Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-33461 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T16:26:25.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ndevilla/iniparser/issues/144 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAIP5AURSTWIQOOP7G4CXYJ5IIGPY3Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASV
P7G4CXYJ5IIGPY3Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ASV7SEDHGCP63GYAFEW3CTTVQDZM5RIK/
CVE ID: CVE-2023-33466 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T18:24:18.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discourse.orthanc-server.org/t/security-advisory-for-orthanc-deployments-running-versions-before-1-12-0/3568 - https://www.debian.org/security/2023/dsa-
ecurity-advisory-for-orthanc-deployments-running-versions-before-1-12-0/3568 - https://www.debian.org/security/2023/dsa-5473 - https://lists.debian.org/debian-lts-announce/2023/09/msg00009.html
CVE ID: CVE-2023-33468 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T16:14:37.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://kramerav.com - https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33468
CVE ID: CVE-2023-33469 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-10T16:13:16.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://kramerav.com - https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2023-33469
CVE ID: CVE-2023-33472 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-11T16:59:53.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hev0x.github.io/posts/scadalts-cve-2023-33472/
CVE ID: CVE-2023-33476 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:33:54.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/minidlna/ - https://blog.coffinsec.com/0
tainer: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/minidlna/ - https://blog.coffinsec.com/0day/2023/05/31/minidlna-heap-overflow-rca.html - https://sourceforge.net/p/minidlna/git/ci/9bd58553fae5aef3e6dd22f51642d2c851225aec/ - https://lists.debian.org/debian-lts-announce/2023/06/msg00027.html - https://www.debian.org/security/2023/dsa-5434 - https://security.gentoo.org/glsa/202311-12
CVE ID: CVE-2023-33477 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T15:36:21.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Skr11lex/CVE-2023-33477
CVE ID: CVE-2023-33478 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-09-05T14:04:15.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/remoteclinic/RemoteClinic/issues/22
CVE ID: CVE-2023-33479 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-09-05T14:02:58.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/remoteclinic/RemoteClinic/issues/23
CVE ID: CVE-2023-33480 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-09-05T14:01:44.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabilities are caused by a lack of input validation and access control in the staff/register.php endpoint and the edit-my-profile.php page. By sending a series of specially crafted requests to the RemoteClinic application, an attacker can create admin users with more privileg
ies of specially crafted requests to the RemoteClinic application, an attacker can create admin users with more privileges than their own, upload a PHP file containing arbitrary code, and execute arbitrary commands via the PHP shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/remoteclinic/RemoteClinic/issues/24
CVE ID: CVE-2023-33481 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-09-05T14:00:01.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/remoteclinic/RemoteClinic/issues/25
CVE ID: CVE-2023-33485 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:28:03.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/5
CVE ID: CVE-2023-33486 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-09T19:09:56.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/3
CVE ID: CVE-2023-33487 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-09T21:06:48.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/4
CVE ID: CVE-2023-33492 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:39:49.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/42
CVE ID: CVE-2023-33493 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-21T13:49:29.569Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer (ajaxmanager) module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/module/2023/07/28/ajaxmanager.html
CVE ID: CVE-2023-33495 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T21:12:45.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Craft CMS through 4.4.9 is vulnerable to HTML Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/11-Client-side_Testing/03-Testing_for_HTML_Injection - https://medium.com/%40mondalsomnath9135/html-injection-in-craft-cms-application-e2b28f746212
CVE ID: CVE-2023-33496 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T15:58:43.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/edirc-wong/record/blob/main/deserialization_vulnerability_report.md
CVE ID: CVE-2023-33498 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T15:56:38.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YUyuanAN-com/loophole
CVE ID: CVE-2023-33507 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:25:27.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/
CVE ID: CVE-2023-33508 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:24:45.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/
CVE ID: CVE-2023-33509 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:25:43.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/
CVE ID: CVE-2023-33510 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T15:50:19.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://carl1l.github.io/2023/05/08/jeecg-p3-biz-chat-1-0-5-jar-has-arbitrary-file-read-vulnerability/
