Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0587 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:38:28.356Z Vendors: n/a Products: Trend Micro Apex One Problem Types: File Upload Vulnerability Description: A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory (i.e., \PCCSRV\TEMP\SampleSubmission) on the server. The attacker can upload a large number of large files to fill up the file system on which the Apex One server is installed. Additional An
upload a large number of large files to fill up the file system on which the Apex One server is installed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-5
CVE ID: CVE-2023-0588 State: PUBLISHED Published: 2023-06-27T13:17:24.246Z Last Updated: 2024-11-27T17:02:36.727Z Vendors: Unknown Products: Catalyst Connect Zoho CRM Client Portal Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Catalyst Connect Zoho CRM Client Portal WordPress plugin before 2.1.0 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/84be272e-0891-461c-91ad-496b64f92f8f
CVE ID: CVE-2023-0589 State: PUBLISHED Published: 2023-03-27T15:37:39.286Z Last Updated: 2025-05-05T16:08:20.620Z Vendors: Unknown Products: WP Image Carousel Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/58649228-69a6-4028-8487-166b0a07fcf7
CVE ID: CVE-2023-0590 State: PUBLISHED Published: 2023-03-23T00:00:00 Last Updated: 2024-08-02T05:17:49.847Z Vendors: n/a Products: Kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/ - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-0591 State: PUBLISHED Published: 2023-01-31T09:18:07.998Z Last Updated: 2025-03-26T20:38:12.757Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: jrspruitt Products: ubi_reader Problem Types: CWE-22 Description: ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the process has write access to that file or directory). This is due to the fact that a node name (dent_node.name) is considered trusted and joined to the extraction directory path during processing, then the node content is written to that joi
ered trusted and joined to the extraction directory path during processing, then the node content is written to that joined path. By crafting a malicious UBIFS file with node names holding path traversal payloads (e.g. ../../tmp/outside.txt), it's possible to force ubi_reader to write outside of the extraction directory. This issue affects ubi-reader before 0.8.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jrspruitt/ubi_reader/pull/57 - https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/
CVE ID: CVE-2023-0592 State: PUBLISHED Published: 2023-01-31T09:25:10.019Z Last Updated: 2025-03-27T14:37:58.470Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: sviehb Products: jefferson Problem Types: CWE-22 Description: A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/ - https://github.com/sviehb/jefferson/
- https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/ - https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6
CVE ID: CVE-2023-0593 State: PUBLISHED Published: 2023-01-31T09:31:44.677Z Last Updated: 2025-03-27T14:37:00.270Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: devttys0 Products: yaffshiv Problem Types: CWE-22 Description: A path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction directory. This issue affects yaffshiv up to version 0.1 included, which is the most recent at time of publication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://onekey.com/blog/security-advisory-remote-comman
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/ - https://github.com/devttys0/yaffshiv/pull/3/files
CVE ID: CVE-2023-0594 State: PUBLISHED Published: 2023-03-01T15:36:43.881Z Last Updated: 2025-03-07T19:34:28.387Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Grafana Products: Grafana, Grafana Enterprise Problem Types: CWE-79 Description: Grafana is an open-source platform for monitoring and observability. Starting with the 7.0 branch, Grafana had a stored XSS vulnerability in the trace view visualization. The stored XSS vulnerability was possible due the value of a span's attributes/resources were not properly sanitized and this will be rendered when the span's attributes/resources are expanded. An attacker needs to have the Editor role in order to change
rendered when the span's attributes/resources are expanded. An attacker needs to have the Editor role in order to change the value of a trace view visualization to contain JavaScript. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. Users may upgrade to version 8.5.21, 9.2.13 and 9.3.8 to receive a fix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2023-0594/
CVE ID: CVE-2023-0595 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-02-05T20:06:14.347Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Schneider Electric Products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021, ClearSCADA Problem Types: CWE-117 Description: A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCA
