deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-23364
Published: 2023-09-22
Description: A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors.

We have already fixed the vulnerability in the following versions:
Multimedia Console 2.1.1 ( 2023/03/29 ) and later
Multimedia Console 1.4.7 ( 2023/03/20 ) and later

CVSS Score: 8.1 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.qnap.com/en/security-advisory/qsa-23-29; https://www.qnap.com/en/security-advisory/qsa-23-29
CVE: CVE-2023-43760
Published: 2023-09-22
Description: Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.
CVSS Score: 7.5 (HIGH)
References: https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn6; https://www.withsecure.com/en/support/security-advisories
CVE: CVE-2023-43761
Published: 2023-09-22
Description: Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn5; https://www.withsecure.com/en/support/security-advisories
CVE: CVE-2023-43762
Published: 2023-09-22
Description: Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.
CVSS Score: 9.8 (CRITICAL)
References: https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories/cve-2023-43762; https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn511
CVE: CVE-2023-43763
Published: 2023-09-22
Description: Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn; https://www.withsecure.com/en/support/security-advisories
CVE: CVE-2023-43764
Published: 2023-09-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-43762. Reason: This candidate is a duplicate of CVE-2023-43762. Notes: All CVE users should reference CVE-2023-43762 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2023-43765
Published: 2023-09-22
Description: Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.
CVSS Score: 7.5 (HIGH)
References: https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn2; https://www.withsecure.com/en/support/security-advisories
CVE: CVE-2023-43766
Published: 2023-09-22
Description: Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn4; https://www.withsecure.com/en/support/security-advisories
CVE: CVE-2023-43767
Published: 2023-09-22
Description: Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn3; https://www.withsecure.com/en/support/security-advisories
CVE: CVE-2023-43090
Published: 2023-09-22
Description: A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://access.redhat.com/security/cve/CVE-2023-43090; https://bugzilla.redhat.com/show_bug.cgi?id=2239087; https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990
CVE: CVE-2023-43770
Published: 2023-09-22
Description: Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/roundcube/roundcubemail/commit/e92ec206a886461245e1672d8530cc93c618a49b; https://lists.debian.org/debian-lts-announce/2023/09/msg00024.html; https://roundcube.net/news/2023/09/15/security-update-1.6.3-released
CVE: CVE-2023-43771
Published: 2023-09-22
Description: In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/mikebrady/nqptp/commit/b24789982d5cc067ecf6e8f3352b701d177530ec; https://github.com/mikebrady/nqptp/releases/tag/1.2.3; https://github.com/mikebrady/nqptp/releases/tag/1.2.4
CVE: CVE-2023-43782
Published: 2023-09-22
Description: Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668
References: http://www.openwall.com/lists/oss-security/2023/10/05/4; https://bugzilla.suse.com/show_bug.cgi?id=1213983; https://github.com/falkTX/Cadence
CVE: CVE-2023-43783
Published: 2023-09-22
Description: Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been created by a local adversary before Cadence started. The adversary can leverage this to create or overwrite files via a symlink attack. In some kernel configurations, code injection into the Wine registry is possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: http://www.openwall.com/lists/oss-security/2023/10/05/4; https://bugzilla.suse.com/show_bug.cgi?id=1213985; https://github.com/falkTX/Cadence
CVE: CVE-2023-43784
Published: 2023-09-22
Description: Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html; https://talk.plesk.com/threads/why-in-plesk-firehouse-aws-keys-are-public.369925/; https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html
CVE: CVE-2023-4716
Published: 2023-09-22
Description: The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up to, and including, 3.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-shortcode-support.php?rev=2955933#L1507; https://plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-shortcode-support.php?rev=2955933#L1511; https://plugins.trac.wordpress.org/browser/media-library-assistant/trunk/includes/class-mla-shortcode-support.php?rev=2955933#L1515
CVE: CVE-2023-4774
Published: 2023-09-22
Description: The WP-Matomo Integration (WP-Piwik) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp-piwik' shortcode in versions up to, and including, 1.0.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-piwik/tags/1.0.28/classes/WP_Piwik/Widget/OptOut.php#L28; https://plugins.trac.wordpress.org/changeset/2969705/wp-piwik#file164; https://www.wordfence.com/threat-intel/vulnerabilities/id/faa4f041-4740-4ebb-afb3-10019ce571be?source=cve
CVE: CVE-2022-3874
Published: 2023-09-22
Description: A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command execution on the underlying operating system.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78, CWE-78
References: https://access.redhat.com/security/cve/CVE-2022-3874; https://bugzilla.redhat.com/show_bug.cgi?id=2140577; https://access.redhat.com/security/cve/CVE-2022-3874
CVE: CVE-2023-34319
Published: 2023-09-22
Description: The fix for XSA-423 added logic to Linux'es netback driver to deal with
a frontend splitting a packet in a way such that not all of the headers
would come in one piece.  Unfortunately the logic introduced there
didn't account for the extreme case of the entire packet being split
into as many pieces as permitted by the protocol, yet still being
smaller than the area that's specially dealt with to keep all (possible)
headers together.  Such an unusual packet would therefore trigger a
buffer overrun in the driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-5002
Published: 2023-09-22
Description: A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. Versions of pgAdmin prior to 7.6 failed to properly control the server code executed on this API, allowing an authenticated user to run arbitrary commands on the server.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78
References: https://bugzilla.redhat.com/show_bug.cgi?id=2239164; https://github.com/pgadmin-org/pgadmin4/issues/6763; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2S24D3S2GVNGTDNE6SF2OQSOPU3H72UW/
CVE: CVE-2022-4039
Published: 2023-09-22
Description: A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled. This flaw allows an attacker to use this interface to deploy malicious code and access and modify potentially sensitive information in the app server configuration.
