Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-46356 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T19:08:16.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. The method `SearchApiCsv::getProducts()` has sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/26/csvfeeds-89.html
CVE ID: CVE-2023-46357 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T20:45:41.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Cross Selling in Modal Cart" (motivationsale) < 3.5.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The method `motivationsaleDataModel::getProductsByIds()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://addons.prestashop.com/fr/ventes-croisees-packs-produits/16122-cross-selling-in-modal-cart.html - https://security.friendsofpresta.org/modules/2023/11/
s-croisees-packs-produits/16122-cross-selling-in-modal-cart.html - https://security.friendsofpresta.org/modules/2023/11/21/motivationsale.html
CVE ID: CVE-2023-46358 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-17T14:14:26.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Referral and Affiliation Program" (referralbyphone) version 3.5.1 and before from Snegurka for PrestaShop, a guest can perform SQL injection. Method `ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/24/referralbyphone.html
CVE ID: CVE-2023-46359 State: PUBLISHED Published: 2024-02-06T00:00:00 Last Updated: 2024-10-28T02:00:51.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://hardy.com - https://www.offensity.com/en/blog/os-command-injection-in-cph2-charging-station-200-cve-2023-46359-and-cve-2023-46360/
CVE ID: CVE-2023-46360 State: PUBLISHED Published: 2024-02-06T00:00:00 Last Updated: 2024-08-02T20:45:41.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://hardy.com - https://www.offensity.com/en/blog/os-command-injection-in-cph2-charging-station-200-cve-2023-46359-and-cve-2023-46360/
CVE ID: CVE-2023-46361 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T19:06:13.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/jbig2dec-SEGV/jbig2dec-SEGV.md
CVE ID: CVE-2023-46362 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-04T15:08:00.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2enc_auto_threshold_using_hash in src/jbig2enc.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/agl/jbig2enc/issues/84 - https://github.com/agl/jbig2enc
CVE ID: CVE-2023-46363 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-04T15:03:51.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: jbig2enc v0.28 was discovered to contain a SEGV via jbig2_add_page in src/jbig2enc.cc:512. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/agl/jbig2enc - https://github.com/agl/jbig2enc/issues/85
CVE ID: CVE-2023-46369 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:08:04.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/Tenda/W18E/bug1.md
CVE ID: CVE-2023-46370 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:11:16.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/Tenda/W18E/bug2.md
CVE ID: CVE-2023-46371 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T18:08:22.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TP-Link/TL-WDR7660/2.md - https://github.com/Jianchun-Ding/CVE-poc-update
CVE ID: CVE-2023-46373 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-11T17:59:20.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TP-Link/TL-WDR7660/3.md
CVE ID: CVE-2023-46374 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-12T20:45:09.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://narrow-payment-2cd.notion.site/ZenTao-4-1-3-is-vulnerable-to-Cross-Site-Scripting-xss-CVE-2023-46374-ebdc61e7a88443b481b649764ba66dee
CVE ID: CVE-2023-46375 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-12T20:37:07.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://narrow-payment-2cd.notion.site/zentao-4-1-3-is-vulnerable-to-csrf-CVE-2023-46375-2d9d9fc2371f483eb436af20508df915
CVE ID: CVE-2023-46376 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-12T20:27:50.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zentao Biz version 8.7 and before is vulnerable to Information Disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://narrow-payment-2cd.notion.site/zentao-8-7-has-information-disclosure-vulnerability-CVE-2023-46376-537fae3936b84af583b51b74e6010dd7
CVE ID: CVE-2023-46377 State: REJECTED Published: N/A Last Updated: 2023-11-21T15:28:39.126454 Description: No description available.
CVE ID: CVE-2023-46378 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T19:01:10.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-admin/conf.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Num-Nine/CVE/wiki/Minicms1.1.1-Exists-storage-xss
CVE ID: CVE-2023-46380 State: PUBLISHED Published: 2023-11-04T00:00:00.000Z Last Updated: 2025-11-04T19:25:35.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) send password-change requests via cleartext HTTP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2023/Nov/0 - http://packetstormsecurity.com/files/175646/LOYTEC-Electronics-Insecure-Transit-Insecure-Permissions-Unauthenticated-Access.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-
-Unauthenticated-Access.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46381 State: PUBLISHED Published: 2023-11-04T00:00:00.000Z Last Updated: 2025-11-04T19:25:36.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lack authentication for the preinstalled version of LWEB-802 via an lweb802_pre/ URI. An unauthenticated attacker can edit any project (or create a new project) and control its GUI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2023/Nov/0 - http://packetstormsecurity.com/files/175646/LOYTEC-Electronics-Insecure-Transit-Insecure
org/fulldisclosure/2023/Nov/0 - http://packetstormsecurity.com/files/175646/LOYTEC-Electronics-Insecure-Transit-Insecure-Permissions-Unauthenticated-Access.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46382 State: PUBLISHED Published: 2023-11-04T00:00:00.000Z Last Updated: 2025-11-04T19:25:37.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use cleartext HTTP for login. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2023/Nov/0 - http://packetstormsecurity.com/files/175646/LOYTEC-Electronics-Insecure-Transit-Insecure-Permissions-Unauthenticated-Access.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.c
one.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46383 State: PUBLISHED Published: 2023-11-30T00:00:00.000Z Last Updated: 2025-11-04T19:25:38.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext and allows remote attackers to steal the password and gain full control of Loytec device configuration. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2023/Nov/6 - https://packetstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html - https://www.txone.com/blog/ten-u
/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46384 State: PUBLISHED Published: 2023-11-30T00:00:00.000Z Last Updated: 2025-11-04T19:25:39.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of credentials allows remote attackers to disclose admin password and bypass an authentication to login Loytec device. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2023/Nov/6 - https://packetstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-
nfigurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46385 State: PUBLISHED Published: 2023-11-30T00:00:00.000Z Last Updated: 2025-11-04T19:25:40.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is passed as a value of URL parameters without encryption, so it allows remote attackers to steal the password and gain full control of Loytec device configuration. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2023/Nov/6 - https://packetstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html - https://www.
