Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-49330 State: PUBLISHED Published: 2024-05-20T12:19:59.734Z Last Updated: 2024-08-02T21:53:45.218Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2023-49331 State: PUBLISHED Published: 2024-05-20T17:35:49.217Z Last Updated: 2024-08-02T21:53:44.930Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the aggregate reports search option. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2023-49332 State: PUBLISHED Published: 2024-05-20T17:45:36.459Z Last Updated: 2024-08-02T21:53:45.011Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2023-49333 State: PUBLISHED Published: 2024-05-20T17:51:50.719Z Last Updated: 2024-08-02T21:53:45.406Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection in the dashboard graph feature. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2023-49334 State: PUBLISHED Published: 2024-05-20T17:55:14.220Z Last Updated: 2024-08-02T21:53:45.017Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2023-49335 State: PUBLISHED Published: 2024-05-20T17:55:49.809Z Last Updated: 2024-08-02T21:53:44.995Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Description: Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com/products/active-directory-audit/sqlfix-7271.html
CVE ID: CVE-2023-49337 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-26T13:59:57.199Z Severity: LOW (CVSS 2.4 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Concrete CMS before 9.2.3 allows Stored XSS on the Admin Dashboard via /dashboard/system/basics/name. (8.5 and earlier are unaffected.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2232594 - https://github.com/concretecms/concretecms/commit/07b433799b888c4eb854e052ca58b032ebc6d36f - https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updat
a58b032ebc6d36f - https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates
CVE ID: CVE-2023-49338 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-11-07T15:06:13.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2023-49339 State: PUBLISHED Published: 2024-02-13T00:00:00.000Z Last Updated: 2025-05-07T21:14:44.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ellucian Banner 9.17 allows Insecure Direct Object Reference (IDOR) via a modified bannerId to the /StudentSelfService/ssb/studentCard/retrieveData endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ellucian.com/solutions/ellucian-banner - https://github.com/3zizme/CVE-2023-49339/
CVE ID: CVE-2023-49340 State: PUBLISHED Published: 2024-03-09T00:00:00 Last Updated: 2024-08-02T21:53:45.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to escalate privileges and bypass authentication via incorrect access control in the web management portal. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-49340
CVE ID: CVE-2023-49341 State: PUBLISHED Published: 2024-03-09T00:00:00 Last Updated: 2024-08-26T20:28:34.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to obtain sensitive information via cleartext credential storage in backup.htm component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-49341
CVE ID: CVE-2023-49342 State: PUBLISHED Published: 2023-12-14T21:29:39.869Z Last Updated: 2024-08-02T21:53:45.419Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Budgie Products: Budgie Extras Problem Types: CWE-377, CWE-668 Description: Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: Reference
ation to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: References: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49342 - https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-2vfg-p2h9-wg39 - https://ubuntu.com/security/notices/USN-6556-1
CVE ID: CVE-2023-49343 State: PUBLISHED Published: 2023-12-14T21:31:00.844Z Last Updated: 2024-08-02T21:53:44.977Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Budgie Products: Budgie Extras Problem Types: CWE-337, CWE-668 Description: Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: References: -
n to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-27g2-7x65-3cc5 - https://ubuntu.com/security/notices/USN-6556-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49343
CVE ID: CVE-2023-49344 State: PUBLISHED Published: 2023-12-14T21:31:09.613Z Last Updated: 2024-08-02T21:53:45.295Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Budgie Products: Budgie Extras Problem Types: CWE-377, CWE-668 Description: Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: Refe
nformation to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-rhwf-6fc9-9jvm - https://ubuntu.com/security/notices/USN-6556-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49344
CVE ID: CVE-2023-49345 State: PUBLISHED Published: 2023-12-14T21:31:15.978Z Last Updated: 2025-05-21T14:30:27.043Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Budgie Products: Budgie Extras Problem Types: CWE-668, CWE-377 Description: Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: - CISA AD
ation to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49345 - https://ubuntu.com/security/notices/USN-6556-1 - https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-rvhc-rch9-j943
CVE ID: CVE-2023-49346 State: PUBLISHED Published: 2023-12-14T21:31:25.925Z Last Updated: 2024-08-02T21:53:44.936Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Budgie Products: Budgie Extras Problem Types: CWE-377, CWE-668 Description: Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: Referenc
mation to users or deny access to the application and panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-rffw-gg7p-5688 - https://ubuntu.com/security/notices/USN-6556-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49346
CVE ID: CVE-2023-49347 State: PUBLISHED Published: 2023-12-14T21:31:32.489Z Last Updated: 2024-08-02T21:53:45.426Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Budgie Products: Budgie Extras Problem Types: CWE-668, CWE-377 Description: Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application. Additional Analyst Notes: - CVE Program Container: References: - ht
