deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-46020
Published: 2023-11-13
Description: Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ersinerenler/CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability; https://github.com/ersinerenler/CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability
CVE: CVE-2023-46021
Published: 2023-11-13
Description: SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/ersinerenler/CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability; https://github.com/ersinerenler/CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability
CVE: CVE-2023-47690
Published: 2023-11-13
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin <= 1.10 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/additional-order-filters-for-woocommerce/wordpress-additional-order-filters-for-woocommerce-plugin-1-10-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/additional-order-filters-for-woocommerce/wordpress-additional-order-filters-for-woocommerce-plugin-1-10-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-47695
Published: 2023-11-13
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Scribit Shortcodes Finder plugin <= 1.5.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/shortcodes-finder/wordpress-shortcodes-finder-plugin-1-5-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/shortcodes-finder/wordpress-shortcodes-finder-plugin-1-5-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-47696
Published: 2023-11-13
Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <= 3.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/gm-woocommerce-quote-popup/wordpress-product-enquiry-for-woocommerce-plugin-3-0-cross-site-scripting-xss-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/gm-woocommerce-quote-popup/wordpress-product-enquiry-for-woocommerce-plugin-3-0-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE: CVE-2023-47697
Published: 2023-11-13
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Event Manager WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin <= 3.1.39 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-4603
Published: 2023-11-13
Description: The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'printersettings'  parameter in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://drive.google.com/file/d/1cRVH7Oz6M2U2XTbNAmm43PDKBw6FzShA/view?usp=sharing; https://plugins.trac.wordpress.org/changeset/2991002/star-cloudprnt-for-woocommerce/trunk?contextall=1&old=2510015&old_path=%2Fstar-cloudprnt-for-woocommerce%2Ftrunk; https://www.wordfence.com/threat-intel/vulnerabilities/id/110c6d41-e814-41c9-a3e7-d94ec3d953e6?source=cve
CVE: CVE-2023-47657
Published: 2023-11-14
Description: Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin <= 1.5.8 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/quick-view-and-buy-now-for-woocommerce/wordpress-direct-checkout-quick-view-buy-now-for-woocommerce-plugin-1-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/quick-view-and-buy-now-for-woocommerce/wordpress-direct-checkout-quick-view-buy-now-for-woocommerce-plugin-1-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-47662
Published: 2023-11-14
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GoldBroker.Com Live Gold Price & Silver Price Charts Widgets plugin <= 2.4 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/gold-price-chart-widget/wordpress-live-gold-price-silver-price-charts-widgets-plugin-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gold-price-chart-widget/wordpress-live-gold-price-silver-price-charts-widgets-plugin-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-47665
Published: 2023-11-14
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in edward_plainview Plainview Protect Passwords plugin <= 1.4 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/plainview-protect-passwords/wordpress-plainview-protect-passwords-plugin-1-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/plainview-protect-passwords/wordpress-plainview-protect-passwords-plugin-1-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-47673
Published: 2023-11-14
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Stefano Ottolenghi Post Pay Counter plugin <= 2.784 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/post-pay-counter/wordpress-post-pay-counter-plugin-2-789-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/post-pay-counter/wordpress-post-pay-counter-plugin-2-789-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-47680
Published: 2023-11-14
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Qode Interactive Qi Addons For Elementor plugin <= 1.6.3 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/qi-addons-for-elementor/wordpress-qi-addons-for-elementor-plugin-1-6-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/qi-addons-for-elementor/wordpress-qi-addons-for-elementor-plugin-1-6-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-47684
Published: 2023-11-14
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThemePunch OHG Essential Grid plugin <= 3.1.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/essential-grid/wordpress-essential-grid-plugin-3-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/essential-grid/wordpress-essential-grid-plugin-3-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-5977
Published: 2023-11-14
Description: Rejected reason: Accidental Request.
CVE: CVE-2023-6010
Published: 2023-11-14
Description: Rejected reason: Accidental Request.
CVE: CVE-2023-6034
Published: 2023-11-14
Description: Rejected reason: Accidental request.
CVE: CVE-2023-6083
Published: 2023-11-14
Description: Rejected reason: Accidental Request.
CVE: CVE-2023-6085
Published: 2023-11-14
Description: Rejected reason: Accidental request.
CVE: CVE-2023-6086
Published: 2023-11-14
Description: Rejected reason: Accidental request.
