deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30441
Published: 2023-04-29
Description: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations.  IBM X-Force ID:  253188.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/253188; https://www.ibm.com/support/pages/node/6985011; https://www.ibm.com/support/pages/node/6986617
CVE: CVE-2023-2426
Published: 2023-04-29
Description: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-823
References: https://github.com/vim/vim/commit/caf642c25de526229264cab9425e7c9979f3509b; https://huntr.dev/bounties/3451be4c-91c8-4d08-926b-cbff7396f425; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LOJP6M7ZTKZQYOGVOOAY6TIE6ACBJL55/
CVE: CVE-2023-2428
Published: 2023-04-30
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/0a4980d870bac92df945f6d022726c4e3ed584ab; https://huntr.dev/bounties/cee65b6d-b003-4e6a-9d14-89aa94bee43e; https://github.com/thorsten/phpmyfaq/commit/0a4980d870bac92df945f6d022726c4e3ed584ab
CVE: CVE-2023-2429
Published: 2023-04-30
Description: Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://github.com/thorsten/phpmyfaq/commit/07552f5577ff8b1e6f7cdefafcce9b2a744d3a24; https://huntr.dev/bounties/20d3a0b3-2693-4bf1-b[PII_REDACTED]1a540; https://github.com/thorsten/phpmyfaq/commit/07552f5577ff8b1e6f7cdefafcce9b2a744d3a24
CVE: CVE-2015-10104
Published: 2023-04-30
Description: A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirect_url leads to open redirect. The attack may be launched remotely. Upgrading to version 1.0.1 is able to address this issue. The name of the patch is 63124c021ae24b68e56872530df26eb4268ad633. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227756.
CVSS Score: 3.5 (LOW)
CWE: CWE-601
References: https://github.com/wp-plugins/icons-for-features/commit/63124c021ae24b68e56872530df26eb4268ad633; https://github.com/wp-plugins/icons-for-features/releases/tag/1.0.1; https://vuldb.com/?ctiid.227756
CVE: CVE-2015-10105
Published: 2023-05-01
Description: A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress. This affects the function valid_js_identifier of the file ip_blacklist_cloud.php of the component CSV File Import. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. Upgrading to version 3.43 is able to address this issue. The identifier of the patch is 6e6fe8c6fda7cbc252eef083105e08d759c07312. It is recommended to upgrade the affected component. The identifier VDB-227757 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/wp-plugins/ip-blacklist-cloud/commit/6e6fe8c6fda7cbc252eef083105e08d759c07312; https://github.com/wp-plugins/ip-blacklist-cloud/releases/tag/3.43; https://vuldb.com/?ctiid.227757
CVE: CVE-2018-25085
Published: 2023-05-01
Description: A vulnerability classified as problematic was found in Responsive Menus 7.x-1.x-dev on Drupal. Affected by this vulnerability is the function responsive_menus_admin_form_submit of the file responsive_menus.module of the component Configuration Setting Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 7.x-1.7 is able to address this issue. The patch is named 3c554b31d32a367188f44d44857b061eac949fb8. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-227755.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-79
References: https://git.drupalcode.org/project/responsive_menus/-/commit/3c554b31d32a367188f44d44857b061eac949fb8; https://vuldb.com/?ctiid.227755; https://vuldb.com/?id.227755
CVE: CVE-2023-2235
Published: 2023-05-01
Description: A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.

The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.

We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.


CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd0815f632c24878e325821943edccc7fde947a2; https://kernel.dance/fd0815f632c24878e325821943edccc7fde947a2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fd0815f632c24878e325821943edccc7fde947a2
CVE: CVE-2023-2236
Published: 2023-05-01
Description: A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.

Both io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability.

