Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
build 230215 and CS-CV310-A0-1B2WFR Firmware versions before V5.3.0 build 230221 and CS-CV310-A0-1C2WFR-C Firmware versions before V5.3.2 build 230221 and CS-C6N-A0-1C2WFR-MUL Firmware versions before V5.3.2 build 230218 and CS-CV310-A0-3C2WFRL-1080p Firmware versions before V5.2.7 build 230302 and CS-CV310-A0-1C2WFR Wifi IP66 2.8mm 1080p Firmware versions before V5.3.2 build 230214 and CS-CV248-A0-32WMFR Firmware versions before V5.2.3 build 230217 and EZVIZ LC1C Firmware versions before V5.3.4 build 230214. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ezviz.com - https://www.ezviz.com/data-security/security-notice/detail/827
CVE ID: CVE-2023-34553 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T15:21:57.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ashallen.net/wireless-smart-lock-vulnerability-disclosure
CVE ID: CVE-2023-34561 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T15:43:25.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash level. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.youtube.com/watch?v=DMxucOWfLPc - https://www.youtube.com/watch?v=kAeJvY6BBps - https://www.youtube.com/watch?v=ev0VXbiduuQ - https://www.youtube.com/watch?v=u7eXBr4HkKQ - https://www.youtube.com/watch?v=RGMeWPchScg - https://github.com/meltah/gd-rce
CVE ID: CVE-2023-34563 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T21:08:59.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-34563/EN.md
CVE ID: CVE-2023-34565 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2024-08-02T16:10:07.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netbox 3.5.1 is vulnerable to Cross Site Scripting (XSS) in the "Create Wireless LAN Groups" function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/grayfullbuster0804/netbox/issues/1
CVE ID: CVE-2023-34566 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T21:13:17.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/rk8hQf5rh
CVE ID: CVE-2023-34567 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:54:33.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/H1xUqzfHh
CVE ID: CVE-2023-34568 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T21:11:49.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/ryR8IzMH2
CVE ID: CVE-2023-34569 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:31:49.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/HymuzffSh
CVE ID: CVE-2023-34570 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:28:49.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/S1eI91_l2
CVE ID: CVE-2023-34571 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:22:07.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackmd.io/%400dayResearch/S1GcUxzSn
CVE ID: CVE-2023-34575 State: PUBLISHED Published: 2023-09-20T00:00:00 Last Updated: 2024-09-24T20:32:14.359Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail() methods. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/09/19/opartsavecart.html
CVE ID: CVE-2023-34576 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T18:20:13.154Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/09/19/opartfaq.html
CVE ID: CVE-2023-34577 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T18:19:06.898Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary SQL commands via OpartPlannedPopupModuleFrontController::prepareHook() method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/09/19/opartplannedpopup.html
CVE ID: CVE-2023-34581 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:30:26.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ashikkunjumon/cve-reports/blob/main/README.md - https://www.exploit-db.com/exploits/51482 - https://vulners.com/packetstorm/PACKETSTORM:172559 - https://packetstormsecurity.com/files/172559/Service-Provider-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2023-34585 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:55:38.381Z Description: No description available.
CVE ID: CVE-2023-34596 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T20:25:58.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service (DoS) via a crafted Z-Wave message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://aeotec.com/products/aeotec-wallmote-quad/%3B - https://github.com/iot-sec23/IoT-CVE/blob/main/Aeotec%20WallMote%20Switch%20Vulnerability%20Report.pdf
CVE ID: CVE-2023-34597 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T19:47:55.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service (DoS) via a crafted Z-Wave message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fibaro.com/en/products/motion-sensor/%3B - https://github.com/iot-sec23/IoT-CVE/blob/main/Fibaro%20Motion%20Sensor%20Vulnerability%20Report.pdf
CVE ID: CVE-2023-34598 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T17:15:46.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/maddsec/CVE-2023-34598
CVE ID: CVE-2023-34599 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T17:15:16.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/maddsec/CVE-2023-34599
CVE ID: CVE-2023-34600 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-12-09T19:03:00.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://loganalyzer.adiscon.com/ - https://github.com/costacoco/Adiscon/blob/main/README.md
CVE ID: CVE-2023-34601 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-05T21:23:10.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/thinkgem/jeesite/issues/515
CVE ID: CVE-2023-34602 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T19:51:21.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/jeecg-boot/issues/4983
CVE ID: CVE-2023-34603 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T19:52:11.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/jeecg-boot/issues/4984
CVE ID: CVE-2023-34609 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T19:04:43.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered flexjson thru 3.3 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/p/flexjson/bugs/48/ - https://sourceforge.net/p/flexjson/bugs/49/ - https://sourceforge.net/p/flexjson/bugs/50/ - https://sourceforge.net/p/flexjson/bugs/51/
