44bd8fd056b71
CVE ID: CVE-2023-1317 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-27T21:09:23.306Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: osticket Products: osticket/osticket Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/c3e27af2-358b-490b-9baf-e451663e4e5f - https://github.com/osticket/osticket/commit/daee20fdd8ac926d9aee700b201ac2cb35d448ca
CVE ID: CVE-2023-1318 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T14:41:52.061Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: osticket Products: osticket/osticket Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e58b38e0-4897-4bb0-84e8-a7ad8efab338 - https://github.com/osticket/osticket/commit/343a2b47e164dd9090a3c9477ef273f0efa16a7d
CVE ID: CVE-2023-1319 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-03-03T20:52:35.111Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: osticket Products: osticket/osticket Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/a822067a-d90d-4c3e-b9ef-9b2a5c2bc97f - https://github.com/osticket/osticket/commit/9fb01bc12fbae06aa2c2b4d1bc9b4a08db4bb3e0
CVE ID: CVE-2023-1320 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-27T19:00:08.276Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: osticket Products: osticket/osticket Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/c2bb34ac-452d-4624-a1b9-c5b54f52f0cd - https://github.com/osticket/osticket/commit/86f9693dc64ed54220ed6c10e13e824ca4f6aacf
CVE ID: CVE-2023-1321 State: PUBLISHED Published: 2023-03-10T15:41:18.960Z Last Updated: 2025-03-03T20:47:29.436Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: lmxcms Problem Types: CWE-89 Description: A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class.php. The manipulation of the argument id with the input -1 and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222727. Additional Analyst Notes
d to the public and may be used. The associated identifier of this vulnerability is VDB-222727. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.222727 - https://vuldb.com/?ctiid.222727
CVE ID: CVE-2023-1322 State: PUBLISHED Published: 2023-03-10T15:45:13.848Z Last Updated: 2024-08-02T05:41:00.068Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: lmxcms Problem Types: CWE-89 Description: A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1) and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222728. Additional Analyst Notes: - CVE Program Container: R
nd may be used. The identifier of this vulnerability is VDB-222728. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222728 - https://vuldb.com/?ctiid.222728
CVE ID: CVE-2023-1323 State: PUBLISHED Published: 2023-06-12T17:28:21.059Z Last Updated: 2025-01-03T14:55:46.985Z Vendors: Unknown Products: Easy Forms for Mailchimp Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d3a2af00-719c-4b86-8877-b1d68a589192
CVE ID: CVE-2023-1324 State: PUBLISHED Published: 2023-04-24T18:30:53.922Z Last Updated: 2025-02-04T18:34:35.575Z Vendors: Unknown Products: Easy Forms for Mailchimp Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8f510b8c-b97a-44c9-a36d-2d775a4f7b81
CVE ID: CVE-2023-1325 State: PUBLISHED Published: 2023-04-17T12:17:39.963Z Last Updated: 2025-03-05T18:49:52.470Z Vendors: Unknown Products: Easy Forms for Mailchimp Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5f37cbf3-2388-4582-876c-6a7b0943c2a7
CVE ID: CVE-2023-1326 State: PUBLISHED Published: 2023-04-13T22:35:19.704Z Last Updated: 2025-02-07T15:54:48.365Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Canonical Ltd. Products: Apport Problem Types: CWE-269 Description: A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploi
ly unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/canonical/apport/commit/e5f78cc89f1f5888b6a56b785dddcb0364c48ecb - https://ubuntu.com/security/notices/USN-6018-1
CVE ID: CVE-2023-1327 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T15:39:41.759Z Vendors: n/a Products: Netgear RAX30 (AX2400) Problem Types: Authentication Bypass Description: Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drupal9.tenable.com/security/research/tra-2023-10
CVE ID: CVE-2023-1328 State: PUBLISHED Published: 2023-03-10T16:42:19.180Z Last Updated: 2024-08-02T05:40:59.914Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Guizhou Products: 115cms Problem Types: CWE-434 Description: A vulnerability was found in Guizhou 115cms 4.2. It has been classified as problematic. Affected is an unknown function of the file /admin/content/index. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222738 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222738
ed to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222738 - https://vuldb.com/?ctiid.222738 - https://github.com/niukongkong/asdasd/blob/master/115cmsArbitrary%20file%20upload%20vulnerability.md
CVE ID: CVE-2023-1329 State: PUBLISHED Published: 2023-06-14T20:23:33.516Z Last Updated: 2024-12-31T19:15:40.234Z Vendors: HP Inc. Products: HP multifunction printers Description: A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_8585737-8585769-16/hpsbpi03849