deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-45676
Published: 2023-10-21
Description: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3656; https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L950-L960; https://securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
CVE: CVE-2023-45677
Published: 2023-10-21
Description: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] = (char)'\0';`. The root cause is that if `len` read in `start_decoder` is a negative number and `setup_malloc` successfully allocates memory in that case, but memory write is done with a negative index `len`. Similarly if len is INT_MAX the integer overflow len+1 happens in `f->vendor = (char*)setup_malloc(f, sizeof(char) * (len+1));` and `f->comment_list[i] = (char*)setup_malloc(f, sizeof(char) * (len+1));`. This issue may lead to code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3652-L3658; https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3653; https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3658
CVE: CVE-2023-45678
Published: 2023-10-21
Description: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in `start_decoder` because at maximum `m->submaps` can be 16 but `submap_floor` and `submap_residue` are declared as arrays of 15 elements. This issue may lead to code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L4074-L4079; https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L753-L760; https://securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
CVE: CVE-2023-45679
Published: 2023-10-21
Description: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, but some of the pointers in `f->comment_list` are left initialized and later `setup_free` is called on these pointers in `vorbis_deinit`. This issue may lead to code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-415, CWE-415
References: https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3660-L3677; https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L4208-L4215; https://securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
CVE: CVE-2023-45680
Published: 2023-10-21
Description: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, the `f->comment_list` is set to `NULL`, but `f->comment_list_length` is not reset. Later in `vorbis_deinit` it tries to dereference the `NULL` pointer. This issue may lead to denial of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3660-L3666; https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L4208-L4215; https://securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
CVE: CVE-2023-45681
Published: 2023-10-21
Description: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in `start_decoder`. The root cause is a potential integer overflow in `sizeof(char*) * (f->comment_list_length)` which may make `setup_malloc` allocate less memory than required. Since there is another integer overflow an attacker may overflow it too to force `setup_malloc` to return 0 and make the exploit more reliable. This issue may lead to code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787, CWE-190
References: https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3660-L3677; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHQQXX27ACLLYUQHWSL3DVCOGUK5ZA4/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2WRORYQ2Z2XXHPX36JHBUSDVY6IOMW2N/
CVE: CVE-2023-45682
Published: 2023-10-21
Description: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro when `var` is negative. As it can be seen in the definition of `DECODE_RAW` a negative `var` is a valid value. This issue may be used to leak internal memory allocation information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L1717-L1729; https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L1754-L1756; https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3231
CVE: CVE-2023-38190
Published: 2023-10-21
Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://herolab.usd.de/security-advisories/; https://herolab.usd.de/security-advisories/usd-2023-0014/; https://herolab.usd.de/security-advisories/
CVE: CVE-2023-38192
Published: 2023-10-21
Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwords.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://herolab.usd.de/security-advisories/; https://herolab.usd.de/security-advisories/usd-2023-0011/; https://herolab.usd.de/security-advisories/
CVE: CVE-2023-38193
Published: 2023-10-21
Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command line.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://herolab.usd.de/en/security-advisories/usd-2023-0015/; https://herolab.usd.de/security-advisories/; https://herolab.usd.de/en/security-advisories/usd-2023-0015/
CVE: CVE-2023-38194
Published: 2023-10-21
Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows keepalive.php XSS via a GET parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://herolab.usd.de/security-advisories/; https://herolab.usd.de/security-advisories/usd-2023-0013/; https://herolab.usd.de/security-advisories/
CVE: CVE-2023-46003
Published: 2023-10-21
Description: I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/leekenghwa/CVE-2023-46003; https://medium.com/%40ray.999/stored-xss-in-i-doit-pro-25-and-below-cve-2023-46003-17fb8d6fe2e9; https://www.i-doit.com/
CVE: CVE-2023-5132
Published: 2023-10-21
Description: The Soisy Pagamento Rateale plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the parseRemoteRequest function in versions up to, and including, 6.0.1. This makes it possible for unauthenticated attackers with knowledge of an existing WooCommerce Order ID to expose sensitive WooCommerce order information (e.g., Name, Address, Email Address, and other order metadata).
