Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-42180 State: PUBLISHED Published: 2023-09-14T00:00:00 Last Updated: 2024-09-25T18:51:35.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted JPG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/zzdevelop/lenosp/issues/I7X760
CVE ID: CVE-2023-42183 State: PUBLISHED Published: 2023-12-15T00:00:00 Last Updated: 2024-10-08T14:17:47.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restrictions, such as when U+1FEF is converted to a backtick. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lockss/lockss-daemon/security/advisories/GHSA-mgqj-hphf-9588
CVE ID: CVE-2023-42188 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-10T16:11:03.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Thecosy/IceCMS/issues/17 - https://topdayplus.github.io/2023/10/27/CVE-deatail/
CVE ID: CVE-2023-42189 State: PUBLISHED Published: 2023-10-10T00:00:00 Last Updated: 2024-11-26T21:34:19.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030, and yeelight smart lamp v.1.12.69 allows a remote attacker to cause a denial of service via a crafted script to the KeySetRemove function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/project-chip/connectedhomeip/issues/28518 - https://github.co
- CISA ADP Vulnrichment: References: - https://github.com/project-chip/connectedhomeip/issues/28518 - https://github.com/project-chip/connectedhomeip/issues/28679 - https://github.com/IoT-Fuzz/IoT-Fuzz/blob/main/Remove%20Key%20Set%20Vulnerability%20Report.pdf
CVE ID: CVE-2023-42222 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-08-02T19:16:51.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is for an http or https resource, in some circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://webcatalog.io/changelog/ - https://www.electronjs.org/docs/latest/tutorial/security#15-do-not-use-shellopenexternal-with-untrusted-content - https://github.com/itssixtyn3in/CVE-2023-42222 - http://packetstormsecurity.com/files/176957/WebCatalog-4
sted-content - https://github.com/itssixtyn3in/CVE-2023-42222 - http://packetstormsecurity.com/files/176957/WebCatalog-48.4-Arbitrary-Protocol-Execution-Code-Execution.html
CVE ID: CVE-2023-42225 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-23T17:18:49.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42226 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-23T17:18:07.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42227 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-23T17:16:31.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42228 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-23T17:14:31.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42229 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-23T17:12:25.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42230 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T14:20:51.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the WSCView/Save function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42231 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-23T17:07:04.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42232 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-23T17:04:40.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42233 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T14:20:33.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Scripting (XSS) via the Filter/FilterEditor function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42234 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-02-03T14:12:09.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pat Infinite Solutions HelpdeskAdvanced <= 11.0.33 is vulnerable to Cross Site Request Forgery (CSRF) via the WSCView function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42235 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:47:57.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple parameters of /monitor/s_normalizedtrans.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42236 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:47:06.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42237 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:46:08.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple GET parameters of /vam/vam_i_command.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42238 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:43:10.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_eps.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42239 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:40:03.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_ep.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42240 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:38:46.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/s_scheduledfile.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md/
CVE ID: CVE-2023-42241 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:36:18.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_anagraphic.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42242 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:31:52.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/s_terminal.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42243 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T18:33:07.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary SQL queries. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42244 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T16:28:00.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_visits.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42245 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T14:22:26.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42246 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T14:21:34.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42247 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T14:20:02.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42248 State: PUBLISHED Published: 2025-01-13T00:00:00.000Z Last Updated: 2025-01-31T16:39:27.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vam_Sql.php". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42249 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T14:23:38.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42250 State: PUBLISHED Published: 2025-01-13T00:00:00 Last Updated: 2025-01-14T14:23:08.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-42253 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:24:14.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting (XSS) in Add Accounts via Invoice No, To, and Mammul. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://code-projects.org/vehicle-management-in-php-with-source-code/ - https://gist.github.com/Arajawat007/e37a131fd7b5f90148fa091a42de8f9d#file-cve-2023-42253
CVE ID: CVE-2023-42261 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T16:46:28.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example, use a reverse proxy server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/woshinibaba222/hack16/blob/main/Unauthorized%20Access%20to%20MobSF.md - https://github.com/Mob
ces: - https://github.com/woshinibaba222/hack16/blob/main/Unauthorized%20Access%20to%20MobSF.md - https://github.com/MobSF/Mobile-Security-Framework-MobSF/issues/748 - https://github.com/MobSF/Mobile-Security-Framework-MobSF/issues/1211 - https://github.com/MobSF/Mobile-Security-Framework-MobSF/blob/abb47659a19ac772765934f184c65fe16cb3bee7/docker-compose.yml#L30-L31
CVE ID: CVE-2023-42268 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:45:39.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/jeecg-boot/issues/5311
CVE ID: CVE-2023-42270 State: PUBLISHED Published: 2023-09-15T00:00:00 Last Updated: 2024-08-02T19:16:51.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: References: - http://xploit.sh/posts/cve-2023-xxxxx/ - http://packetstormsecurity.com/files/176958/Grocy-4.0.2-Cross-Site-Request-Forgery.html
CVE ID: CVE-2023-42276 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:44:29.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hutool/issues/3286
CVE ID: CVE-2023-42277 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:43:20.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hutool/issues/3285
CVE ID: CVE-2023-42278 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T16:12:59.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hutool/issues/3289
CVE ID: CVE-2023-42279 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-08-02T19:16:51.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zaizainani/-Vulnerability-recurrence-sorting/blob/main/sqlattack-en.pdf - https://www.redpacketsecurity.com/dreamer-cms-sql-injection-cve-2023-42279/
CVE ID: CVE-2023-42280 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T16:40:59.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zaizainani/-Vulnerability-recurrence-sorting/blob/main/anyfiledown-en.pdf
CVE ID: CVE-2023-42282 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:42:13.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.html - https://github.com/indutny/node-ip/commit/6a3ada9b471b09d5f0f5be264911ab564bf67894 - https://huntr.com/bounties/bfc3b23f-ddc0-4ee7-afab-223b07115ed3/ - https://security.netapp.com/advisory/ntap-20240315-0008/
ps://huntr.com/bounties/bfc3b23f-ddc0-4ee7-afab-223b07115ed3/ - https://security.netapp.com/advisory/ntap-20240315-0008/ - https://www.bleepingcomputer.com/news/security/dev-rejects-cve-severity-makes-his-github-repo-read-only/
CVE ID: CVE-2023-42283 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-09-05T13:25:47.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/andreysanyuk/CVE-2023-42283
CVE ID: CVE-2023-42284 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-09-05T13:24:36.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/andreysanyuk/CVE-2023-42284
CVE ID: CVE-2023-42286 State: PUBLISHED Published: 2024-03-14T00:00:00.000Z Last Updated: 2025-03-13T16:36:50.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted malicious payload. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Nacl122/CVEReport/blob/main/CVE-2023-42286/CVE-2023-42286.md
CVE ID: CVE-2023-42295 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-12T15:41:49.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenImageIO/oiio/issues/3947
CVE ID: CVE-2023-42298 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T18:28:55.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquantize.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2567
CVE ID: CVE-2023-42299 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-17T13:34:32.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_subimage_data function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenImageIO/oiio/issues/3840
CVE ID: CVE-2023-42307 State: PUBLISHED Published: 2024-03-12T00:00:00.000Z Last Updated: 2025-03-20T19:13:56.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ASR511-OO7/CVE-2023-42307/blob/main/CVE-6