Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-46412 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T16:27:18.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_41D998 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/15/1.md
CVE ID: CVE-2023-46413 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T16:23:14.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_4155DC function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/1/1.md
CVE ID: CVE-2023-46414 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:35:18.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/14/1.md
CVE ID: CVE-2023-46415 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:35:07.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41E588 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/17/1.md
CVE ID: CVE-2023-46416 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:34:57.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ The 41A414 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/12/1.md
CVE ID: CVE-2023-46417 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:34:46.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415498 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/2/1.md
CVE ID: CVE-2023-46418 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:34:39.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/7/1.md
CVE ID: CVE-2023-46419 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:34:30.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/6/1.md
CVE ID: CVE-2023-46420 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:34:24.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/5/1.md
CVE ID: CVE-2023-46421 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:34:15.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411D00 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/8/1.md
CVE ID: CVE-2023-46422 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:34:07.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/9/1.md
CVE ID: CVE-2023-46423 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-11T15:33:58.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_417094 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/4/1.md
CVE ID: CVE-2023-46424 State: PUBLISHED Published: 2023-10-25T00:00:00 Last Updated: 2024-09-12T18:07:34.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_422BD4 function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.cn/index.php/home/menu/detail.html?menu_listtpl=download&id=88&ids=36 - https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X6000R/3/1.md
CVE ID: CVE-2023-46426 State: PUBLISHED Published: 2024-03-09T00:00:00 Last Updated: 2024-08-05T19:47:39.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) via gf_fwrite component in at utils/os_file.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2642
CVE ID: CVE-2023-46427 State: PUBLISHED Published: 2024-03-09T00:00:00 Last Updated: 2024-08-28T13:52:40.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive information via null pointer deference in gf_dash_setup_period component in media_tools/dash_client.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gpac/gpac/issues/2641
CVE ID: CVE-2023-46428 State: PUBLISHED Published: 2023-11-01T00:00:00 Last Updated: 2024-09-12T19:56:59.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fenglon/CVE/blob/main/analyse.md
CVE ID: CVE-2023-46435 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-12T20:44:22.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view_service&id. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kirra-max/bug_reports/blob/main/packers-and-movers-management-system-phpoop-free-source-code/SQL-1.md
CVE ID: CVE-2023-46442 State: PUBLISHED Published: 2024-05-24T16:18:27.291Z Last Updated: 2025-02-13T15:46:55.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/soot-oss/soot - https://github.com/JAckLosingHeart/CVE-2023-46442_POC/tree/main
CVE ID: CVE-2023-46445 State: PUBLISHED Published: 2023-11-14T00:00:00.000Z Last Updated: 2025-11-03T21:49:57.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ronf/asyncssh/security/advisories/GHSA-cfc2-wr2v-gxm5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ME34ROZWMDK5KLMZKTSA422XVJZ7IMTE/ - https://www.terrapin-attack.com - https://github.com/ronf/asyncssh/blob/develop/doc
/ME34ROZWMDK5KLMZKTSA422XVJZ7IMTE/ - https://www.terrapin-attack.com - https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst - https://github.com/advisories/GHSA-cfc2-wr2v-gxm5 - http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html - https://security.netapp.com/advisory/ntap-20231222-0001/
CVE ID: CVE-2023-46446 State: PUBLISHED Published: 2023-11-14T00:00:00.000Z Last Updated: 2025-11-03T21:49:58.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ronf/asyncssh/security/advisories/GHSA-c35q-ffpf-5qpm - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ME34ROZWMDK5KLMZKTSA422XVJZ7IMTE/ - https://www.terrapin-attack.com - https://github.com/ronf/asyncssh/blo
t.org/message/ME34ROZWMDK5KLMZKTSA422XVJZ7IMTE/ - https://www.terrapin-attack.com - https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst - https://github.com/advisories/GHSA-c35q-ffpf-5qpm - http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html - https://security.netapp.com/advisory/ntap-20231222-0001/
CVE ID: CVE-2023-46447 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-06-20T18:30:15.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/actuator/rebel/blob/main/CWE-319.md - https://popsdiabetes.com/about-us/ - https://play.google.com/store/apps/details?id=com.pops.pops