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/soisy-pagamento-rateale/trunk/public/class-soisy-pagamento-rateale-public.php#L465; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2979568%40soisy-pagamento-rateale&new=2979568%40soisy-pagamento-rateale&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d3c997cd-37b4-4b9c-b99e-397be484aa36?source=cve
CVE: CVE-2023-5683
Published: 2023-10-21
Description: A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical. This issue affects some unknown processing of the file /sysmanage/importconf.php. The manipulation of the argument btn_file_renew leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243059. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://github.com/yaphetszz/cve/blob/main/upload.md; https://vuldb.com/?ctiid.243059; https://vuldb.com/?id.243059
CVE: CVE-2023-46054
Published: 2023-10-21
Description: Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script to the website_footer parameter in the admin/settings/save.php component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/aaanz/aaanz.github.io/blob/master/XSS.md; https://github.com/aaanz/aaanz.github.io/blob/master/XSS.md
CVE: CVE-2023-46055
Published: 2023-10-21
Description: An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://gist.github.com/GroundCTL2MajorTom/eef0d55f5df77cc911d84392acdbf625; https://gist.github.com/GroundCTL2MajorTom/eef0d55f5df77cc911d84392acdbf625
CVE: CVE-2023-5684
Published: 2023-10-21
Description: A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://github.com/Chef003/cve/blob/main/rce.md; https://vuldb.com/?ctiid.243061; https://vuldb.com/?id.243061
CVE: CVE-2023-4635
Published: 2023-10-21
Description: The EventON plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/xsn1210/vul/blob/main/xss%5BEventON%5D%20.md; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2981861%40eventon-lite&new=2981861%40eventon-lite&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/115ad0b2-febe-485a-8fb5-9bd6edc37ef7?source=cve
CVE: CVE-2023-4939
Published: 2023-10-21
Description: The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4. This is due to the use of a weak authentication token for the /wp-json/salesmanago/v1/callbackApiV3 API endpoint which is simply a SHA1 hash of the site URL and client ID found in the page source of the website. This makes it possible for unauthenticated attackers to inject arbitrary content into the log files, and when combined with another vulnerability this could have significant consequences.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-305, CWE-287
References: https://plugins.trac.wordpress.org/browser/salesmanago/trunk/src/Admin/Controller/CallbackController.php; https://plugins.trac.wordpress.org/browser/salesmanago/trunk/src/Includes/Helper.php#L376; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2981700%40salesmanago&new=2981700%40salesmanago&sfp_email=&sfph_mail=
CVE: CVE-2023-5205
Published: 2023-10-21
Description: The Add Custom Body Class plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_custom_body_class' value in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/add-custom-body-class/trunk/add-custom-body-class.php#L32; https://www.wordfence.com/threat-intel/vulnerabilities/id/9841b57b-b869-4282-8781-60538f6f269f?source=cve; https://plugins.trac.wordpress.org/browser/add-custom-body-class/trunk/add-custom-body-class.php#L32
CVE: CVE-2023-46067
Published: 2023-10-21
Description: Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rocket Font plugin <= 1.2.3 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/rocket-font/wordpress-rocket-font-plugin-1-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/rocket-font/wordpress-rocket-font-plugin-1-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46078
Published: 2023-10-21
Description: Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin <= 1.6.3 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wc-serial-numbers/wordpress-serial-numbers-for-woocommerce-license-manager-plugin-1-6-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wc-serial-numbers/wordpress-serial-numbers-for-woocommerce-license-manager-plugin-1-6-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-38275
Published: 2023-10-22
Description: IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in container images which could lead to further attacks against the system.  IBM X-Force ID:  260730.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/260735; https://www.ibm.com/support/pages/node/7031207; https://exchange.xforce.ibmcloud.com/vulnerabilities/260735
CVE: CVE-2023-38276
Published: 2023-10-22
Description: IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in environment variables which could aid in further attacks against the system.  IBM X-Force ID:  260736.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/260736; https://www.ibm.com/support/pages/node/7031207; https://exchange.xforce.ibmcloud.com/vulnerabilities/260736
CVE: CVE-2023-38735
Published: 2023-10-22
Description: IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site.  IBM X-Force ID:  262482.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/262482; https://www.ibm.com/support/pages/node/7031207; https://exchange.xforce.ibmcloud.com/vulnerabilities/262482
CVE: CVE-2023-46298
Published: 2023-10-22
Description: Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN.
