Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-34647 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T15:01:11.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ckalnarayan/Common-Vulnerabilities-and-Exposures/blob/main/CVE-2023-34647
CVE ID: CVE-2023-34648 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T17:14:50.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ckalnarayan/Common-Vulnerabilities-and-Exposures/blob/main/CVE-2023-34648
CVE ID: CVE-2023-34650 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T15:00:43.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/small-crm-php/ - https://github.com/ckalnarayan/Common-Vulnerabilities-and-Exposures/blob/main/CVE-2023-34650
CVE ID: CVE-2023-34651 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T14:59:47.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/hospital-management-system-in-php/ - https://github.com/ckalnarayan/Common-Vulnerabilities-and-Exposures/blob/main/CVE-2023-34651
CVE ID: CVE-2023-34652 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T14:59:07.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/hostel-management-system/ - https://github.com/ckalnarayan/Common-Vulnerabilities-and-Exposures/blob/main/CVE-2023-34652
CVE ID: CVE-2023-34654 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-11-22T15:52:15.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ae6e361b/taocms-XSS - https://gist.github.com/ae6e361b/b7f162eba1a91df3ad9dc71ec9935960
CVE ID: CVE-2023-34656 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T14:25:07.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management system 3.1 thru 4.1 allows attackers to gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kangjinlong1/Kang.github.io/blob/main/README.md
CVE ID: CVE-2023-34657 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T20:02:52.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the web_recordnum parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/weng-xianhu/eyoucms/issues/43
CVE ID: CVE-2023-34658 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T14:22:57.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crsrg.sh/crsrg-2308101/
CVE ID: CVE-2023-34659 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-17T19:30:00.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/jeecg-boot/issues/4976
CVE ID: CVE-2023-34660 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-17T19:25:44.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/jeecg-boot/issues/4990
CVE ID: CVE-2023-34666 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-12T21:26:08.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/49204
CVE ID: CVE-2023-34669 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-31T15:27:21.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://w3b5h3ll.notion.site/w3b5h3ll/TOTOLINK-CP300-c96d775881f0476b9ef465dba9c6d9b8
CVE ID: CVE-2023-34671 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T18:56:55.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Access Control leads to privilege escalation affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role in the user profile. An attack could occur over the public Internet in some cases. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://elenos.com - https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34671
CVE ID: CVE-2023-34672 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T15:07:06.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Access Control leads to adding a high-privilege user affecting Elenos ETG150 FM transmitter running on version 3.12 by exploiting user's role within the admin profile. An attack could occur over the public Internet in some cases. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://elenos.com - https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34672
CVE ID: CVE-2023-34673 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T19:01:49.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Elenos ETG150 FM transmitter running on version 3.12 was discovered to be leaking SMTP credentials and other sensitive information by exploiting the publicly accessible Memcached service. The attack can occur over the public Internet in some cases. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://elenos.com - https://strik3r.gitbook.io/strik3r-blog/security-research/cves-pocs/cve-2023-34673
CVE ID: CVE-2023-34682 State: REJECTED Published: N/A Last Updated: 2023-07-09T00:00:00 Description: No description available.
