Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-51843 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-05-29T15:08:07.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: react-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flatlogic/react-dashboard - https://github.com/flatlogic/react-dashboard/issues/65 - https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51843.md
CVE ID: CVE-2023-51847 State: PUBLISHED Published: 2024-06-06T21:31:39.575Z Last Updated: 2025-02-13T15:46:58.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_threadsafe.c:297:3 component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/obgm/libcoap/issues/1302
CVE ID: CVE-2023-51885 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-05-30T14:17:25.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
CVE ID: CVE-2023-51886 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-05-30T14:17:19.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
CVE ID: CVE-2023-51887 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-20T19:25:27.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
CVE ID: CVE-2023-51888 State: PUBLISHED Published: 2024-01-24T00:00:00 Last Updated: 2024-09-05T18:10:12.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
CVE ID: CVE-2023-51889 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-16T18:41:03.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
CVE ID: CVE-2023-51890 State: PUBLISHED Published: 2024-01-24T00:00:00.000Z Last Updated: 2025-06-17T19:52:20.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
CVE ID: CVE-2023-51892 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-05-30T14:24:40.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://e-cology.com - https://www.weaver.com.cn/ - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51892.txt
CVE ID: CVE-2023-51906 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-06-17T13:47:20.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yonyou.com/ - http://yonbip.com - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51906.txt
CVE ID: CVE-2023-51924 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-06-16T18:40:16.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yonyou.com/ - http://yonbip.com - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51924.txt
CVE ID: CVE-2023-51925 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-06-20T18:31:29.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yonyou.com/ - http://yonbip.com - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51925.txt
CVE ID: CVE-2023-51926 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-05-30T14:24:34.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yonyou.com/ - http://yonbip.com - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51926.txt
CVE ID: CVE-2023-51927 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-06-16T19:01:26.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yonyou.com/ - http://yonbip.com - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51927.txt
CVE ID: CVE-2023-51928 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-06-16T18:44:02.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 allows attackers to execute arbitrary code via uploading a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yonyou.com/ - http://yonbip.com - https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about/51928.txt
CVE ID: CVE-2023-51931 State: PUBLISHED Published: 2024-02-16T00:00:00 Last Updated: 2024-08-22T20:20:16.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the parsing function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/6en6ar/c792d8337b63f095cbda907e834cb4ba - https://github.com/alanclarke/urlite/issues/61
CVE ID: CVE-2023-51939 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-06-16T19:07:35.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the cp_bbs_sig function in relic/src/cp/relic_cp_bbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cp_bbs_sig function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/liang-junkai/Relic-bbs-fault-injection - https://github.com/relic-toolkit/relic/issues/284 - https://gist.github.com/liang-junkai/1b59487c0f7002fa5da98035b53e409f
CVE ID: CVE-2023-51946 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-20T18:20:39.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata actiNAS-SL-2U-8 3.2.03-SP1 allow remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://actidata.com - https://www.actidata.com/index.php/de-de/actinas-plus-sl-2u-8-rdx - https://github.com/saw-your-packet/CVEs/blob/main/CVE-2023-51946/README.md
CVE ID: CVE-2023-51947 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-20T18:21:20.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.actidata.com/index.php/de-de/actinas-plus-sl-2u-8-rdx - http://actinas-plus-sl-2u-8-rdx.com - https://github.com/saw-your-packet/CVEs/blob/main/CVE-2023-51947/README.md
CVE ID: CVE-2023-51948 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-20T18:22:18.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to list the files hosted by the web application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.actidata.com/index.php/de-de/actinas-plus-sl-2u-8-rdx - https://github.com/saw-your-packet/CVEs/blob/main/CVE-2023-51948/README.md
CVE ID: CVE-2023-51949 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-17T20:11:38.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controller Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cui2shark/security/blob/main/Added%20CSRF%20in%20Role%20Controller.md