We recommend upgrading past commit 9d94c04c0db024922e886c9fd429659f22f48ea4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9d94c04c0db024922e886c9fd429659f22f48ea4; https://kernel.dance/9d94c04c0db024922e886c9fd429659f22f48ea4; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-2248
Published: 2023-05-01
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436.
CVE: CVE-2023-0896
Published: 2023-05-01
Description: A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://support.lenovo.com/us/en/product_security/LEN-113714; https://support.lenovo.com/us/en/product_security/LEN-113714; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1692
CVE: CVE-2023-30061
Published: 2023-05-01
Description: D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-879; https://www.dlink.com/en/security-bulletin/; https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-879
CVE: CVE-2023-30063
Published: 2023-05-01
Description: D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-890L/Auth%20bypass; https://www.dlink.com/en/security-bulletin/; https://github.com/Zarathustra-L/IoT_Vul/tree/main/D-Link/DIR-890L/Auth%20bypass
CVE: CVE-2023-30859
Published: 2023-05-01
Description: Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands on the spigot/bukkit console. When you enable bungee mode in the config it will enable the bungee bridge and the server will begin to broadcast the 'triton:main' plugin channel. Using this plugin channel you are able to send a payload packet containing a byte (2) and a string (any spigot command). This could be used to make yourself a server operator and be used to extract other user information through phishing (pretending to be an admin), many servers use essentials so the /geoip command could be available to them, etc. This could also be modified to allow you to set the servers language, set another players language, etc. This issue affects those who have bungee enabled in config. This issue has been fixed in version 3.8.4.
CVSS Score: 7.2 (HIGH)
CWE: CWE-419
References: https://github.com/tritonmc/Triton/releases/tag/v3.8.4; https://github.com/tritonmc/Triton/security/advisories/GHSA-8vj5-jccf-q25r; https://github.com/tritonmc/Triton/releases/tag/v3.8.4
CVE: CVE-2022-45801
Published: 2023-05-01
Description: Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability.
LDAP Injection is an attack used to exploit web based applications
that construct LDAP statements based on user input. When an
application fails to properly sanitize user input, it's possible to
modify LDAP statements through techniques similar to SQL Injection.
LDAP injection attacks could result in the granting of permissions to
unauthorized queries, and content modification inside the LDAP tree.
This risk may only occur when the user logs in with ldap, and the user
name and password login will not be affected, Users of the affected
versions should upgrade to Apache StreamPark 2.0.0 or later.







CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74
References: https://lists.apache.org/thread/xbkwwpkp3n2rs2wcxg8l26mhsftxwwr9; https://lists.apache.org/thread/xbkwwpkp3n2rs2wcxg8l26mhsftxwwr9
CVE: CVE-2022-45802
Published: 2023-05-01
Description: Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later







CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://lists.apache.org/thread/thwl1v2h6r3c21x1qwff08o57qzjnst6; https://lists.apache.org/thread/thwl1v2h6r3c21x1qwff08o57qzjnst6
CVE: CVE-2022-46365
Published: 2023-05-01
Description: Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be passed to the server-layer as a parameter, but not verified whether the user name is the currently logged user and whether the user is legal, This will allow malicious attackers to send any username to modify and reset the account, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later.





CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://lists.apache.org/thread/f68lcwrp8pcdc4yrbpcm8j7m0f5mjn7h; https://lists.apache.org/thread/f68lcwrp8pcdc4yrbpcm8j7m0f5mjn7h
CVE: CVE-2022-48186
Published: 2023-05-01
Description: A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclosure.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-295, CWE-295, CWE-295
References: https://iknow.lenovo.com.cn/detail/dc_206093.html; https://iknow.lenovo.com.cn/detail/dc_206093.html
CVE: CVE-2022-4568
Published: 2023-05-01
Description: A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-276, CWE-276, CWE-276
References: https://support.lenovo.com/us/en/product_security/LEN-103545; https://support.lenovo.com/us/en/product_security/LEN-103545
CVE: CVE-2023-0683
Published: 2023-05-01
Description: A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
CVSS Score: 8.3 (HIGH)
CWE: CWE-20
References: https://support.lenovo.com/us/en/product_security/LEN-99936; https://support.lenovo.com/us/en/product_security/LEN-99936
CVE: CVE-2023-25492
Published: 2023-05-01
Description: A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-134, CWE-134
References: https://support.lenovo.com/us/en/product_security/LEN-99936; https://support.lenovo.com/us/en/product_security/LEN-99936
CVE: CVE-2023-28092
Published: 2023-05-01
Description: A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis.


CVSS Score: 6.1 (MEDIUM)
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04472en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04472en_us
CVE: CVE-2023-29635
Published: 2023-05-01
Description: File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/Antabot/White-Jotter/blob/c1c5d66fda090b986b8f46a7132d403e3b038c5d/wj/src/main/java/com/gm/wj/controller/LibraryController.java#L63; https://github.com/Antabot/White-Jotter/issues/157; https://github.com/Antabot/White-Jotter/blob/c1c5d66fda090b986b8f46a7132d403e3b038c5d/wj/src/main/java/com/gm/wj/controller/LibraryController.java#L63
CVE: CVE-2023-29636
Published: 2023-05-01
Description: Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" field in the "blog management" page due to the the default configuration not using MyBlogUtils.cleanString.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ZHENFENG13/My-Blog/issues/131; https://github.com/ZHENFENG13/My-Blog/issues/131
CVE: CVE-2023-29637
Published: 2023-05-01
Description: Cross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the "article editor" page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Qbian61/forum-java/issues/13; https://github.com/Qbian61/forum-java/issues/13
CVE: CVE-2023-29638
Published: 2023-05-01
Description: Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary web script or HTML via editing blog articles.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/WinterChenS/my-site/issues/74; https://github.com/WinterChenS/my-site/issues/74
CVE: CVE-2023-29639
Published: 2023-05-01
Description: Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyBlogUtils.cleanString.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ZHENFENG13/My-Blog/issues/131; https://github.com/ZHENFENG13/My-Blog/issues/131
CVE: CVE-2023-29641
Published: 2023-05-01
Description: Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/pandao/editor.md/issues/985; https://github.com/pandao/editor.md/issues/985
CVE: CVE-2023-29643
Published: 2023-05-01
Description: Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/perfree/PerfreeBlog/issues/14; https://github.com/perfree/PerfreeBlog/issues/14
CVE: CVE-2023-2451
Published: 2023-05-01
Description: A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227795.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/ShellHunTerAndyLABA/bug_report/blob/main/SQLi-1.md; https://vuldb.com/?ctiid.227795; https://vuldb.com/?id.227795
CVE: CVE-2023-22503
Published: 2023-05-01
Description: Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Confluence space. This occurs via an Information Disclosure vulnerability in the macro preview feature.

