Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0782 State: PUBLISHED Published: 2023-02-11T17:00:26.679Z Last Updated: 2025-03-24T14:48:05.523Z Severity: N/A (CVSS 8.3 AV:N/AC:L/Au:M/C:C/I:C/A:C) Vendors: Tenda Products: AC23 Problem Types: CWE-787 Description: A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function formSetSysToolDDNS/formGetSysToolDDNS of the file /bin/httpd. The manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220640. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
s vulnerability is VDB-220640. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.220640 - https://vuldb.com/?ctiid.220640 - https://github.com/jingping911/tendaAC23overflow/blob/main/README.md
CVE ID: CVE-2023-0783 State: PUBLISHED Published: 2023-02-11T17:04:42.144Z Last Updated: 2024-08-02T05:24:34.435Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: EcShop Problem Types: CWE-434 Description: A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the component PHP File Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-220641 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - ht
ifier VDB-220641 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220641 - https://vuldb.com/?ctiid.220641 - https://github.com/jingping911/exshopbug/blob/main/README.md
CVE ID: CVE-2023-0784 State: PUBLISHED Published: 2023-02-12T07:29:22.816Z Last Updated: 2024-08-02T05:24:33.883Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Best Online News Portal Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220644. Additional Analyst Notes: - CVE Program Container: Re
d may be used. The identifier of this vulnerability is VDB-220644. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220644 - https://vuldb.com/?ctiid.220644 - https://youtu.be/V62MSWhLGL4
CVE ID: CVE-2023-0785 State: PUBLISHED Published: 2023-02-12T07:37:15.189Z Last Updated: 2024-08-02T05:24:34.373Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Best Online News Portal Problem Types: CWE-202 Description: A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult
he attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220645 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220645 - https://vuldb.com/?ctiid.220645 - https://youtu.be/n_BfBlsUIN8
CVE ID: CVE-2023-0786 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-24T17:47:39.192Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/8c74ccab-0d1d-4c6b-a0fa-803aa65de04f - https://github.com/thorsten/phpmyfaq/commit/ce676eb9e9d8cb7864f36ee124e838b1ad15415f
CVE ID: CVE-2023-0787 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-24T17:46:55.107Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/87397c71-7b84-4617-a66e-fa6c73be9024 - https://github.com/thorsten/phpmyfaq/commit/b76d58321a7a595eeaf4f7a30403ca6cd8506612
CVE ID: CVE-2023-0788 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-21T18:51:06.746Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-94 Description: Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/808d5452-607c-4af1-812f-26c49faf3e61 - https://github.com/thorsten/phpmyfaq/commit/77b42b9d0be3990ee7389207a71528b304b03039
CVE ID: CVE-2023-0789 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-21T18:50:23.032Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-77 Description: Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d9375178-2f23-4f5d-88bd-bba3d6ba7cc5 - https://github.com/thorsten/phpmyfaq/commit/40515c74815ace394ab23c6c19cbb33fd49059cb
CVE ID: CVE-2023-0790 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-21T18:49:30.863Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-248 Description: Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/06af150b-b481-4248-9a48-56ded2814156 - https://github.com/thorsten/phpmyfaq/commit/f34d84dfe551ecdd675916e45cc0606e04a0734e
CVE ID: CVE-2023-0791 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-21T18:48:35.950Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/7152b340-c6f3-4ac8-9f62-f764a267488d - https://github.com/thorsten/phpmyfaq/commit/26663efcb0b67e421e4ecccad8f19e7106bb03ce
CVE ID: CVE-2023-0792 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-21T18:47:54.784Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-94 Description: Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/9e21156b-ab1d-4c60-88ef-8c9f3e2feb7f - https://github.com/thorsten/phpmyfaq/commit/d8964568d69488de02f0a0a58acc822eeb5c3cb1
CVE ID: CVE-2023-0793 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-21T18:46:31.971Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-521 Description: Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9 - https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
CVE ID: CVE-2023-0794 State: PUBLISHED Published: 2023-02-12T00:00:00.000Z Last Updated: 2025-03-21T18:47:13.689Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/949975f1-271d-46aa-85e5-1a013cdb5efb - https://github.com/thorsten/phpmyfaq/commit/edf0f6f90d4deaf46b4fd97ae92f16c1e10a2635
CVE ID: CVE-2023-0795 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T19:12:39.089Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/493 - https://gitlab.com/libtiff/libtiff/-/comm
Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/493 - https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0795.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230316-0003/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0796 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T19:11:13.462Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 - http
Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 - https://gitlab.com/libtiff/libtiff/-/issues/499 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0796.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230316-0003/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0797 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T19:03:22.116Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/lib
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 - https://gitlab.com/libtiff/libtiff/-/issues/495 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0797.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0798 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T19:02:57.304Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 - http
Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 - https://gitlab.com/libtiff/libtiff/-/issues/492 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0798.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230316-0003/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0799 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T19:02:37.513Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds read in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 - http
Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68 - https://gitlab.com/libtiff/libtiff/-/issues/494 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0799.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230316-0003/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0800 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T19:01:06.503Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds write in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/496 - https://gitlab.com/libtiff/libtiff/-/co
DP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/issues/496 - https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0800.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230316-0002/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0801 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T19:00:43.776Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds write in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/l
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00 - https://gitlab.com/libtiff/libtiff/-/issues/498 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0801.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230316-0002/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0802 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:59:50.408Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds write in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00 - ht
DP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00 - https://gitlab.com/libtiff/libtiff/-/issues/500 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0802.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230316-0002/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0803 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:55:10.527Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds write in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00 - ht
DP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00 - https://gitlab.com/libtiff/libtiff/-/issues/501 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0803.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230316-0002/ - https://security.gentoo.org/glsa/202305-31
CVE ID: CVE-2023-0804 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T14:47:39.466Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: libtiff Products: libtiff Problem Types: Out-of-bounds write in libtiff Description: LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00 - ht
DP Vulnrichment: References: - https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00 - https://gitlab.com/libtiff/libtiff/-/issues/497 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0804.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00026.html - https://www.debian.org/security/2023/dsa-5361 - https://security.netapp.com/advisory/ntap-20230324-0009/ - https://security.gentoo.org/glsa/202305-31 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FBF3UUFSB6NB3NFTQSKOOIZGXJP3T34Z/
CVE ID: CVE-2023-0805 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-02-12T16:12:30.237Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to have access to the public projects of a public group even after being banned from the public group by the owner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
ter being banned from the public group by the owner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/391433 - https://hackerone.com/reports/1850046 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0805.json
CVE ID: CVE-2023-0808 State: PUBLISHED Published: 2023-02-13T11:01:47.302Z Last Updated: 2024-08-02T05:24:34.401Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Deye, Revolt, Bosswerk Products: Inverter Problem Types: CWE-259 Description: A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation is known
ible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version MW3_16U_5406_1.53 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-220769 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.220769 - https://vuldb.com/?ctiid.220769 - https://heise.de/-7483376
CVE ID: CVE-2023-0809 State: PUBLISHED Published: 2023-10-02T18:56:26.824Z Last Updated: 2025-02-13T16:39:08.267Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: Eclipse Products: Mosquitto Problem Types: CWE-789 Description: In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mosquitto.org/blog/2023/08/version-2-0-16-released/ - https://security.gentoo.org/glsa/202401-09