Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-27014 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T20:04:31.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC10/10/10.md
CVE ID: CVE-2023-27015 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T19:56:46.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC10/4/4.md
CVE ID: CVE-2023-27016 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T19:55:57.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC10/3/3.md
CVE ID: CVE-2023-27017 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T19:53:07.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC10/6/6.md
CVE ID: CVE-2023-27018 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:59:27.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC10/7/7.md
CVE ID: CVE-2023-27019 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T17:22:52.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC10/8/8.md
CVE ID: CVE-2023-27020 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:46:52.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC10/1/1.md
CVE ID: CVE-2023-27021 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:41:35.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC10/9/9.md
CVE ID: CVE-2023-27025 State: PUBLISHED Published: 2023-04-02T00:00:00.000Z Last Updated: 2025-02-18T15:59:56.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/y_project/RuoYi/issues/I697Q5 - https://gitee.com/y_project/RuoYi/commit/432d5ce1be2e9384a6230d7ccd8401eef5ce02b0
CVE ID: CVE-2023-27032 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-10T16:03:27.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/en/pop-up/23773-popup-on-entry-exit-popup-add-product-and-newsletter.html - https://friends-of-presta.github.io/security-advisories/modules/2023/04/11/advancedpopupcreator.html
CVE ID: CVE-2023-27033 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T16:37:55.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prestashop cdesigner v3.1.3 to v3.1.8 was discovered to contain a code injection vulnerability via the component CdesignerSaverotateModuleFrontController::initContent(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/fr/declinaisons-personnalisation/22677-personnalisation-de-produit-product-customize.html - https://friends-of-presta.github.io/security-advisories/modules/2023/04/06/cdesigner-CWE434.html
CVE ID: CVE-2023-27034 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T15:21:27.329Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmsblog.html
CVE ID: CVE-2023-27035 State: PUBLISHED Published: 2023-05-01T00:00:00.000Z Last Updated: 2025-01-30T16:41:21.353Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the canvas page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forum.obsidian.md/t/embedded-web-pages-in-obsidian-canvas-can-use-sensitive-web-apis-without-the-users-permission-grant/54509 - https://forum.obsidian.md/t/obsidian-r
dian-canvas-can-use-sensitive-web-apis-without-the-users-permission-grant/54509 - https://forum.obsidian.md/t/obsidian-release-v1-1-14-insider-build/54595 - https://github.com/fivex3/CVE-2023-27035
CVE ID: CVE-2023-27037 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:25:27.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dienamer/vul/blob/main/2023-01-14.md
CVE ID: CVE-2023-27040 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T20:04:10.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/50214
CVE ID: CVE-2023-27041 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T20:02:56.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_user.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/forsean/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md
CVE ID: CVE-2023-27042 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-20T20:14:27.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hujianjie123/vuln/blob/main/Tenda/SetFirewallCfg/readme.md
CVE ID: CVE-2023-27043 State: PUBLISHED Published: 2023-04-18T00:00:00.000Z Last Updated: 2025-11-03T21:47:33.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python. Additional Analyst Notes: - CV
may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python/cpython/issues/102988 - http://python.org - https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html - https://security.netapp.com/advisory/ntap-20230601-0003/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
g/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/ - https://lists.fedoraproject.org/archi
age-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/
CVE ID: CVE-2023-27052 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T20:50:12.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lcg-22266/bug_report/blob/main/vendors/razormist/Moosikay%20-%20E-Commerce%20System/SQLi-1.md
CVE ID: CVE-2023-27054 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-26T16:03:02.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/miroslavpejic85/mirotalk/issues/139 - https://github.com/miroslavpejic85/mirotalk - https://github.com/miroslavpejic85/mirotalk/commit/f535b3515d2d480dc3135b37982f5df93e43c592
CVE ID: CVE-2023-27055 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-21T19:27:02.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/StolidWaffle/AVer-PTZApp2
CVE ID: CVE-2023-27059 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T19:59:22.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChurchCRM/CRM/issues/6450
CVE ID: CVE-2023-27060 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-26T16:01:20.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://igml.top/2021/05/10/lightcms-RCE/ - https://github.com/eddy8/LightCMS/issues/21
CVE ID: CVE-2023-27061 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T20:48:50.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formWifiFilterRulesModify.md
CVE ID: CVE-2023-27062 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T20:47:19.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formPortalAuth.md
CVE ID: CVE-2023-27063 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T20:45:13.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formModifyDnsForward.md
CVE ID: CVE-2023-27064 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T20:42:45.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelDnsForward.md
CVE ID: CVE-2023-27065 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-02-27T20:38:24.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/W15EV1/formDelWewifiPic.md
CVE ID: CVE-2023-27066 State: PUBLISHED Published: 2023-05-22T00:00:00.000Z Last Updated: 2025-01-31T13:51:25.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes - https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
CVE ID: CVE-2023-27067 State: PUBLISHED Published: 2023-05-22T00:00:00.000Z Last Updated: 2025-01-31T13:54:35.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbitrary files via crafted command to download.aspx Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes - https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
CVE ID: CVE-2023-27068 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-28T20:08:44.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dev.sitecore.net/Downloads/Sitecore%20Experience%20Platform/103/Sitecore%20Experience%20Platform%20103/Release%20Notes - https://www.sitecore.com/products/sitecore-experience-platform - https://blogs.night-wolf.io/0-day-vulnerabilities-at-sitecore-pagedesigner
CVE ID: CVE-2023-27069 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T20:10:25.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=Ryuz1gymiw8 - https://github.com/totaljs/openplatform/issues/52 - https://www.edoardoottavianelli.it/CVE-2023-27069/
CVE ID: CVE-2023-27070 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T20:06:22.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=4WJqcseH5qk - https://github.com/totaljs/openplatform/issues/53 - https://www.edoardoottavianelli.it/CVE-2023-27070/
CVE ID: CVE-2023-27073 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T19:59:12.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://projectworlds.in/free-projects/php-projects/food-ordering-system-project-in-php/ - https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27073.txt
CVE ID: CVE-2023-27074 State: PUBLISHED Published: 2023-03-14T00:00:00 Last Updated: 2024-08-02T12:01:32.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/bp-monitoring-management-system-using-php-and-mysql/ - https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27074.txt
CVE ID: CVE-2023-27075 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T20:49:32.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting vulnerability (XSS) in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/szabodanika/microbin/issues/142 - https://github.com/szabodanika/microbin/pull/143