deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-32141
Published: 2024-05-03
Description: D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. When parsing the getpage and errorpage parameters, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-18419.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324; https://www.zerodayinitiative.com/advisories/ZDI-23-533/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324
CVE: CVE-2023-32142
Published: 2024-05-03
Description: D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. When parsing the var:page parameter, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-18422.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324; https://www.zerodayinitiative.com/advisories/ZDI-23-534/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324
CVE: CVE-2023-32143
Published: 2024-05-03
Description: D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of requests to the /cgi-bin/webupg endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-18423.
CVSS Score: 8.8 (HIGH)
CWE: CWE-197, CWE-197
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324; https://www.zerodayinitiative.com/advisories/ZDI-23-535/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324
CVE: CVE-2023-32144
Published: 2024-05-03
Description: D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-18454.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324; https://www.zerodayinitiative.com/advisories/ZDI-23-536/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324
CVE: CVE-2023-32145
Published: 2024-05-03
Description: D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the processing of login requests to the web-based user interface. The firmware contains hard-coded default credentials. An attacker can leverage this vulnerability to bypass authentication on the system.
. Was ZDI-CAN-18455.
CVSS Score: 8.8 (HIGH)
CWE: CWE-259, CWE-798
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324; https://www.zerodayinitiative.com/advisories/ZDI-23-537/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324
CVE: CVE-2023-32146
Published: 2024-05-03
Description: D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the /cgi-bin/webproc endpoint. When parsing the errorpage and nextpage parameters, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-18746.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-121
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324; https://www.zerodayinitiative.com/advisories/ZDI-23-538/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10324
CVE: CVE-2023-32147
Published: 2024-05-03
Description: D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of the LocalIPAddress parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-19544.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323; https://www.zerodayinitiative.com/advisories/ZDI-23-539/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323
CVE: CVE-2023-32148
Published: 2024-05-03
Description: D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the web management interface, which listens on TCP port 80 by default. A crafted XML element in the login request can cause authentication to succeed without providing proper credentials. An attacker can leverage this vulnerability to bypass authentication on the system.
. Was ZDI-CAN-19545.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-303
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323; https://www.zerodayinitiative.com/advisories/ZDI-23-540/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323
CVE: CVE-2023-32149
Published: 2024-05-03
Description: D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the web management interface, which listens on TCP port 80 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-19546.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323; https://www.zerodayinitiative.com/advisories/ZDI-23-541/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323
CVE: CVE-2023-32150
Published: 2024-05-03
Description: D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of the PrefixLen parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-19547.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323; https://www.zerodayinitiative.com/advisories/ZDI-23-542/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323
CVE: CVE-2023-32151
Published: 2024-05-03
Description: D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of the DestNetwork parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-19548.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323; https://www.zerodayinitiative.com/advisories/ZDI-23-543/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323
CVE: CVE-2023-32152
Published: 2024-05-03
Description: D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the web management interface, which listens on TCP port 80 by default. A specially crafted login request can cause authentication to succeed without providing proper credentials. An attacker can leverage this vulnerability to bypass authentication on the system.
. Was ZDI-CAN-19549.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-303
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323; https://www.zerodayinitiative.com/advisories/ZDI-23-544/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323
CVE: CVE-2023-32153
Published: 2024-05-03
Description: D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of the EmailFrom parameter provided to the HNAP1 endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-19550.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323; https://www.zerodayinitiative.com/advisories/ZDI-23-545/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10323
CVE: CVE-2023-32154
Published: 2024-05-03
Description: Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the Router Advertisement Daemon. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-19797.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-23-710/; https://www.zerodayinitiative.com/advisories/ZDI-23-710/
CVE: CVE-2023-32155
Published: 2024-05-03
Description: Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsystem in order to exploit this vulnerability.

The specific flaw exists within the bcmdhd driver. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel.
. Was ZDI-CAN-20733.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-23-971/; https://www.zerodayinitiative.com/advisories/ZDI-23-971/
CVE: CVE-2023-32156
Published: 2024-05-03
Description: Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in order to exploit this vulnerability.

The specific flaw exists within the handling of firmware updates. The issue results from improper error-handling during the update process. An attacker can leverage this vulnerability to execute code in the context of Tesla's Gateway ECU.
. Was ZDI-CAN-20734.
CVSS Score: 8.8 (HIGH)
CWE: CWE-367
References: https://www.zerodayinitiative.com/advisories/ZDI-23-972/; https://www.zerodayinitiative.com/advisories/ZDI-23-972/
CVE: CVE-2023-32157
Published: 2024-05-03
Description: Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.

The specific flaw exists within the bsa_server process. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of an unprivileged user in a sandboxed process.
. Was ZDI-CAN-20737.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-23-973/; https://www.zerodayinitiative.com/advisories/ZDI-23-973/
CVE: CVE-2023-32158
Published: 2024-05-03
Description: PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17764.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.tracker-software.com/product/pdf-xchange-editor/history; https://www.zerodayinitiative.com/advisories/ZDI-23-640/; https://www.tracker-software.com/product/pdf-xchange-editor/history
CVE: CVE-2023-32159
Published: 2024-05-03
Description: PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17765.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.tracker-software.com/product/pdf-xchange-editor/history; https://www.zerodayinitiative.com/advisories/ZDI-23-641/; https://www.tracker-software.com/product/pdf-xchange-editor/history
CVE: CVE-2023-32160
Published: 2024-05-03
Description: PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17767.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.tracker-software.com/product/pdf-xchange-editor/history; https://www.zerodayinitiative.com/advisories/ZDI-23-642/; https://www.tracker-software.com/product/pdf-xchange-editor/history
CVE: CVE-2023-32161
Published: 2024-05-03
Description: PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PDF files. Crafted data in a PDF file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-17778.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.tracker-software.com/product/pdf-xchange-editor/history; https://www.zerodayinitiative.com/advisories/ZDI-23-643/; https://www.tracker-software.com/product/pdf-xchange-editor/history
CVE: CVE-2023-32164
Published: 2024-05-03
Description: D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the TftpSendFileThread class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-19496.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332; https://www.zerodayinitiative.com/advisories/ZDI-23-715/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332
CVE: CVE-2023-32165
Published: 2024-05-03
Description: D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the TftpReceiveFileHandler class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-19497.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332; https://www.zerodayinitiative.com/advisories/ZDI-23-716/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332
CVE: CVE-2023-32166
Published: 2024-05-03
Description: D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability.

The specific flaw exists within the uploadFile function. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create files in the context of SYSTEM. Was ZDI-CAN-19527.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332; https://www.zerodayinitiative.com/advisories/ZDI-23-717/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332
CVE: CVE-2023-32167
Published: 2024-05-03
Description: D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability. This vulnerability allows remote attackers to create and delete arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability.

The specific flaw exists within the uploadMib function. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create or delete files in the context of SYSTEM.
. Was ZDI-CAN-19529.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332; https://www.zerodayinitiative.com/advisories/ZDI-23-718/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332
CVE: CVE-2023-32168
Published: 2024-05-03
Description: D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability.

The specific flaw exists within the showUser method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user.
. Was ZDI-CAN-19534.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332; https://www.zerodayinitiative.com/advisories/ZDI-23-719/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10332