Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43208 State: PUBLISHED Published: 2023-10-26T00:00:00.000Z Last Updated: 2025-10-21T23:05:33.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.horizon3.ai/nextgen-mirth-connect-remote-code-execution-vulnerability-cve-2023-43208/ - http://packetstormsecurity.com/files/176920/Mirth-Connect-4.4.0-Remote-Command-Execution.html
CVE ID: CVE-2023-43216 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T15:19:32.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE ID: CVE-2023-43222 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T15:12:31.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.csdn.net/weixin_51394168/article/details/132817842
CVE ID: CVE-2023-43226 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-23T19:15:17.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zzq66/cve/
CVE ID: CVE-2023-43232 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-23T19:46:59.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://dedebiz.com - https://github.com/yux1azhengye/mycve/blob/main/dedebiz_6.2.11_xss.pdf - https://www.dedebiz.com/download
CVE ID: CVE-2023-43233 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:23:40.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yux1azhengye/mycve/blob/main/YZNCMS%201.3.0%20XSS.pdf
CVE ID: CVE-2023-43234 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T15:02:25.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://dedebiz.com - https://github.com/yux1azhengye - https://github.com/yux1azhengye/mycve/blob/main/DedeBIZ_v6.2.11_RCE.pdf - https://www.dedebiz.com
CVE ID: CVE-2023-43235 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-25T13:21:55.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDownSettings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/peris-navince/founded-0-days/blob/main/Dlink/823G/SetWifiDownSettings/1.md
CVE ID: CVE-2023-43236 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T15:17:22.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/peris-navince/founded-0-days/blob/main/Dlink/816/dir_setWanWifi/1.md
CVE ID: CVE-2023-43237 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T15:17:09.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/peris-navince/founded-0-days/blob/main/Dlink/816/setMAC/1.md
CVE ID: CVE-2023-43238 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T15:16:54.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/peris-navince/founded-0-days/blob/main/Dlink/816/form2Dhcpip_cgi/1.md
CVE ID: CVE-2023-43239 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T15:16:43.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/peris-navince/founded-0-days/blob/main/Dlink/816/showMACfilterMAC/1.md
CVE ID: CVE-2023-43240 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-25T13:20:44.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/peris-navince/founded-0-days/blob/main/Dlink/816/ipportFilter/1.md
CVE ID: CVE-2023-43241 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-25T13:19:31.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter TXPower and GuardInt in SetWLanRadioSecurity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/peris-navince/founded-0-days/blob/main/Dlink/823G/SetWLanRadioSecurity/1.md
CVE ID: CVE-2023-43242 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T15:14:08.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/peris-navince/founded-0-days/blob/main/Dlink/816/form2IPQoSTcDel/1.md
CVE ID: CVE-2023-43250 State: PUBLISHED Published: 2023-10-18T00:00:00 Last Updated: 2024-09-13T17:45:36.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mrtouch93/exploits/tree/main/NConvert7.136/User%20Mode%20Write%20AV - https://www.xnview.com/en/nconvert/ - http://packetstormsecurity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Servic
ew.com/en/nconvert/ - http://packetstormsecurity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2023/Oct/15
CVE ID: CVE-2023-43251 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T20:19:36.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.xnview.com/en/nconvert/ - https://github.com/mrtouch93/exploits/tree/main/NConvert7.136/SEH - http://packetstormsecurity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Service.html - http://seclists.org/fulldisclosure/
rity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2023/Oct/15
CVE ID: CVE-2023-43252 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T20:18:16.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.xnview.com/en/nconvert/ - https://github.com/mrtouch93/exploits/tree/main/NConvert7.136/Stack%20Buffer%20Overrun - http://packetstormsecurity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Service.html - http://seclists.org/fulldisclosure/2023/Oct/15
CVE ID: CVE-2023-43256 State: PUBLISHED Published: 2023-09-25T00:00:00 Last Updated: 2024-09-24T15:51:42.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7b - https://blog.moku.fr/cves/CVE-unassigned/ - https://blog.moku.fr/cves/CVE-2023-43256/
CVE ID: CVE-2023-43260 State: PUBLISHED Published: 2023-10-05T00:00:00 Last Updated: 2024-09-19T18:55:46.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the admin panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/win3zz/c7eda501edcf5383df32fabe00938d13
CVE ID: CVE-2023-43261 State: PUBLISHED Published: 2023-10-04T00:00:00.000Z Last Updated: 2025-05-01T17:33:56.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://milesight.com - http://ur5x.com - https://support.milesight-iot.com/support/home - https://github.com/win3zz/CVE-2023-43261 - https://medium.com/%40win3zz/inside-the-router-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf - http://packetstormsecurity.com/files/17698
outer-how-i-accessed-industrial-routers-and-reported-the-flaws-29c34213dfdf - http://packetstormsecurity.com/files/176988/Milesight-UR5X-UR32L-UR32-UR35-UR41-Credential-Leakage.html
CVE ID: CVE-2023-43263 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-23T19:49:47.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=-dXipo_q7tM - https://github.com/b0marek/CVE-2023-43263
