Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-33651 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T16:14:58.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.assetnote.io/2023/05/10/sitecore-round-two/ - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1002925
CVE ID: CVE-2023-33652 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T14:38:32.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /sitecore/shell/Invoke.aspx. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.assetnote.io/2023/05/10/sitecore-round-two/
CVE ID: CVE-2023-33653 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T16:10:50.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /Applications/Content%20Manager/Execute.aspx?cmd=convert&mode=HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.assetnote.io/2023/05/10/sitecore-round-two/
CVE ID: CVE-2023-33656 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-10T21:22:43.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack by causing the program to consume all available memory resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq - https://github.com/emqx/nanomq/issues/1164 - https://github.com/emqx/nanomq/issues/1165#issuecomment-1515667127
CVE ID: CVE-2023-33657 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:35:26.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_mqtt_msg_get_publish_property() in the file mqtt_msg.c. This vulnerability is caused by improper data tracing, and an attacker could exploit it to cause a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq - https://github.com/emqx/nanomq/issues/1165#issue-1668648319 - https://github.com/emqx/nanomq/pull/1187
CVE ID: CVE-2023-33658 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:33:54.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_msg_get_pub_pid() in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq - https://github.com/emqx/nanomq/issues/1153 - https://github.com/nanomq/NanoNNG/commit/657e6c81c474bdee0e6413483b990e90610030c1
CVE ID: CVE-2023-33659 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T16:03:48.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmq_subinfo_decode() in the file mqtt_parser.c. An attacker could exploit this vulnerability to cause a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq - https://github.com/emqx/nanomq/issues/1154 - https://github.com/nanomq/NanoNNG/pull/509/commits/6815c4036a2344865da393803ecdb7af27d8bde1
CVE ID: CVE-2023-33660 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T21:21:57.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copyn_str() in the file mqtt_parser.c. An attacker could exploit this vulnerability to cause a denial of service attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq - https://github.com/nanomq/NanoNNG/pull/509/commits/6815c4036a2344865da393803ecdb7af27d8bde1 - https://github.com/emqx/nanomq/issues/1155
CVE ID: CVE-2023-33661 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T15:01:40.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities were discovered in Church CRM v4.5.3 in GroupReports.php via GroupRole, ReportModel, and OnlyCart parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChurchCRM/CRM/issues/6474
CVE ID: CVE-2023-33663 State: PUBLISHED Published: 2023-08-16T00:00:00 Last Updated: 2024-10-08T19:26:07.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for PrestaShop, an attacker can perform SQL injection up to 0.2.0. Release 0.2.1 fixed this security issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.boutique.ai-dev.fr/en/customization/62-customization-fee.html - https://security.friendsofpresta.org/modules/2023/08/16/aicustomfee.html
CVE ID: CVE-2023-33664 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T21:06:19.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.boutique.ai-dev.fr/en/ergonomie/61-combinations-on-fly.html - https://security.friendsofpresta.org/modules/2023/06/28/aicombinationsonfly.html
CVE ID: CVE-2023-33665 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T16:41:13.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.boutique.ai-dev.fr/en/ergonomie/56-table-attributes.html - https://security.friendsofpresta.org/modules/2023/08/01/aitable.html
CVE ID: CVE-2023-33666 State: PUBLISHED Published: 2023-08-03T00:00:00 Last Updated: 2024-10-17T16:40:33.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.boutique.ai-dev.fr/en/ergonomie/59-optimized-combinations.html - https://security.friendsofpresta.org/modules/2023/08/03/aioptimizedcombinations.html
CVE ID: CVE-2023-33668 State: PUBLISHED Published: 2023-07-12T00:00:00 Last Updated: 2024-11-07T19:21:14.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://digiexam.com - https://github.com/lodi-g/CVE-2023-33668
CVE ID: CVE-2023-33669 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:27:53.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DDizzzy79/Tenda-CVE/blob/main/AC8V4.0/N1/README.md - https://github.com/DDizzzy79/Tenda-CVE/tree/main/AC8V4.0/N1
CVE ID: CVE-2023-33670 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:26:40.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DDizzzy79/Tenda-CVE/blob/main/AC8V4.0/N3/README.md - https://github.com/DDizzzy79/Tenda-CVE/tree/main/AC8V4.0/N3
CVE ID: CVE-2023-33671 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:24:40.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DDizzzy79/Tenda-CVE/blob/main/AC8V4.0/N4/README.md - https://github.com/DDizzzy79/Tenda-CVE/tree/main/AC8V4.0/N4
CVE ID: CVE-2023-33672 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:20:27.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DDizzzy79/Tenda-CVE/blob/main/AC8V4.0/N2/README.md - https://github.com/DDizzzy79/Tenda-CVE/tree/main/AC8V4.0/N2
CVE ID: CVE-2023-33673 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:18:01.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DDizzzy79/Tenda-CVE/blob/main/AC8V4.0/N6/README.md - https://github.com/DDizzzy79/Tenda-CVE/tree/main/AC8V4.0/N6
CVE ID: CVE-2023-33675 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:16:20.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DDizzzy79/Tenda-CVE/blob/main/AC8V4.0/N5/README.md - https://github.com/DDizzzy79/Tenda-CVE/tree/main/AC8V4.0/N5
