deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-34125
Published: 2023-03-09
Description: An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive information via various nuttx commands.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://gist.github.com/swkim101/f473b9a60e6d[PII_REDACTED]a2cd2025ac; https://github.com/PX4/PX4-Autopilot/issues/17062; https://github.com/PX4/PX4-Autopilot/pull/17264/commits/555f900cf52c0057e4c429ff3699c91911a21cab
CVE: CVE-2022-3758
Published: 2023-03-09
Description: An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Due to improper permissions checks an unauthorised user was able to read, add or edit a users private snippet.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-276
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3758.json; https://gitlab.com/gitlab-org/gitlab/-/issues/379598; https://hackerone.com/reports/1751258
CVE: CVE-2022-3767
Published: 2023-03-09
Description: Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3767.json; https://gitlab.com/gitlab-org/gitlab/-/issues/377473; https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3767.json
CVE: CVE-2013-10020
Published: 2023-03-10
Description: A vulnerability, which was classified as problematic, was found in MMDeveloper A Forms Plugin up to 1.4.2 on WordPress. This affects an unknown part of the file a-forms.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.3 is able to address this issue. The identifier of the patch is 3e693197bd69b7173cc16d8d2e0a7d501a2a0b06. It is recommended to upgrade the affected component. The identifier VDB-222609 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/a-forms/commit/3e693197bd69b7173cc16d8d2e0a7d501a2a0b06; https://vuldb.com/?ctiid.222609; https://vuldb.com/?id.222609
CVE: CVE-2023-1307
Published: 2023-03-10
Description: Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305
References: https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e[PII_REDACTED]9ab23; https://huntr.dev/bounties/5fe85af4-a667-41a9-a00d-f99e07c5e2f1; https://github.com/froxlor/froxlor/commit/6777fbf229200f4fd566022e[PII_REDACTED]9ab23
CVE: CVE-2014-125093
Published: 2023-03-10
Description: A vulnerability has been found in Ad Blocking Detector Plugin up to 1.2.1 on WordPress and classified as problematic. This vulnerability affects unknown code of the file ad-blocking-detector.php. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 1.2.2 is able to address this issue. The patch is identified as 3312b9cd79e5710d1e282fc9216a4e5ab31b3d94. It is recommended to upgrade the affected component. VDB-222610 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/wp-plugins/ad-blocking-detector/commit/3312b9cd79e5710d1e282fc9216a4e5ab31b3d94; https://github.com/wp-plugins/ad-blocking-detector/releases/tag/1.2.2; https://vuldb.com/?ctiid.222610
CVE: CVE-2017-20182
Published: 2023-03-10
Description: A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the file django_ajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The patch is named 329eb1dd1580ca1f9d4f95bc[PII_REDACTED]6515c9. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-222611.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/mvpoland/django-ajax-utilities/commit/329eb1dd1580ca1f9d4f95bc[PII_REDACTED]6515c9; https://vuldb.com/?ctiid.222611; https://vuldb.com/?id.222611
CVE: CVE-2023-27114
Published: 2023-03-10
Description: radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/radareorg/radare2/commit/a15067a8eaa836bcc24b0882712c14d1baa66509; https://github.com/radareorg/radare2/issues/21363; https://github.com/radareorg/radare2/commit/a15067a8eaa836bcc24b0882712c14d1baa66509
CVE: CVE-2023-27115
Published: 2023-03-10
Description: WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://github.com/WebAssembly/wabt/issues/1938; https://github.com/WebAssembly/wabt/issues/1992; https://github.com/WebAssembly/wabt/issues/1938
CVE: CVE-2023-27116
Published: 2023-03-10
Description: WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/WebAssembly/wabt/issues/1984; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSFFCKXUQ5PAC5UVXY7N6HEHVQ3AC2RG/; https://github.com/WebAssembly/wabt/issues/1984
CVE: CVE-2023-27117
Published: 2023-03-10
Description: WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/WebAssembly/wabt/issues/1989; https://github.com/WebAssembly/wabt/issues/1989
CVE: CVE-2023-27119
Published: 2023-03-10
Description: WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/WebAssembly/wabt/issues/1990; https://github.com/WebAssembly/wabt/issues/1990
CVE: CVE-2023-1091
Published: 2023-03-10
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.This issue affects Licensed Warehousing Automation System: through 2023.1.01.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0139; https://www.usom.gov.tr/bildirim/tr-23-0139
CVE: CVE-2023-1308
Published: 2023-03-10
Description: A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222696.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/gtest1112/111/blob/main/sqli-1.md; https://vuldb.com/?ctiid.222696; https://vuldb.com/?id.222696
CVE: CVE-2023-1309
Published: 2023-03-10
Description: A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/search_it.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222697 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/gtest1112/111/blob/main/sqli-2.md; https://vuldb.com/?ctiid.222697; https://vuldb.com/?id.222697
CVE: CVE-2023-1310
Published: 2023-03-10
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222698 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/gtest1112/111/blob/main/sqli-3.md; https://vuldb.com/?ctiid.222698; https://vuldb.com/?id.222698
CVE: CVE-2023-1311
Published: 2023-03-10
Description: A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This affects an unknown part of the file large.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222699.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/tangtangtang123456/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md; https://vuldb.com/?ctiid.222699; https://vuldb.com/?id.222699
CVE: CVE-2023-0083
Published: 2023-03-10
Description: The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, 

