Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30312 State: PUBLISHED Published: 2024-05-28T00:00:00 Last Updated: 2024-11-07T11:15:57.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to a denial of service, impersonating the client to the server (e.g., for access to files over FTP), and impersonating the server to the client (e.g., to deliver false information from a finance website). This occurs because nf_conntrack_tcp_no_window_check is true by default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://openwrt.org/docs/g
lt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://openwrt.org/docs/guide-developer/security - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/ - https://blog.apnic.net/2024/06/18/off-path-tcp-hijacking-in-nat-enabled-wi-fi-networks/ - https://news.ycombinator.com/item?id=40723150
CVE ID: CVE-2023-30313 State: PUBLISHED Published: 2024-05-28T20:05:48.894Z Last Updated: 2025-02-13T15:46:46.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE ID: CVE-2023-30314 State: PUBLISHED Published: 2024-05-28T21:37:29.610Z Last Updated: 2025-02-13T15:46:47.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in 360 V6G, 360 T5G, 360 T6M, and 360 P1 routers allows attackers to hijack TCP sessions which could lead to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ndss-symposium.org/ndss-paper/exploiting-sequence-number-leakage-tcp-hijacking-in-nat-enabled-wi-fi-networks/
CVE ID: CVE-2023-30319 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:59:12.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wliang6/ChatEngine/blame/fded8e710ad59f816867ad47d7fc4862f6502f3e/src/chatbotapp/LoginServlet.java#L30:L40 - https://payatu.com/advisory/cross-site-scripting-xxs-vulnerability-in-wliang6-chatengine/
CVE ID: CVE-2023-30320 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:57:59.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wliang6/ChatEngine/blob/master/src/chatbotapp/chatWindow.java#L71:L81 - https://payatu.com/advisory/cross-site-scripting-xss-vulnerability-in-wliang6-chatengine-allows-attackers-execute-arbitrary-code/
CVE ID: CVE-2023-30321 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:53:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wliang6/ChatEngine/blob/fded8e710ad59f816867ad47d7fc4862f6502f3e/src/chatbotapp/LoginServlet.java#L55:L64 - https://payatu.com/advisory/cross-site-scripting-xss-vulnerability-in-loginservlet-java-wliang6-chat
vlet.java#L55:L64 - https://payatu.com/advisory/cross-site-scripting-xss-vulnerability-in-loginservlet-java-wliang6-chatengine-allows-attackers-to-execute-arbitrary-code/
CVE ID: CVE-2023-30322 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:50:54.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wliang6/ChatEngine/blob/master/src/chatbotapp/chatWindow.java#L71:L81 - https://payatu.com/advisory/cross-site-scripting-xss-in-username-field-in-chatwindow-functionality-in-chatengine-1-0/
CVE ID: CVE-2023-30323 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-20T19:50:00.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wliang6/ChatEngine/blob/fded8e710ad59f816867ad47d7fc4862f6502f3e/src/chatbotapp/chatWindow.java#L34:L60 - https://payatu.com/advisory/sql-injection-in-chatwindow-functionality-in-chatengine-1-0/
CVE ID: CVE-2023-30325 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T19:07:39.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wliang6/ChatEngine/blob/fded8e710ad59f816867ad47d7fc4862f6502f3e/src/chatbotapp/chatWindow.java#L33:L60 - https://payatu.com/advisory/sql-injection-vulnerability-in-textmessage-field-in-chatengine-1-0/
CVE ID: CVE-2023-30326 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T19:06:50.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59f816867ad47d7fc4862f6502f3e, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wliang6/ChatEngine/blob/master/WebContent/WEB-INF/lib/chatbox.jsp#L12 - https://payatu.com/advisory/cross-site-scripting-vulnerability-in-username-field-in-chatbox-functionality-in-chatengine-1-0/
CVE ID: CVE-2023-30328 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:25:31.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rand0mIdas/randomideas/main/ShimoVPN.md?token=GHSAT0AAAAAACA3WX4SPH2YYOCWGV6LLVSGZBIEKEQ - https://github.com/rand0mIdas/randomideas/blob/main/ShimoVPN.md
CVE ID: CVE-2023-30330 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T19:29:18.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Filiplain/LFI-to-RCE-SE-Suite-2.0 - https://www.exploit-db.com/exploits/51404
CVE ID: CVE-2023-30331 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:24:04.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/xiandafu/beetl/issues/I6RUIP - https://github.com/luelueking/Beetl-3.15.0-vuln-poc
CVE ID: CVE-2023-30333 State: PUBLISHED Published: 2023-05-18T00:00:00.000Z Last Updated: 2025-01-23T19:44:52.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/j0k1rr/some-automated-script/issues/3
CVE ID: CVE-2023-30334 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T20:50:07.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: AsmBB v2.9.1 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the MiniMag.asm and bbcode.asm libraries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://board.asm32.info/thanks-to-the-hxp-ctf-challenge-several-serious-vulnerabilities-has-been-fixed.394/ - https://ctf.zeyu2001.com/2023/hxp-ctf/true_web_assembly - https://asm32.info/fossil/asmbb/info/7dfa4f56b473f76c - https://fresh.flatassembler.net/fossil/repo/fresh/info/a3caaf7ad8503348 -
m32.info/fossil/asmbb/info/7dfa4f56b473f76c - https://fresh.flatassembler.net/fossil/repo/fresh/info/a3caaf7ad8503348 - https://gist.github.com/zeyu2001/1985d03ff919d08a9ea79bdeb5a16949
CVE ID: CVE-2023-30338 State: PUBLISHED Published: 2023-04-27T00:00:00.000Z Last Updated: 2025-01-31T18:30:59.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emlog/emlog/issues/229
CVE ID: CVE-2023-30347 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T18:25:50.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the serach_sms_api_name parameter to the SMA API search. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huzefa2212/CVE-2023-30347/blob/main/poc.txt
CVE ID: CVE-2023-30349 State: PUBLISHED Published: 2023-04-27T00:00:00.000Z Last Updated: 2025-01-31T18:27:40.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jflyfox/jfinal_cms/issues/54