CVE ID: CVE-2023-51951 State: PUBLISHED Published: 2024-02-05T00:00:00.000Z Last Updated: 2025-06-20T20:06:58.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the manage_bo.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2023-004
CVE ID: CVE-2023-51952 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T15:57:46.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formSetIptv-d758f5dba8f646afaf5cddc6f8d3ec70
CVE ID: CVE-2023-51953 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T15:58:34.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formSetIptv-d758f5dba8f646afaf5cddc6f8d3ec70
CVE ID: CVE-2023-51954 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-03T14:29:01.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formSetIptv-d758f5dba8f646afaf5cddc6f8d3ec70
CVE ID: CVE-2023-51955 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-06T17:29:28.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formSetIptv-d758f5dba8f646afaf5cddc6f8d3ec70
CVE ID: CVE-2023-51956 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-03T14:28:54.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formSetIptv-d758f5dba8f646afaf5cddc6f8d3ec70
CVE ID: CVE-2023-51957 State: PUBLISHED Published: 2024-01-10T00:00:00 Last Updated: 2024-09-03T20:30:37.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formGetIptv-0fcc584fcda44b1c837e42d5d732957a
CVE ID: CVE-2023-51958 State: PUBLISHED Published: 2024-01-10T00:00:00 Last Updated: 2024-10-01T20:23:20.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formGetIptv-0fcc584fcda44b1c837e42d5d732957a
CVE ID: CVE-2023-51959 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-04-17T16:01:44.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formGetIptv-0fcc584fcda44b1c837e42d5d732957a
CVE ID: CVE-2023-51960 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-16T18:41:51.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formGetIptv-0fcc584fcda44b1c837e42d5d732957a
CVE ID: CVE-2023-51961 State: PUBLISHED Published: 2024-01-10T00:00:00 Last Updated: 2024-09-03T20:35:21.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-formGetIptv-0fcc584fcda44b1c837e42d5d732957a
CVE ID: CVE-2023-51962 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-04-17T15:57:38.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-setIptvInfo-944beaf189db4bf49f99a7a7418c7bdd
CVE ID: CVE-2023-51963 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T15:59:26.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-setIptvInfo-944beaf189db4bf49f99a7a7418c7bdd
CVE ID: CVE-2023-51964 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-03T14:28:50.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-setIptvInfo-944beaf189db4bf49f99a7a7418c7bdd
CVE ID: CVE-2023-51965 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T16:00:12.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-setIptvInfo-944beaf189db4bf49f99a7a7418c7bdd
CVE ID: CVE-2023-51966 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T16:01:01.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-setIptvInfo-944beaf189db4bf49f99a7a7418c7bdd
CVE ID: CVE-2023-51967 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T16:01:47.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-getIptvInfo-f5918cc2828c49e78554f456bf7d4b36
CVE ID: CVE-2023-51968 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-16T18:42:34.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-getIptvInfo-f5918cc2828c49e78554f456bf7d4b36
CVE ID: CVE-2023-51969 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T16:02:36.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-getIptvInfo-f5918cc2828c49e78554f456bf7d4b36
CVE ID: CVE-2023-51970 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-20T16:03:24.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-getIptvInfo-f5918cc2828c49e78554f456bf7d4b36
CVE ID: CVE-2023-51971 State: PUBLISHED Published: 2024-01-10T00:00:00.000Z Last Updated: 2025-06-03T14:29:07.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Buffer-Overflow-in-getIptvInfo-f5918cc2828c49e78554f456bf7d4b36
CVE ID: CVE-2023-51972 State: PUBLISHED Published: 2024-01-10T00:00:00 Last Updated: 2024-09-03T20:36:53.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://grove-laser-8ad.notion.site/Tenda-AX1803-Command-Injection-in-fromAdvSetLanIp-7b2892fac8234cff90ca15af4947a8e7
CVE ID: CVE-2023-51978 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-06-20T16:43:52.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hackerhijeck/Exploited/blob/main/Art_Gallary/SQL_Injection.md
CVE ID: CVE-2023-51982 State: PUBLISHED Published: 2024-01-30T00:00:00.000Z Last Updated: 2025-05-29T15:07:59.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a specific value and accessing the Admin UI directly using the default user identity.(https://github.com/crate/crate/issues/15231) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/crate/crate/issues/15231
CVE ID: CVE-2023-51984 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-16T18:26:10.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attackers to execute arbitrary commands via shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funny-mud-peee/IoT-vuls/blob/main/dir822+/1/readme.md
CVE ID: CVE-2023-51987 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-20T16:31:43.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/funny-mud-peee/IoT-vuls/tree/main/dir822%2B/2
CVE ID: CVE-2023-51989 State: REJECTED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-05-06T20:50:42.761Z Description: No description available.