OpenHarmony-v3.0.7 and prior versions

has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

CVSS Score: 4.0 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md
CVE: CVE-2023-1312
Published: 2023-03-10
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb; https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356; https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb
CVE: CVE-2023-22301
Published: 2023-03-10
Description: The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an 

arbitrary memory accessing vulnerability which network attackers can launch a remote attack to obtain kernel memory data of the target system.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md
CVE: CVE-2023-22436
Published: 2023-03-10
Description: The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an 

UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.

CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-416
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md
CVE: CVE-2023-24465
Published: 2023-03-10
Description: Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions

has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-476
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md
CVE: CVE-2023-25947
Published: 2023-03-10
Description: The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package.

CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20, CWE-20, CWE-476
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md
CVE: CVE-2023-1015
Published: 2023-03-10
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2023-1313
Published: 2023-03-10
Description: Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/cockpit-hq/cockpit/commit/becca806c7071ecc732521bb5ad0bb9c64299592; https://huntr.dev/bounties/f73eef49-004f-4b3b-9717-90525e65ba61; https://github.com/cockpit-hq/cockpit/commit/becca806c7071ecc732521bb5ad0bb9c64299592
CVE: CVE-2023-24774
Published: 2023-03-10
Description: Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/12; https://github.com/funadmin/funadmin/issues/12
CVE: CVE-2023-26464
Published: 2023-03-10
Description: ** UNSUPPORTED WHEN ASSIGNED **

When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) 
hashmap or hashtable (depending on which logging component is in use) to be processed could exhaust the available memory in the virtual machine and achieve Denial of Service when the object is deserialized.

