deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-49954
Published: 2023-12-25
Description: The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://cve-2023-49954.github.io/; https://cve-2023-49954.github.io/
CVE: CVE-2023-38321
Published: 2023-12-25
Description: OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to /opennds_auth/ that lacks a custom query string parameter and client-token.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/openNDS/openNDS/blob/master/ChangeLog; https://openwrt.org/docs/guide-user/services/captive-portal/opennds; https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx
CVE: CVE-2023-7111
Published: 2023-12-26
Description: A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is an unknown function of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249006 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/h4md153v63n/CVEs/blob/main/Library-Management-System/Library-Management-System_SQL_Injection-3.md; https://vuldb.com/?ctiid.249006; https://vuldb.com/?id.249006
CVE: CVE-2023-27150
Published: 2023-12-26
Description: openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.esecforte.com/cve-2023-27150-cross-site-scripting-xss/; https://www.opencrx.org/; https://www.esecforte.com/cve-2023-27150-cross-site-scripting-xss/
CVE: CVE-2023-28616
Published: 2023-12-26
Description: An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1. It affects user accounts for which the password has an equals sign or space character. The serverd process logs such passwords in cleartext, and potentially sends these logs to the Syslog component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://advisories.stormshield.eu/2023-006; https://advisories.stormshield.eu/2023-006
CVE: CVE-2023-49117
Published: 2023-12-26
Description: PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN32646742/; https://www.powercms.jp/news/release-powercms-202312.html; https://jvn.jp/en/jp/JVN32646742/
CVE: CVE-2023-50297
Published: 2023-12-26
Description: Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://jvn.jp/en/jp/JVN32646742/; https://www.powercms.jp/news/release-powercms-202312.html; https://jvn.jp/en/jp/JVN32646742/
CVE: CVE-2023-51654
Published: 2023-12-26
Description: Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://jvn.jp/en/vu/JVNVU97943829/; https://jvn.jp/en/vu/JVNVU97943829/
CVE: CVE-2023-42436
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability exists in the presentation feature of GROWI versions prior to v3.4.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-45737
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the Markdown Settings (/admin/markdown) page of GROWI versions prior to v3.5.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-45740
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability when processing profile images exists in GROWI versions prior to v4.1.3. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-45741
Published: 2023-12-26
Description: VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN23771490/; https://www.buffalo.jp/news/detail/20231225-01.html; https://jvn.jp/en/jp/JVN23771490/
CVE: CVE-2023-46681
Published: 2023-12-26
Description: Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an authenticated attacker who can access to the product's command line interface to execute an arbitrary command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-88
References: https://jvn.jp/en/jp/JVN23771490/; https://www.buffalo.jp/news/detail/20231225-01.html; https://jvn.jp/en/jp/JVN23771490/
CVE: CVE-2023-46699
Published: 2023-12-26
Description: Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.0. If a user views a malicious page while logging in, settings may be changed without the user's intention.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-46711
Published: 2023-12-26
Description: VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-798
References: https://jvn.jp/en/jp/JVN23771490/; https://www.buffalo.jp/news/detail/20231225-01.html; https://jvn.jp/en/jp/JVN23771490/
CVE: CVE-2023-47215
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-49119
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-49598
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-49779
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-49807
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-50175
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the Markdown Settings (/admin/markdown) page, and the Customize (/admin/customize) page of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-50294
Published: 2023-12-26
Description: The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form. As a result, the Secret access key for external service may be obtained by an attacker who can access the App Settings page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-50332
Published: 2023-12-26
Description: Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6. If this vulnerability is exploited, a user may delete or suspend its own account without the user's intention.

CVSS Score: 6.5 (MEDIUM)
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-50339
Published: 2023-12-26
Description: Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.1.11. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN18715935/; https://weseek.co.jp/ja/news/2023/11/21/growi-prevent-xss6/; https://jvn.jp/en/jp/JVN18715935/
CVE: CVE-2023-51363
Published: 2023-12-26
Description: VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain sensitive information.
