Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-36100 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:28:43.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Thecosy/IceCMS/issues/15
CVE ID: CVE-2023-36103 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T19:19:54.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run arbitrary commands via crafted POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/t0hka1/Tenda-AC15-Exp/blob/master/Tenda%20AC15%20V15.03.05.20%20Exp.md
CVE ID: CVE-2023-36106 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T15:08:11.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive information via the interface for querying via appId parameter to /container/list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/KFCFans/PowerJob - https://gist.github.com/tztdsb/a653b6db328199ec0f55e54b4e466415#file-gistfile1-txt
CVE ID: CVE-2023-36109 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-25T14:26:40.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ecma-helpers-string.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5080 - https://github.com/Limesss/CVE-2023-36109/tree/main
CVE ID: CVE-2023-36118 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-17T20:36:31.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Faculty Evaulation System using PHP/MySQLi v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the page parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/172672/Faculty-Evaluation-System-1.0-Shell-Upload.html - https://hackmd.io/%40SY-T/Hy6HvwxPn - https://github.com/Trinity-SYT-SECURITY/XSS_vuln_issue/blob/main/Faculty%20Evaluation%20System%20v1.0.md - https://www.chtsecurity.c
ub.com/Trinity-SYT-SECURITY/XSS_vuln_issue/blob/main/Faculty%20Evaluation%20System%20v1.0.md - https://www.chtsecurity.com/news/4ffbe017-70e1-4789-bfe6-4d6fb0d1a0b7 - https://www.chtsecurity.com/news/5282e0af-7c45-43b0-9869-9becee7d6d70
CVE ID: CVE-2023-36119 State: REJECTED Published: N/A Last Updated: 2023-08-31T18:41:18.712063 Description: No description available.
CVE ID: CVE-2023-36120 State: REJECTED Published: N/A Last Updated: 2023-07-18T00:00:00 Description: No description available.
CVE ID: CVE-2023-36121 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-17T20:35:54.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the description function in the SEO project. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/51449 - https://github.com/Trinity-SYT-SECURITY/XSS_vuln_issue/blob/main/e107%20v2.3.2.md - https://www.chtsecurity.com/news/6c6675d4-3254-46ce-a16d-26523ff80540 - https://www.chtsecurity.com/news/0a4743a5-491e-4685-95ee-df8316ab5284
CVE ID: CVE-2023-36123 State: PUBLISHED Published: 2023-10-06T00:00:00 Last Updated: 2024-09-19T17:24:37.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code and gain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/9Bakabaka/d4559b081ce0577dbf415917afc0efb5 - https://github.com/9Bakabaka/CVE-2023-36123
CVE ID: CVE-2023-36126 State: PUBLISHED Published: 2023-10-10T00:00:00 Last Updated: 2024-09-19T13:59:57.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36127 State: PUBLISHED Published: 2023-10-10T00:00:00 Last Updated: 2024-09-19T15:00:04.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36131 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T18:17:21.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/availability-booking-calendar/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36132 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T18:01:14.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/availability-booking-calendar/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36133 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T19:40:11.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/availability-booking-calendar/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36134 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T18:00:50.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/class-scheduling-system - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36135 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T18:00:19.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/class-scheduling-system - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36136 State: PUBLISHED Published: 2023-08-08T00:00:00 Last Updated: 2024-10-10T19:05:14.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/class-scheduling-system - https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb
CVE ID: CVE-2023-36137 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T17:59:55.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/class-scheduling-system - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36138 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T17:58:55.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/cleaning-business-software/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36139 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T17:58:19.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/cleaning-business-software/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36140 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T14:58:32.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/cleaning-business-software/ - https://medium.com/%40blakehodder/additional-vulnerabilities-in-php-jabbers-scripts-c6bbd89b24bb
CVE ID: CVE-2023-36141 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T16:24:19.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.phpjabbers.com/cleaning-business-software/ - https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE ID: CVE-2023-36143 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-27T15:35:47.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://maxlink.com - https://github.com/leonardobg/CVE-2023-36143
CVE ID: CVE-2023-36144 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-27T15:34:32.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://intelbras.com - https://github.com/leonardobg/CVE-2023-36144
CVE ID: CVE-2023-36146 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-27T15:33:05.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross-Site Scripting (XSS) vulnerability was found in Multilaser RE 170 using firmware 2.2.6733. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://multilaser.com - https://github.com/leonardobg/CVE-2023-36146/#readme
