deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-3134
Published: 2023-07-31
Description: The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/6d50d3cc-7563-42c4-977b-f834fee711da; https://www.onvio.nl/nieuws/research-day-discovering-vulnerabilities-in-wordpress-plugins; https://wpscan.com/vulnerability/6d50d3cc-7563-42c4-977b-f834fee711da
CVE: CVE-2023-3292
Published: 2023-07-31
Description: The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/d993c385-c3ad-49a6-b079-3a1b090864c8; https://wpscan.com/vulnerability/d993c385-c3ad-49a6-b079-3a1b090864c8
CVE: CVE-2023-3345
Published: 2023-07-31
Description: The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/0d07423e-98d2-43a3-824d-562747a3d65a; https://wpscan.com/vulnerability/0d07423e-98d2-43a3-824d-562747a3d65a
CVE: CVE-2023-3507
Published: 2023-07-31
Description: The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/e72bbe9b-e51d-40ab-820d-404e0cb86ee6; https://wpscan.com/vulnerability/e72bbe9b-e51d-40ab-820d-404e0cb86ee6
CVE: CVE-2023-3508
Published: 2023-07-31
Description: The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when processing its tab actions, which could allow attackers to make logged in admins email pre-orders customer, change the released date, mark all pre-orders of a specific product as complete or cancel via CSRF attacks
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/064c7acb-db57-4537-8a6d-32f7ea31c738; https://wpscan.com/vulnerability/064c7acb-db57-4537-8a6d-32f7ea31c738
CVE: CVE-2023-35861
Published: 2023-07-31
Description: A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.freax13.de/cve/cve-2023-35861; https://www.supermicro.com/en/products/motherboards; https://www.supermicro.com/en/support/security_SMTP_Jun_2023
CVE: CVE-2023-37647
Published: 2023-07-31
Description: SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://semcms.com; https://gitee.com/ants12/sem-cms_-shop_210918_v1.5-sql-injection-exists-s/tree/master/; https://www.sem-cms.cn/
CVE: CVE-2020-21662
Published: 2023-07-31
Description: SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://note.youdao.com/noteshare?id=5c3b984ee36dfd1da690e0b5963926bc; http://note.youdao.com/noteshare?id=5c3b984ee36dfd1da690e0b5963926bc
CVE: CVE-2020-21881
Published: 2023-07-31
Description: Cross Site Request Forgery (CSRF) vulnerability in admin.php in DuxCMS 2.1 allows remote attackers to modtify application data via article/admin/content/add.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG; https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG
CVE: CVE-2021-31651
Published: 2023-07-31
Description: Cross Site Scripting (XSS) vulnerability in neofarg-cms 0.2.3 allows remoate attacker to run arbitrary code via the copyright field in copyright settings.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/NeoFrag/NeoFrag/issues/92; https://github.com/NeoFrag/NeoFrag/issues/92
CVE: CVE-2021-31680
Published: 2023-07-31
Description: Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://huntr.dev/bounties/1-other-yolov5/; https://huntr.dev/bounties/1-other-yolov5/
CVE: CVE-2021-31681
Published: 2023-07-31
Description: Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://huntr.dev/bounties/1-other-yolov3/; https://huntr.dev/bounties/1-other-yolov3/
CVE: CVE-2023-33534
Published: 2023-07-31
Description: A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goform_set_cmd_process.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://rodelllemit.medium.com/cve-2023-33534-account-takeover-through-csrf-vulnerability-461de6f1b696; https://rodelllemit.medium.com/cve-2023-33534-account-takeover-through-csrf-vulnerability-461de6f1b696
CVE: CVE-2023-34635
Published: 2023-07-31
Description: Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-Injection.html; https://www.exploit-db.com/exploits/51610; http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-Injection.html
CVE: CVE-2023-34644
Published: 2023-07-31
Description: Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless access points AP_3.0(1)B11P218, NBC series wireless controllers AC_3.0(1)B11P86 allows unauthorized remote attackers to gain the highest privileges via crafted POST request to /cgi-bin/luci/api/auth.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/; https://www.ruijienetworks.com/support/securityBulletins/cybersecurity_bulletins/10001; https://www.ruijie.com.cn/gy/xw-aqtg-gw/91389/
CVE: CVE-2023-34842
Published: 2023-07-31
Description: Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://dedecms.com; https://www.dedecms.com/; http://dedecms.com
CVE: CVE-2023-34872
Published: 2023-07-31
Description: A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://gitlab.freedesktop.org/poppler/poppler/-/commit/591235c8b6c65a2eee88991b9ae73490fd9afdfe; https://gitlab.freedesktop.org/poppler/poppler/-/issues/1399; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XXL3L6RJOTLGCN7GLH2OLLNF4FJ4T7I/
CVE: CVE-2023-36089
Published: 2023-07-31
Description: Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://www.dlink.com/en/security-bulletin/; https://www.dlink.com/en/support; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-36090
Published: 2023-07-31
Description: Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://www.dlink.com/en/security-bulletin/; https://www.dlink.com/en/support; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-36091
Published: 2023-07-31
Description: Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863, CWE-863
References: https://www.dlink.com/en/security-bulletin/; https://www.dlink.com/en/support; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-36092
Published: 2023-07-31
Description: Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863, CWE-863
References: https://www.dlink.com/en/security-bulletin/; https://www.dlink.com/en/support; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-35791
Published: 2023-07-31
Description: Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-35791; https://excellium-services.com/cert-xlm-advisory/CVE-2023-35791; https://excellium-services.com/cert-xlm-advisory/CVE-2023-35791
CVE: CVE-2023-35792
Published: 2023-07-31
