Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
igned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237514 - https://vuldb.com/?ctiid.237514 - https://gist.github.com/dmknght/02a29e1c5ae18b45eacc2085d22068e8
CVE ID: CVE-2023-4412 State: PUBLISHED Published: 2023-08-18T14:31:04.481Z Last Updated: 2024-08-02T07:24:04.581Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: EX1200L Problem Types: CWE-78 Description: A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
DB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237515 - https://vuldb.com/?ctiid.237515 - https://gist.github.com/dmknght/02a29e1c5ae18b45eacc2085d22068e8
CVE ID: CVE-2023-4413 State: REJECTED Published: 2023-08-18T15:00:06.203Z Last Updated: 2023-10-09T07:19:41.824Z Description: No description available.
CVE ID: CVE-2023-4414 State: PUBLISHED Published: 2023-08-18T16:00:05.398Z Last Updated: 2024-11-21T14:58:33.583Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Byzoro Products: Smart S85F Management Platform Problem Types: CWE-77 Description: A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237517 was assigned to this vulnerability. NOTE: T
has been disclosed to the public and may be used. The identifier VDB-237517 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.237517 - https://vuldb.com/?ctiid.237517 - https://vuldb.com/?submit.191743 - https://github.com/RCEraser/cve/blob/main/S85F.md
CVE ID: CVE-2023-4415 State: PUBLISHED Published: 2023-08-18T16:00:06.712Z Last Updated: 2024-08-02T07:24:04.745Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Ruijie Products: RG-EW1200G Problem Types: CWE-287 Description: A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respo
identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237518 - https://vuldb.com/?ctiid.237518 - https://github.com/blakespire/repoforcve/tree/main/RG-EW1200G-logic
CVE ID: CVE-2023-4417 State: PUBLISHED Published: 2023-08-21T18:38:06.606Z Last Updated: 2024-10-04T16:50:38.460Z Vendors: Devolutions Products: Remote Desktop Manager Description: Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authenticated user, under specific circumstances, to inadvertently share their personal vault entry with shared vaults via an incorrect vault in the duplication write process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0015
CVE ID: CVE-2023-4418 State: PUBLISHED Published: 2023-08-24T18:05:15.123Z Last Updated: 2024-12-09T14:12:17.603Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SICK AG Products: LMS5xx Problem Types: Uncontrolled Resource Consumption Description: A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users. Additional Analyst Notes: - CVE Program Cont
and causing it to become unresponsive or unavailable for legitimate users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json
CVE ID: CVE-2023-4419 State: PUBLISHED Published: 2023-08-24T18:08:19.977Z Last Updated: 2024-12-09T14:12:11.224Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SICK AG Products: LMS5xx Problem Types: Use of Hard-coded Credentials Description: The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.j
://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json
CVE ID: CVE-2023-4420 State: PUBLISHED Published: 2023-08-24T18:11:39.312Z Last Updated: 2024-12-09T14:12:37.134Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SICK AG Products: LMS5xx Problem Types: Cleartext Transmission of Sensitive Information Description: A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can exploit this weakness to eavesdrop on the communication between the LMS5xx and the Client, and potent
. The attacker can exploit this weakness to eavesdrop on the communication between the LMS5xx and the Client, and potentially manipulate the data being transmitted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sick.com/psirt - https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf - https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json
CVE ID: CVE-2023-4421 State: PUBLISHED Published: 2023-12-12T17:02:08.801Z Last Updated: 2025-11-04T19:25:18.220Z Vendors: Mozilla Products: NSS Problem Types: Timing side-channel in PKCS#1 v1.5 decryption depadding code Description: The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks. Both the overall correctness of the padding as well as the length of the encrypted message was leaking through timing side-channel. By sending large number of attacker-selected ciphertexts, the attacker would be able to decrypt a previously intercepted PKCS#1 v1.5 ciphertext (for example, to decrypt a TLS session that used RSA key exchange), or forg
reviously intercepted PKCS#1 v1.5 ciphertext (for example, to decrypt a TLS session that used RSA key exchange), or forge a signature using the victim's key. The issue was fixed by implementing the implicit rejection algorithm, in which the NSS returns a deterministic random message in case invalid padding is detected, as proposed in the Marvin Attack paper. This vulnerability affects NSS < 3.61. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1651411 - https://www.mozilla.org/security/advisories/mfsa2023-53/
CVE ID: CVE-2023-4422 State: PUBLISHED Published: 2023-08-18T18:35:17.611Z Last Updated: 2024-10-03T14:19:59.543Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/2e12b773-b6a2-48da-a4bb-55d5d1307d2e - https://github.com/cockpit-hq/cockpit/commit/b8dad5e070608bb5e4ec58fabbee101b5af737cf
CVE ID: CVE-2023-4423 State: PUBLISHED Published: 2023-09-27T03:03:01.373Z Last Updated: 2025-02-05T19:18:30.815Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: wpeventmanager Products: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.37.1 due to insufficient input sanitization and output escaping. This
in settings in versions up to, and including, 3.1.37.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dd9d22b0-a84a-4bf2-b8b4-89bae2970f29?source=cve - https://github.com/Jacky-Y/vuls/blob/main/vul5.md - https://plugins.trac.wordpress.
-4bf2-b8b4-89bae2970f29?source=cve - https://github.com/Jacky-Y/vuls/blob/main/vul5.md - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2969034%40wp-event-manager%2Ftrunk&old=2953169%40wp-event-manager%2Ftrunk&sfp_email=&sfph_mail= - https://github.com/wpeventmanager/wp-event-manager/issues/1483
CVE ID: CVE-2023-4424 State: PUBLISHED Published: 2023-11-21T06:42:45.491Z Last Updated: 2024-08-02T07:24:04.700Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-190 Description: An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j4qm-xgpf-qjw3
CVE ID: CVE-2023-4426 State: REJECTED Published: N/A Last Updated: 2024-03-19T16:52:45.132Z Description: No description available.