ketstormsecurity.com/files/175951/Loytec-LINX-Configurator-7.4.10-Insecure-Transit-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46386 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-09-20T16:43:34.463654 Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry.xml file. This vulnerability allows remote attackers to disclose smtp client account credentials and bypass email authentication. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2023/Nov/7 - http://packetstormsecurity.com/files/175952/Loytec-L-INX-Automation-Servers-Information-Disclosure-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-
oytec-L-INX-Automation-Servers-Information-Disclosure-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46387 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-11-26T19:22:17.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal_config.zml file. This vulnerability allows remote attackers to disclose sensitive information on Loytec device data point configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2023/Nov/7 - http://packetstormsecurity.com/files/175952/Loytec-L-INX-Automation-Servers-Information-Disclosure-Cleartext-Secrets.html - https://www
ormsecurity.com/files/175952/Loytec-L-INX-Automation-Servers-Information-Disclosure-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46388 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-09-20T16:46:38.362494 Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_config.zml file. This vulnerability allows remote attackers to disclose smtp client account credentials and bypass email authentication. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2023/Nov/7 - http://packetstormsecurity.com/files/175952/Loytec-L-INX-Automation-Servers-Information-Disclosure-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatch
2/Loytec-L-INX-Automation-Servers-Information-Disclosure-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46389 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-09-20T16:48:00.947420 Vendors: n/a Products: n/a Problem Types: n/a Description: LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via registry.xml file. This vulnerability allows remote attackers to disclose sensitive information on LINX configuration. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2023/Nov/7 - http://packetstormsecurity.com/files/175952/Loytec-L-INX-Automation-Servers-Information-Disclosure-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-
mation-Servers-Information-Disclosure-Cleartext-Secrets.html - https://www.txone.com/blog/ten-unpatched-vulnerabilities-in-building-automation-products-identified-by-txone-networks/ - https://www.cisa.gov/news-events/ics-advisories/icsa-24-247-01
CVE ID: CVE-2023-46393 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-12T14:14:49.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/gouguopen/gougucms/issues/I88TKH
CVE ID: CVE-2023-46394 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-12T20:24:43.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/gouguopen/gougucms/issues/I88TC0
CVE ID: CVE-2023-46396 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T20:34:54.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Audimex 15.0.0 is vulnerable to Cross Site Scripting (XSS) in /audimex/cgi-bin/wal.fcgi via company parameter search filters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/13PK6RnYdq7fJKw47ssgLEsQvzHOJttLL/view?usp=sharing
CVE ID: CVE-2023-46400 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-24T19:17:10.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/6en6ar/5d39374d6ced8acbe489e0b1b932d056
CVE ID: CVE-2023-46401 State: PUBLISHED Published: 2025-01-23T00:00:00.000Z Last Updated: 2025-01-28T16:55:48.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/6en6ar/5d39374d6ced8acbe489e0b1b932d056
CVE ID: CVE-2023-46402 State: PUBLISHED Published: 2023-11-17T00:00:00 Last Updated: 2024-08-02T20:45:41.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: git-urls 1.0.0 allows ReDOS (Regular Expression Denial of Service) in urls.go. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/6en6ar/7c2424c93e7fbf2b6fc44e7fb9acb95d
CVE ID: CVE-2023-46404 State: PUBLISHED Published: 2023-11-03T00:00:00 Last Updated: 2024-09-06T13:58:08.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bitbucket.org/utmandrew/pcrs/commits/5f18bcbb383b7d73f7a8b399cc52b23597d752ae - https://github.com/windecks/CVE-2023-46404
CVE ID: CVE-2023-46407 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-08-02T20:45:41.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/bf814387f42e9b0dea9d75c03db4723c88e7d962 - https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231015004924.597746-1-leo.izen%40gmail.com/ - https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231013014959.536776-1-leo.izen%40gmail.com/
CVE ID: CVE-2023-46408 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T17:05:18.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 41DD80 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/16/1.md
CVE ID: CVE-2023-46409 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T17:03:30.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ 41CC04 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/13/1.md
CVE ID: CVE-2023-46410 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T17:00:48.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 416F60 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/10/1.md
CVE ID: CVE-2023-46411 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T16:31:18.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_415258 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/11/1.md