Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31629 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:52:38.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the sqlo_union_scope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1139
CVE ID: CVE-2023-31630 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:50:56.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the sqlo_query_spec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1138
CVE ID: CVE-2023-31631 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:40:34.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openlink/virtuoso-opensource/issues/1137
CVE ID: CVE-2023-31634 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-02T17:08:46.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and password can be used to enter the Grafana management console without logging in, a related issue to CVE-2022-23126. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XC9409/CVE-
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XC9409/CVE-2023-31634/blob/main/PoC - https://github.com/adriankumpf/teslamate/releases/tag/v1.27.2
CVE ID: CVE-2023-31654 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-05-30T14:20:52.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redisraft/deps/hiredis/alloc.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/RedisLabs/redisraft/issues/600 - https://seclists.org/fulldisclosure/2024/Jan/13
CVE ID: CVE-2023-31655 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2024-08-02T14:56:35.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RedisLabs/redisraft/issues/608 - https://security.netapp.com/advisory/ntap-20230616-0005/
CVE ID: CVE-2023-31664 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T15:00:57.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in /authenticationendpoint/login.do of WSO2 API Manager before 4.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tenantDomain parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wso2/product-apim/releases/tag/v4.2.0 - https://github.com/wso2/api-manager/issues?q=is%3Aissue+is%3Aclosed+label%3AComponent%2FAPIM+closed%3A2022-04-05..2023-03-11 - https:
b.com/wso2/api-manager/issues?q=is%3Aissue+is%3Aclosed+label%3AComponent%2FAPIM+closed%3A2022-04-05..2023-03-11 - https://github.com/adilkhan7/CVE-2023-31664
CVE ID: CVE-2023-31669 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T14:59:31.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@' before a quote ("). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/wabt/issues/2165 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSFFCKXUQ5PAC5UVXY7N6HEHVQ3AC2RG/
CVE ID: CVE-2023-31670 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T14:58:55.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a Denial of Service (DoS) via running a crafted binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WebAssembly/wabt/issues/2199
CVE ID: CVE-2023-31671 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T16:33:39.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postProcess(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://shop.webbax.ch/modules-de-paiement/123-module-postfinance.html - https://friends-of-presta.github.io/security-advisories/modules/2023/06/13/postfinance.html
CVE ID: CVE-2023-31672 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-12T21:13:01.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the PrestaShop < 2.4.3 module "Length, weight or volume sell" (ailinear) there is a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/06/15/ailinear.html
CVE ID: CVE-2023-31677 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T17:00:18.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zzh-newlearner/record/blob/main/luowice.md
CVE ID: CVE-2023-31678 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T16:55:56.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Videogo v6.8.1 allows attackers to bind shared devices after the connection has been ended. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zzh-newlearner/record/blob/main/yingshi_devicekey.md
CVE ID: CVE-2023-31679 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T16:52:07.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Videogo v6.8.1 allows attackers to access images from other devices via modification of the Device Id parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zzh-newlearner/record/blob/main/yingshi_privacy.md
CVE ID: CVE-2023-31689 State: PUBLISHED Published: 2023-05-22T00:00:00.000Z Last Updated: 2025-01-28T15:56:51.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vedees/wcms/issues/15
CVE ID: CVE-2023-31698 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2024-08-02T14:56:35.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bludit/bludit/issues/1509 - http://packetstormsecurity.com/files/172462/Bludit-CMS-3.14.1-Cross-Site-Scripting.html - https://github.com/bludit/bludit/issues/1212#issuecomment-
om/files/172462/Bludit-CMS-3.14.1-Cross-Site-Scripting.html - https://github.com/bludit/bludit/issues/1212#issuecomment-649514491 - https://github.com/bludit/bludit/issues/1369#issuecomment-940806199
CVE ID: CVE-2023-31699 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:20:48.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChurchCRM/CRM/issues/6471
CVE ID: CVE-2023-31700 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:20:11.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tp-link/postPlcJson/report.md
CVE ID: CVE-2023-31701 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:19:36.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FirmRec/IoT-Vulns/blob/main/tp-link/postPlcJson/report.md
CVE ID: CVE-2023-31702 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:18:55.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-31702/blob/main/README.md - http://packetstormsecurity.com/files/172545/eScan-Management-Console-14.0.1400.2281-SQL-Injection.html
CVE ID: CVE-2023-31703 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:18:08.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sahiloj/CVE-2023-31703/blob/main/README.md - http://packetstormsecurity.com/files/172540/eScan-Management-Console-14.0.1400.2281-Cross-Site-Scripting.html
CVE ID: CVE-2023-31704 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-11-12T15:05:07.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16397/online-computer-and-laptop-store-using-php-and-mysql-source-code-free-download.html - https://github.com/d34dun1c02n/CVE-2023-31704