CVE ID: CVE-2023-34610 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T19:20:31.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jdereg/json-io/issues/169
CVE ID: CVE-2023-34611 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T19:21:56.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bolerio/mjson/issues/40
CVE ID: CVE-2023-34612 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T19:23:16.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/phax/ph-commons/issues/35
CVE ID: CVE-2023-34613 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T19:27:49.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/maddingo/sojo/issues/15
CVE ID: CVE-2023-34614 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T19:29:26.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bitbucket.org/jmarsden/jsonij/issues/7/stack-overflow-error-caused-by-jsonij
CVE ID: CVE-2023-34615 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T16:02:04.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/billdavidson/JSONUtil/issues/10
CVE ID: CVE-2023-34616 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:46:06.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/InductiveComputerScience/pbJson/issues/2
CVE ID: CVE-2023-34617 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:38:37.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/owlike/genson/issues/191
CVE ID: CVE-2023-34620 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:21:56.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hjson/hjson-java/issues/24
CVE ID: CVE-2023-34623 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T15:18:24.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/trajano/jtidy/issues/4
CVE ID: CVE-2023-34624 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-06T19:31:08.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/amplafi/htmlcleaner/issues/13 - https://lists.debian.org/debian-lts-announce/2023/08/msg00007.html - https://www.debian.org/security/2023/dsa-5471
CVE ID: CVE-2023-34625 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-30T14:49:14.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: ShowMojo MojoBox Digital Lockbox 1.4 is vulnerable to Authentication Bypass. The implementation of the lock opening mechanism via Bluetooth Low Energy (BLE) is vulnerable to replay attacks. A malicious user is able to intercept BLE requests and replicate them to open the lock at any time. Alternatively, an attacker with physical access to the device on which the Android app is installed, can obtain the latest BLE messages via the app logs and use them for opening the lock. Additional Analyst Notes: - CVE Program Container: -
t BLE messages via the app logs and use them for opening the lock. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whid.ninja/blog/mojobox-yet-another-not-so-smartlock - https://mandomat.github.io/2023-03-15-testing-mojobox-security/ - https://packetstormsecurity.com/2307-exploits/mojobox14-replay.txt
CVE ID: CVE-2023-34626 State: PUBLISHED Published: 2023-06-15T00:00:00 Last Updated: 2024-12-18T16:14:51.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Piwigo/Piwigo/issues/1924
CVE ID: CVE-2023-34634 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-23T20:45:48.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .greenshot file is opened. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://greenshot.atlassian.net/browse/BUG-3061 - https://github.com/greenshot/greenshot/commit/a152e2883fca7f78051b3bd6b1e5cc57355cb44c - https://www.exploit-db.com/exploits/51633 - http://packetstormsecurity.com/files/173825/GreenShot-1.2.10-Arbitrary-Code-Execution.html - http://packetstormsecuri
- http://packetstormsecurity.com/files/173825/GreenShot-1.2.10-Arbitrary-Code-Execution.html - http://packetstormsecurity.com/files/174222/Greenshot-1.3.274-Deserialization-Command-Execution.html
CVE ID: CVE-2023-34635 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T18:49:05.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-Injection.html - https://www.exploit-db.com/exploits/51610
CVE ID: CVE-2023-34637 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-27T19:31:28.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboard title parameter in the IsarFlow Portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mgm-sp.com/en/isarflow-xss-vulnerability/
CVE ID: CVE-2023-34641 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T19:59:46.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function window.print() which can then be used to open an unprivileged command prompt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kioware.com/versionhistory.aspx?pid=15 - https://github.com/huntergregal/CVE/tree/main/TBD-KIOWARE-001 - https://github.com/huntergregal/CVE/tree/
.aspx?pid=15 - https://github.com/huntergregal/CVE/tree/main/TBD-KIOWARE-001 - https://github.com/huntergregal/CVE/tree/main/CVE-2023-34641
CVE ID: CVE-2023-34642 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T18:59:04.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.kioware.com/versionhistory.aspx?pid=15 - https://github.com/huntergregal/CVE/tree/main/TBD-KIOWARE-002 - https://github.com/huntergregal/CV
history.aspx?pid=15 - https://github.com/huntergregal/CVE/tree/main/TBD-KIOWARE-002 - https://github.com/huntergregal/CVE/tree/main/CVE-2023-34642
CVE ID: CVE-2023-34644 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T18:34:33.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
crafted POST request to /cgi-bin/luci/api/auth. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/ - https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001
CVE ID: CVE-2023-34645 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-17T20:46:09.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: jfinal CMS 5.1.0 has an arbitrary file read vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jflyfox/jfinal_cms/issues/57