CVE ID: CVE-2023-33676 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-16T16:57:17.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" which can be escalated to the remote command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2023-33676/blob/main/CVE-30
CVE ID: CVE-2023-33677 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-28T18:42:12.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://wwwsourcecodestercom.com - https://github.com/ASR511-OO7/CVE-2023-33677/blob/main/CVE-29
CVE ID: CVE-2023-33684 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2024-08-02T15:47:06.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php
CVE ID: CVE-2023-33690 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T18:45:01.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/6ZuwA9CkQLg - https://github.com/lane711/sonicjs/pull/183
CVE ID: CVE-2023-33693 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T18:43:56.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS) via a crafted XML file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tsingsee/EasyPlayerPro-Win/blob/master/Src/C%2B%2B/EasyPlayerPro/xmlConfig.h - https://www.youtube.com/watch?v=K27nGHa-hTE&ab_channel=ErnestAng - https://github.com/tsingsee/EasyPlayerPro-Win/pull/24
CVE ID: CVE-2023-33695 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T02:22:07.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dromara/hutool/issues/3103
CVE ID: CVE-2023-33706 State: PUBLISHED Published: 2023-11-24T00:00:00 Last Updated: 2024-08-02T15:47:06.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://blog.pridesec.com.br/en/insecure-direct-object-reference-idor-affects-helpdesk-sysaid/
CVE ID: CVE-2023-33715 State: REJECTED Published: N/A Last Updated: 2023-07-09T00:00:00 Description: No description available.
CVE ID: CVE-2023-33716 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T17:45:59.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: mp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/enzo1982/mp4v2/issues/36
CVE ID: CVE-2023-33717 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:14:59.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: mp4v2 v2.1.3 was discovered to contain a memory leak when a method calling MP4File::ReadBytes() had allocated memory but did not catch exceptions thrown by ReadBytes() Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/enzo1982/mp4v2/issues/37 - https://github.com/enzo1982/mp4v2/
CVE ID: CVE-2023-33718 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:02:07.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/enzo1982/mp4v2/issues/37
CVE ID: CVE-2023-33719 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T17:43:48.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: mp4v2 v2.1.3 was discovered to contain a memory leak via MP4SdpAtom::Read() at atom_sdp.cpp Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/enzo1982/mp4v2/issues/37 - https://github.com/enzo1982/mp4v2/
CVE ID: CVE-2023-33720 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-14T20:08:43.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/enzo1982/mp4v2/issues/36
CVE ID: CVE-2023-33722 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:01:10.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shimo.im/docs/pmkxQ1GQ4DTowANr - https://docs.google.com/document/d/1KNuU0nVd4oHMZiKgfs45wK2yA4N6K7q4/edit?usp=sharing&ouid=108638774561085298954&rtpof=true&sd=true
CVE ID: CVE-2023-33725 State: PUBLISHED Published: 2023-06-21T00:00:00 Last Updated: 2024-12-06T17:14:54.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Contrast-Security-OSS/Burptrast/tree/main/docs/CVE-2023-33725
CVE ID: CVE-2023-33730 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T14:58:57.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md
CVE ID: CVE-2023-33731 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-08T20:06:20.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the URL directly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://owasp.org/www-community/attacks/xss/ - https://github.com/sahiloj/CVE-2023-33731/blob/main/CVE-2023-33731.md
CVE ID: CVE-2023-33732 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T14:58:17.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-33733/blob/main/CVE-2023-33733.md
CVE ID: CVE-2023-33733 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T18:40:31.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/c53elyas/CVE-2023-33733 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ALE727IRACYBTTOFIFG57RS4OA2SHIJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36WOY22ECJCPOXHVTNCHEWOQLL7JSWP4/
CVE ID: CVE-2023-33734 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T19:49:19.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Peanuts-s/BlueCms
CVE ID: CVE-2023-33735 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T14:57:45.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/DIR-846/vul.md
CVE ID: CVE-2023-33736 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T14:55:59.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jqhph/dcat-admin/issues/2027
CVE ID: CVE-2023-33740 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T18:53:05.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification fo the Verify parameter in a warning message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zzh-newlearner/record/blob/main/luowice_warning.md
CVE ID: CVE-2023-33741 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T18:48:20.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zzh-newlearner/record/blob/main/macrovideo_share.md
CVE ID: CVE-2023-33742 State: PUBLISHED Published: 2023-07-27T00:00:00 Last Updated: 2024-10-23T13:04:09.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive Information: RSA private key in Update.exe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/173764/RoomCast-TA-2400-Cleartext-Private-Key-Improper-Access-Control.html
CVE ID: CVE-2023-33743 State: PUBLISHED Published: 2023-07-27T00:00:00.000Z Last Updated: 2025-02-13T16:55:08.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge (adb) is available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/173764/RoomCast-TA-2400-Cleartext-Private-Key-Improper-Access-Control.html