CVE ID: CVE-2023-43267 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T16:26:35.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Fliggyaaa/xss/ - https://gist.github.com/Fliggyaaa/b61c24e828cbcfac42406be408665280
CVE ID: CVE-2023-43268 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T16:24:46.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hzya.anlu169.com/ms/login - https://github.com/Fliggyaaa/DeYue-remote-vehicle-management-system - https://gist.github.com/Fliggyaaa/5517fdd59853cd81724b19d2f29c6760
CVE ID: CVE-2023-43269 State: PUBLISHED Published: 2023-10-05T00:00:00 Last Updated: 2024-09-19T19:29:37.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: pigcms up to 7.0 was discovered to contain an arbitrary file upload vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pwnero/vul/issues/1
CVE ID: CVE-2023-43270 State: PUBLISHED Published: 2023-09-22T00:00:00 Last Updated: 2024-09-24T15:51:51.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: dst-admin v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the userId parameter at /home/playerOperate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Libestor/someCVE/tree/main/dst-admin-RCE
CVE ID: CVE-2023-43271 State: PUBLISHED Published: 2023-10-09T00:00:00 Last Updated: 2024-09-19T15:54:40.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the driving recorder through ftp and other protocols. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Question-h/vuln/blob/master/70mai_a500s_backdoor.md - https://github.com/Question-h/vuln/blob/master/CVE-2023-43271.md
CVE ID: CVE-2023-43274 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T19:48:34.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/phpjabbers/2023/PHP-Shopping-Cart-4.2
CVE ID: CVE-2023-43275 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-14T18:29:50.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thedarknessdied/dedecms/blob/main/v5.7_110-CSRF.md
CVE ID: CVE-2023-43278 State: PUBLISHED Published: 2023-09-25T00:00:00 Last Updated: 2024-09-24T15:42:18.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seacms.com - https://www.seacms.net/ - https://blog.csdn.net/sugaryzheng/article/details/133283101?spm=1001.2014.3001.5501
CVE ID: CVE-2023-43279 State: PUBLISHED Published: 2024-03-12T00:00:00.000Z Last Updated: 2025-11-04T18:17:21.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference in mask_cidr6 component at cidr.c in Tcpreplay 4.4.4 allows attackers to crash the application via crafted tcprewrite command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/appneta/tcpreplay/issues/824 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3GYCHPVJ2VFN3D7FI4IRMDVMILLWBRF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMW5
I4IRMDVMILLWBRF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMW5CIODKRHUUH7NTAYIRWGSJ56DTGXM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHUILQV2YJI5TXXXJA5FQ2HJQGFT7NTN/
CVE ID: CVE-2023-43281 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:21:31.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbi_load_gif_main function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/peccc/d8761f6ac45ad55cbd194dd7e6fdfdac - https://github.com/peccc/double-stb - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UVQ7ONFH5GWLMXYEAJG32A3EUKUCEVCR/ - https://lists.fedoraproject.org/archive
e-announce%40lists.fedoraproject.org/message/UVQ7ONFH5GWLMXYEAJG32A3EUKUCEVCR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVABVF4GEM6BYD5L4L64RCRSXUHY6LGN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMXKOKPP4BKTNUTF5KSRDQAWOUILQZNO/
CVE ID: CVE-2023-43284 State: PUBLISHED Published: 2023-10-05T00:00:00 Last Updated: 2024-09-19T19:28:05.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary code via an unspecified manipulation of the QoS POST parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/Y8osw_xU6-0 - https://github.com/MateusTesser/CVE-2023-43284
CVE ID: CVE-2023-43291 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T15:00:55.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Dar1in9s/e3db6b04daacb68633a97581bbd5921b
CVE ID: CVE-2023-43292 State: PUBLISHED Published: 2024-03-12T00:00:00 Last Updated: 2024-08-16T16:55:57.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in My Food Recipe Using PHP with Source Code v.1.0 allows a local attacker to execute arbitrary code via a crafted payload to the Recipe Name, Procedure, and ingredients parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ASR511-OO7/CVE-2023-43292/blob/main/CVE-8
CVE ID: CVE-2023-43295 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T19:59:03.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.clickstudios.com.au/security/advisories/
CVE ID: CVE-2023-43297 State: PUBLISHED Published: 2023-10-02T00:00:00 Last Updated: 2024-09-23T16:41:21.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43297.md
CVE ID: CVE-2023-43298 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-11-26T15:39:40.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43298.md
CVE ID: CVE-2023-43299 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T19:37:23.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43299.md
CVE ID: CVE-2023-43300 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T19:37:23.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43300.md
CVE ID: CVE-2023-43301 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-28T17:26:53.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43301.md
CVE ID: CVE-2023-43302 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T19:37:23.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43302.md
CVE ID: CVE-2023-43303 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T19:37:23.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: References: - http://craftbeer.com
CVE ID: CVE-2023-43304 State: PUBLISHED Published: 2023-12-07T00:00:00.000Z Last Updated: 2025-05-28T15:38:52.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43304.md