Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-45181 State: PUBLISHED Published: 2024-11-25T15:48:46.577Z Last Updated: 2024-11-25T16:25:18.650Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Jazz Foundation Problem Types: CWE-79 Description: IBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7176207
CVE ID: CVE-2023-45182 State: PUBLISHED Published: 2023-12-14T14:02:28.609Z Last Updated: 2024-08-02T20:14:19.741Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: IBM Products: i Access Client Solutions Problem Types: CWE-922 Description: IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an encrypted password decoded. By somehow gaining access to the encrypted password, a local attacker could exploit this vulnerability to obtain the password to other systems. IBM X-Force ID: 268265. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7091942 - ht
65. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7091942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268265
CVE ID: CVE-2023-45184 State: PUBLISHED Published: 2023-12-14T01:42:01.018Z Last Updated: 2024-09-16T18:42:30.927Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: i Access Client Solutions Problem Types: CWE-922 Description: IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7091942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268270
CVE ID: CVE-2023-45185 State: PUBLISHED Published: 2023-12-14T14:04:36.190Z Last Updated: 2024-08-02T20:14:19.861Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: IBM Products: i Access Client Solutions Problem Types: CWE-863 Description: IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7091942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268
References: - https://www.ibm.com/support/pages/node/7091942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268273
CVE ID: CVE-2023-45186 State: PUBLISHED Published: 2024-04-12T02:45:59.542Z Last Updated: 2024-08-02T20:14:19.832Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Problem Types: CWE-79 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.9, 6.1.0.0 through 6.1.2.3, and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 268691. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
ithin a trusted session. IBM X-Force ID: 268691. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7148015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268691
CVE ID: CVE-2023-45187 State: PUBLISHED Published: 2024-02-09T00:29:52.422Z Last Updated: 2024-08-02T20:14:19.844Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: IBM Products: Engineering Lifecycle Optimization - Publishing Problem Types: CWE-613 Description: IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 268749. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7116045 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ainer: References: - https://www.ibm.com/support/pages/node/7116045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268749
CVE ID: CVE-2023-45188 State: PUBLISHED Published: 2024-06-09T12:15:17.786Z Last Updated: 2024-08-02T20:14:19.731Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Engineering Lifecycle Optimization Publishing Problem Types: CWE-434 Description: IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially crafted request, a remote attacker could exploit this vulnerability to upload a malicious file, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 268751. Addit
s file, which could allow the attacker to execute arbitrary code on the vulnerable system. IBM X-Force ID: 268751. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7156757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268751
CVE ID: CVE-2023-45189 State: PUBLISHED Published: 2023-11-03T22:51:45.475Z Last Updated: 2024-09-05T14:37:23.153Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Robotic Process Automation, Robotic Process Automation for Cloud Pak Problem Types: CWE-200 Description: A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials. IBM X-Force ID: 268752. Additional Analyst Notes: - CVE
ed attacker to programmatically access client vault credentials. IBM X-Force ID: 268752. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7065204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268752
CVE ID: CVE-2023-45190 State: PUBLISHED Published: 2024-02-09T00:32:06.397Z Last Updated: 2025-06-03T18:55:51.072Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Engineering Lifecycle Optimization - Publishing Problem Types: 644 Improper Neutralization of HTTP Headers for Scripting Syntax Description: IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 268754. Additional A
rable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 268754. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7116045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268754
CVE ID: CVE-2023-45191 State: PUBLISHED Published: 2024-02-09T00:34:22.139Z Last Updated: 2024-11-07T19:34:45.832Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Engineering Lifecycle Optimization - Publishing Problem Types: CWE-307 Description: IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 268755. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7116045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268755
CVE ID: CVE-2023-45192 State: PUBLISHED Published: 2024-06-06T18:49:05.734Z Last Updated: 2024-08-02T20:14:19.734Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: IBM Products: Engineering Requirements Management DOORS Next Problem Types: CWE-611 Description: IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/suppor
58. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7156492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268758
CVE ID: CVE-2023-45193 State: PUBLISHED Published: 2024-01-22T19:02:09.851Z Last Updated: 2025-02-13T17:13:51.999Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 268759. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268759 - https://security.netapp.com/adv
pport/pages/node/7105501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268759 - https://security.netapp.com/advisory/ntap-20240307-0001/
CVE ID: CVE-2023-45194 State: PUBLISHED Published: 2023-10-11T00:12:54.320Z Last Updated: 2024-09-18T18:12:54.973Z Vendors: Micro Research Ltd. Products: MR-GM2, MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) Problem Types: Use of Hard-coded Credentials Description: Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication, when the affected product performs the communication without changing the pre-shared key from the factory-default configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
shared key from the factory-default configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mrl.co.jp/20231005_security/ - https://jvn.jp/en/vu/JVNVU99039725/
CVE ID: CVE-2023-45195 State: PUBLISHED Published: 2024-06-24T21:06:09.735Z Last Updated: 2024-08-02T20:14:19.950Z Vendors: Adminer, AdminerEvo Products: Adminer, AdminerEvo Problem Types: CWE-918 Description: Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote attacker to enumerate or access systems the attacker would not otherwise have access to. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adminerevo/adminerevo/pull/102/commits/18f3167bbcbec3bc746f62db72e016aa99144efc
