Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47308 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T18:06:04.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions. The method `NewsletterpopsendVerificationModuleFrontController::checkEmailSubscription()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/friends-of-presta/security-advis
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2023-11-09-newsletterpop.md
CVE ID: CVE-2023-47309 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:59:32.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nukium nkmgls before version 3.0.2 is vulnerable to Cross Site Scripting (XSS) via NkmGlsCheckoutModuleFrontController::displayAjaxSavePhoneMobile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/11/14/nkmgls.html
CVE ID: CVE-2023-47310 State: PUBLISHED Published: 2025-06-30T00:00:00.000Z Last Updated: 2025-06-30T19:46:26.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://mikrotik.com - http://routeros.com - https://forum.mikrotik.com/t/fixed-in-7-14-security-vulnerability-default-configuration-firewall-bypass-for-ipv6-udp/262186
CVE ID: CVE-2023-47311 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-02T21:09:36.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf
CVE ID: CVE-2023-47312 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:37.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entries. Additional Analyst Notes: - CVE Program Container: References: - https://boltonshield.com/en/cve/cve-2023-47312/
CVE ID: CVE-2023-47313 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:36.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal. The application uses an API call to move the uploaded temporary file to the file directory during the file upload process. This API call receives two input parameters, such as path and localPath. The first one refers to the temporary file with an absolute path without validating it. Attackers may modify this API call by referring to arbitrary files. As a result, arbitrary files can be moved to the files directory and so they can be downloaded. Additional Anal
y files. As a result, arbitrary files can be moved to the files directory and so they can be downloaded. Additional Analyst Notes: - CVE Program Container: References: - https://boltonshield.com/en/cve/cve-2023-47313/
CVE ID: CVE-2023-47314 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:36.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS). The file upload function allows APK and arbitrary files to be uploaded. By exploiting this issue, attackers may upload HTML files and share the download URL pointing to these files with the victims. As the file download function returns the file in inline mode, the victim’s browser will immediately render the content of the HTML file as a web page. As a result, the uploaded client-side code will be evaluated and executed in the victim’s browser, allowi
as a web page. As a result, the uploaded client-side code will be evaluated and executed in the victim’s browser, allowing attackers to perform common XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://boltonshield.com/en/cve/cve-2023-47314/
CVE ID: CVE-2023-47315 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:36.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens. Additional Analyst Notes: - CVE Program Container: References: - https://boltonshield.com/en/cve/cve-2023-47315/
CVE ID: CVE-2023-47316 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:37.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to potentially sensitive API calls such as listing users and their data, file management API calls and audit-related API calls. Additional Analyst Notes: - CVE Program Container: References: - https://boltonshield.com/en/cve/cve-2023-47316/
CVE ID: CVE-2023-47320 State: PUBLISHED Published: 2023-12-13T00:00:00.000Z Last Updated: 2025-05-22T18:25:51.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://silverpeas.com - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47320
CVE ID: CVE-2023-47321 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-11-26T15:14:48.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://silverpeas.com - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47321
CVE ID: CVE-2023-47322 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:09:36.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user in the application. Additional Analyst Notes: - CVE Program Container: References: - http://silverpeas.com - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47322
CVE ID: CVE-2023-47323 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:09:37.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators. Additional Analyst Notes: - CVE Program Container: References: - http://silverpeas.com - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47323
CVE ID: CVE-2023-47324 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:09:36.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature. Additional Analyst Notes: - CVE Program Container: References: - http://silverpeas.com - https://github.com/Silverpeas/Silverpeas-Core/pull/1298/commits - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47324
CVE ID: CVE-2023-47325 State: PUBLISHED Published: 2023-12-13T00:00:00.000Z Last Updated: 2025-05-22T18:23:42.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://silverpeas.com - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47325
CVE ID: CVE-2023-47326 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:09:36.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function. Additional Analyst Notes: - CVE Program Container: References: - http://silverpeas.com - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47326
CVE ID: CVE-2023-47327 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-11-26T15:14:02.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://silverpeas.com - https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47327
CVE ID: CVE-2023-47335 State: PUBLISHED Published: 2023-11-16T00:00:00.000Z Last Updated: 2025-06-11T14:14:41.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the geo-fence and fly into no-fly zones. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/czbxzm/AUTEL-smart-drones-have-a-vulnerability-to-unauthorised-breaches-of-no-fly-zone
CVE ID: CVE-2023-47345 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:06:37.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc/issues/483
CVE ID: CVE-2023-47346 State: PUBLISHED Published: 2023-11-13T00:00:00 Last Updated: 2024-09-03T16:12:41.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc/issues/482
CVE ID: CVE-2023-47347 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T15:29:50.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc/issues/496