CVE ID: CVE-2023-30350 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2025-01-14T18:15:36.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: FS S3900-24T4S devices allow authenticated attackers with guest access to escalate their privileges and reset the admin password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/172124/FS-S3900-24T4S-Privilege-Escalation.html
CVE ID: CVE-2023-30351 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T19:32:44.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption. This vulnerability allows attackers to connect to the TELNET service (or UART) by using the exposed credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_RRA.md - https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_PRA.md
CVE ID: CVE-2023-30352 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T19:30:36.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_RTSPa.md
CVE ID: CVE-2023-30353 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T19:29:59.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_uRCE.md
CVE ID: CVE-2023-30354 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T19:33:49.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_NCD.md - https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_PBA.md
CVE ID: CVE-2023-30356 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T19:27:27.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_MU.md
CVE ID: CVE-2023-30362 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T16:59:18.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/obgm/libcoap/issues/1063 - https://github.com/obgm/libcoap/pull/1065
CVE ID: CVE-2023-30363 State: PUBLISHED Published: 2023-04-26T00:00:00.000Z Last Updated: 2025-02-03T16:49:49.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwe.mitre.org/data/definitions/1321.html - https://github.com/Tencent/vConsole/issues/616
CVE ID: CVE-2023-30367 State: PUBLISHED Published: 2023-07-26T00:00:00 Last Updated: 2024-10-23T19:16:19.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to store and manage multi-protocol connection configurations to remotely connect to systems. mRemoteNG configuration files can be stored in an encrypted state on disk. mRemoteNG version <= v1.76.20 and <= 1.77.3-dev loads configuration files in plain text into memory (after decrypting them if necessary) at application start-up, even if no connection has been established yet. This allows attackers to access contents of configuration
tion start-up, even if no connection has been established yet. This allows attackers to access contents of configuration files in plain text through a memory dump and thus compromise user credentials when no custom password encryption key has been set. This also bypasses the connection configuration file encryption setting by dumping already decrypted configurations from memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.secuvera.de/advisories/secuvera-SA-2023-01.txt - https://github.com/mRemoteNG/mRemoteNG/issues/2420 - https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper - http://packetstormsecurity.com/files/173829/m
420 - https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper - http://packetstormsecurity.com/files/173829/mRemoteNG-1.77.3.1784-NB-Sensitive-Information-Extraction.html
CVE ID: CVE-2023-30368 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:58:06.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC5/1.md
CVE ID: CVE-2023-30369 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:57:07.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC15/3.md
CVE ID: CVE-2023-30370 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:18:18.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC15/7.md
CVE ID: CVE-2023-30371 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:15:29.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC15/4.md
CVE ID: CVE-2023-30372 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:06:20.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC15/10.md
CVE ID: CVE-2023-30373 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:04:58.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC15/8.md
CVE ID: CVE-2023-30375 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-05T15:40:50.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC15/1.md
CVE ID: CVE-2023-30376 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-05T15:58:56.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC15/9.md
CVE ID: CVE-2023-30378 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-05T15:57:59.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/2205794866/Tenda/blob/main/AC15/5.md
CVE ID: CVE-2023-30380 State: PUBLISHED Published: 2023-04-27T00:00:00.000Z Last Updated: 2025-01-31T18:26:28.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the component /dialog/select_media.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Howard512966/DedeCMS-v5.7.107-Directory-Traversal
CVE ID: CVE-2023-30382 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T18:28:40.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labs.jumpsec.com/advisory-cve-2023-30382-half-life-local-privilege-escalation/
CVE ID: CVE-2023-30383 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T18:35:54.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 were discovered to contain a buffer overflow which may lead to a Denial of Service (DoS) when parsing crafted data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tplink.com - https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware%29%2CTPLINK - https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware - https://www.tp-l
her-c50/v2/#Firmware%29%2CTPLINK - https://www.tp-link.com/us/support/download/archer-c2/v1/#Firmware - https://www.tp-link.com/us/support/download/archer-c50/v2/#Firmware - https://gist.github.com/a2ure123/a4eda2813d85d8b414bb87e855ab4bf8
CVE ID: CVE-2023-30394 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-05-30T14:05:39.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MoveIt framework 1.1.11 for ROS allows cross-site scripting (XSS) via the API authentication function. NOTE: this issue is disputed by the original reporter because it has "no impact." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ros-planning/moveit - https://i.ibb.co/R2JSPV5/2022-10-02-12-39-57-Window.png - https://i.ibb.co/RyRSzpN/Response-Manipulation.png - https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-30394
CVE ID: CVE-2023-30399 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:21:28.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://garocharging.com/glb-wallbox/ - https://www.garo.se/ - https://github.com/Yof3ng/IoT/blob/master/Garo/CVE-2023-30399.md