CVE ID: CVE-2023-45196 State: PUBLISHED Published: 2024-06-24T20:48:21.534Z Last Updated: 2024-08-02T20:14:20.034Z Vendors: Adminer, AdminerEvo Products: Adminer, AdminerEvo Problem Types: CWE-400 Description: Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacker-controlled service that responds with HTTP redirects. The denial of service is subject to PHP configuration limits. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adminerevo/adminerevo/pull/102/commits/23e7cdc0a32b3739e1
ent: - CVE Program Container: References: - https://github.com/adminerevo/adminerevo/pull/102/commits/23e7cdc0a32b3739e13d19ae504be0fe215142b6
CVE ID: CVE-2023-45197 State: PUBLISHED Published: 2024-06-21T14:28:36.476Z Last Updated: 2024-08-02T20:14:19.841Z Vendors: Adminer, AdminerEvo Products: Adminer, AdminerEvo Problem Types: CWE-434, CWE-22 Description: The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attacker can effectively guess the name of the uploaded file and execute it. Adminer is no longer supported, but this issue was fixed in AdminerEvo version 4.8.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adminerevo/adminerevo/commit/1cc06d6a1005fd833fa009701bad
ent: - CVE Program Container: References: - https://github.com/adminerevo/adminerevo/commit/1cc06d6a1005fd833fa009701badd5641627a1d4 - https://github.com/adminerevo/adminerevo/releases/tag/v4.8.3
CVE ID: CVE-2023-45198 State: PUBLISHED Published: 2023-10-05T00:00:00 Last Updated: 2024-09-19T17:42:09.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd (the portable version of NetBSD ftpd) before 20231001 is also vulnerable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mail-index.netbsd.org/source-changes/2023/09/22/msg147669.html - http://cvsweb.netbsd.org/bsdweb.cgi/src/libexec/ftpd/ftpcmd.y.diff?r1=1.94&r2=1.95
CVE ID: CVE-2023-45199 State: PUBLISHED Published: 2023-10-07T00:00:00 Last Updated: 2024-09-19T15:45:59.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2023-10-2/
CVE ID: CVE-2023-45201 State: PUBLISHED Published: 2023-11-01T21:53:07.852Z Last Updated: 2024-09-05T14:37:05.731Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Projectworlds Pvt. Limited Products: Online Examination System Problem Types: CWE-601 Description: Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/uchida - https://projectworlds.in/
CVE ID: CVE-2023-45202 State: PUBLISHED Published: 2023-11-01T22:02:45.250Z Last Updated: 2024-09-05T14:36:41.811Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Projectworlds Pvt. Limited Products: Online Examination System Problem Types: CWE-601 Description: Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/uchida - https://projectworlds.in/
CVE ID: CVE-2023-45203 State: PUBLISHED Published: 2023-11-01T22:11:49.439Z Last Updated: 2024-09-05T14:36:18.483Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Projectworlds Pvt. Limited Products: Online Examination System Problem Types: CWE-601 Description: Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/uchida - https://projectworlds.in/
CVE ID: CVE-2023-45204 State: PUBLISHED Published: 2023-10-10T10:21:44.994Z Last Updated: 2024-09-18T18:44:39.869Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-704 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21
ially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21268) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-524778.pdf
CVE ID: CVE-2023-45205 State: PUBLISHED Published: 2023-10-10T10:21:46.194Z Last Updated: 2024-08-02T20:14:19.961Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: SICAM PAS/PQS Problem Types: CWE-732 Description: A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is installed with specific files and folders with insecure permissions. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges to `NT AUTHORITY/SYSTEM`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemen
M`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-035466.pdf - https://cert-portal.siemens.com/productcert/html/ssa-035466.html
CVE ID: CVE-2023-45206 State: PUBLISHED Published: 2024-02-13T00:00:00.000Z Last Updated: 2025-05-07T21:12:51.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. Through the help document endpoint in webmail, an attacker can inject JavaScript or HTML code that leads to cross-site scripting (XSS). (Adding an adequate message to avoid malicious code will mitigate this issue.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Res
wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE ID: CVE-2023-45207 State: PUBLISHED Published: 2024-02-13T00:00:00.000Z Last Updated: 2025-03-27T19:21:44.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. An attacker can send a PDF document through mail that contains malicious JavaScript. While previewing this file in webmail in the Chrome browser, the stored XSS payload is executed. (This has been mitigated by sanitising the JavaScript code present in a PDF document.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Sec
gram Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center - https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE ID: CVE-2023-45208 State: PUBLISHED Published: 2023-10-10T00:00:00 Last Updated: 2024-09-19T13:58:07.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of the repeater) to run shell commands as root during the setup process of the repeater, via a crafted SSID. Also, network names containing single quotes (in the range of the repeater) can result in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.redteam-pentesting.de/en/advisories/rt-sa-
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.redteam-pentesting.de/en/advisories/rt-sa-2023-006/-d-link-dap-x1860-remote-command-injection
CVE ID: CVE-2023-45209 State: PUBLISHED Published: 2024-04-17T12:55:49.210Z Last Updated: 2025-11-04T18:17:29.815Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Peplink Products: Smart Reader Problem Types: CWE-284 Description: An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence
ity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1865 - https://forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256
CVE ID: CVE-2023-45210 State: PUBLISHED Published: 2023-12-06T08:40:41.155Z Last Updated: 2025-05-28T15:49:58.291Z Vendors: Implem Inc. Products: Pleasanter Problem Types: Improper access control Description: Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pleasanter.org/archives/vulnerability-update-202311 - https://jvn.jp/en/jp/JVN96209256/
CVE ID: CVE-2023-45213 State: PUBLISHED Published: 2024-02-06T21:39:36.259Z Last Updated: 2025-05-15T19:43:25.845Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Westermo Products: Lynx Problem Types: CWE-942 Description: A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-04
CVE ID: CVE-2023-45215 State: PUBLISHED Published: 2024-07-08T15:22:26.576Z Last Updated: 2025-11-04T17:12:43.307Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: LevelOne, Realtek Products: WBR-6013, rtl819x Jungle SDK Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in the boa setRepeaterSsid functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of network requests can lead to arbitrary code execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/v
dditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1891