CVE ID: CVE-2023-33515 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T18:05:40.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40williamamorim256/stored-xss-found-in-se-suite-version-2-1-9-understanding-and-addressing-the-issue-cve-2023-33515-d59990eac324
CVE ID: CVE-2023-33517 State: PUBLISHED Published: 2023-10-23T00:00:00 Last Updated: 2024-09-11T19:49:44.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/wushigudan/288ab32566615d8897c1da7ce7204838
CVE ID: CVE-2023-33518 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T18:53:53.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory path and other information leaked by the server via a crafted web request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emoncms/emoncms/issues/1856
CVE ID: CVE-2023-33524 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T18:49:38.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses to the affected URL, one enumerates Contact information on the host which contains usernames, e-mail addresses, and other internal information stored within the web app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/barrett092/9ed092e4b14b9145f4d046556eb9dab7 - https://cve.report/CVE-2023-33524 - https://www.advent.com/resources/all-resources/info-kit-tamale-rms-for-asset
9dab7 - https://cve.report/CVE-2023-33524 - https://www.advent.com/resources/all-resources/info-kit-tamale-rms-for-asset-owners/
CVE ID: CVE-2023-33528 State: PUBLISHED Published: 2024-03-28T00:00:00.000Z Last Updated: 2025-03-28T19:01:35.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: halo v1.6.0 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/halo-dev/halo/releases/tag/v1.6.0 - https://gist.github.com/alert-moyan/be0bd087d85c1416829b8e9659e8b66c
CVE ID: CVE-2023-33530 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T15:33:25.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tenda.com - https://github.com/D2y6p/CVE/blob/main/tenda/CVE-2023-33530/RCE2/tenda_G103_RCE_2.pdf
CVE ID: CVE-2023-33532 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T15:30:43.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://netgear.com - https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-33532/Netgear_R6250_RCE.pdf
CVE ID: CVE-2023-33533 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T15:29:27.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-33533/Netg
ferences: - https://www.netgear.com/about/security/ - https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-33533/Netgear_RCE.pdf
CVE ID: CVE-2023-33534 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T18:51:42.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goform_set_cmd_process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rodelllemit.medium.com/cve-2023-33534-account-takeover-through-csrf-vulnerability-461de6f1b696
CVE ID: CVE-2023-33536 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T15:18:45.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/2/TL-WR940N_TL-WR841N_TL-WR740N_userRpm_WlanMacFilterRpm.md
CVE ID: CVE-2023-33537 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T15:12:13.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/1/TL-WR940N_TL-WR841N_TL-WR740N_userRpm_FixMapCfgRpm.md
CVE ID: CVE-2023-33538 State: PUBLISHED Published: 2023-06-07T00:00:00.000Z Last Updated: 2025-10-21T23:05:46.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md - https://web.archive.org/web/20230609111043/https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm
web/20230609111043/https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/3/TL-WR940N_TL-WR841N_userRpm_WlanNetworkRpm_Command_Injection.md - https://www.secpod.com/blog/cisa-issues-warning-on-active-exploitation-of-tp-link-vulnerability-cve-2023-33538/
CVE ID: CVE-2023-33544 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T16:57:36.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hawtio/hawtio/issues/2832
CVE ID: CVE-2023-33546 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2024-08-02T15:47:05.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by multiple parties because Janino is not intended for use with untrusted input. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/janino-compiler/janino/issues/201 - https://jani
Vulnrichment: - CVE Program Container: References: - https://github.com/janino-compiler/janino/issues/201 - https://janino-compiler.github.io/janino/#security
CVE ID: CVE-2023-33548 State: PUBLISHED Published: 2024-05-06T00:00:00.000Z Last Updated: 2025-03-27T19:01:09.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Idaht/ASUS_RT-AC51U_CVE/blob/main/XSS%20-%20WPA%20Pre-Shared%20Key
CVE ID: CVE-2023-33551 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T18:12:03.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lometsj/blog_repo/issues/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHOIRL6XH5NYR3LYI3KP5DE4SDSQWR7W/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
ssage/FHOIRL6XH5NYR3LYI3KP5DE4SDSQWR7W/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGGIYW7PHYQM2NPYCJPSPSLULLD2P2PE/
CVE ID: CVE-2023-33552 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T16:51:46.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap Buffer Overflow in the erofs_read_one_data function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lometsj/blog_repo/issues/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHOIRL6XH5NYR3LYI3KP5DE4SDSQWR7W/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
HOIRL6XH5NYR3LYI3KP5DE4SDSQWR7W/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGGIYW7PHYQM2NPYCJPSPSLULLD2P2PE/