Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31748 State: PUBLISHED Published: 2023-05-24T00:00:00.000Z Last Updated: 2025-01-31T17:26:36.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://mobiletrans.com - https://packetstormsecurity.com/files/172466/MobileTrans-4.0.11-Weak-Service-Permissions.html
CVE ID: CVE-2023-31752 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T20:06:30.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/4O4NtFd/bug_report/blob/main/SQLI2/SQLi-2.md
CVE ID: CVE-2023-31753 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-29T15:49:51.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the "rid=" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/khmk2k/CVE-2023-31753/
CVE ID: CVE-2023-31754 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T16:02:25.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.withsecure.com/advisories/optimizely-admin-panel-dom-xss
CVE ID: CVE-2023-31756 State: PUBLISHED Published: 2023-05-19T00:00:00 Last Updated: 2025-01-21T17:16:05.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions <= 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an operating system level shell via the 'X_TP_IfName' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://stanleyjobsonau.github.io/tp-link-advisory.html
CVE ID: CVE-2023-31757 State: PUBLISHED Published: 2023-05-19T00:00:00 Last Updated: 2025-01-21T19:44:11.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian' Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sleepyvv/vul_report/blob/main/DedeCMS/XSS.md
CVE ID: CVE-2023-31759 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T20:03:41.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ashallen.net/wireless-alarm-system-vulnerability-disclosure - https://ashallen.net/wireless-alarm-system-vulnerabilities
CVE ID: CVE-2023-31761 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T20:02:59.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ashallen.net/wireless-alarm-system-vulnerability-disclosure - https://ashallen.net/wireless-alarm-system-vulnerabilities
CVE ID: CVE-2023-31762 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T20:00:56.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ashallen.net/wireless-alarm-system-vulnerability-disclosure - https://ashallen.net/wireless-alarm-system-vulnerabilities
CVE ID: CVE-2023-31763 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T17:55:47.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access to the system via a code replay attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ashallen.net/wireless-alarm-system-vulnerability-disclosure - https://ashallen.net/wireless-alarm-system-vulnerabilities
CVE ID: CVE-2023-31779 State: PUBLISHED Published: 2023-05-22T00:00:00.000Z Last Updated: 2025-01-28T16:13:11.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board can insert JavaScript code in in "Reaction to comment" feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wekan/wekan/blob/master/CHANGELOG.md - https://github.com/wekan/wekan/commit/47ac33d6c234359c31d9b5eae49ed3e793907279
CVE ID: CVE-2023-31794 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T20:10:31.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.ghostscript.com/show_bug.cgi?id=706506 - https://git.ghostscript.com/?p=mupdf.git%3Bh=c0015401693b58e2deb5d75c39f27bc1216e47c6 - https://gist.github.com/spookhorror/c770d118767b1b0d89fdfe2845169d06
CVE ID: CVE-2023-31799 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:11:45.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the system annnouncements parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-99-2023-04-11-Low-impact-Low-risk-XSS-in-system-announcements
CVE ID: CVE-2023-31800 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:08:34.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-102-2023-04-11-Low-impact-Moderate-risk-XSS-in-forum-titles
CVE ID: CVE-2023-31801 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:05:45.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-97-2023-04-11-Low-impact-High-risk-XSS-in-skills-wheel
CVE ID: CVE-2023-31802 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T20:03:23.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skype and linedin_url parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-104-2023-04-11-Moderate-impact-High-risk-XSS-in-personal-profile
CVE ID: CVE-2023-31803 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T19:15:50.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequencing parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-100-2023-04-11-Low-impact-Low-risk-XSS-in-resources-sequencing
CVE ID: CVE-2023-31804 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-28T19:04:42.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the course category parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-96-2023-04-06-Low-impact-Moderate-risk-XSS-in-course-categories
CVE ID: CVE-2023-31805 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T19:06:30.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated attacker to execute arbitrary code via the homepage function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-98-2023-04-11-Low-impact-Low-risk-XSS-in-homepage-edition
CVE ID: CVE-2023-31806 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T18:58:22.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the My Progress function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-103-2023-04-11-Low-impact-Moderate-risk-XSS-in-My-progress-tab
CVE ID: CVE-2023-31807 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T18:51:48.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to the personal notes function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-101-2023-04-11-Low-impact-Low-risk-XSS-in-personal-notes-and-teacher-notes
CVE ID: CVE-2023-31808 State: PUBLISHED Published: 2023-09-19T00:00:00 Last Updated: 2024-09-25T17:20:19.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative privileges, allowing for unrestricted access over the WAN interface if Remote Administration is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kb.cert.org/vuls/id/913565
CVE ID: CVE-2023-31813 State: REJECTED Published: N/A Last Updated: 2023-12-16T01:21:33.118696 Description: No description available.
