deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-4088
Published: 2023-09-20
Description: Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-276, CWE-276
References: https://jvn.jp/vu/JVNVU96447193/index.html; https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-03; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-010_en.pdf
CVE: CVE-2023-5062
Published: 2023-09-20
Description: The WordPress Charts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wp_charts' shortcode in versions up to, and including, 0.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-charts/tags/0.7.0/wordpress_charts_js.php#L223; https://plugins.trac.wordpress.org/browser/wp-charts/tags/0.7.0/wordpress_charts_js.php#L229; https://www.wordfence.com/threat-intel/vulnerabilities/id/2de2d2c5-1373-45b6-93a0[PII_REDACTED]69?source=cve
CVE: CVE-2023-5063
Published: 2023-09-20
Description: The Widget Responsive for Youtube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube' shortcode in versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/youtube-widget-responsive/trunk/youtube-widget-responsive.php?rev=2905626#L246; https://plugins.trac.wordpress.org/changeset/2968766/youtube-widget-responsive#file1; https://www.wordfence.com/threat-intel/vulnerabilities/id/72daa533-8b17-420c-9b51-b5f72da2726c?source=cve
CVE: CVE-2023-26144
Published: 2023-09-20
Description: Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance.**Note:** It was not proven that this vulnerability can crash the process.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://github.com/graphql/graphql-js/commit/f94b511386c7e47bd0380dcd56553dc063320226; https://github.com/graphql/graphql-js/issues/3955; https://github.com/graphql/graphql-js/pull/3972
CVE: CVE-2023-2163
Published: 2023-09-20
Description: Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe
code paths being incorrectly marked as safe, resulting in arbitrary read/write in
kernel memory, lateral privilege escalation, and container escape.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-682, CWE-682
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f[PII_REDACTED]c0533fed; https://bughunters.google.com/blog/[PII_REDACTED]/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=71b547f561247897a0a14f[PII_REDACTED]c0533fed
CVE: CVE-2023-43616
Published: 2023-09-20
Description: An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2023/09/21/5; https://github.com/schollz/croc/issues/594; https://www.openwall.com/lists/oss-security/2023/09/08/2
CVE: CVE-2023-43617
Published: 2023-09-20
Description: An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2023/09/21/5; https://github.com/schollz/croc/issues/596; https://www.openwall.com/lists/oss-security/2023/09/08/2
CVE: CVE-2023-43618
Published: 2023-09-20
Description: An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2023/09/21/5; https://github.com/schollz/croc/issues/597; https://www.openwall.com/lists/oss-security/2023/09/08/2
CVE: CVE-2023-43619
Published: 2023-09-20
Description: An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized_keys file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: http://www.openwall.com/lists/oss-security/2023/09/21/5; https://github.com/schollz/croc/issues/593; https://www.openwall.com/lists/oss-security/2023/09/08/2
CVE: CVE-2023-43620
Published: 2023-09-20
Description: An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-116
References: http://www.openwall.com/lists/oss-security/2023/09/21/5; https://github.com/schollz/croc/issues/595; https://www.openwall.com/lists/oss-security/2023/09/08/2
CVE: CVE-2023-43621
Published: 2023-09-20
Description: An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments.
CVSS Score: 4.7 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2023/09/21/5; https://github.com/schollz/croc/issues/598; https://www.openwall.com/lists/oss-security/2023/09/08/2
CVE: CVE-2022-47560
Published: 2023-09-20
Description: The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2022-47561
Published: 2023-09-20
Description: The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.
