Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4548 State: PUBLISHED Published: 2023-08-26T09:31:04.647Z Last Updated: 2024-08-02T07:31:06.304Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SPA-Cart Products: eCommerce CMS Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unknown part of the file /search of the component GET Parameter Handler. The manipulation of the argument filter[brandid] leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-238059. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238059 -
erability is VDB-238059. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238059 - https://vuldb.com/?ctiid.238059 - http://packetstormsecurity.com/files/174344/SPA-Cart-eCommerce-CMS-1.9.0.3-SQL-Injection.html
CVE ID: CVE-2023-4549 State: PUBLISHED Published: 2023-09-25T15:56:56.189Z Last Updated: 2024-08-02T07:31:05.905Z Vendors: Unknown Products: DoLogin Security Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The DoLogin Security WordPress plugin before 3.7 does not properly sanitize IP addresses coming from the X-Forwarded-For header, which can be used by attackers to conduct Stored XSS attacks via WordPress' login form. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8aebead0-0eab-4d4e-8ceb-8fea0760374f
CVE ID: CVE-2023-4550 State: PUBLISHED Published: 2024-01-29T20:56:09.908Z Last Updated: 2024-11-12T21:30:04.904Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenText Products: AppBuilder Problem Types: CWE-20, CWE-552 Description: Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted. This issue affects AppBuilder: from 21.2 before 23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
AppBuilder: from 21.2 before 23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b
CVE ID: CVE-2023-4551 State: PUBLISHED Published: 2024-01-29T20:56:30.404Z Last Updated: 2024-08-02T07:31:06.062Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenText Products: AppBuilder Problem Types: CWE-20 Description: Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating system commands into the executing process. This issue affects AppBuilder: from 21.2 before 23.2. Additional Analyst Notes: - CISA ADP Vulnrichment
ecuting process. This issue affects AppBuilder: from 21.2 before 23.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b
CVE ID: CVE-2023-4552 State: PUBLISHED Published: 2024-01-29T20:56:35.378Z Last Updated: 2025-06-17T21:29:16.913Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N) Vendors: OpenText Products: AppBuilder Problem Types: CWE-20 Description: Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. This issue affects AppBuilder: from 21.2 before 23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
der: from 21.2 before 23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b
CVE ID: CVE-2023-4553 State: PUBLISHED Published: 2024-01-29T20:56:45.438Z Last Updated: 2024-08-28T20:19:02.071Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenText Products: AppBuilder Problem Types: CWE-20 Description: Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by unauthenticated users. This issue affects AppBuilder: from 21.2 before 23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b
CVE ID: CVE-2023-4554 State: PUBLISHED Published: 2024-01-29T20:56:49.834Z Last Updated: 2025-05-29T15:08:27.904Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenText Products: AppBuilder Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files. AppBuilder's XML processor is vulnerable to XML External Entity Processing (XXE), allowing an authenticated user to upload specially crafted XML files to induce server-side request forgery, disclose files local to the server that processes them. This issue affects AppBuild
induce server-side request forgery, disclose files local to the server that processes them. This issue affects AppBuilder: from 21.2 before 23.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b
CVE ID: CVE-2023-4555 State: PUBLISHED Published: 2023-08-27T06:00:08.837Z Last Updated: 2024-08-02T07:31:06.262Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file suppliar_data.php. The manipulation of the argument name/company leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238153 was assigned to this vulnerability.