CVE ID: CVE-2023-4427 State: PUBLISHED Published: 2023-08-22T23:56:13.616Z Last Updated: 2025-02-13T17:13:35.055Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html - https://crbug.com/1470668 - https://www.debian.org/security/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/pa
s://crbug.com/1470668 - https://www.debian.org/security/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/ - http://packetstormsecurity.com/files/174951/Chrome-ReduceJSLoadPropertyWithEnumeratedKey-Out-Of-Bounds-Access.html - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4428 State: PUBLISHED Published: 2023-08-22T23:56:13.832Z Last Updated: 2025-07-01T14:03:09.002Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html - https://crbug.com/1470477 - https://www.debian.org/security/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/p
ps://crbug.com/1470477 - https://www.debian.org/security/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4429 State: PUBLISHED Published: 2023-08-22T23:56:14.017Z Last Updated: 2025-02-13T17:13:36.469Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html - https://crbug.com/1469754 - https://www.debian.org/security/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2
ecurity/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4430 State: PUBLISHED Published: 2023-08-22T23:56:14.150Z Last Updated: 2025-02-13T17:13:37.461Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html - https://crbug.com/1469542 - https://www.debian.org/security/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2
CVE ID: CVE-2023-4431 State: PUBLISHED Published: 2023-08-22T23:56:14.288Z Last Updated: 2025-02-13T17:13:38.177Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html - https://crbug.com/1469348 - https://www.debian.org/security/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/package-announce@lists
8 - https://www.debian.org/security/2023/dsa-5483 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4432 State: PUBLISHED Published: 2023-08-19T00:52:51.899Z Last Updated: 2024-10-02T15:35:59.562Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/69684663-6822-41ff-aa05-afbdb8f5268f - https://github.com/cockpit-hq/cockpit/commit/2a93d391fbd2dd9e730f65d43b29beb65903d195
CVE ID: CVE-2023-4433 State: PUBLISHED Published: 2023-08-19T00:59:33.147Z Last Updated: 2024-10-02T15:35:25.419Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/64f3253d-6852-4b9f-b870-85e896007b1a - https://github.com/cockpit-hq/cockpit/commit/36d1d4d256cbbab028342ba10cc493e5c119172c
CVE ID: CVE-2023-4434 State: PUBLISHED Published: 2023-08-20T00:00:18.940Z Last Updated: 2024-10-03T14:13:24.746Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: hamza417 Products: hamza417/inure Problem Types: CWE-862 Description: Missing Authorization in GitHub repository hamza417/inure prior to build88. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/19e68377-e071-4a8e-aa4c-cd84a426602e - https://github.com/hamza417/inure/commit/2176af74ca3a81fd001e6cc8eea5a8306f484fbb
CVE ID: CVE-2023-4435 State: PUBLISHED Published: 2023-08-20T00:00:19.448Z Last Updated: 2024-10-03T14:11:11.886Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: hamza417 Products: hamza417/inure Problem Types: CWE-20 Description: Improper Input Validation in GitHub repository hamza417/inure prior to build88. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1875ee85-4b92-4aa4-861e-094137a29276 - https://github.com/hamza417/inure/commit/e74062e439f860fd144da4bfc3f35e96c19c3abd
CVE ID: CVE-2023-4436 State: PUBLISHED Published: 2023-08-20T22:00:04.812Z Last Updated: 2024-08-02T07:24:04.790Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. This issue affects some unknown processing of the file app/action/edit_update.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237557 was assigned to this vulnerability. Additional
s been disclosed to the public and may be used. The identifier VDB-237557 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237557 - https://vuldb.com/?ctiid.237557 - https://github.com/E1CHO/cve_hub/blob/main/PUBLIC%20CVE%20HUB/Free%20and%20Open%20Source%20inventory%20management%20system%20-%20vuln%201.pdf
CVE ID: CVE-2023-4437 State: PUBLISHED Published: 2023-08-20T22:00:06.160Z Last Updated: 2024-08-02T07:24:04.886Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237558 is the identifier assigned to this vulnerability. Additi
it has been disclosed to the public and may be used. VDB-237558 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237558 - https://vuldb.com/?ctiid.237558 - https://github.com/E1CHO/cve_hub/blob/main/PUBLIC%20CVE%20HUB/Free%20and%20Open%20Source%20inventory%20management%20system%20-%20vuln%202.pdf
CVE ID: CVE-2023-4438 State: PUBLISHED Published: 2023-08-20T22:31:03.647Z Last Updated: 2024-08-02T07:24:05.005Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/ajax/search_sales_report.php. The manipulation of the argument customer leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237
The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237559. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237559 - https://vuldb.com/?ctiid.237559 - https://github.com/E1CHO/cve_hub/blob/main/PUBLIC%20CVE%20HUB/Free%20and%20Open%20Source%20inventory%20management%20system%20-%20vuln%203.pdf
CVE ID: CVE-2023-4439 State: PUBLISHED Published: 2023-08-20T22:31:04.727Z Last Updated: 2024-08-02T07:24:05.040Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Card Holder Management System Problem Types: CWE-1284 Description: A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Minus Value Handler. The manipulation leads to improper validation of specified quantity in input. The attack may be launched remotely. The identifier of this vulnerability is VDB-237560. Additional Analyst Notes: - CVE Program Conta
be launched remotely. The identifier of this vulnerability is VDB-237560. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.237560 - https://vuldb.com/?ctiid.237560
CVE ID: CVE-2023-4440 State: PUBLISHED Published: 2023-08-20T23:00:04.213Z Last Updated: 2024-08-02T07:24:04.630Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237561 was assigned