CVE: CVE-2023-6087
Published: 2023-11-14
Description: Rejected reason: Accidental Request.
CVE: CVE-2023-6088
Published: 2023-11-14
Description: Rejected reason: Accidental Request.
CVE: CVE-2023-6089
Published: 2023-11-14
Description: Rejected reason: Accidental Request.
CVE: CVE-2023-6092
Published: 2023-11-14
Description: Rejected reason: DUPLICATE, accidental request.
CVE: CVE-2023-6106
Published: 2023-11-14
Description: Rejected reason: Accidental request.
CVE: CVE-2023-6107
Published: 2023-11-14
Description: Rejected reason: Accidental Request.
CVE: CVE-2023-6115
Published: 2023-11-14
Description: Rejected reason: DUPLICATE CVE
CVE: CVE-2023-31403
Published: 2023-11-14
Description: SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation process leading to considerable impact on confidentiality, integrity and availability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-863, CWE-863
References: https://me.sap.com/notes/3355658; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3355658
CVE: CVE-2023-41366
Published: 2023-11-14
Description: Under certain condition SAP NetWeaver Application Server ABAP - versions KERNEL 722, KERNEL 7.53, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KERNEL 7.94, KERNEL64UC 7.22, KERNEL64UC 7.22EXT, KERNEL64UC 7.53, KERNEL64NUC 7.22, KERNEL64NUC 7.22EXT, allows an unauthenticated attacker to access the unintended data due to the lack of restrictions applied which may lead to low impact in confidentiality and no impact on the integrity and availability of the application.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://me.sap.com/notes/3362849; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3362849
CVE: CVE-2023-42480
Published: 2023-11-14
Description: The unauthenticated attacker in NetWeaver AS Java Logon application - version 7.50, can brute force the login functionality to identify the legitimate user ids. This will have an impact on confidentiality but there is no other impact on integrity or availability.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://me.sap.com/notes/3366410; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3366410
CVE: CVE-2023-47628
Published: 2023-11-14
Description: DataHub is an open-source metadata platform. DataHub Frontend's sessions are configured using Play Framework's default settings for stateless session which do not set an expiration time for a cookie. Due to this, if a session cookie were ever leaked, it would be valid forever. DataHub uses a stateless session cookie that is not invalidated on logout, it is just removed from the browser forcing the user to login again. However, if an attacker extracted a cookie from an authenticated user it would continue to be valid as there is no validation on a time window the session token is valid for due to a combination of the usage of LegacyCookiesModule from Play Framework and using default settings which do not set an expiration time. All DataHub instances prior to the patch that have removed the datahub user, but not the default policies applying to that user are affected. Users are advised to update to version 0.12.1 which addresses the issue. There are no known workarounds for this vulnerability.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-613
References: https://github.com/datahub-project/datahub/security/advisories/GHSA-75p8-rgh2-r9mx; https://github.com/datahub-project/datahub/security/advisories/GHSA-75p8-rgh2-r9mx
CVE: CVE-2023-47629
Published: 2023-11-14
Description: DataHub is an open-source metadata platform. In affected versions sign-up through an invite link does not properly restrict users from signing up as privileged accounts. If a user is given an email sign-up link they can potentially create an admin account given certain preconditions. If the default datahub user has been removed, then the user can sign up for an account that leverages the default policies giving admin privileges to the datahub user. All DataHub instances prior to the patch that have removed the datahub user, but not the default policies applying to that user are affected. Users are advised to update to version 0.12.1 which addresses the issue. There are no known workarounds for this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8; https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8
CVE: CVE-2023-45558
Published: 2023-11-14
Description: An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.
