Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-6071 State: PUBLISHED Published: 2023-11-30T12:48:51.618Z Last Updated: 2024-10-15T17:41:47.096Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Trellix Products: ESM Problem Types: CWE-77 Description: An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute arbitrary code as root on the ESM. This is possible as the input isn't correctly sanitized when adding a new data source. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10413
CVE ID: CVE-2023-6072 State: PUBLISHED Published: 2024-02-13T09:39:54.600Z Last Updated: 2025-04-24T15:39:35.589Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Trellix Products: Trellix Central Management (CM) Problem Types: CWE-79 Description: A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authenticated attacker to craft CM dashboard internal requests causing arbitrary content to be injected into the response when accessing the CM dashboard. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.trellix.com/bundle/cm_9-1-5_rn/page/UUID-fad8a50f-6f
P Vulnrichment: - CVE Program Container: References: - https://docs.trellix.com/bundle/cm_9-1-5_rn/page/UUID-fad8a50f-6f6f-e970-f418-06494a30932e.html
CVE ID: CVE-2023-6073 State: PUBLISHED Published: 2023-11-10T07:32:16.964Z Last Updated: 2025-02-27T20:34:00.676Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Volkswagen Products: ID.3 Problem Types: CWE-284, CWE-20 Description: Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same hardware) and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-iv
SA ADP Vulnrichment: References: - https://asrg.io/cve-2023-6073-dos-and-control-of-volume-settings-for-vw-id-3-icas3-ivi-ecu/
CVE ID: CVE-2023-6074 State: PUBLISHED Published: 2023-11-10T14:31:04.286Z Last Updated: 2025-02-26T21:26:12.733Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file check-status.php of the component Booking Reservation Handler. The manipulation leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-244943. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
ed identifier of this vulnerability is VDB-244943. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244943 - https://vuldb.com/?ctiid.244943
CVE ID: CVE-2023-6075 State: PUBLISHED Published: 2023-11-10T15:00:07.649Z Last Updated: 2025-02-27T20:33:53.453Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-244944. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
this vulnerability is VDB-244944. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244944 - https://vuldb.com/?ctiid.244944
CVE ID: CVE-2023-6076 State: PUBLISHED Published: 2023-11-10T15:31:04.682Z Last Updated: 2025-02-27T20:33:39.646Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PHPGurukul Products: Restaurant Table Booking System Problem Types: CWE-200 Description: A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information disclosure. The attack can be launched remotely. The identifier VDB-244945 was assigned to this vulnerability. Additio
n disclosure. The attack can be launched remotely. The identifier VDB-244945 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244945 - https://vuldb.com/?ctiid.244945
CVE ID: CVE-2023-6077 State: PUBLISHED Published: 2023-12-18T20:08:02.427Z Last Updated: 2024-08-02T08:21:17.248Z Vendors: Unknown Products: Slider Problem Types: CWE-862 Missing Authorization Description: The Slider WordPress plugin before 3.5.12 does not ensure that posts to be accessed via an AJAX action are slides and can be viewed by the user making the request, allowing any authenticated users, such as subscriber to access the content arbitrary post such as private, draft and password protected Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1afc0e4a-f712-47d4-bf29-7719ccbbbb1b
CVE ID: CVE-2023-6078 State: PUBLISHED Published: 2024-02-01T13:33:48.731Z Last Updated: 2025-06-09T20:37:52.984Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: BIOVIA Materials Studio products Problem Types: CWE-78 Description: An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2023-6079 State: REJECTED Published: N/A Last Updated: 2023-11-15T17:01:33.722Z Description: No description available.
CVE ID: CVE-2023-6080 State: PUBLISHED Published: 2024-10-18T16:09:48.316Z Last Updated: 2025-03-17T16:04:35.893Z Vendors: Lakeside Software Products: SysTrack LsiAgent Installer Problem Types: CWE-379 Description: Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnerability which allows attackers SYSTEM level access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.lakesidesoftware.com/ - https://www.cve.org/CVERecord?id=CVE-2023-6080 - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2024/MNDT-2024-0009.md
CVE ID: CVE-2023-6081 State: PUBLISHED Published: 2024-02-12T16:07:30.513Z Last Updated: 2025-05-06T21:02:10.622Z Vendors: Unknown Products: chartjs Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5f011911-5fd1-46d9-b468-3062b4ec6f1e/ - https://lynk.nl/
CVE ID: CVE-2023-6082 State: PUBLISHED Published: 2024-02-12T16:06:00.479Z Last Updated: 2024-08-02T08:21:17.294Z Vendors: Unknown Products: chartjs Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The chartjs WordPress plugin through 2023.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/c3d43aac-66c8-4218-b3f0-5256f895eda3/ - https://lynk.nl/
CVE ID: CVE-2023-6083 State: REJECTED Published: N/A Last Updated: 2023-11-13T23:39:06.646Z Description: No description available.