CVE ID: CVE-2023-46448 State: PUBLISHED Published: 2023-11-01T00:00:00 Last Updated: 2024-09-12T19:56:02.148Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dmpop/mejiro/commit/309639339f5816408865902befe8c90cb6862537 - https://blog.0xzon.dev/2023-10-15-Mejiro-Reflected-XSS-Via-Remote-File-Inclusion-CVE-2023-46448/
CVE ID: CVE-2023-46449 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-12T20:43:35.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sajaljat/CVE-2023-46449/tree/main - https://www.youtube.com/watch?v=H5QnsOKjs3s
CVE ID: CVE-2023-46450 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-12T20:42:54.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/LQy0_xIK2q0 - https://github.com/yte121/-CVE-2023-46450/
CVE ID: CVE-2023-46451 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T18:58:23.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://youtu.be/f8B3_m5YfqI - https://github.com/sajaljat/CVE-2023-46451
CVE ID: CVE-2023-46454 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T20:45:41.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality. Additional Analyst Notes: - CVE Program Container: References: - https://cyberaz0r.info/2023/11/glinet-multiple-vulnerabilities/
CVE ID: CVE-2023-46455 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-28T15:10:13.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gl-inet.com/ - https://cyberaz0r.info/2023/11/glinet-multiple-vulnerabilities/
CVE ID: CVE-2023-46456 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T20:45:42.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.gl-inet.com/ - https://cyberaz0r.info/2023/11/glinet-multiple-vulnerabilities/
CVE ID: CVE-2023-46467 State: PUBLISHED Published: 2023-10-28T00:00:00 Last Updated: 2024-09-09T19:50:12.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sumor.top/index.php/archives/872/
CVE ID: CVE-2023-46468 State: PUBLISHED Published: 2023-10-28T00:00:00 Last Updated: 2024-08-02T20:45:42.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function. Additional Analyst Notes: - CVE Program Container: References: - https://www.sumor.top/index.php/archives/875/
CVE ID: CVE-2023-46470 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-02T20:45:41.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf
CVE ID: CVE-2023-46471 State: PUBLISHED Published: 2023-11-20T00:00:00.000Z Last Updated: 2025-06-10T13:47:30.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf
CVE ID: CVE-2023-46474 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-03T14:25:42.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the start_import.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://pmb.com - https://github.com/Xn2/CVE-2023-46474
CVE ID: CVE-2023-46475 State: PUBLISHED Published: 2023-11-02T00:00:00 Last Updated: 2024-09-17T13:12:47.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the name field of the project, they can inject malicious JavaScript code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/easysoft/zentaopms - https://github.com/elementalSec/CVE-Disclosures/blob/main/ZentaoPMS/CVE-2023-46475/CVE-2023-46475%20-%20Cross-Site%20Scripting%20%28Stored%29.md
CVE ID: CVE-2023-46478 State: PUBLISHED Published: 2023-10-30T00:00:00 Last Updated: 2024-09-09T20:08:24.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the customer_data parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mr-xmen786/CVE-2023-46478/tree/main
CVE ID: CVE-2023-46480 State: PUBLISHED Published: 2023-11-27T00:00:00.000Z Last Updated: 2025-06-05T14:09:27.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/owncast/owncast - https://github.com/shahzaibak96/CVE-2023-46480
CVE ID: CVE-2023-46482 State: PUBLISHED Published: 2023-11-01T00:00:00 Last Updated: 2024-09-12T19:50:35.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Backup Functionality in the coreframe/app/database/admin/index.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/XTo-o1/PHP/blob/main/wuzhicms/WUZHI%20CMS%20v4.1.0%20SQL%20Injection%20Vulnerability%20in%20Database%20Backup%20Functionality.md
CVE ID: CVE-2023-46483 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-03T19:43:33.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fengniange/TimeTec_Cloud_AWDMS/
CVE ID: CVE-2023-46484 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-06T18:59:41.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/10/29/x6000r/setLedCfg/TOTOlink%20X6000R%20setLedCfg%20e/
CVE ID: CVE-2023-46485 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-06T19:34:34.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://815yang.github.io/2023/10/29/x6000r/TOTOlink%20X6000R%20V9.1.0cu.2350_B20230313-rsetTracerouteCfg/
CVE ID: CVE-2023-46490 State: PUBLISHED Published: 2023-10-27T00:00:00 Last Updated: 2024-09-12T20:22:54.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the managers.php function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-f4r3-53jr-654c - https://gist.github.com/ISHGARD-2/a95632111138fcd7ccf7432ccb145b53
CVE ID: CVE-2023-46491 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-12T20:42:19.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://foremost-smash-52a.notion.site/Zentao-Authorized-XSS-Vulnerability-CVE-2023-46491-eea8cbfe2fab4ea78a174e5275309759
CVE ID: CVE-2023-46492 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-03T19:04:32.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in MLDB.ai v.2017.04.17.0 allows a remote attacker to execute arbitrary code via a crafted payload to the public_html/doc/index.html. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/cd80/a75b618419d5afb137cd5a29e8156420
CVE ID: CVE-2023-46493 State: PUBLISHED Published: 2023-12-08T00:00:00 Last Updated: 2024-08-28T16:17:31.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devhub.checkmarx.com/cve-details/Cxa4d94170-be41/ - https://devhub.checkmarx.com/cve-details/CVE-2023-46493/