deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-36029
Published: 2024-04-25
Description: Greenlight is an end-user interface for BigBlueButton servers. Versions prior to 2.13.0 have an open redirect vulnerability in the Login page due to unchecked the value of the `return_to` cookie. Versions 2.13.0 contains a patch for the issue.

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-601, CWE-601
References: https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623; https://huntr.com/bounties/ba5834bd-1f04-4936-8e93-2442d45403bahttps://; https://github.com/bigbluebutton/greenlight/commit/20fe1ee71b5703fcc4ed698a959ad224fed19623
CVE: CVE-2024-31609
Published: 2024-04-25
Description: Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/ss122-0ss/BOSSCMS/blob/main/readme.md; https://github.com/ss122-0ss/BOSSCMS/blob/main/readme.md
CVE: CVE-2024-31610
Published: 2024-04-25
Description: File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/ss122-0ss/School/blob/main/readme.md; https://github.com/ss122-0ss/School/blob/main/readme.md
CVE: CVE-2024-3265
Published: 2024-04-25
Description: The Advanced Search WordPress plugin through 1.1.6 does not properly escape parameters appended to an SQL query, making it possible for users with the administrator role to conduct SQL Injection attacks in the context of a multisite WordPress configurations.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://wpscan.com/vulnerability/ecb74622-eeed-48b6-a944-4e3494d6594d/; https://wpscan.com/vulnerability/ecb74622-eeed-48b6-a944-4e3494d6594d/
CVE: CVE-2024-0916
Published: 2024-04-25
Description: Unauthenticated file upload allows remote code execution.
This issue affects UvDesk Community: from 1.0.0 through 1.1.3.


CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://github.com/uvdesk/core-framework/pull/706; https://pentraze.com/vulnerability-reports/; https://github.com/uvdesk/core-framework/pull/706
CVE: CVE-2024-32651
Published: 2024-04-26
Description: changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service. There is a Server Side Template Injection (SSTI) in Jinja2 that allows Remote Command Execution on the server host. Attackers can run any system command without any restriction and they could use a reverse shell. The impact is critical as the attacker can completely takeover the server machine. This can be reduced if changedetection is behind a login page, but this isn't required by the application (not by default and not enforced).
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-1336
References: https://blog.hacktivesecurity.com/index.php/2024/05/08/cve-2024-32651-server-side-template-injection-changedetection-io/; https://github.com/dgtlmoon/changedetection.io/releases/tag/0.45.21; https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-4r7v-whpg-8rx3
CVE: CVE-2024-32868
Published: 2024-04-26
Description: ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. While ZITADEL already gives administrators the option to define a `Lockout Policy` with a maximum amount of failed password check attempts, there was no such mechanism for (T)OTP checks. This issue has been patched in version 2.50.0.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-297, CWE-307, CWE-307
References: https://github.com/zitadel/zitadel/releases/tag/v2.50.0; https://github.com/zitadel/zitadel/security/advisories/GHSA-7j7j-66cv-m239; https://github.com/zitadel/zitadel/releases/tag/v2.50.0
CVE: CVE-2024-33661
Published: 2024-04-26
Description: Portainer before 2.20.0 allows redirects when the target is not index.yaml.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-601
References: https://github.com/portainer/portainer/compare/2.19.4...2.20.0; https://github.com/portainer/portainer/pull/11233; https://github.com/portainer/portainer/pull/11236
CVE: CVE-2024-33663
Published: 2024-04-26
Description: python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327
References: https://github.com/mpdavis/python-jose/issues/346; https://www.vicarius.io/vsociety/posts/algorithm-confusion-in-python-jose-cve-2024-33663; https://github.com/mpdavis/python-jose/issues/346
CVE: CVE-2024-33664
Published: 2024-04-26
Description: python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/mpdavis/python-jose/issues/344; https://github.com/mpdavis/python-jose/pull/345; https://www.vicarius.io/vsociety/posts/jwt-bomb-in-python-jose-cve-2024-33664
CVE: CVE-2022-48682
Published: 2024-04-26
Description: In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-367
References: https://bugzilla.suse.com/show_bug.cgi?id=1200381; https://github.com/adrianlopezroche/fdupes/blob/4b6bcde1b3eb1cebe87cd30814f7d6cf4ee46e95/fdupes.c; https://github.com/adrianlopezroche/fdupes/commit/[PII_REDACTED]8f1ac33b55418e00334116e419717f
CVE: CVE-2024-33665
Published: 2024-04-26
Description: angular-translate through 2.19.1 allows XSS via a crafted key that is used by the translate directive. NOTE: the vendor indicates that there is no documentation indicating that a key is supposed to be safe against XSS attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://docs.herodevs.com/docs/2024-Angular-Translate-XSS; https://github.com/angular-translate/angular-translate/issues/1418; https://github.com/angular-translate/angular-translate/issues/1418#issuecomment-252498855
CVE: CVE-2024-33666
Published: 2024-04-26
Description: An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents.
CVSS Score: 8.6 (HIGH)
CWE: CWE-284
References: https://zammad.com/en/advisories/zaa-2024-01; https://zammad.com/en/advisories/zaa-2024-01
CVE: CVE-2024-33667
Published: 2024-04-26
Description: An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://zammad.com/en/advisories/zaa-2024-03; https://zammad.com/en/advisories/zaa-2024-03
CVE: CVE-2024-33668
Published: 2024-04-26
Description: An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639
References: https://zammad.com/en/advisories/zaa-2024-02; https://zammad.com/en/advisories/zaa-2024-02
CVE: CVE-2024-33669
Published: 2024-04-26
Description: An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which results in an information leak. This allows an attacker capable of observing Passbolt's HTTPS queries to the Pwned Password API to more easily brute force passwords that are manually typed by the user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-200
References: https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html; https://haveibeenpwned.com; https://help.passbolt.com/incidents/pwned-password-service-information-leak
CVE: CVE-2024-33670
Published: 2024-04-26
Description: Passbolt API before 4.6.2 allows HTML injection in a URL parameter, resulting in custom content being displayed when a user visits the crafted URL. Although the injected content is not executed as JavaScript due to Content Security Policy (CSP) restrictions, it may still impact the appearance and user interaction of the page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://help.passbolt.com/incidents/reflective-html-injection-vulnerability; https://www.passbolt.com/incidents; https://www.passbolt.com/security/more
CVE: CVE-2024-33671
Published: 2024-04-26
Description: An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to perform arbitrary file deletion on protected files.
CVSS Score: 7.7 (HIGH)
CWE: CWE-73
References: https://www.veritas.com/support/en_US/security/VTS24-002#H1; https://www.veritas.com/support/en_US/security/VTS24-002#H1
CVE: CVE-2024-33672
Published: 2024-04-26
Description: An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary file deletion on protected files.
CVSS Score: 7.7 (HIGH)
CWE: CWE-427
References: https://www.veritas.com/support/en_US/security/VTS24-001; https://www.veritas.com/support/en_US/security/VTS24-001
CVE: CVE-2024-33673
Published: 2024-04-26
Description: An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://www.veritas.com/support/en_US/security/VTS24-002#H2; https://www.veritas.com/support/en_US/security/VTS24-002#H2
CVE: CVE-2023-47252
Published: 2024-04-26
Description: An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not verify data size before getting it from the communication buffer, which could lead to possible circumstances where the data immediately following the command buffer could be destroyed with a fixed value. This is fixed in kernel 5.2 v05.28.45, kernel 5.3 v05.37.45, kernel 5.4 v05.45.45, kernel 5.5 v05.53.45, and kernel 5.6 v05.60.45.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-787
References: https://www.insyde.com/security-pledge/SA-2023067; https://www.insyde.com/security-pledge/SA-2023067
CVE: CVE-2024-31755
Published: 2024-04-26
Description: cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.
CVSS Score: 7.6 (HIGH)
CWE: CWE-476
References: https://github.com/DaveGamble/cJSON/issues/839; https://github.com/DaveGamble/cJSON/issues/839
CVE: CVE-2024-4163
Published: 2024-04-26