CVE ID: CVE-2023-36158 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T16:17:24.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://toll.com - https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html - https://cyberredteam.tech/posts/cve-2023-36158/ - https://github.com/unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md
CVE ID: CVE-2023-36159 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T16:16:47.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html - http://lost.com - https://cyberredteam.tech/posts/cve-2023-36159/
CVE ID: CVE-2023-36160 State: PUBLISHED Published: 2023-09-15T00:00:00 Last Updated: 2024-09-25T18:13:04.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qubo Smart Plug10A version HSP02_01_01_14_SYSTEM-10 A, allows local attackers to gain sensitive information and other unspecified impact via UART console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Yashodhanvivek/Qubo_smart_switch_security_assessment/blob/main/Qubo_Smart_Plug_10A_Security_Assessment.pdf
CVE ID: CVE-2023-36161 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T14:56:25.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of service (DoS) via Wi-Fi deauthentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Yashodhanvivek/Qubo_smart_switch_security_assessment/blob/main/Qubo_Smart_Plug_10A_Security_Assessment.pdf
CVE ID: CVE-2023-36162 State: PUBLISHED Published: 2023-07-03T00:00:00 Last Updated: 2024-11-25T18:13:07.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/779789571/zzcms/blob/main/README.md - https://github.com/forget-code/zzcms/issues/6 - http://www.zzcms.net/about/download.html
CVE ID: CVE-2023-36163 State: PUBLISHED Published: 2023-07-11T00:00:00.000Z Last Updated: 2025-02-13T16:56:16.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://afula.libraries.co.il/BuildaGate5library/general2/company_search_tree.php?mc=0 - http://www.levi-coins.co.il/BuildaGate5/general2/company_search_tree.php?SiteName=levicoins - http://www.misdar-jabo.org/BuildaGate5/general2/company_search_tree.php?NewName
any_search_tree.php?SiteName=levicoins - http://www.misdar-jabo.org/BuildaGate5/general2/company_search_tree.php?NewNameMade=0&SiteName=misdar&lan=en&EnterDefault=&Referral=tree&BuyerID=104732450&Clubtmp1=&SearchTop= - https://github.com/TraiLeR2?tab=overview&from=2023-05-01&to=2023-05-31 - http://packetstormsecurity.com/files/173366/BuildaGate5-Cross-Site-Scripting.html
CVE ID: CVE-2023-36164 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-36165 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-36166 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-36167 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-36168 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-36169 State: REJECTED Published: N/A Last Updated: 2023-07-15T00:00:00 Description: No description available.
CVE ID: CVE-2023-36177 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-11-03T19:28:16.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://snapcast.com - https://oxnan.com/posts/Snapcast_jsonrpc_rce
CVE ID: CVE-2023-36183 State: PUBLISHED Published: 2023-07-03T00:00:00 Last Updated: 2024-11-25T18:12:22.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain sensitive information via a crafted file to the readimg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenImageIO/oiio/issues/3871 - https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYFTS5LK725R6KVIYJVTPN3A6B6C7E6D/ - htt
doraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYFTS5LK725R6KVIYJVTPN3A6B6C7E6D/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CPHVMLS2LYMLURWFL7CMZ3Y7UMW3M4AW/
CVE ID: CVE-2023-36184 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T18:39:55.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/move-language/move/issues/1059 - https://github.com/MystenLabs/sui/commit/8b681515c0cf435df2a54198a28ab4ef574d202b - https://github.com/aptos-labs/aptos-core/commit/47a0391c612407fe0b1051ef658a29e35d986963 - https://medium.com/%40Beosin_com/critical-vulnerability-in-move-vm-can-cause-total-network-shutdow
1ef658a29e35d986963 - https://medium.com/%40Beosin_com/critical-vulnerability-in-move-vm-can-cause-total-network-shutdown-and-potential-hard-fork-in-sui-49d0d942801c
CVE ID: CVE-2023-36187 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T16:26:34.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.netgear.com/000065571/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2020-0578
CVE ID: CVE-2023-36188 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T19:03:23.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hwchase17/langchain/issues/5872 - https://github.com/hwchase17/langchain/pull/6003
CVE ID: CVE-2023-36189 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-10-15T18:34:19.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/rharang/9c58d39db8c01db5b7c888e467c0533f - https://github.com/hwchase17/langchain/issues/5923 - https://github.com/hwchase17/langchain/pull/6051 - https://github.com/langchain-ai/langchain/issues/5923#issuecomment-1696053841
CVE ID: CVE-2023-36191 State: REJECTED Published: 2023-06-23T01:01:54.622Z Last Updated: 2025-02-13T15:46:47.560Z Description: No description available.
CVE ID: CVE-2023-36192 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-11-29T19:32:25.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/irontec/sngrep/issues/438
CVE ID: CVE-2023-36193 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-02T14:48:29.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguity_error component at /src/clp.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kohler/gifsicle/issues/191
CVE ID: CVE-2023-36198 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T19:08:40.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the trustedBlsSignMessage function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/skalenetwork/sgxwallet/issues/419
CVE ID: CVE-2023-36199 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-03T13:33:50.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/skalenetwork/sgxwallet/issues/419