CVE ID: CVE-2023-6084 State: PUBLISHED Published: 2023-11-12T11:00:06.121Z Last Updated: 2024-08-02T08:21:17.215Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Tongda Products: OA 2017 Problem Types: CWE-89 Description: A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VU_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. VDB-244994 is the identi
rsion 11.10 is able to address this issue. It is recommended to upgrade the affected component. VDB-244994 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.244994 - https://vuldb.com/?ctiid.244994 - https://github.com/T1ANGzy/cve/blob/main/sql.md
CVE ID: CVE-2023-6085 State: REJECTED Published: N/A Last Updated: 2023-11-13T23:38:05.122Z Description: No description available.
CVE ID: CVE-2023-6086 State: REJECTED Published: N/A Last Updated: 2023-11-13T23:35:39.741Z Description: No description available.
CVE ID: CVE-2023-6087 State: REJECTED Published: N/A Last Updated: 2023-11-13T23:34:27.357Z Description: No description available.
CVE ID: CVE-2023-6088 State: REJECTED Published: N/A Last Updated: 2023-11-13T23:33:48.845Z Description: No description available.
CVE ID: CVE-2023-6089 State: REJECTED Published: N/A Last Updated: 2023-11-13T23:32:44.138Z Description: No description available.
CVE ID: CVE-2023-6090 State: PUBLISHED Published: 2024-02-29T05:23:56.567Z Last Updated: 2024-08-09T20:50:33.176Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Mollie Products: Mollie Payments for WooCommerce Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Mollie Mollie Payments for WooCommerce.This issue affects Mollie Payments for WooCommerce: from n/a through 7.3.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mollie-payments-for-woocommerce/wordpress-mollie-payments-for-woocommerce-plugin-7-3-11-arbitrary-fi
abase/vulnerability/mollie-payments-for-woocommerce/wordpress-mollie-payments-for-woocommerce-plugin-7-3-11-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-6091 State: PUBLISHED Published: 2024-03-26T19:49:04.194Z Last Updated: 2024-08-05T16:11:21.162Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: mndpsingh287 Products: Theme Editor Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in mndpsingh287 Theme Editor.This issue affects Theme Editor: from n/a through 2.7.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/theme-editor/wordpress-theme-editor-plugin-2-7-1-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-6092 State: REJECTED Published: N/A Last Updated: 2023-11-13T23:31:52.729Z Description: No description available.
CVE ID: CVE-2023-6093 State: PUBLISHED Published: 2023-12-31T09:53:04.790Z Last Updated: 2024-08-02T08:21:17.143Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Moxa Products: OnCell G3150A-LTE Series Problem Types: CWE-1021 Description: A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the attacker to trick the user into interacting with the application. Additional Analyst Notes: - CVE Program Container: References: -
o trick the user into interacting with the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.moxa.com/en/support/product-support/security-advisory/oncell-g3150a-lte-series-multiple-web-application-vulnerabilities-and-security-enhancement
CVE ID: CVE-2023-6094 State: PUBLISHED Published: 2023-12-31T09:57:27.448Z Last Updated: 2024-08-26T20:21:09.811Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Moxa Products: OnCell G3150A-LTE Series Problem Types: CWE-319 Description: A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the targ
s type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the target. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/oncell-g3150a-lte-series-multiple-web-application-vulnerabilities-and-security-enhancement
CVE ID: CVE-2023-6095 State: PUBLISHED Published: 2024-04-26T07:09:38.940Z Last Updated: 2024-08-02T08:21:17.058Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: Hanwha Vision Co., Ltd. Products: HRX-1620 Problem Types: CWE-121 Description: Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
t for details and workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf
CVE ID: CVE-2023-6096 State: PUBLISHED Published: 2024-04-26T07:16:12.080Z Last Updated: 2024-08-02T08:21:17.318Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hanwha Vision Co., Ltd. Products: HRX-1620 Problem Types: CWE-668 Description: Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hanwhavision.com/wp-conten
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf
CVE ID: CVE-2023-6097 State: PUBLISHED Published: 2023-11-13T13:11:01.674Z Last Updated: 2024-09-03T19:39:23.123Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: ICSSolution Products: ICS Business Manager Problem Types: CWE-89 Description: A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a specially crafted SQL query and retrieve all the information stored in the database. The data could also be modified or deleted, causing the application to malfunction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