exploit has been disclosed to the public and may be used. The identifier VDB-238153 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.238153 - https://vuldb.com/?ctiid.238153 - https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/Inventory-Management-System-XSS.md
CVE ID: CVE-2023-4556 State: PUBLISHED Published: 2023-08-27T06:31:04.667Z Last Updated: 2024-08-02T07:31:06.090Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Graduate Tracer System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqli_query of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-238154 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Pr
public and may be used. VDB-238154 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238154 - https://vuldb.com/?ctiid.238154 - https://blog.csdn.net/weixin_43864034/article/details/132508000
CVE ID: CVE-2023-4557 State: PUBLISHED Published: 2023-08-27T22:00:09.231Z Last Updated: 2024-08-02T07:31:06.153Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_purchase_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238158 is the identifier assigned to this vulnerability. Additiona
has been disclosed to the public and may be used. VDB-238158 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238158 - https://vuldb.com/?ctiid.238158 - https://github.com/ZhangXiaoDan1/cve_hub/blob/main/Free%20and%20Open%20Source%20inventory%20management%20system%20-%20vuln%204.pdf
CVE ID: CVE-2023-4558 State: PUBLISHED Published: 2023-08-27T22:31:05.182Z Last Updated: 2024-08-02T07:31:06.392Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Inventory Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staff_data.php. The manipulation of the argument columns[0][data] leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238159. Additional Ana
n disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238159. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238159 - https://vuldb.com/?ctiid.238159 - https://github.com/TheCyberDiver/Public-Disclosures-CVE-/blob/main/Inventory%20Management%20System%20SQLi%20staff_data.md
CVE ID: CVE-2023-4559 State: PUBLISHED Published: 2023-08-27T22:31:06.420Z Last Updated: 2024-08-02T07:31:06.228Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Bettershop Products: LaikeTui Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some unknown functionality of the file index.php?module=api&action=user&m=upload of the component POST Request Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are
ng a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-238160. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.238160 - https://vuldb.com/?ctiid.238160
CVE ID: CVE-2023-4560 State: PUBLISHED Published: 2023-08-28T00:00:20.331Z Last Updated: 2024-10-02T13:40:44.936Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: omeka Products: omeka/omeka-s Problem Types: CWE-612 Description: Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/86f06e28-ed8d-4f96-b4ad-e47f2fe94ba6 - https://github.com/omeka/omeka-s/commit/b3d8871f22e50ff96a7070fd0be18a0df7b6cbe7