CVSS Score: 7.5 (HIGH)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45558.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45558.md
CVE: CVE-2023-45560
Published: 2023-11-14
Description: An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45560.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-45560.md
CVE: CVE-2023-46445
Published: 2023-11-14
Description: An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-345, CWE-345
References: http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html; https://github.com/advisories/GHSA-cfc2-wr2v-gxm5; https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
CVE: CVE-2023-46446
Published: 2023-11-14
Description: An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-639, CWE-639
References: http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html; https://github.com/advisories/GHSA-c35q-ffpf-5qpm; https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
CVE: CVE-2023-31754
Published: 2023-11-14
Description: Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://labs.withsecure.com/advisories/optimizely-admin-panel-dom-xss; https://labs.withsecure.com/advisories/optimizely-admin-panel-dom-xss
CVE: CVE-2023-42325
Published: 2023-11-14
Description: Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the status_logs_filter_dynamic.php page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.netgate.com/downloads/pfSense-SA-23_09.webgui.asc; https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/; https://docs.netgate.com/downloads/pfSense-SA-23_09.webgui.asc
CVE: CVE-2023-42327
Published: 2023-11-14
Description: Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getserviceproviders.php page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.netgate.com/downloads/pfSense-SA-23_08.webgui.asc; https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/; https://docs.netgate.com/downloads/pfSense-SA-23_08.webgui.asc
CVE: CVE-2023-6006
Published: 2023-11-14
Description: This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must have local write access to the C Drive. In addition, Print Archiving must be enabled or the attacker needs to encounter a misconfigured system. This vulnerability does not apply to PaperCut NG installs that have Print Archiving enabled and configured as per the recommended set up procedure. This specific flaw exists within the pc-pdl-to-image process. The process loads an executable from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM

Note: This CVE has been rescored with a "Privileges Required (PR)" rating of low, and “Attack Complexity (AC)” rating of low, reflecting the worst-case scenario where an Administrator has granted local login access to standard network users on the host server.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://www.papercut.com/kb/Main/Security-Bulletin-November-2023/; https://www.papercut.com/kb/Main/CommonSecurityQuestions/; https://www.papercut.com/kb/Main/Security-Bulletin-November-2023/
CVE: CVE-2023-42326
Published: 2023-11-14
Description: An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://docs.netgate.com/downloads/pfSense-SA-23_10.webgui.asc; https://www.sonarsource.com/blog/pfsense-vulnerabilities-sonarcloud/; https://docs.netgate.com/downloads/pfSense-SA-23_10.webgui.asc
CVE: CVE-2023-43900
Published: 2023-11-14
Description: Insecure Direct Object References (IDOR) in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://secpro.llc/emsigner-cve-3/; https://secpro.llc/emsigner-cve-3/
CVE: CVE-2023-43901
Published: 2023-11-14
Description: Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: https://secpro.llc/EMSigner-CVE-1/; https://secpro.llc/EMSigner-CVE-1/
CVE: CVE-2023-43902
Published: 2023-11-14
Description: Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://secpro.llc/emsigner-cve-2/; https://secpro.llc/emsigner-cve-2/
CVE: CVE-2023-45878
Published: 2023-11-14
Description: GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set, the defined path is used as the destination folder, concatenated with the absolute path of the installation directory. The content of the img parameter is base64 decoded and written to the defined file path. This allows creation of PHP files that permit Remote Code Execution (unauthenticated).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://herolab.usd.de/security-advisories/usd-2023-0025/; https://herolab.usd.de/security-advisories/usd-2023-0025/
CVE: CVE-2023-45879
Published: 2023-11-14
Description: GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://herolab.usd.de/security-advisories/usd-2023-0019/; https://herolab.usd.de/security-advisories/usd-2023-0019/
CVE: CVE-2023-45880
Published: 2023-11-14
Description: GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://herolab.usd.de/security-advisories/usd-2023-0022/; https://herolab.usd.de/security-advisories/usd-2023-0022/
CVE: CVE-2023-45881
Published: 2023-11-14
Description: GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://herolab.usd.de/security-advisories/usd-2023-0024/; https://herolab.usd.de/security-advisories/usd-2023-0024/
CVE: CVE-2023-47609
Published: 2023-11-14
Description: SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://jvn.jp/en/jp/JVN67822421/; https://oss-calendar.com/news/20231113/; https://jvn.jp/en/jp/JVN67822421/
CVE: CVE-2023-6109
Published: 2023-11-14
Description: The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add() function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to one vote per person.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://plugins.trac.wordpress.org/changeset/2959124/yop-poll/trunk/admin/models/votes.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/360b1927-a863-46be-ad11-3f6251c75a3c?source=cve; https://plugins.trac.wordpress.org/changeset/2959124/yop-poll/trunk/admin/models/votes.php
CVE: CVE-2023-24585
Published: 2023-11-14
Description: An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 7.7 (HIGH)
CWE: CWE-119, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1725; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1725; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1725
CVE: CVE-2023-25181
Published: 2023-11-14
Description: A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1726; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1726; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1726
CVE: CVE-2023-27882
Published: 2023-11-14
Description: A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1733; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1733; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1733