CVSS Score: 6.5 (MEDIUM)
References: https://jvn.jp/en/jp/JVN23771490/; https://www.buffalo.jp/news/detail/20231225-01.html; https://jvn.jp/en/jp/JVN23771490/
CVE: CVE-2023-5180
Published: 2023-12-26
Description: An issue was discovered in Open Design Alliance
Drawings SDK before 2024.12. A corrupted value of number
of sectors used by the Fat structure in a crafted DGN file leads to an
out-of-bounds write. An attacker can leverage this vulnerability to execute
code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2012-10017
Published: 2023-12-26
Description: A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 2.06 is able to address this issue. The patch is named 68af950330c3202a706f0ae9bbb52ceaa17dda9d. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-248955.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/wp-plugins/portfolio/commit/68af950330c3202a706f0ae9bbb52ceaa17dda9d; https://vuldb.com/?ctiid.248955; https://vuldb.com/?id.248955
CVE: CVE-2023-50968
Published: 2023-12-26
Description: Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri call without authorizations.

The same uri can be operated to realize a SSRF attack also  without  authorizations.

Users are recommended to upgrade to version 18.12.11, which fixes this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-918, CWE-918
References: http://www.openwall.com/lists/oss-security/2023/12/26/2; https://issues.apache.org/jira/browse/OFBIZ-12875; https://lists.apache.org/thread/x5now4bk3llwf3k58kl96qvtjyxwp43q
CVE: CVE-2023-49949
Published: 2023-12-26
Description: Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://acribia.ru/articles/2fa_bypass_passwork; https://passwork.ru/; https://acribia.ru/articles/2fa_bypass_passwork
CVE: CVE-2014-125109
Published: 2023-12-26
Description: A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_email leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 2.28 is able to address this issue. The name of the patch is d2ede580474665af56ff262a05783fbabe4529b8. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248956.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/wp-plugins/portfolio/commit/d2ede580474665af56ff262a05783fbabe4529b8; https://vuldb.com/?ctiid.248956; https://vuldb.com/?id.248956
CVE: CVE-2023-51103
Published: 2023-12-26
Description: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of pixmap.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=f1b5f87edd2675d5c79301e4ef2e1139f67f904b; https://bugs.ghostscript.com/show_bug.cgi?id=707620; https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md
CVE: CVE-2023-51104
Published: 2023-12-26
Description: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=0c06a4e[PII_REDACTED]5f6ab2d5b1f25da6771e1f4; https://bugs.ghostscript.com/show_bug.cgi?id=707621; https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md
CVE: CVE-2023-51105
Published: 2023-12-26
Description: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=cee86dc519d5270a3b96476ad15809ceace64a26; https://bugs.ghostscript.com/show_bug.cgi?id=707622; https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md
CVE: CVE-2023-51106
Published: 2023-12-26
Description: A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md; https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md
CVE: CVE-2023-51107
Published: 2023-12-26
Description: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369, CWE-369
References: https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md; https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md
CVE: CVE-2023-51467
Published: 2023-12-26
Description: The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://issues.apache.org/jira/browse/OFBIZ-12873; https://lists.apache.org/thread/9tmf9qyyhgh6m052rhz7lg9vxn390bdv; https://lists.apache.org/thread/oj2s6objhdq72t6g29omqpcbd1wlp48o
CVE: CVE-2015-10127
Published: 2023-12-26