CVE ID: CVE-2023-4561 State: PUBLISHED Published: 2023-08-28T00:00:19.860Z Last Updated: 2024-10-02T13:39:43.593Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: omeka Products: omeka/omeka-s Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d4302a0d-db62-4d76-93dd-e6e6473e057a - https://github.com/omeka/omeka-s/commit/4482f4fc0f3a66c5ef058c4be9fabf3c29a105af
CVE ID: CVE-2023-4562 State: PUBLISHED Published: 2023-10-13T01:26:06.018Z Last Updated: 2025-02-27T20:41:33.964Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Mitsubishi Electric Corporation Products: MELSEC-F Series FX3U-16MT/ES, MELSEC-F Series FX3U-32MT/ES, MELSEC-F Series FX3U-48MT/ES, MELSEC-F Series FX3U-64MT/ES, MELSEC-F Series FX3U-80MT/ES, MELSEC-F Series FX3U-128MT/ES, MELSEC-F Series FX3U-16MR/ES, MELSEC-F Series FX3U-32MR/ES, MELSEC-F Series FX3U-48MR/ES, MELSEC-F Series FX3U-64MR/ES, MELSEC-F Series FX3U-80MR/ES, MELSEC-F Series FX3U-128MR/ES, MELSEC-F Series FX3U-16MT/ESS, MELSEC-F Series FX3U-32MT/ESS, MELSEC-F Series FX3U-48MT/ESS, MELSE
Series FX3U-128MR/ES, MELSEC-F Series FX3U-16MT/ESS, MELSEC-F Series FX3U-32MT/ESS, MELSEC-F Series FX3U-48MT/ESS, MELSEC-F Series FX3U-64MT/ESS, MELSEC-F Series FX3U-80MT/ESS, MELSEC-F Series FX3U-128MT/ESS, MELSEC-F Series FX3U-16MT/DS, MELSEC-F Series FX3U-32MT/DS, MELSEC-F Series FX3U-48MT/DS, MELSEC-F Series FX3U-64MT/DS, MELSEC-F Series FX3U-80MT/DS, MELSEC-F Series FX3U-128MT/DS, MELSEC-F Series FX3U-16MR/DS, MELSEC-F Series FX3U-32MR/DS, MELSEC-F Series FX3U-48MR/DS, MELSEC-F Series FX3U-64MR/DS, MELSEC-F Series FX3U-80MR/DS, MELSEC-F Series FX3U-128MR/DS, MELSEC-F Series FX3U-16MT/DSS, MELSEC-F Series FX3U-32MT/DSS, MELSEC-F Series FX3U-48MT/DSS, MELSEC-F Series FX3U-64MT/DSS, MELSE
Series FX3U-16MT/DSS, MELSEC-F Series FX3U-32MT/DSS, MELSEC-F Series FX3U-48MT/DSS, MELSEC-F Series FX3U-64MT/DSS, MELSEC-F Series FX3U-80MT/DSS, MELSEC-F Series FX3U-128MT/DSS, MELSEC-F Series FX3U-32MR/UA1, MELSEC-F Series FX3U-64MR/UA1, MELSEC-F Series FX3U-32MS/ES, MELSEC-F Series FX3U-64MS/ES, MELSEC-F Series FX3U-16MT/ES-A, MELSEC-F Series FX3U-32MT/ES-A, MELSEC-F Series FX3U-48MT/ES-A, MELSEC-F Series FX3U-64MT/ES-A, MELSEC-F Series FX3U-80MT/ES-A, MELSEC-F Series FX3U-128MT/ES-A, MELSEC-F Series FX3U-16MR/ES-A, MELSEC-F Series FX3U-32MR/ES-A, MELSEC-F Series FX3U-48MR/ES-A, MELSEC-F Series FX3U-64MR/ES-A, MELSEC-F Series FX3U-80MR/ES-A, MELSEC-F Series FX3U-128MR/ES-A, MELSEC-F Serie
MR/ES-A, MELSEC-F Series FX3U-64MR/ES-A, MELSEC-F Series FX3U-80MR/ES-A, MELSEC-F Series FX3U-128MR/ES-A, MELSEC-F Series FX3UC-16MT/D, MELSEC-F Series FX3UC-32MT/D, MELSEC-F Series FX3UC-64MT/D, MELSEC-F Series FX3UC-96MT/D, MELSEC-F Series FX3UC-16MT/DSS, MELSEC-F Series FX3UC-32MT/DSS, MELSEC-F Series FX3UC-64MT/DSS, MELSEC-F Series FX3UC-96MT/DSS, MELSEC-F Series FX3UC-16MR/D-T, MELSEC-F Series FX3UC-16MR/DS-T, MELSEC-F Series FX3UC-32MT-LT, MELSEC-F Series FX3UC-32MT-LT-2, MELSEC-F Series FX3UC-16MT/D-P4, MELSEC-F Series FX3UC-16MT/DSS-P4, MELSEC-F Series FX3G-14MT/ES, MELSEC-F Series FX3G-24MT/ES, MELSEC-F Series FX3G-40MT/ES, MELSEC-F Series FX3G-60MT/ES, MELSEC-F Series FX3G-14MR/ES,
