deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-43742
Published: 2023-12-08
Description: An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrative session via a protection mechanism failure in the authentication function. In normal operation, the Zultys MX Administrator Windows client connects to port 7505 and attempts authentication, submitting the administrator username and password to the server. Upon authentication failure, the server sends a login failure message prompting the client to disconnect. However, if the client ignores the failure message instead and attempts to continue, the server does not forcibly close the connection and processes all subsequent requests from the client as if authentication had been successful.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md; https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md
CVE: CVE-2023-43743
Published: 2023-12-08
Description: A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an authenticated attacker to execute arbitrary SQL queries on the backend database via the filter parameter in requests to the /newapi/ endpoint in the Zultys MX web interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md; https://mxvirtual.com; https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md
CVE: CVE-2023-43744
Published: 2023-12-08
Description: An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS commands via a file name parameter in a patch application function. The Zultys MX Administrator client has a "Patch Manager" section that allows administrators to apply patches to the device. The user supplied filename for the patch file is passed to a shell script without validation. Including bash command substitution characters in a patch file name results in execution of the provided command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md; https://mxvirtual.com; https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md
CVE: CVE-2023-43305
Published: 2023-12-08
Description: An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
CVSS Score: 8.2 (HIGH)
References: https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43305.md; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-43305.md
CVE: CVE-2023-48122
Published: 2023-12-08
Description: An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.
CVSS Score: 7.5 (HIGH)
References: https://gist.github.com/grozdniyandy/1847ad48126d6bba39bdeb49114bc300; https://github.com/microweber/microweber/issues/1042; https://gist.github.com/grozdniyandy/1847ad48126d6bba39bdeb49114bc300
CVE: CVE-2023-26158
Published: 2023-12-08
Description: All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing check if the attribute resolves to the object prototype. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-existence of certain attributes, or uses pre-defined attributes of object prototype (such as hasOwnProperty, toString or valueOf).User controlled inputs inside the extend() method of the Mock.Handler, Mock.Random, Mock.RE.Handler or Mock.Util, will allow an attacker to exploit this vulnerability. WorkaroundBy using a denylist of dangerous attributes, this weakness can be eliminated.Add the following line in the Util.extend function:jsjs if (["__proto__", "constructor", "prototype"].includes(name)) continuejs// src/mock/handler.jsUtil.extend = function extend() {        var target = arguments[0] || {},            i = 1,            length = arguments.length,            options, name, src, copy, clone        if (length === 1) {            target = this            i = 0        }        for (; i < length; i++) {            options = arguments[i]            if (!options) continue            for (name in options) {            if (["__proto__", "constructor", "prototype"].includes(name)) continue                src = target[name]                copy = options[name]                if (target === copy) continue                if (copy === undefined) continue                if (Util.isArray(copy) || Util.isObject(copy)) {                    if (Util.isArray(copy)) clone = src && Util.isArray(src) ? src : []                    if (Util.isObject(copy)) clone = src && Util.isObject(src) ? src : {}                    target[name] = Util.extend(clone, copy)                } else {                    target[name] = copy                }            }        }        return target    }
CVSS Score: 8.2 (HIGH)
CWE: CWE-1321, CWE-1321
References: https://github.com/nuysoft/Mock/blob/00ce04b92eb464e664a[PII_REDACTED]f2de96efb47/dist/mock.js%23L721-L755; https://security.snyk.io/vuln/SNYK-JS-MOCKJS-6051365; https://github.com/nuysoft/Mock/blob/00ce04b92eb464e664a[PII_REDACTED]f2de96efb47/dist/mock.js%23L721-L755
CVE: CVE-2023-48928
Published: 2023-12-08
Description: Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Open Redirect. The 'path' parameter of the prefs.asp resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/MatJosephs/CVEs/tree/main/CVE-2023-48928; https://github.com/MatJosephs/CVEs/tree/main/CVE-2023-48928
CVE: CVE-2023-48929
Published: 2023-12-08
Description: Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The 'sid' parameter in the group_status.asp resource allows an attacker to escalate privileges and obtain sensitive information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://github.com/MatJosephs/CVEs/tree/main/CVE-2023-48929; https://github.com/MatJosephs/CVEs/tree/main/CVE-2023-48929
CVE: CVE-2023-32460
Published: 2023-12-08
Description: 
Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.