This vulnerability was reported by Rojan Rijal of the Tinder Security Engineering team.

The affected versions are before version 7.13.15, from version 7.14.0 before 7.19.7, and from version 7.20.0 before 8.2.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://jira.atlassian.com/browse/CONFSERVER-82403; https://jira.atlassian.com/browse/CONFSERVER-82403
CVE: CVE-2023-22919
Published: 2023-05-01
Description: The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nbg6604-home-router; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nbg6604-home-router
CVE: CVE-2023-22921
Published: 2023-05-01
Description: A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to store malicious scripts using a web management interface parameter, resulting in denial-of-service (DoS) conditions on an affected device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router
CVE: CVE-2023-22922
Published: 2023-05-01
Description: A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS conditions by sending crafted packets if Telnet is enabled on a vulnerable device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router
CVE: CVE-2023-22923
Published: 2023-05-01
Description: A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker to cause denial-of-service (DoS) conditions on an affected device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-134, CWE-134
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router
CVE: CVE-2023-22924
Published: 2023-05-01
Description: A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administrator privileges to cause denial-of-service (DoS) conditions by executing crafted CLI commands on a vulnerable device.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-nbg-418n-v2-home-router
CVE: CVE-2022-35898
Published: 2023-05-01
Description: OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to change the password of any other user, including the Administrator account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-295
References: https://businessnetwork.opentext.com/b2b-gateway/; https://hackandpwn.com/disclosures/CVE-2022-35898.pdf; https://businessnetwork.opentext.com/b2b-gateway/
CVE: CVE-2023-2197
Published: 2023-05-01
Description: HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption mechanisms. An attacker with privileges to modify storage and restart Vault may be able to intercept or modify cipher text in order to derive Vault’s root key. Fixed in 1.13.2
CVSS Score: 2.5 (LOW)
CWE: CWE-326, CWE-326, CWE-326
References: https://discuss.hashicorp.com/t/hcsec-2023-14-vault-enterprise-vulnerable-to-padding-oracle-attacks-when-using-a-cbc-based-encryption-mechanism-with-a-hsm/53322; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.hashicorp.com/t/hcsec-2023-14-vault-enterprise-vulnerable-to-padding-oracle-attacks-when-using-a-cbc-based-encryption-mechanism-with-a-hsm/53322
CVE: CVE-2023-26987
Published: 2023-05-01
Description: An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.
CVSS Score: 6.5 (MEDIUM)
References: https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw; https://docs.google.com/document/d/14DYoZfKN__As8gBXMFae7wChKJXpmbuUdMn2Gf803Lw/edit; https://github.com/redteambrasil/nuclei-templates
CVE: CVE-2023-27035
Published: 2023-05-01
Description: An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the canvas page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://forum.obsidian.md/t/embedded-web-pages-in-obsidian-canvas-can-use-sensitive-web-apis-without-the-users-permission-grant/54509; https://forum.obsidian.md/t/obsidian-release-v1-1-14-insider-build/54595; https://github.com/fivex3/CVE-2023-27035
CVE: CVE-2023-27108
Published: 2023-05-01
Description: An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns the user's call log without origin or permission checks. An attacker can inject a JavaScript payload that runs in a browser or app without user interaction or consent. This allows an attacker to send the user's call logs to a remote server via XMLHttpRequest or Fetch.
CVSS Score: 5.3 (MEDIUM)
References: https://gist.github.com/Tombarr/5ed6675f33e0eca149a8b4d38ce76dda; https://kaios.dev/cve/1409490; https://gist.github.com/Tombarr/5ed6675f33e0eca149a8b4d38ce76dda
CVE: CVE-2023-29680
Published: 2023-05-01
Description: Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62; https://www.youtube.com/watch?v=m7ZHfFcSKpU&ab_channel=0ta; https://medium.com/%400ta/tenda-n301-v6-cve-2023-29680-cve-2023-29681-a40f7ae6dc62