MELSEC-F Series FX3G-24MT/ES, MELSEC-F Series FX3G-40MT/ES, MELSEC-F Series FX3G-60MT/ES, MELSEC-F Series FX3G-14MR/ES, MELSEC-F Series FX3G-24MR/ES, MELSEC-F Series FX3G-40MR/ES, MELSEC-F Series FX3G-60MR/ES, MELSEC-F Series FX3G-14MT/ESS, MELSEC-F Series FX3G-24MT/ESS, MELSEC-F Series FX3G-40MT/ESS, MELSEC-F Series FX3G-60MT/ESS, MELSEC-F Series FX3G-14MT/DS, MELSEC-F Series FX3G-24MT/DS, MELSEC-F Series FX3G-40MT/DS, MELSEC-F Series FX3G-60MT/DS, MELSEC-F Series FX3G-14MR/DS, MELSEC-F Series FX3G-24MR/DS, MELSEC-F Series FX3G-40MR/DS, MELSEC-F Series FX3G-60MR/DS, MELSEC-F Series FX3G-14MT/DSS, MELSEC-F Series FX3G-24MT/DSS, MELSEC-F Series FX3G-40MT/DSS, MELSEC-F Series FX3G-60MT/DSS, M
C-F Series FX3G-14MT/DSS, MELSEC-F Series FX3G-24MT/DSS, MELSEC-F Series FX3G-40MT/DSS, MELSEC-F Series FX3G-60MT/DSS, MELSEC-F Series FX3G-14MT/ES-A, MELSEC-F Series FX3G-24MT/ES-A, MELSEC-F Series FX3G-40MT/ES-A, MELSEC-F Series FX3G-60MT/ES-A, MELSEC-F Series FX3G-14MR/ES-A, MELSEC-F Series FX3G-24MR/ES-A, MELSEC-F Series FX3G-40MR/ES-A, MELSEC-F Series FX3G-60MR/ES-A, MELSEC-F Series FX3GC-32MT/D, MELSEC-F Series FX3GC-32MT/DSS, MELSEC-F Series FX3GE-24MT/ES, MELSEC-F Series FX3GE-40MT/ES, MELSEC-F Series FX3GE-24MR/ES, MELSEC-F Series FX3GE-40MR/ES, MELSEC-F Series FX3GE-24MT/ESS, MELSEC-F Series FX3GE-40MT/ESS, MELSEC-F Series FX3GE-24MT/DS, MELSEC-F Series FX3GE-40MT/DS, MELSEC-F Seri
GE-24MT/ESS, MELSEC-F Series FX3GE-40MT/ESS, MELSEC-F Series FX3GE-24MT/DS, MELSEC-F Series FX3GE-40MT/DS, MELSEC-F Series FX3GE-24MR/DS, MELSEC-F Series FX3GE-40MR/DS, MELSEC-F Series FX3GE-24MT/DSS, MELSEC-F Series FX3GE-40MT/DSS, MELSEC-F Series FX3GA-24MT-CM, MELSEC-F Series FX3GA-40MT-CM, MELSEC-F Series FX3GA-60MT-CM, MELSEC-F Series FX3GA-24MR-CM, MELSEC-F Series FX3GA-40MR-CM, MELSEC-F Series FX3GA-60MR-CM, MELSEC-F Series FX3S-10MT/ES, MELSEC-F Series FX3S-14MT/ES, MELSEC-F Series FX3S-20MT/ES, MELSEC-F Series FX3S-30MT/ES, MELSEC-F Series FX3S-10MR/ES, MELSEC-F Series FX3S-14MR/ES, MELSEC-F Series FX3S-20MR/ES, MELSEC-F Series FX3S-30MR/ES, MELSEC-F Series FX3S-10MT/ESS, MELSEC-F S
ries FX3S-14MR/ES, MELSEC-F Series FX3S-20MR/ES, MELSEC-F Series FX3S-30MR/ES, MELSEC-F Series FX3S-10MT/ESS, MELSEC-F Series FX3S-14MT/ESS, MELSEC-F Series FX3S-20MT/ESS, MELSEC-F Series FX3S-30MT/ESS, MELSEC-F Series FX3S-10MT/DS, MELSEC-F Series FX3S-14MT/DS, MELSEC-F Series FX3S-20MT/DS, MELSEC-F Series FX3S-30MT/DS, MELSEC-F Series FX3S-10MR/DS, MELSEC-F Series FX3S-14MR/DS, MELSEC-F Series FX3S-20MR/DS, MELSEC-F Series FX3S-30MR/DS, MELSEC-F Series FX3S-10MT/DSS, MELSEC-F Series FX3S-14MT/DSS, MELSEC-F Series FX3S-20MT/DSS, MELSEC-F Series FX3S-30MT/DSS, MELSEC-F Series FX3S-30MT/ES-2AD, MELSEC-F Series FX3S-30MR/ES-2AD, MELSEC-F Series FX3S-30MT/ESS-2AD, MELSEC-F Series FX3SA-10MT-CM,
es FX3S-30MT/ES-2AD, MELSEC-F Series FX3S-30MR/ES-2AD, MELSEC-F Series FX3S-30MT/ESS-2AD, MELSEC-F Series FX3SA-10MT-CM, MELSEC-F Series FX3SA-14MT-CM, MELSEC-F Series FX3SA-20MT-CM, MELSEC-F Series FX3SA-30MT-CM, MELSEC-F Series FX3SA-10MR-CM, MELSEC-F Series FX3SA-14MR-CM, MELSEC-F Series FX3SA-20MR-CM, MELSEC-F Series FX3SA-30MR-CM Problem Types: CWE-287 Description: Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages. Additional An