CVSS Score: 8.0 (HIGH)
CWE: CWE-276, CWE-276
References: https://access.redhat.com/errata/RHSA-2023:1047; https://access.redhat.com/security/cve/CVE-2022-4039; https://bugzilla.redhat.com/show_bug.cgi?id=2143416
CVE: CVE-2023-23766
Published: 2023-09-22
Description: An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To do so, an attacker would need write access to the repository. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.6.17, 3.7.15, 3.8.8, 3.9.3, and 3.10.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-697, CWE-697
References: https://docs.github.com/enterprise-server@3.10/admin/release-notes#3.10.1; https://docs.github.com/enterprise-server@3.6/admin/release-notes#3.6.17; https://docs.github.com/enterprise-server@3.7/admin/release-notes#3.7.15
CVE: CVE-2023-43144
Published: 2023-09-22
Description: Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/projectworldsofficial/Assets-management-system-in-php/issues/2; https://github.com/projectworldsofficial/Assets-management-system-in-php/issues/2
CVE: CVE-2023-42798
Published: 2023-09-22
Description: AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can let a release job reset the git root repository to the first commit. Version 1.5.0 has a patch for this issue. As a workaround, make sure the `PROJECT_PATH_RELEASE` (e.g. `releases/`) directory is manually and actually `git cloned` properly, making it a different git repostiory from the root git repository.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://github.com/ChewKeanHo/AutomataCI/issues/93; https://github.com/ChewKeanHo/AutomataCI/security/advisories/GHSA-6q23-vhhg-8h89; https://github.com/ChewKeanHo/AutomataCI/issues/93
CVE: CVE-2023-42811
Published: 2023-09-22
Description: aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even if tag verification fails. If a program using the `aes-gcm` crate's `decrypt_in_place*` APIs accesses the buffer after decryption failure, it will contain a decryption of an unauthenticated input. Depending on the specific nature of the program this may enable Chosen Ciphertext Attacks (CCAs) which can cause a catastrophic breakage of the cipher including full plaintext recovery. Version 0.10.3 contains a fix for this issue.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-347
References: https://docs.rs/aes-gcm/latest/src/aes_gcm/lib.rs.html#309; https://github.com/RustCrypto/AEADs/security/advisories/GHSA-423w-p2w9-r7vq; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ROBB6TBDAGEQ2WIINR34F3DPSN3FND6K/
CVE: CVE-2023-41027
Published: 2023-09-22
Description: Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.