ication to malfunction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-icssolution-ics-business-manager
CVE ID: CVE-2023-6098 State: PUBLISHED Published: 2023-11-13T13:13:26.543Z Last Updated: 2024-08-30T19:22:47.444Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: ICSSolution Products: ICS Business Manager Problem Types: CWE-79 Description: An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially crafted string exploiting the obdd_act parameter, allowing the attacker to steal an authenticated user's session, and perform actions within the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/n
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-icssolution-ics-business-manager
CVE ID: CVE-2023-6099 State: PUBLISHED Published: 2023-11-13T15:31:04.608Z Last Updated: 2025-01-08T21:30:08.312Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Shenzhen Youkate Industrial Products: Facial Love Cloud Payment System Problem Types: CWE-269 Description: A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the
to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-245061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.245061 - https://vuldb.com/?ctiid.245061 - https://github.com/gatsby2003/Shenzhen-Youkate-Industrial-Co.-Ltd/blob/main/Shenzhen%20Youkate%20Industrial%20Co.%2C%20Ltd.md
CVE ID: CVE-2023-6100 State: PUBLISHED Published: 2023-11-13T15:31:05.787Z Last Updated: 2025-01-08T21:28:48.814Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Maiwei Products: Safety Production Control Platform Problem Types: CWE-200 Description: A vulnerability classified as problematic was found in Maiwei Safety Production Control Platform 4.1. This vulnerability affects unknown code of the file /api/DataDictionary/GetItemList. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-245062 is the identifier assigned to this vulnerability. NOTE: The vendor w
disclosed to the public and may be used. VDB-245062 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.245062 - https://vuldb.com/?ctiid.245062
CVE ID: CVE-2023-6101 State: PUBLISHED Published: 2023-11-13T16:00:08.546Z Last Updated: 2025-01-08T21:27:40.634Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Maiwei Products: Safety Production Control Platform Problem Types: CWE-200 Description: A vulnerability, which was classified as problematic, has been found in Maiwei Safety Production Control Platform 4.1. This issue affects some unknown processing of the file /TC/V2.7/ha.html of the component Intelligent Monitoring. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this
be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-245063. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.245063 - https://vuldb.com/?ctiid.245063
CVE ID: CVE-2023-6102 State: PUBLISHED Published: 2023-11-13T17:31:05.080Z Last Updated: 2025-01-08T21:26:46.689Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Maiwei Products: Safety Production Control Platform Problem Types: CWE-434 Description: A vulnerability, which was classified as problematic, was found in Maiwei Safety Production Control Platform 4.1. Affected is an unknown function of the file /Content/Plugins/uploader/FileChoose.html?fileUrl=/Upload/File/Pics/&parent. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vul
to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-245064. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.245064 - https://vuldb.com/?ctiid.245064
CVE ID: CVE-2023-6103 State: PUBLISHED Published: 2023-11-13T17:31:06.305Z Last Updated: 2025-01-08T21:14:16.024Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Intelbras Products: RX 1500 Problem Types: CWE-79 Description: A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /WiFi.html of the component SSID Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-245065 was assigned to this vulnerability. NOTE: The vendor was contacted early about this dis
used. The identifier VDB-245065 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.245065 - https://vuldb.com/?ctiid.245065 - https://www.youtube.com/watch?v=BFoGAuEGpvI
CVE ID: CVE-2023-6104 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:26:03.241Z Description: No description available.
CVE ID: CVE-2023-6105 State: PUBLISHED Published: 2023-11-15T20:57:47.981Z Last Updated: 2025-02-13T17:26:03.759Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ManageEngine Products: Service Desk Plus, Asset Explorer, Access Manager Plus Problem Types: CWE-200 Description: An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database passwords. This allows the user to access the ManageEngine product database. Additional Analyst N
crypt product database passwords. This allows the user to access the ManageEngine product database. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2023-35 - https://www.manageengine.com/security/advisory/CVE/CVE-2023-6105.html