CVSS Score: 7.3 (HIGH)
CWE: CWE-256, CWE-522
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2022-47562
Published: 2023-09-20
Description: Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products
CVE: CVE-2023-22644
Published: 2023-09-20
Description: A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1270
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32188; https://github.com/neuvector/neuvector/security/advisories/GHSA-622h-h2p8-743x; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22644
CVE: CVE-2023-41374
Published: 2023-09-20
Description: Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue exists in parsing of KPP project files. The vendor states that Kostac PLC Programming Software Version 1.6.10.0 or later implements the function which prevents a project file alteration. Therefore, to mitigate the impact of these vulnerabilities, a project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier needs to be saved again using Kostac PLC Programming Software Version 1.6.10.0 or later.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://jvn.jp/en/vu/JVNVU95282683/index.html; https://www.electronics.jtekt.co.jp/en/topics/[PII_REDACTED]91/; https://jvn.jp/en/vu/JVNVU95282683/index.html
CVE: CVE-2023-41375
Published: 2023-09-20
Description: Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue exists in parsing of KPP project files. The vendor states that Kostac PLC Programming Software Version 1.6.10.0 or later implements the function which prevents a project file alteration. Therefore, to mitigate the impact of these vulnerabilities, a project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier needs to be saved again using Kostac PLC Programming Software Version 1.6.10.0 or later.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://jvn.jp/en/vu/JVNVU95282683/index.html; https://www.electronics.jtekt.co.jp/en/topics/[PII_REDACTED]91/; https://jvn.jp/en/vu/JVNVU95282683/index.html
CVE: CVE-2022-45447
Published: 2023-09-20
Description: M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to a directory traversal vulnerability. The “f” parameter is not properly checked in the resource /m4pdf/pdf.php, returning any file given its relative path. An attacker that exploits this vulnerability could download /etc/passwd from the server if the file exists.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-m4-pdf-plugin-prestashop-sites; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-m4-pdf-plugin-prestashop-sites
CVE: CVE-2023-34047
Published: 2023-09-20
Description: A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.

CVSS Score: 3.1 (LOW)
References: https://spring.io/security/cve-2023-34047; https://spring.io/security/cve-2023-34047
CVE: CVE-2023-4853
Published: 2023-09-20
Description: A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-148, CWE-863
References: https://access.redhat.com/errata/RHSA-2023:5170; https://access.redhat.com/errata/RHSA-2023:5310; https://access.redhat.com/errata/RHSA-2023:5337
CVE: CVE-2023-5084
Published: 2023-09-20
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.


CVSS Score: 3.9 (LOW)
CWE: CWE-79
References: https://github.com/hestiacp/hestiacp/pull/4013/commits/5131f5a966759df77477fdf7f29daa2bda93b1ff; https://huntr.dev/bounties/f3340570-6e59-4c72-a7d1-d4b829b4fb45; https://github.com/hestiacp/hestiacp/pull/4013/commits/5131f5a966759df77477fdf7f29daa2bda93b1ff
CVE: CVE-2023-5042
Published: 2023-09-20
Description: Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276, CWE-276
References: https://security-advisory.acronis.com/advisories/SEC-5330; https://security-advisory.acronis.com/advisories/SEC-5330
CVE: CVE-2022-45448
Published: 2023-09-20
Description: M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document crafting vulnerability. The resource /m4pdf/pdf.php uses templates to dynamically create documents. In the case that the template does not exist, the application will return a fixed document with a message in mpdf format. An attacker could exploit this vulnerability by inputting a valid HTML/CSS document as the value of the parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-m4-pdf-plugin-prestashop-sites; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-m4-pdf-plugin-prestashop-sites
CVE: CVE-2023-0829
Published: 2023-09-20
Description: Plesk 17.0 through 18.0.31 version, is vulnerable to a Cross-Site Scripting. A malicious subscription owner (either a customer or an additional user), can fully compromise the server if an administrator visits a certain page in Plesk related to the malicious subscription.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-plesk; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-plesk
CVE: CVE-2023-3341
Published: 2023-09-20
Description: The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary.
This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-1325
References: http://www.openwall.com/lists/oss-security/2023/09/20/2; https://kb.isc.org/docs/cve-2023-3341; https://lists.debian.org/debian-lts-announce/2024/01/msg00021.html
CVE: CVE-2023-43477
Published: 2023-09-20
Description: The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device. 
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://www.tenable.com/security/research/tra-2023-19; https://www.tenable.com/security/research/tra-2023-19
CVE: CVE-2023-4236
Published: 2023-09-20
Description: A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load.