CVE ID: CVE-2023-31814 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T17:53:54.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/1915504804/9503198d3cbd5bc7db47625ac0caaade
CVE ID: CVE-2023-31816 State: PUBLISHED Published: 2023-05-22T00:00:00.000Z Last Updated: 2025-01-28T16:26:22.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: IT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is vulnerable to Cross Site Scripting (XSS) via /ecodesource/search_list.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TzssZ/Content-Management-System-v1.0-has-Cross-site-Scripting-XSS-
CVE ID: CVE-2023-31818 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T15:43:54.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://marukyu.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31818.md
CVE ID: CVE-2023-31819 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-31T18:07:37.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://keisei.com - http://livre.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31819.md
CVE ID: CVE-2023-31820 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-11-05T20:28:29.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://shizutetsu.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31820.md
CVE ID: CVE-2023-31821 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-31T18:06:51.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp ALBIS function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://albis.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31821.md
CVE ID: CVE-2023-31822 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-31T18:06:19.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Entetsu Store function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://entetsu.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31822.md
CVE ID: CVE-2023-31823 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-31T18:05:51.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://marui.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31823.md
CVE ID: CVE-2023-31824 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T19:45:54.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://delicia.com - http://dericia.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31824.md
CVE ID: CVE-2023-31825 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T19:41:49.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Inageya function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://inageya.com - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31825.md
CVE ID: CVE-2023-31826 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T17:48:01.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attackers to execute arbitrary commands via supplying crafted data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://nevado.skyscreamer.org/ - https://github.com/skyscreamer/nevado/releases - https://novysodope.github.io/2023/04/01/95/ - https://github.com/skyscreamer/nevado/issues/121
CVE ID: CVE-2023-31842 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:37:14.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/acmglz/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-2.md
CVE ID: CVE-2023-31843 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:33:16.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/acmglz/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-1.md
CVE ID: CVE-2023-31844 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T21:00:49.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/acmglz/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-3.md
CVE ID: CVE-2023-31845 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T20:57:06.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/acmglz/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/SQLi-4.md
CVE ID: CVE-2023-31847 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:04:58.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source to read arbitrary files on the client side. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/edp963/davinci/issues/2326
CVE ID: CVE-2023-31848 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T16:04:30.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/edp963/davinci/issues/2326
CVE ID: CVE-2023-31851 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-30T15:12:34.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cudy.com - https://github.com/CalfCrusher/CVE-2023-31851
CVE ID: CVE-2023-31852 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-30T15:11:37.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/admin/network/wireless/config via the iface parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cudy.com - https://github.com/CalfCrusher/CVE-2023-31852
CVE ID: CVE-2023-31853 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-30T15:30:45.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admin/network/bandwidth via the icon parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cudy.com - https://github.com/CalfCrusher/CVE-2023-31853
CVE ID: CVE-2023-31854 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-20T15:50:02.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: std::bad_alloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability problem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/schnaader/precomp-cpp/issues/139
CVE ID: CVE-2023-31856 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T16:01:51.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute arbitrary commands via a crafted http packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiangbulala/CVE/blob/main/totlink.md
CVE ID: CVE-2023-31857 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T15:58:40.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Jadore147258369/php-ocls/blob/main/README.md
CVE ID: CVE-2023-31860 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T16:45:33.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wuzhicms/b2b/issues/3