sequence programs or improper data in the product without authentication by sending illegitimate messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-012_en.pdf - https://jvn.jp/vu/JVNVU90509290/ - https://www.cisa.gov/news-events/ics-advisories/icsa-23-285-13
CVE ID: CVE-2023-4563 State: REJECTED Published: N/A Last Updated: 2023-09-14T19:01:23.076Z Description: No description available.
CVE ID: CVE-2023-4564 State: PUBLISHED Published: 2023-10-03T15:22:48.910Z Last Updated: 2024-10-01T10:45:55.688Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Capensis Products: Canopsis Problem Types: CWE-79 Description: This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canopsis-capensis - https://git.canopsis.net/canopsis/canopsis-community/-/blob/develop/community/sources/webcore/src/canopsis-next/s
nsis - https://git.canopsis.net/canopsis/canopsis-community/-/blob/develop/community/sources/webcore/src/canopsis-next/src/helpers/html.js?ref_type=heads - https://git.canopsis.net/canopsis/canopsis-community/-/blob/develop/community/sources/webcore/src/canopsis-next/src/config.js?ref_type=heads#L38
CVE ID: CVE-2023-4565 State: PUBLISHED Published: 2023-09-26T01:25:36.605Z Last Updated: 2024-09-24T17:58:51.981Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/9/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158
CVE ID: CVE-2023-4566 State: PUBLISHED Published: 2024-01-16T07:47:38.075Z Last Updated: 2025-06-20T17:04:52.647Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-4567 State: REJECTED Published: N/A Last Updated: 2023-10-04T13:45:27.570Z Description: No description available.
CVE ID: CVE-2023-4568 State: PUBLISHED Published: 2023-09-13T20:28:52.656Z Last Updated: 2024-09-25T19:58:08.922Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: PaperCut Products: PaperCut NG Problem Types: CWE-287 Description: PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-31
CVE ID: CVE-2023-4569 State: PUBLISHED Published: 2023-08-28T21:46:12.599Z Last Updated: 2025-02-27T21:03:29.416Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a, Red Hat, Fedora Products: Kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-402 Description: A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
lements, which can result in a memory leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-4569 - https://bugzilla.redhat.com/show_bug.cgi?id=2235470 - https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230812110526.49808-1-fw@strlen.de/ - https://www.debian.org/security/2023/dsa-5492
CVE ID: CVE-2023-4570 State: PUBLISHED Published: 2023-10-05T15:26:45.467Z Last Updated: 2024-09-19T18:53:34.207Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NI Products: MeasurementLink Problem Types: CWE-420 Description: An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-service Python package and all previous versions. Additional Analyst Notes: - CVE Program Container: - CISA A
rementlink-service Python package and all previous versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/documentation/supplemental/23/improper-restriction-in-ni-measurementlink-python-services.html