Description: A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.14 is able to address this issue. The patch is identified as 1274afc635170daafd38306487b6bb8a01f78ecd. It is recommended to upgrade the affected component. VDB-248954 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/pluscaptcha/commit/1274afc635170daafd38306487b6bb8a01f78ecd; https://vuldb.com/?ctiid.248954; https://vuldb.com/?id.248954
CVE: CVE-2023-51095
Published: 2023-12-26
Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/GD008/TENDA/blob/main/M3/delWlPolicyData/M3_delWlPolicyData.md; https://github.com/GD008/TENDA/blob/main/M3/delWlPolicyData/M3_delWlPolicyData.md
CVE: CVE-2023-43851
Published: 2023-12-26
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-45251
Published: 2023-12-26
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-51090
Published: 2023-12-26
Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/GD008/TENDA/blob/main/M3/getWeiXinConfig/M3_getWeiXinConfig.md; https://github.com/GD008/TENDA/blob/main/M3/getWeiXinConfig/M3_getWeiXinConfig.md
CVE: CVE-2023-51091
Published: 2023-12-26
Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/GD008/TENDA/blob/main/M3/cookie/M3_cookie.md; https://github.com/GD008/TENDA/blob/main/M3/cookie/M3_cookie.md
CVE: CVE-2023-51092
Published: 2023-12-26
Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/GD008/TENDA/blob/main/M3/upgrade/M3_upgrade.md; https://github.com/GD008/TENDA/blob/main/M3/upgrade/M3_upgrade.md
CVE: CVE-2023-51093
Published: 2023-12-26
Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/GD008/TENDA/blob/main/M3/setVlanInfo/M3_setVlanInfo.md; https://github.com/GD008/TENDA/blob/main/M3/setVlanInfo/M3_setVlanInfo.md
CVE: CVE-2023-51094
Published: 2023-12-26
Description: Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/GD008/TENDA/blob/main/M3/telnet/M3_telnet.md; https://github.com/GD008/TENDA/blob/main/M3/telnet/M3_telnet.md
CVE: CVE-2023-51097
Published: 2023-12-26
Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/GD008/TENDA/blob/main/W9/W9_setAutoPing/W9_setAutoPing.md; https://github.com/GD008/TENDA/blob/main/W9/W9_setAutoPing/W9_setAutoPing.md
CVE: CVE-2023-51098
Published: 2023-12-26
Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/GD008/TENDA/blob/main/W9/W9_setDiagnoseInfo/W9_setDiagnoseInfo.md; https://github.com/GD008/TENDA/blob/main/W9/W9_setDiagnoseInfo/W9_setDiagnoseInfo.md
CVE: CVE-2023-51099
Published: 2023-12-26
Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/GD008/TENDA/blob/main/W9/W9_execommand/W9_execommand.md; https://github.com/GD008/TENDA/blob/main/W9/W9_execommand/W9_execommand.md
CVE: CVE-2023-51100
Published: 2023-12-26
Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/GD008/TENDA/blob/main/W9/W9_getDiagnoseInfo/W9_getDiagnoseInfo.md; https://github.com/GD008/TENDA/blob/main/W9/W9_getDiagnoseInfo/W9_getDiagnoseInfo.md
CVE: CVE-2023-51101
Published: 2023-12-26
Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/GD008/TENDA/blob/main/W9/W9_setUplinkInfo/W9_setUplinkInfo.md; https://github.com/GD008/TENDA/blob/main/W9/W9_setUplinkInfo/W9_setUplinkInfo.md
CVE: CVE-2023-51102
Published: 2023-12-26
Description: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/GD008/TENDA/blob/main/W9/W9_WifiMacFilterSet/W9_WifiMacFilterSet.md; https://github.com/GD008/TENDA/blob/main/W9/W9_WifiMacFilterSet/W9_WifiMacFilterSet.md
CVE: CVE-2023-52086
Published: 2023-12-26
Description: resumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file upload anywhere in the filesystem via ../ in multipart/form-data content to upload.php. (File overwrite hasn't been possible with the code available in GitHub in recent years, however.)
CVSS Score: 8.1 (HIGH)
CWE: CWE-434
References: https://github.com/dilab/resumable.php/commit/3c6dbf5170b01cbb712013c7d0a83f5aac45653b; https://github.com/dilab/resumable.php/issues/34; https://github.com/dilab/resumable.php/pull/27/commits/3e3c94d0302bb399a7611b4738a5a4dd0832a926