CVSS Score: 8.0 (HIGH)
CWE: CWE-210, CWE-209
References: https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-credential-disclosure-vulnerability/; https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-credential-disclosure-vulnerability/
CVE: CVE-2023-41029
Published: 2023-09-22
Description: Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77, CWE-77
References: https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-command-injection-vulnerability/; https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-command-injection-vulnerability/
CVE: CVE-2023-41031
Published: 2023-09-22
Description: Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to execute commands via specially crafted requests to the vulnerable endpoint.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77, CWE-77
References: https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-homemng-command-injection-vulnerability/; https://blog.exodusintel.com/2023/09/18/juplink-rx4-1500-homemng-command-injection-vulnerability/
CVE: CVE-2023-42812
Published: 2023-09-22
Description: Galaxy is an open-source platform for FAIR data analysis. Prior to version 22.05, Galaxy is vulnerable to server-side request forgery, which allows a malicious to issue arbitrary HTTP/HTTPS requests from the application server to internal hosts and read their responses. Version 22.05 contains a patch for this issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/galaxyproject/galaxy/blob/06d56c859713b74f1c2e35da1c2fcbbf0a965645/lib/galaxy/files/uris.py; https://github.com/galaxyproject/galaxy/security/advisories/GHSA-vf5q-r8p9-35xh; https://github.com/galaxyproject/galaxy/blob/06d56c859713b74f1c2e35da1c2fcbbf0a965645/lib/galaxy/files/uris.py
CVE: CVE-2023-42821
Published: 2023-09-22
Description: The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `0.0.0[PII_REDACTED]5210-14b16010c2ee`, which corresponds with commit `14b16010c2ee7ff33a940a541d993bd043a88940`, parsing malformed markdown input with parser that uses parser.Mmark extension could result in out-of-bounds read vulnerability. To exploit the vulnerability, parser needs to have `parser.Mmark` extension set. The panic occurs inside the `citation.go` file on the line 69 when the parser tries to access the element past its length. This can result in a denial of service. Commit `14b16010c2ee7ff33a940a541d993bd043a88940`/pseudoversion `0.0.0[PII_REDACTED]5210-14b16010c2ee` contains a patch for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/gomarkdown/markdown/blob/7478c230c7cd3e7328803d89abe591d0b61c41e4/parser/citation.go#L69; https://github.com/gomarkdown/markdown/commit/14b16010c2ee7ff33a940a541d993bd043a88940; https://github.com/gomarkdown/markdown/security/advisories/GHSA-m9xq-6h2j-65r2
CVE: CVE-2023-43640
Published: 2023-09-22
Description: TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database (including the users table). This issue may lead to information disclosure. Version 0.34.0 contains a fix for the issue.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/SpeciesFileGroup/taxonworks/commit/a98f2dc610a541678e1e51af47659cd8b30179ae; https://github.com/SpeciesFileGroup/taxonworks/security/advisories/GHSA-m9p2-jxr6-4p6c; https://github.com/SpeciesFileGroup/taxonworks/commit/a98f2dc610a541678e1e51af47659cd8b30179ae
CVE: CVE-2023-38346
Published: 2023-09-22
Description: An issue was discovered in Wind River VxWorks 6.9 and 7. The function ``tarExtract`` implements TAR file extraction and thereby also processes files within an archive that have relative or absolute file paths. A developer using the "tarExtract" function may expect that the function will strip leading slashes from absolute paths or stop processing when encountering relative paths that are outside of the extraction path, unless otherwise forced. This could lead to unexpected and undocumented behavior, which in general could result in a directory traversal, and associated unexpected behavior.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2023-38346; https://support2.windriver.com/index.php?page=security-notices; https://www.pentagrid.ch/en/blog/wind-river-vxworks-tarextract-directory-traversal-vulnerability/
CVE: CVE-2023-43270
Published: 2023-09-22
Description: dst-admin v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the userId parameter at /home/playerOperate.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/Libestor/someCVE/tree/main/dst-admin-RCE; https://github.com/Libestor/someCVE/tree/main/dst-admin-RCE
CVE: CVE-2023-40989
Published: 2023-09-22
Description: SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Zone1-Z/CVE-2023-40989/blob/main/CVE-2023-40989; https://github.com/Zone1-Z/CVE-2023-40989/blob/main/CVE-2023-40989
CVE: CVE-2023-43129
Published: 2023-09-22
Description: D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-806; https://github.com/mmmmmx1/dlink/blob/main/DIR-806/2/readme.md; http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-806
CVE: CVE-2023-43130
Published: 2023-09-22
Description: D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-806; https://github.com/mmmmmx1/dlink/tree/main/DIR-806/3; http://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-806
CVE: CVE-2023-43338
Published: 2023-09-23
Description: Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows attackers to execute arbitrary code via a crafted input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/cesanta/mjs/issues/250; https://github.com/cesanta/mjs/issues/250
CVE: CVE-2023-43468
Published: 2023-09-23
Description: SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/ae6e361b/30d56c116d9f727b91c418d044f42fd3; https://github.com/ae6e361b/Online-Job-Portal; https://www.sourcecodester.com/php/14518/online-job-portal-php-full-source-code-2020.html
CVE: CVE-2023-43469
Published: 2023-09-23
Description: SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the ForPass.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/ae6e361b/28ffc44d39e406ce1bc627c0c5c3a7de; https://github.com/ae6e361b/Online-Job-Portal-Forget; https://www.sourcecodester.com/php/14518/online-job-portal-php-full-source-code-2020.html