fault 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021(All Versions prior to October 2022), ClearSCADA (All Versions) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-01.pdf
CVE ID: CVE-2023-0597 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T19:17:33.462Z Vendors: n/a Products: Kernel Problem Types: CWE-200 Description: A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/linus/97e3d26b5e5f371b3ee223d94dd123e6c442ba80 - http://www.openwall.com/lists/oss-security/2023/07/28/1
CVE ID: CVE-2023-0598 State: PUBLISHED Published: 2023-03-16T19:13:52.427Z Last Updated: 2025-01-16T21:41:46.328Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: GE Digital Products: Proficy iFIX Problem Types: CWE-94 Description: GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-03 - ht
am Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-03 - https://digitalsupport.ge.com/s/article/iFIX-Secure-Deployment-Guide?language=en_US
CVE ID: CVE-2023-0599 State: PUBLISHED Published: 2023-02-01T22:13:54.609Z Last Updated: 2025-03-25T19:28:44.145Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Rapid7 Products: Metasploit Pro Problem Types: CWE-79 Description: Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization. Using this vulnerability, an authenticated attacker can execute arbitrary HTML and script code in the target browser against another Metasploit Pro user using a specially crafted request. Note that in most deployments, all Metasploit Pro users tend to enjoy privileges equiva
ing a specially crafted request. Note that in most deployments, all Metasploit Pro users tend to enjoy privileges equivalent to local administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.rapid7.com/release-notes/metasploit/20230130/
CVE ID: CVE-2023-0600 State: PUBLISHED Published: 2023-05-15T12:15:31.686Z Last Updated: 2025-01-24T20:22:17.142Z Vendors: Unknown Products: WP Visitor Statistics (Real Time Traffic) Problem Types: CWE-89 SQL Injection Description: The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8f46df4d-cb80-4d66-846f-85faf2ea0ec4
CVE ID: CVE-2023-0602 State: PUBLISHED Published: 2023-07-31T09:37:33.393Z Last Updated: 2024-08-02T05:17:50.079Z Vendors: Unknown Products: Twittee Text Tweet Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape POST values which are printed back to the user inside one of the plugin's administrative page, which allows reflected XSS attacks targeting administrators to happen. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c357f93d-4f21-4cd9-9378-d97756c75255
CVE ID: CVE-2023-0603 State: PUBLISHED Published: 2023-05-08T13:58:23.850Z Last Updated: 2025-04-23T16:21:45.795Z Vendors: Unknown Products: Sloth Logo Customizer Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1c93ea8f-4e68-4da1-994e-35a5873278ba
CVE ID: CVE-2023-0604 State: PUBLISHED Published: 2023-08-07T14:31:24.845Z Last Updated: 2024-10-10T19:42:21.367Z Vendors: Unknown Products: WP Food Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4492b5ad-c339-47f5-9003-a9c5f23efdd9
CVE ID: CVE-2023-0605 State: PUBLISHED Published: 2023-04-10T13:17:57.330Z Last Updated: 2025-02-11T21:25:56.232Z Vendors: Unknown Products: Auto Rename Media On Upload Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Auto Rename Media On Upload WordPress plugin before 1.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/57267c3c-d55e-4b37-a6d0-c5cd8569625c
CVE ID: CVE-2023-0606 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:37:16.406Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: ampache Products: ampache/ampache Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0bfed46d-ac96-43c4-93fb-13f68b4e711b - https://github.com/ampache/ampache/commit/d3191503ca856dfe0b33d7cb17717ffd480046cb
CVE ID: CVE-2023-0607 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:36:50.513Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: projectsend Products: projectsend/projectsend Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository projectsend/projectsend prior to r1606. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/9294743d-7818-4264-b973-59de027d549b - https://github.com/projectsend/projectsend/commit/698be4ade1db6ae0eaf27c843a03ffc9683cca0a
CVE ID: CVE-2023-0608 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-26T20:18:57.400Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - DOM in GitHub repository microweber/microweber prior to 1.3.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/microweber/microweber/commit/20df56615e61624f5fff149849753869e4b3b936 - https://huntr.dev/bounties/02a86e0d-dff7-4e27-89d5-2f7dcd4b580c