CVSS Score: 8.8 (HIGH)
CWE: CWE-306, CWE-306
References: https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability; https://www.dell.com/support/kbdoc/en-us/000219550/dsa-2023-361-security-update-for-dell-poweredge-server-bios-for-an-improper-privilege-management-security-vulnerability
CVE: CVE-2023-45866
Published: 2023-12-08
Description: Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-287
References: http://changelogs.ubuntu.com/changelogs/pool/main/b/bluez/bluez_5.64-0ubuntu1/changelog; http://seclists.org/fulldisclosure/2023/Dec/7; http://seclists.org/fulldisclosure/2023/Dec/9
CVE: CVE-2023-46157
Published: 2023-12-08
Description: File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownership and changing file permissions to 4755.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.cloudpanel.io/docs/v2/changelog/; https://www.mgt-commerce.com/docs/mgt-cloudpanel/dashboard; https://www.cloudpanel.io/docs/v2/changelog/
CVE: CVE-2023-49007
Published: 2023-12-08
Description: In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/5erua/netgear_orbi_overflow_vulnerability/blob/main/README.md; https://github.com/5erua/netgear_orbi_overflow_vulnerability/blob/main/README.md
CVE: CVE-2023-6607
Published: 2023-12-08
Description: A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERM_ID_STR leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247243. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/willchen0011/cve/blob/main/sql.md; https://vuldb.com/?ctiid.247243; https://vuldb.com/?id.247243
CVE: CVE-2023-49443
Published: 2023-12-08
Description: DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://github.com/woshinibaba222/DoraCMS-Verification-Code-Reuse; https://github.com/woshinibaba222/DoraCMS-Verification-Code-Reuse
CVE: CVE-2023-49444
Published: 2023-12-08
Description: An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability; https://github.com/woshinibaba222/DoraCMS-File-Upload-Vulnerability
CVE: CVE-2023-49484
Published: 2023-12-08
Description: Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the article management department.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jiaofj/cms/blob/main/There%20is%20a%20storage%20based%20XSS%20in%20the%20article%20management%20department.md; https://github.com/jiaofj/cms/blob/main/There%20is%20a%20storage%20based%20XSS%20in%20the%20article%20management%20department.md
CVE: CVE-2023-49485
Published: 2023-12-08
Description: JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20storage%20type%20XSS%20in%20the%20column%20management%20department.md; https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20storage%20type%20XSS%20in%20the%20column%20management%20department.md
CVE: CVE-2023-49486
Published: 2023-12-08
Description: JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20model%20management%20department.md; https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20model%20management%20department.md
CVE: CVE-2023-49487
Published: 2023-12-08
Description: JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20navigation%20management%20office.md; https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20navigation%20management%20office.md
CVE: CVE-2023-6146
Published: 2023-12-08
Description: 
A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in the presentation of logging information to users. This vulnerability allowed a user with login access to the application to introduce XSS payload via browser details. 


CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.qualys.com/security-advisories/; https://www.qualys.com/security-advisories/
CVE: CVE-2023-6245
Published: 2023-12-08
Description: The Candid library causes a Denial of Service while 
parsing a specially crafted payload with 'empty' data type. For example,
 if the payload is `record { * ; empty }` and the canister interface expects `record { * }` then the Rust candid decoder treats empty as an extra field required by the type.  The problem with the type empty is that the candid Rust library wrongly categorizes empty as a recoverable error when skipping the field and thus causing an infinite decoding loop.


Canisters using affected versions of candid
 are exposed to denial of service by causing the decoding to run 
indefinitely until the canister traps due to reaching maximum 
instruction limit per execution round. Repeated exposure to the payload 
will result in degraded performance of the canister. Note: Canisters written in Motoko are unaffected.




CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-168, CWE-835, CWE-1288, CWE-835
References: https://github.com/dfinity/candid/blob/master/spec/Candid.md; https://github.com/dfinity/candid/pull/478; https://github.com/dfinity/candid/security/advisories/GHSA-7787-p7x6-fq3j
CVE: CVE-2023-6608
Published: 2023-12-08
Description: A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-247244. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/willchen0011/cve/blob/main/sql2.md; https://vuldb.com/?ctiid.247244; https://vuldb.com/?id.247244
CVE: CVE-2023-6609
Published: 2023-12-08
Description: A vulnerability was found in osCommerce 4. It has been classified as problematic. This affects an unknown part of the file /b2b-supermarket/catalog/all-products. The manipulation of the argument keywords with the input %27%22%3E%3Cimg%2Fsrc%3D1+onerror%3Dalert%28document.cookie%29%3E leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?ctiid.247245; https://vuldb.com/?id.247245; https://vuldb.com/?ctiid.247245
CVE: CVE-2023-6611
Published: 2023-12-08
Description: A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAIL_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. VDB-247246 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/13223355/cve/blob/main/sql.md; https://vuldb.com/?ctiid.247246; https://vuldb.com/?id.247246
CVE: CVE-2023-23372
Published: 2023-12-08
Description: A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to inject malicious code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2425 build 20230609 and later
QTS 5.1.0.2444 build 20230629 and later
QTS 4.5.4.2467 build 20230718 and later
QuTS hero h5.1.0.2424 build 20230609 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h4.5.4.2476 build 20230728 and later

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-23-40; https://www.qnap.com/en/security-advisory/qsa-23-40
CVE: CVE-2023-32968
Published: 2023-12-08
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2514 build 20230906 and later
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h5.1.2.2534 build 20230927 and later

CVSS Score: 4.5 (MEDIUM)
CWE: CWE-120
References: https://www.qnap.com/en/security-advisory/qsa-23-07; https://www.qnap.com/en/security-advisory/qsa-23-07
CVE: CVE-2023-32975
Published: 2023-12-08
Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2514 build 20230906 and later
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h5.1.2.2534 build 20230927 and later

CVSS Score: 4.9 (MEDIUM)
CWE: CWE-120
References: https://www.qnap.com/en/security-advisory/qsa-23-07; https://www.qnap.com/en/security-advisory/qsa-23-07
CVE: CVE-2023-47565
Published: 2023-12-08
Description: An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.

We have already fixed the vulnerability in the following versions:

QVR Firmware 5.0.0 and later
CVSS Score: 8.0 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.qnap.com/en/security-advisory/qsa-23-48; https://www.qnap.com/en/security-advisory/qsa-23-48; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-47565
CVE: CVE-2023-48397
Published: 2023-12-08
Description: In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48398
Published: 2023-12-08
Description: In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48399
Published: 2023-12-08
Description: In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48401
Published: 2023-12-08
Description: In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48402
Published: 2023-12-08
Description: In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48403
Published: 2023-12-08
Description: In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure if the attacker is able to observe the behavior of the subsequent switch conditional with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48404
Published: 2023-12-08
Description: In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48405
Published: 2023-12-08
Description: there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48406
Published: 2023-12-08
Description: there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01
CVE: CVE-2023-48407
Published: 2023-12-08
Description: there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-12-01; https://source.android.com/security/bulletin/pixel/2023-12-01