This issue affects Apache Log4j before 2. Affected users are recommended to update to Log4j 2.x.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502, CWE-502
References: https://lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t
CVE: CVE-2022-48111
Published: 2023-03-10
Description: A cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400 between version 8 and 11 included allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the f parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://sipe.com; http://wi400.com; https://devisions.github.io/blog/cve-2022-48111
CVE: CVE-2021-33360
Published: 2023-03-10
Description: An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, child_process, and/or filePath parameter(s).
CVSS Score: 9.8 (CRITICAL)
References: https://advisory.checkmarx.net/advisory/CX-2021-4811/; https://github.com/stoqey/gnuplot/blob/cd76060a15f58348baeef1c5fd867ce856515949/src/index.ts#L211-L217; https://advisory.checkmarx.net/advisory/CX-2021-4811/
CVE: CVE-2023-0746
Published: 2023-03-10
Description: The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm; https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm
CVE: CVE-2023-1315
Published: 2023-03-10
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/osticket/osticket/commit/ec6043935b4e30b5c0dfa544e[PII_REDACTED]08a2e; https://huntr.dev/bounties/70a7fd8c-7e6f-4a43-9f8c-163b8967b16e; https://github.com/osticket/osticket/commit/ec6043935b4e30b5c0dfa544e[PII_REDACTED]08a2e
CVE: CVE-2023-1316
Published: 2023-03-10
Description: Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/osticket/osticket/commit/091ddba965132d26bdbeb004fcc44bd8fd056b71; https://huntr.dev/bounties/c6353bab-c382-47f6-937b-56d253f2e8d3; https://github.com/osticket/osticket/commit/091ddba965132d26bdbeb004fcc44bd8fd056b71
CVE: CVE-2023-1317
Published: 2023-03-10
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/osticket/osticket/commit/daee20fdd8ac926d9aee700b201ac2cb35d448ca; https://huntr.dev/bounties/c3e27af2-358b-490b-9baf-e451663e4e5f; https://github.com/osticket/osticket/commit/daee20fdd8ac926d9aee700b201ac2cb35d448ca
CVE: CVE-2023-1318
Published: 2023-03-10
Description: Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/osticket/osticket/commit/343a2b47e164dd9090a3c9477ef273f0efa16a7d; https://huntr.dev/bounties/e58b38e0-4897-4bb0-84e8-a7ad8efab338; https://github.com/osticket/osticket/commit/343a2b47e164dd9090a3c9477ef273f0efa16a7d
CVE: CVE-2023-1319
Published: 2023-03-10
Description: Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/osticket/osticket/commit/9fb01bc12fbae06aa2c2b4d1bc9b4a08db4bb3e0; https://huntr.dev/bounties/a822067a-d90d-4c3e-b9ef-9b2a5c2bc97f; https://github.com/osticket/osticket/commit/9fb01bc12fbae06aa2c2b4d1bc9b4a08db4bb3e0
CVE: CVE-2023-1320
Published: 2023-03-10
Description: Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/osticket/osticket/commit/86f9693dc64ed54220ed6c10e13e824ca4f6aacf; https://huntr.dev/bounties/c2bb34ac-452d-4624-a1b9-c5b54f52f0cd; https://github.com/osticket/osticket/commit/86f9693dc64ed54220ed6c10e13e824ca4f6aacf
CVE: CVE-2023-1321
Published: 2023-03-10
Description: A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class.php. The manipulation of the argument id with the input -1 and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222727.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?ctiid.222727; https://vuldb.com/?id.222727; https://vuldb.com/?ctiid.222727
CVE: CVE-2023-1322
Published: 2023-03-10
Description: A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1) and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222728.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?ctiid.222728; https://vuldb.com/?id.222728; https://vuldb.com/?ctiid.222728
CVE: CVE-2023-27161
Published: 2023-03-10
Description: Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: http://jellyfin.com; https://gist.github.com/b33t1e/5c067e0538a0b712dc3d59bd4b9a5952; https://github.com/jellyfin/jellyfin
CVE: CVE-2023-27164
Published: 2023-03-10
Description: An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-434
References: http://halo.com; https://gist.github.com/b33t1e/a1a0d81b1173d0d00de8f4e7958dd867; https://github.com/halo-dev/halo
CVE: CVE-2023-1328
Published: 2023-03-10
Description: A vulnerability was found in Guizhou 115cms 4.2. It has been classified as problematic. Affected is an unknown function of the file /admin/content/index. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222738 is the identifier assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://github.com/niukongkong/asdasd/blob/master/115cmsArbitrary%20file%20upload%20vulnerability.md; https://vuldb.com/?ctiid.222738; https://vuldb.com/?id.222738
CVE: CVE-2023-26075
Published: 2023-03-10
Description: An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Service Area List.
CVSS Score: 7.6 (HIGH)
CWE: CWE-120
References: http://packetstormsecurity.com/files/171387/Shannon-Baseband-NrmmMsgCodec-Intra-Object-Overflow.html; https://bugs.chromium.org/p/project-zero/issues/detail?id=2398; https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html
CVE: CVE-2023-1205
Published: 2023-03-10
Description: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://tenable.com/security/research/tra-2023-9; https://tenable.com/security/research/tra-2023-9
CVE: CVE-2023-27850
Published: 2023-03-10
Description: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-59
References: https://tenable.com/security/research/tra-2023-9; https://tenable.com/security/research/tra-2023-9
CVE: CVE-2023-27851
Published: 2023-03-10
Description: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device.
CVSS Score: 8.8 (HIGH)
References: https://tenable.com/security/research/tra-2023-9; https://tenable.com/security/research/tra-2023-9
CVE: CVE-2023-27852
Published: 2023-03-10
Description: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://tenable.com/security/research/tra-2023-9; https://tenable.com/security/research/tra-2023-9
CVE: CVE-2023-27853
Published: 2023-03-10
Description: NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://tenable.com/security/research/tra-2023-9; https://tenable.com/security/research/tra-2023-9