CVSS Score: 7.5 (HIGH)
References: https://github.com/vercel/next.js/compare/v13.4.20-canary.12...v13.4.20-canary.13; https://github.com/vercel/next.js/issues/45301; https://github.com/vercel/next.js/pull/54732
CVE: CVE-2023-46300
Published: 2023-10-22
Description: iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce; https://github.com/gnachman/iTerm2/commit/ae[PII_REDACTED]c34d1cbe57f6f9ef2ff0a337c2a5; https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009
CVE: CVE-2023-46301
Published: 2023-10-22
Description: iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-116
References: https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce; https://github.com/gnachman/iTerm2/commit/85cbf5ebda472c9ec295887e99c2b6f1b5867f1b; https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009
CVE: CVE-2023-46303
Published: 2023-10-22
Description: link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/0x1717/ssrf-via-img; https://github.com/kovidgoyal/calibre/compare/v6.18.1...v6.19.0; https://github.com/0x1717/ssrf-via-img
CVE: CVE-2021-46897
Published: 2023-10-22
Description: views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/coderedcorp/coderedcms/compare/v0.22.2...v0.22.3; https://github.com/coderedcorp/coderedcms/issues/448; https://github.com/coderedcorp/coderedcms/pull/450
CVE: CVE-2021-46898
Published: 2023-10-22
Description: views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith("/") but this does not consider a protocol-relative URL (e.g., //example.com) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/sehmaschine/django-grappelli/commit/4ca94bcda0fa[PII_REDACTED]853d85e00c8212968f; https://github.com/sehmaschine/django-grappelli/compare/2.15.1...2.15.2; https://github.com/sehmaschine/django-grappelli/issues/975
CVE: CVE-2023-46306
Published: 2023-10-22
Description: The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter. This occurs because another thread can be started before the trap that triggers the cleanup function. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. NOTE: this is different from CVE-2023-0861 and CVE-2023-0862, which were fixed in version 4.6.0.105.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78, CWE-78
References: https://pentest.blog/advisory-netmodule-router-software-race-condition-leads-to-remote-code-execution/; https://share.netmodule.com/public/system-software/4.6/4.6.0.106/NRSW-RN-4.6.0.106.pdf; https://share.netmodule.com/public/system-software/4.8/4.8.0.101/NRSW-RN-4.8.0.101.pdf
CVE: CVE-2023-46085
Published: 2023-10-22
Description: Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-ultimate-review/wordpress-wp-ultimate-review-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-ultimate-review/wordpress-wp-ultimate-review-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46089
Published: 2023-10-22
Description: Cross-Site Request Forgery (CSRF) vulnerability in Lee Le @ Userback Userback plugin <= 1.0.13 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/userback/wordpress-userback-plugin-1-0-13-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/userback/wordpress-userback-plugin-1-0-13-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46095
Published: 2023-10-22
Description: Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole Smooth Scroll Links [SSL] plugin <= 1.1.0 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/smooth-scrolling-links-ssl/wordpress-smooth-scroll-links-ssl-plugin-1-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/smooth-scrolling-links-ssl/wordpress-smooth-scroll-links-ssl-plugin-1-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-46315
Published: 2023-10-22
Description: The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before 977815a for stable-diffusion-webui (aka Stable Diffusion web UI), if Gradio authentication is enabled without secret key configuration, allows remote attackers to read any local file via /file?path= in the URL, as demonstrated by reading /proc/self/environ to discover credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/zanllp/sd-webui-infinite-image-browsing/issues/387; https://github.com/zanllp/sd-webui-infinite-image-browsing/pull/368/commits/977815a2b28ad953c10ef0114c365f698c4b8f19; https://github.com/zanllp/sd-webui-infinite-image-browsing/issues/387
CVE: CVE-2023-46317
Published: 2023-10-22
Description: Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.
CVSS Score: 7.5 (HIGH)
References: https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1448; https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html; https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1448
CVE: CVE-2023-5693
Published: 2023-10-22
Description: A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pages_reset_pwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243131.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Internet%20Banking%20System/Internet%20Banking%20System%20-%20vuln%201.pdf; https://vuldb.com/?ctiid.243131; https://vuldb.com/?id.243131
CVE: CVE-2023-5694
Published: 2023-10-22
Description: A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pages_system_settings.php. The manipulation of the argument sys_name with the input <ScRiPt >alert(991)</ScRiPt> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243132.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Internet%20Banking%20System/Internet%20Banking%20System%20-%20vuln%202.pdf; https://vuldb.com/?ctiid.243132; https://vuldb.com/?id.243132