rmation to users, or deny access to the application. Additional Analyst Notes: - CVE Program Container: References: - https://ubuntu.com/security/notices/USN-6556-1 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49347 - https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-xxfq-fqfp-cpvj
CVE ID: CVE-2023-49351 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-02T15:12:35.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows attackers to overwrite other values located on the stack due to an incorrect use of the strcpy() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/countfatcode/temp/blob/main/formUSBAccount/formUSBAccount.md
CVE ID: CVE-2023-49355 State: PUBLISHED Published: 2023-12-11T00:00:00 Last Updated: 2024-10-09T14:35:41.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jqlang/jq/tree/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa - https://github.com/jqlang/jq/blob/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa/src/decNu
41c8d63c4d1b5bc3ef61520c6eb93edaa - https://github.com/jqlang/jq/blob/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa/src/decNumber/decNumber.c#L3764 - https://github.com/linzc21/bug-reports/blob/main/reports/jq/1.7-37-g88f01a7/heap-buffer-overflow/CVE-2023-49355.md
CVE ID: CVE-2023-49356 State: PUBLISHED Published: 2023-12-22T00:00:00.000Z Last Updated: 2025-04-23T16:19:23.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function at apetag.c:592. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/linzc21/bug-reports/blob/main/reports/mp3gain/1.6.2/stack-buffer-overflow/CVE-2023-49356.md
CVE ID: CVE-2023-49363 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-02T21:53:44.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockoa <2.3.3 is vulnerable to SQL Injection. The problem exists in the indexAction method in reimpAction.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wednesdaygogo/Vulnerability-recurrence/blob/main/rockoa%20less%20than%202.3.3%20sql%20injection%20vulnerability.pdf
CVE ID: CVE-2023-49367 State: PUBLISHED Published: 2025-09-18T00:00:00.000Z Last Updated: 2025-09-19T14:25:18.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://kyocera.com - https://github.com/barisbaydur/CVE-2023-49367
CVE ID: CVE-2023-49371 State: PUBLISHED Published: 2023-12-01T00:00:00 Last Updated: 2024-08-02T21:53:44.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Maverickfir/RuoYi-v4.6-vulnerability/blob/main/Ruoyiv4.6.md - https://gist.github.com/Maverickfir/53405b944b2830b43a84abf4b1734847
CVE ID: CVE-2023-49372 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/li-yu320/cms/blob/main/There%20is%20a%20CSRF%20present%20at%20the%20new%20location%20of%20the%20rotation%20image.md
CVE ID: CVE-2023-49373 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/slide/delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/li-yu320/cms/blob/main/There%20is%20a%20CSRF%20at%20the%20deletion%20point%20of%20the%20broadcast%20image.md
CVE ID: CVE-2023-49374 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/update. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/li-yu320/cms/blob/main/There%20is%20CSRF%20in%20the%20rotation%20image%20editing%20section.md
CVE ID: CVE-2023-49375 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/update. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/There%20is%20CSRF%20in%20the%20modification%20of%20the%20friendship%20link.md
CVE ID: CVE-2023-49376 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/Delete%20existing%20CSRF%20in%20label%20management.md
CVE ID: CVE-2023-49377 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/Modification%20of%20CSRF%20in%20Label%20Management.md
CVE ID: CVE-2023-49378 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/CSRF%20exists%20at%20the%20creation%20location%20of%20the%20custom%20table.md
CVE ID: CVE-2023-49379 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/There%20is%20a%20CSRF%20in%20the%20new%20location%20of%20the%20friendship%20link.md
CVE ID: CVE-2023-49380 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/There%20is%20a%20CSRF%20at%20the%20deletion%20point%20of%20the%20friendship%20link.md
CVE ID: CVE-2023-49381 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/CSRF%20exists%20at%20the%20modification%20point%20of%20the%20custom%20table.md
CVE ID: CVE-2023-49382 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/CSRF%20exists%20at%20the%20deletion%20point%20of%20the%20custom%20table.md
CVE ID: CVE-2023-49383 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cui2shark/cms/blob/main/Added%20CSRF%20in%20Label%20Management.md
CVE ID: CVE-2023-49391 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-09-12T19:32:21.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc/issues/497
CVE ID: CVE-2023-49394 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-03T14:29:17.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://narrow-payment-2cd.notion.site/zentao-4-1-3-is-vulnerable-URL-redirect-b03f8f9f5b4e4cbea819c2961c097d92?pvs=4 - https://gist.github.com/xue-yao-go/87d088fa3f423bba8098ef22988e4626
CVE ID: CVE-2023-49395 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nightcloudos/new_cms/blob/main/CSRF%20exists%20in%20the%20column%20management%20modification%20section.md
CVE ID: CVE-2023-49396 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nightcloudos/new_cms/blob/main/CSRF%20exists%20at%20the%20newly%20added%20section%20of%20column%20management.md
CVE ID: CVE-2023-49397 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nightcloudos/new_cms/blob/main/CSRF%20exists%20at%20the%20change%20of%20column%20management%20status.md
CVE ID: CVE-2023-49398 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:53:45.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nightcloudos/new_cms/blob/main/CSRF%20exists%20at%20the%20deletion%20point%20of%20column%20management.md