CVE ID: CVE-2023-34723 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T19:09:58.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information via /config/system.conf. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570 - https://www.exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725 - http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html
CVE ID: CVE-2023-34724 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T17:34:37.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TECHView LA5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated privileges via the UART interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570 - https://www.exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725 - http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html
CVE ID: CVE-2023-34725 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T16:32:13.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated privileges via a telnet connection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570 - https://www.exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725 - http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html
CVE ID: CVE-2023-34732 State: PUBLISHED Published: 2025-05-12T00:00:00.000Z Last Updated: 2025-05-13T17:25:06.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/saykino/CVE-2023-34732
CVE ID: CVE-2023-34733 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-17T19:21:40.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service (DoS) via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zj3t/Automotive-vulnerabilities/tree/main/VW/jetta2021
CVE ID: CVE-2023-34734 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T15:39:39.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting (XSS) . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/prismbreak/vulnerabilities/issues/3
CVE ID: CVE-2023-34735 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T15:39:11.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/prismbreak/vulnerabilities/issues/4
CVE ID: CVE-2023-34736 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T15:32:02.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/prismbreak/vulnerabilities/issues/5
CVE ID: CVE-2023-34738 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T14:56:56.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chemex through 3.7.1 is vulnerable to arbitrary file upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/celaraze/chemex/issues/64
CVE ID: CVE-2023-34747 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T19:32:44.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ujcms/ujcms/issues/4
CVE ID: CVE-2023-34750 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-02T20:06:33.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=projects&action=edit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
CVE ID: CVE-2023-34751 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-02T20:05:01.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user&page=groups&action=edit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
CVE ID: CVE-2023-34752 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-02T20:02:31.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bloofox.com/ - https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability - http://bloofoxcms.com
CVE ID: CVE-2023-34753 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-02T20:00:42.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&action=edit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
CVE ID: CVE-2023-34754 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-02T19:59:07.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins&action=edit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
CVE ID: CVE-2023-34755 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:16:48.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
CVE ID: CVE-2023-34756 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:13:43.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset&action=edit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
CVE ID: CVE-2023-34758 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-10-02T16:29:43.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tangent65536/Slivjacker - https://github.com/advisories/GHSA-8jxm-xp43-qh3q - https://github.com/BishopFox/sliver/releases/tag/v1.5.40 - https://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091
CVE ID: CVE-2023-34761 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-27T14:54:50.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's client-side chat censor filter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/7-Eleven-Bluetooth-Smart-Cup-Jailbreak - https://github.com/actuator/cve/blob/main/CVE-2023-34761
CVE ID: CVE-2023-34795 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-17T17:14:13.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XLSX file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/brechtsanders/xlsxio/issues/121 - https://github.com/brechtsanders/xlsxio/commit/d653f1604b54532f11b45dca1fa164b4a1f15e2d - https://github.com/xf1les/cve-advisories/blob/main/2023/CVE-2023-34795.md
CVE ID: CVE-2023-34796 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-04T21:45:02.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru commit 8a1d882b4c481a05e296e9b38a7961e912146a0f, allows unauthenticated attackers to execute arbitrary code via the org_name or domain values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xmit.xyz/security/dmarcd-for-death/ - https://github.com/techsneeze/dmarcts-report-viewer/pull/88
CVE ID: CVE-2023-34797 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:11:11.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Broken access control in the Registration page (/Registration.aspx) of Termenos CWX v8.5.6 allows attackers to access sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WhiteBearVN/CWX-Registration-Broken-Access-Control
CVE ID: CVE-2023-34798 State: PUBLISHED Published: 2023-07-25T00:00:00 Last Updated: 2024-10-23T19:58:41.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/Zhu013/e5e6e03613704a2a4107cc6456f1e8e2
CVE ID: CVE-2023-34800 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-16T19:45:16.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/Go-RT-AC750/vul.md
CVE ID: CVE-2023-34823 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:09:39.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu774/fdkaac/issues/55
CVE ID: CVE-2023-34824 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:06:08.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu774/fdkaac/issues/55
CVE ID: CVE-2023-34829 State: PUBLISHED Published: 2023-12-28T00:00:00.000Z Last Updated: 2025-04-17T20:32:57.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SecureScripts/TP-Link_Tapo_Hack
CVE ID: CVE-2023-34830 State: PUBLISHED Published: 2023-06-27T00:00:00 Last Updated: 2024-12-05T19:09:46.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the timeout parameter on the login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40ray.999/cve-2023-34830-reflected-xss-on-i-doit-open-v24-and-below-ad58036f5407 - https://github.com/leekenghwa/CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below
CVE ID: CVE-2023-34831 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T14:21:41.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Submission Web Form" of Turnitin LTI tool/plugin version 1.3 is affected by HTML Injection attacks. The security issue affects the submission web form ("id" and "title" HTTP POST parameters) where the students submit their reports for similarity/plagiarism checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/IthacaLabs/Turnitin/blob/main/Turnitin_Submission_Web_Form/ - https://github.com/IthacaLabs/Turnitin/blob/main/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831/Tur
rnitin_Submission_Web_Form/ - https://github.com/IthacaLabs/Turnitin/blob/main/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831/Turnitin_LTI_1.3_HTMLi_CVE-2023-34831.txt
CVE ID: CVE-2023-34832 State: PUBLISHED Published: 2023-06-16T00:00:00.000Z Last Updated: 2025-02-13T16:55:39.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tp-link.com - http://archer.com - https://gist.github.com/jhacker91/2026e080a42514255e758d64b465d1d5 - http://packetstormsecurity.com/files/172989/TP-Link-Archer-AX10-EU-_V1.2_230220-Buffer-Overflow.html