CVE ID: CVE-2023-0609 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-26T20:18:12.026Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: wallabag Products: wallabag/wallabag Problem Types: CWE-285 Description: Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3adef66f-fc86-4e6d-a540-2ffa59342ff0 - https://github.com/wallabag/wallabag/commit/0f7460dbab9e29f4f7d2944aca20210f828b6abb
CVE ID: CVE-2023-0610 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-26T20:07:09.491Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: wallabag Products: wallabag/wallabag Problem Types: CWE-285 Description: Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/8fdd9b31-d89b-4bbe-9557-20b960faf926 - https://github.com/wallabag/wallabag/commit/5ac6b6bff9e2e3a87fd88c2904ff3c6aac40722e
CVE ID: CVE-2023-0611 State: PUBLISHED Published: 2023-02-01T13:24:46.450Z Last Updated: 2024-11-25T16:30:00.954Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TRENDnet Products: TEW-652BRP Problem Types: CWE-77 Description: A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219935. Additional Analyst Notes: - CVE Program Contai
y be used. The associated identifier of this vulnerability is VDB-219935. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.219935 - https://vuldb.com/?ctiid.219935
CVE ID: CVE-2023-0612 State: PUBLISHED Published: 2023-02-01T13:31:58.232Z Last Updated: 2024-08-02T05:17:50.111Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C) Vendors: TRENDnet Products: TEW-811DRU Problem Types: CWE-120 Description: A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown function of the file /wireless/basic.asp of the component httpd. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219936. Additional Analyst Notes: - CVE Program Container: References: - https://v
entifier of this vulnerability is VDB-219936. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219936 - https://vuldb.com/?ctiid.219936
CVE ID: CVE-2023-0613 State: PUBLISHED Published: 2023-02-01T13:40:15.988Z Last Updated: 2024-08-02T05:17:50.094Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C) Vendors: TRENDnet Products: TEW-811DRU Problem Types: CWE-119 Description: A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /wireless/security.asp of the component httpd. The manipulation leads to memory corruption. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219937 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Cont
may be used. The identifier VDB-219937 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219937 - https://vuldb.com/?ctiid.219937
CVE ID: CVE-2023-0614 State: PUBLISHED Published: 2023-04-03T00:00:00.000Z Last Updated: 2025-02-13T14:53:13.426Z Vendors: n/a Products: Samba Problem Types: CWE-200 Description: The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.samba.org/samba/security/CVE-2023-0614.html - https://security.netapp.com/advisory/ntap-20230406-0007/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/me
visory/ntap-20230406-0007/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/ - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2023-0615 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-25T19:23:02.640Z Vendors: n/a Products: Kernel Problem Types: CWE-20 Description: A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a local user to crash the system if vivid test code enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2166287
CVE ID: CVE-2023-0616 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-10T18:18:47.772Z Vendors: Mozilla Products: Thunderbird Problem Types: User Interface lockup with messages combining S/MIME and OpenPGP Description: If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
rability affects Thunderbird < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1806507
CVE ID: CVE-2023-0617 State: PUBLISHED Published: 2023-02-01T16:45:08.636Z Last Updated: 2024-08-02T05:17:50.099Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C) Vendors: TRENDNet Products: TEW-811DRU Problem Types: CWE-120 Description: A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown part of the file /wireless/guestnetwork.asp of the component httpd. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219957 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: Refere
The identifier VDB-219957 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219957 - https://vuldb.com/?ctiid.219957
CVE ID: CVE-2023-0618 State: PUBLISHED Published: 2023-02-01T16:49:39.431Z Last Updated: 2024-08-02T05:17:50.150Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C) Vendors: TRENDnet Products: TEW-652BRP Problem Types: CWE-119 Description: A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfg_op.ccp of the component Web Service. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219958 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - htt
8 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219958 - https://vuldb.com/?ctiid.219958