Description: The Skylab IGX IIoT Gateway allowed users to connect to it via a limited shell terminal (IGX). However, it was discovered that the process was running under root privileges. This allowed the attacker to read, write, and modify any file in the operating system by utilizing the limited shell file exec and download functions. By replacing the /etc/passwd file with a new root user entry, the attacker was able to breakout from the limited shell and login to a unrestricted shell with root access. With the root access, the attacker will be able take full control of the IIoT Gateway.
CVSS Score: 8.0 (HIGH)
CWE: CWE-862
References: https://govtech-csg.github.io/security-advisories/2024/04/25/CVE-2024-4163.html; https://govtech-csg.github.io/security-advisories/2024/04/25/CVE-2024-4163.html
CVE: CVE-2024-22632
Published: 2024-04-26
Description: Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://tomiodarim.io/posts/cve-2024-22632-3/; https://tomiodarim.io/posts/cve-2024-22632-3/
CVE: CVE-2024-22633
Published: 2024-04-26
Description: Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://tomiodarim.io/posts/cve-2024-22632-3/; https://tomiodarim.io/posts/cve-2024-22632-3/
CVE: CVE-2024-32404
Published: 2024-04-26
Description: Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-94
References: https://packetstormsecurity.com/2404-exploits/rlts-sstexec.txt; https://packetstormsecurity.com/2404-exploits/rlts-sstexec.txt
CVE: CVE-2024-32406
Published: 2024-04-26
Description: Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1336
References: https://packetstormsecurity.com/files/178251/Relate-Learning-And-Teaching-System-SSTI-Remote-Code-Execution.html; https://packetstormsecurity.com/files/178251/Relate-Learning-And-Teaching-System-SSTI-Remote-Code-Execution.html
CVE: CVE-2024-3154
Published: 2024-04-26
Description: A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://access.redhat.com/errata/RHSA-2024:2669; https://access.redhat.com/errata/RHSA-2024:2672; https://access.redhat.com/errata/RHSA-2024:2784
CVE: CVE-2024-0905
Published: 2024-04-26
Description: The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against unauthenticated and admin-level users
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3b9eba0d-29aa-47e4-b17f-4cf4bbf8b690/; https://wpscan.com/vulnerability/3b9eba0d-29aa-47e4-b17f-4cf4bbf8b690/
CVE: CVE-2024-2159
Published: 2024-04-26
Description: The Social Sharing Plugin  WordPress plugin before 3.3.61 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d7fa9849-c82a-4efd-84b6[PII_REDACTED]ba/; https://wpscan.com/vulnerability/d7fa9849-c82a-4efd-84b6[PII_REDACTED]ba/
CVE: CVE-2024-2310
Published: 2024-04-26
Description: The WP Google Review Slider WordPress plugin before 13.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7a2c173c-19e3-4f48-b3af-14790b5b8e94/; https://wpscan.com/vulnerability/7a2c173c-19e3-4f48-b3af-14790b5b8e94/
CVE: CVE-2024-2429
Published: 2024-04-26
Description: The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/1c6812d8-a218-4c15-9e2d-d43f3f3b0e78/; https://wpscan.com/vulnerability/1c6812d8-a218-4c15-9e2d-d43f3f3b0e78/
CVE: CVE-2024-2439
Published: 2024-04-26
Description: The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7a375077-fc70-4389-b109-28fce3db2aef/; https://wpscan.com/vulnerability/7a375077-fc70-4389-b109-28fce3db2aef/
CVE: CVE-2024-2603
Published: 2024-04-26
Description: The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin (or editor depending on Salon booking system WordPress plugin through 9.6.5 configuration) to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b4186c03-99ee-4297-85c0-83b7053afc1c/; https://wpscan.com/vulnerability/b4186c03-99ee-4297-85c0-83b7053afc1c/
CVE: CVE-2024-2837
Published: 2024-04-26
Description: The WP Chat App WordPress plugin before 3.6.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admins to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/91058c48-f262-4fcc-9390-472d59d61115/; https://wpscan.com/vulnerability/91058c48-f262-4fcc-9390-472d59d61115/
CVE: CVE-2024-2908
Published: 2024-04-26
Description: The Call Now Button  WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/58c9e088-ed74-461a-b305-e217679f26c1/; https://wpscan.com/vulnerability/58c9e088-ed74-461a-b305-e217679f26c1/
CVE: CVE-2024-3048
Published: 2024-04-26
Description: The Bannerlid WordPress plugin through 1.1.0 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrators
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e179ff7d-137c-48bf-8b18-e874e3f876f4/; https://wpscan.com/vulnerability/e179ff7d-137c-48bf-8b18-e874e3f876f4/
CVE: CVE-2024-3058
Published: 2024-04-26
Description: The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/fc33c79d-ad24-4d55-973a-25280995a2ab/; https://wpscan.com/vulnerability/fc33c79d-ad24-4d55-973a-25280995a2ab/
CVE: CVE-2024-3059
Published: 2024-04-26
Description: The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary Campaigns via a CSRF attack
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/e154096d-e9b7-43ba-9a34-81a6c431025c/; https://wpscan.com/vulnerability/e154096d-e9b7-43ba-9a34-81a6c431025c/
CVE: CVE-2024-3060
Published: 2024-04-26
Description: The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL injection attacks
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-89
References: https://wpscan.com/vulnerability/7740646d-f3ea-4fc7-b35e-8b4a6821e178/; https://wpscan.com/vulnerability/7740646d-f3ea-4fc7-b35e-8b4a6821e178/
CVE: CVE-2024-3075
Published: 2024-04-26
Description: The MM-email2image WordPress plugin through 0.2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://wpscan.com/vulnerability/450375f6-a9d4-49f6-8bab[PII_REDACTED]95/; https://wpscan.com/vulnerability/450375f6-a9d4-49f6-8bab[PII_REDACTED]95/
CVE: CVE-2024-3188
Published: 2024-04-26
Description: The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/bc273e75-7faf-4eaf-8ebd-efc5d6e9261f/; https://wpscan.com/vulnerability/bc273e75-7faf-4eaf-8ebd-efc5d6e9261f/
CVE: CVE-2024-4056
Published: 2024-04-26
Description: Denial of service condition in M-Files Server in versions before 24.4.13592.4 and after 23.11 (excluding 24.2 LTS) allows unauthenticated user to consume computing resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://empower.m-files.com/security-advisories/CVE-2024-4056; https://product.m-files.com/security-advisories/cve-2024-4056/; https://www.m-files.com/about/trust-center/security-advisories/cve-2024-4056/
CVE: CVE-2023-6095
Published: 2024-04-26
Description: 
Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An attacker could inject malicious HTTP headers into request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.


CVSS Score: 8.9 (HIGH)
CWE: CWE-121
References: https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf; https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf
CVE: CVE-2023-6096
Published: 2024-04-26
Description: 
Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.


CVSS Score: 7.4 (HIGH)
CWE: CWE-668
References: https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf; https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf
CVE: CVE-2023-6116
Published: 2024-04-26
Description: 
Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker could inject malicious into http request packets to execute arbitrary code. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.


CVSS Score: 8.9 (HIGH)
CWE: CWE-121
References: https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6116.pdf; https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6116.pdf