This issue affects BIND 9 versions 9.18.0 through 9.18.18 and 9.18.11-S1 through 9.18.18-S1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://www.openwall.com/lists/oss-security/2023/09/20/2; https://kb.isc.org/docs/cve-2023-4236; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPJLLTJCSDJJII7IIZPLTBQNWP7MZH7F/
CVE: CVE-2019-19450
Published: 2023-09-20
Description: paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue to CVE-2019-17626.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-91
References: https://github.com/MrBitBucket/reportlab-mirror/blob/master/CHANGES.md; https://lists.debian.org/debian-lts-announce/2023/09/msg00037.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHMCB2GJQKFMGVO5RWHN222NQL5XYPHZ/
CVE: CVE-2022-1438
Published: 2023-09-20
Description: A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, resulting in a Cross-site scripting (XSS) vulnerability.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://access.redhat.com/errata/RHSA-2023:1043; https://access.redhat.com/errata/RHSA-2023:1044; https://access.redhat.com/errata/RHSA-2023:1045
CVE: CVE-2023-0118
Published: 2023-09-20
Description: An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://access.redhat.com/errata/RHSA-2023:4466; https://access.redhat.com/errata/RHSA-2023:5979; https://access.redhat.com/errata/RHSA-2023:5980
CVE: CVE-2023-0462
Published: 2023-09-20
Description: An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.
CVSS Score: 8.0 (HIGH)
CWE: CWE-94, CWE-94
References: https://access.redhat.com/security/cve/CVE-2023-0462; https://bugzilla.redhat.com/show_bug.cgi?id=2162970; https://access.redhat.com/security/cve/CVE-2023-0462
CVE: CVE-2023-41902
Published: 2023-09-20
Description: An XPC misconfiguration vulnerability in CoreCode MacUpdater before 2.3.8, and 3.x before 3.1.2, allows attackers to escalate privileges by crafting malicious .pkg files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://gist.github.com/NSEcho/5d048a0796ceef59d6b1df1659bd1057; https://www.corecode.io/macupdater/history2.html; https://www.corecode.io/macupdater/history3.html
CVE: CVE-2023-43196
Published: 2023-09-20
Description: D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb parameter in the arp_sys.asp function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug4.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug4.md
CVE: CVE-2023-43197
Published: 2023-09-20
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug1.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug1.md
CVE: CVE-2023-43198
Published: 2023-09-20
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/hi_block.asp function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug5.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug5.md
CVE: CVE-2023-43199
Published: 2023-09-20
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug6.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug6.md
CVE: CVE-2023-43200
Published: 2023-09-20
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the id parameter in the yyxz.data function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug3.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug3.md
CVE: CVE-2023-43201
Published: 2023-09-20
Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hi_up parameter in the qos_ext.asp function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug2.md; https://www.dlink.com/en/security-bulletin/; https://github.com/Archerber/bug_submit/blob/main/D-Link/DI-7200GV2/bug2.md
CVE: CVE-2023-43202
Published: 2023-09-20
Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function pcap_download_handler. This vulnerability allows attackers to execute arbitrary commands via the update.device.packet-capture.tftp-file-name parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug4.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug4.md
CVE: CVE-2023-43203
Published: 2023-09-20
Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-121
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug1.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug1.md
CVE: CVE-2023-43204
Published: 2023-09-20
Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function sub_2EF50. This vulnerability allows attackers to execute arbitrary commands via the manual-time-string parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug2.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug2.md
CVE: CVE-2023-43206
Published: 2023-09-20
Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function web_cert_download_handler. This vulnerability allows attackers to execute arbitrary commands via the certDownload parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug6.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug6.md
CVE: CVE-2023-43207
Published: 2023-09-20
Description: D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function config_upload_handler. This vulnerability allows attackers to execute arbitrary commands via the configRestore parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug3.md; https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug3.md
CVE: CVE-2023-43478
Published: 2023-09-20
Description: fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.tenable.com/security/research/tra-2023-19; https://www.tenable.com/security/research/tra-2023-19