CVE ID: CVE-2023-47350 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-11-26T19:44:00.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability in SwiftyEdit Content Management System prior to v1.2.0, allows remote attackers to escalate privileges via the user password update functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SwiftyEdit/SwiftyEdit/commit/90a6f3df16cd1578b2827d7b2e073451f7ce4e47 - https://mechaneus.github.io/CVE-2023-47350.html
CVE ID: CVE-2023-47352 State: PUBLISHED Published: 2024-01-22T00:00:00.000Z Last Updated: 2025-05-30T14:23:10.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Technicolor TC8715D devices have predictable default WPA2 security passwords. An attacker who scans for SSID and BSSID values may be able to predict these passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://i.ebayimg.com/images/g/d4EAAOSwV01kEM26/s-l1600.jpg - https://i.ebayimg.com/images/g/zp8AAOSwbNpkEM26/s-l1600.jpg - https://github.com/actuator/Technicolor/blob/main/TC8715D.png - https://github.com/actuator/cve/blob/main/Technicolor/CVE-2023-47352
CVE ID: CVE-2023-47353 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-05-08T19:15:31.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/imou/blob/main/com.dahua.imou.go-V1.0.11.md - https://play.google.com/store/apps/details?id=com.dahua.imou.go
CVE ID: CVE-2023-47354 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-05-15T19:46:13.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.bdrm.superreboot/blob/main/CWE-925.md - https://play.google.com/store/apps/details?id=com.bdrm.superreboot
CVE ID: CVE-2023-47355 State: PUBLISHED Published: 2024-02-05T00:00:00.000Z Last Updated: 2025-06-20T20:06:06.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md - https://play.google.com/store/apps/details?id=com.e
ithub.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md - https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot
CVE ID: CVE-2023-47356 State: PUBLISHED Published: 2025-07-17T00:00:00.000Z Last Updated: 2025-07-24T20:14:33.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via the log_type parameter at /log/fw_security.mds. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/night-0p/anh/blob/main/MingyuSecurityGateway/rce1.md - https://gist.github.com/night-0p/8d414bfef1cb16539da67e122d91e8da
CVE ID: CVE-2023-47357 State: REJECTED Published: N/A Last Updated: 2024-04-23T21:54:52.356255 Description: No description available.
CVE ID: CVE-2023-47359 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-08-02T21:09:36.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://0xariana.github.io/blog/real_bugs/vlc/mms - https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html
CVE ID: CVE-2023-47360 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-08-02T21:09:36.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length. Additional Analyst Notes: - CVE Program Container: References: - https://0xariana.github.io/blog/real_bugs/vlc/mms - https://lists.debian.org/debian-lts-announce/2023/11/msg00034.html
CVE ID: CVE-2023-47363 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-08-02T21:09:36.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notifications to victims. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syz913/CVE-reports/blob/main/F.B.P%20members.md
CVE ID: CVE-2023-47364 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-11-26T21:17:29.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications to victims Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/nagaoka%20taxi.md
CVE ID: CVE-2023-47365 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-08-02T21:09:36.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syz913/CVE-reports/blob/main/Lil.OFF-PRICE%20STORE.md
CVE ID: CVE-2023-47366 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-03T19:02:17.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in craft_members Line 13.6.1 allows remote attackers to send malicious notifications to victims. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/craft_members.md
CVE ID: CVE-2023-47367 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-08-02T21:09:36.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notifications to victims. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/syz913/CVE-reports/blob/main/platinum%20clinic.md
CVE ID: CVE-2023-47368 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-03T18:57:50.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send malicious notifications to victims. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/taketorinoyu.md
CVE ID: CVE-2023-47369 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-03T19:00:15.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in best_training_member Line 13.6.1 allows remote attackers to send malicious notifications. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/best_training_member.md
CVE ID: CVE-2023-47370 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-03T18:56:42.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to victims. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/bluetrick.md
CVE ID: CVE-2023-47372 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-04T15:18:08.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/UPDATESALON%20C-LOUNGE.md
CVE ID: CVE-2023-47373 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-04T14:58:31.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/syz913/CVE-reports/blob/main/DRAGON%20FAMILY.md
CVE ID: CVE-2023-47379 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-03T19:53:20.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.getastra.com/blog/security-audit/stored-xss-vulnerability/ - https://github.com/microweber/microweber/commit/c6e7ea9d0abd7564a3bb23c14ad172e4ccf27a7e#diff-fac4e7e9eca69c10d074bf8c5eac7f64b018c6b4d91dcad54b340a8560049e00 - https://github.com/microweber/microweber/blob/master/CHANGELOG.md
CVE ID: CVE-2023-47380 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:36.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://www.getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio/ - https://www.admidio.org/intern/adm_program/modules/announcements/announcements.php?ann_uuid=714ead2b-1718-4251-a9a3-f1b0df12d60e&headline=Blog - https://github.com/Admidio/admidio/releases/tag/v4.2.13
CVE ID: CVE-2023-47384 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T17:44:09.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2672
CVE ID: CVE-2023-47390 State: PUBLISHED Published: 2023-11-11T00:00:00 Last Updated: 2024-09-03T17:20:42.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Headscale through 0.22.3 writes bearer tokens to info-level logs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/juanfont/headscale/issues/1259
CVE ID: CVE-2023-47392 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-29T19:54:08.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/wwwziziyu/d0ae135b8075f6db735d75135254e7a1