CVE ID: CVE-2023-31705 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-11-04T14:57:32.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/download-code?nid=16451&title=Task+Reminder+System+in+PHP+and+MySQL+Source+Code+Free+Download - https://github.com/d34dun1c02n/CVE-2023-31705
CVE ID: CVE-2023-31707 State: PUBLISHED Published: 2023-05-19T00:00:00 Last Updated: 2025-01-21T17:19:09.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fnylad/SCSHOP/blob/main/semcms-1.md
CVE ID: CVE-2023-31708 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T19:02:07.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/41
CVE ID: CVE-2023-31710 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-21T13:51:00.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiaobye-ctf/My-CVE/tree/main/TP-Link/CVE-2023-31710
CVE ID: CVE-2023-31714 State: PUBLISHED Published: 2023-08-30T00:00:00 Last Updated: 2024-10-01T20:28:09.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/waqaskanju/Chitor-CMS/commit/69d34420ad382c91b0c285432418c1b0810128c1 - https://github.com/waqaskanju/Chitor-CMS/releases/tag/Chitor-cms - https://github.com/msd0pe-1/chitor-sqli - https://www.exploit-db.com/exploits/51383
CVE ID: CVE-2023-31716 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T18:40:53.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/frangoteam/FUXA - https://github.com/MateusTesser/CVE-2023-31716
CVE ID: CVE-2023-31717 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T18:39:18.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/frangoteam/FUXA - https://youtu.be/IBMXTEI_5wY - https://github.com/MateusTesser/CVE-2023-31717
CVE ID: CVE-2023-31718 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T18:24:33.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/frangoteam/FUXA - https://youtu.be/VCQkEGntN04 - https://github.com/MateusTesser/CVE-2023-31718
CVE ID: CVE-2023-31719 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T18:21:23.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/frangoteam/FUXA - https://youtu.be/cjb2KYpV6dY - https://github.com/MateusTesser/CVE-2023-31719
CVE ID: CVE-2023-31722 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:10:15.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392857#c1
CVE ID: CVE-2023-31723 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:08:06.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/220 - https://github.com/DaisyPo/fuzzing-vulncollect/blob/main/yasm/SEGV/nasm-pp.c:4008%20in%20expand_mmac_params/README.md
CVE ID: CVE-2023-31724 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:07:18.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/222 - https://github.com/DaisyPo/fuzzing-vulncollect/tree/main/yasm/SEGV/nasm-pp.c:3570%20in%20do_directive
CVE ID: CVE-2023-31725 State: PUBLISHED Published: 2023-05-17T00:00:00 Last Updated: 2025-01-22T17:05:55.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/221 - https://github.com/DaisyPo/fuzzing-vulncollect/tree/main/yasm/heap-use-after-free/nasm-pp.c:3878%20in%20expand_mmac_params
CVE ID: CVE-2023-31726 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T19:00:42.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://alist.nn.ci/zh/ - https://github.com/J6451/CVE-2023-31726
CVE ID: CVE-2023-31728 State: PUBLISHED Published: 2024-02-17T00:00:00 Last Updated: 2024-11-01T19:04:41.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.exoticsilicon.com/articles/lte_ethernet_bridge_bug_followup - https://research.exoticsilicon.com/news
CVE ID: CVE-2023-31729 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2025-01-22T14:54:26.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://totolink.com - https://github.com/D2y6p/CVE/blob/main/Totolink/CVE-2023-31729/CVE-2023-31729.md - https://github.com/D2y6p/CVE/blob/2bac2c96e24229fa99e0254eaac1b8809e424b4b/Totolink/CVE-2023-31729/CVE-2023-31729.md
CVE ID: CVE-2023-31740 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T18:56:37.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WL_atten_bb, WL_atten_radio, and WL_atten_ctl in the apply.cgi interface, thereby gaining shell privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://linksys.com - https://github.com/D2y6p/CVE/blob/main/Linksys/CVE-2023-31740/Linksys_E2000_RCE.pdf
CVE ID: CVE-2023-31741 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T18:45:01.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wl_ssid, wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size in the httpd s Start_EPI() function, thereby gaining shell privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://linksys.com - https://github.com/D2y6p/CVE/blob/main/Linksys/CVE-2023-31741/Linksys_E2000_RCE_2.
t: References: - http://linksys.com - https://github.com/D2y6p/CVE/blob/main/Linksys/CVE-2023-31741/Linksys_E2000_RCE_2.pdf
CVE ID: CVE-2023-31742 State: PUBLISHED Published: 2023-05-22T00:00:00.000Z Last Updated: 2025-01-28T16:06:33.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size in the httpd s Start_EPI() function, thereby gaining shell privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://linksys.com - https://github.com/D2y6p/CVE/blob/main/Linksys/CVE-2023-31742/Linksys_WRT54GL_R
ment: References: - http://linksys.com - https://github.com/D2y6p/CVE/blob/main/Linksys/CVE-2023-31742/Linksys_WRT54GL_RCE.pdf
CVE ID: CVE-2023-31746 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T16:35:18.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a command injection vulnerability in the adslr VW2100 router with firmware version M1DV1.0. An unauthenticated attacker can exploit the vulnerability to execute system commands as the root user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/1/VW2100_RCE1.pdf - https://github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/2/VW2100_RCE2.pdf - https://github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/3/VW2100_RCE3.pdf
n/adslr/CVE-2023-31746/2/VW2100_RCE2.pdf - https://github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/3/VW2100_RCE3.pdf - https://github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/4/VW2100_RCE4.pdf
CVE ID: CVE-2023-31747 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-21T18:43:47.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the component NativePushService. This vulnerability allows attackers to launch processes with elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://wondershare.com - http://filmora.com - https://packetstormsecurity.com/files/172464/Filmora-12-Build-1.0.0.7-Unquoted-Service-Path.html