Description: Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-site Scripting (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-35792; https://excellium-services.com/cert-xlm-advisory/CVE-2023-35792; https://excellium-services.com/cert-xlm-advisory/CVE-2023-35792
CVE: CVE-2023-38303
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. One can exploit a stored Cross-Site Scripting (XSS) attack to achieve Remote Command Execution (RCE) through the Users and Group's real name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38303; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38303
CVE: CVE-2023-38304
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38304; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38304
CVE: CVE-2023-38305
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. The download functionality allows an attacker to exploit a Cross-Site Scripting (XSS) vulnerability. By providing a crafted download path containing a malicious payload, an attacker can inject arbitrary code, which is then executed within the context of the victim's browser when the download link is accessed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38305; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38305
CVE: CVE-2023-38306
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. A Cross-site Scripting (XSS) Bypass vulnerability was discovered in the file upload functionality. Normally, the application restricts the upload of certain file types such as .svg, .php, etc., and displays an error message if a prohibited file type is detected. However, by following certain steps, an attacker can bypass these restrictions and inject malicious code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38306; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38306
CVE: CVE-2023-38307
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Users and Groups functionality. The vulnerability occurs when an authenticated user adds a new user and inserts an XSS payload into the user's real name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38307; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38307
CVE: CVE-2023-38308
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. A Cross-Site Scripting (XSS) vulnerability was discovered in the HTTP Tunnel functionality when handling third-party domain URLs. By providing a crafted URL from a third-party domain, an attacker can inject malicious code. leading to the execution of arbitrary JavaScript code within the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38308; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38308
CVE: CVE-2023-38309
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the package search functionality. The vulnerability allows an attacker to inject a malicious payload in the "Search for Package" field, which gets reflected back in the application's response, leading to the execution of arbitrary JavaScript code within the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38309; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38309
CVE: CVE-2023-38310
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the configuration settings of the system logs functionality. The vulnerability allows an attacker to store an XSS payload in the configuration settings of specific log files. This results in the execution of that payload whenever the affected log files are accessed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38310; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38310
CVE: CVE-2023-38311
Published: 2023-07-31
Description: An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the System Logs Viewer functionality. The vulnerability allows an attacker to store a malicious payload in the configuration field, triggering the execution of the payload when saving the configuration or when accessing the System Logs Viewer page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38311; https://webmin.com/tags/webmin-changelog/; https://github.com/jaysharma786/Webmin-2.021/blob/main/CVE-2023-38311
CVE: CVE-2020-36763
Published: 2023-07-31
Description: Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG; https://gitee.com/annyshow/DuxCMS2.1/issues/I183GG
CVE: CVE-2023-34916
Published: 2023-07-31
Description: Fuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/fuge/cms/issues/4; https://payatu.com/advisory/unvalidated-open-redirection-fuge-cms-v1-0/; https://github.com/fuge/cms/issues/4
CVE: CVE-2023-34917
Published: 2023-07-31
Description: Fuge CMS v1.0 contains an Open Redirect vulnerability in member/RegisterAct.java.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/fuge/cms/issues/3; https://payatu.com/advisory/unvalidated-redirection-vulnerability-in-fuge-cms-v1-0/; https://github.com/fuge/cms/issues/3
CVE: CVE-2023-37580
Published: 2023-07-31
Description: Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.openwall.com/lists/oss-security/2023/11/17/2; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy
CVE: CVE-2023-37771
Published: 2023-07-31
Description: Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/anky-123/CVE-2023-37771/blob/main/CVE; https://github.com/anky-123/CVE-2023-37771/blob/main/CVE
CVE: CVE-2023-38750
Published: 2023-07-31
Description: In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.
CVSS Score: 7.5 (HIGH)
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy; https://wiki.zimbra.com/wiki/Security_Center
CVE: CVE-2023-3817
Published: 2023-07-31
Description: Issue summary: Checking excessively long DH keys or parameters may be very slow.

Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long
delays. Where the key or parameters that are being checked have been obtained
from an untrusted source this may lead to a Denial of Service.

The function DH_check() performs various checks on DH parameters. After fixing
CVE-2023-3446 it was discovered that a large q parameter value can also trigger
an overly long computation during some of these checks. A correct q value,
if present, cannot be larger than the modulus p parameter, thus it is
unnecessary to perform these checks if q is larger than p.

An application that calls DH_check() and supplies a key or parameters obtained
from an untrusted source could be vulnerable to a Denial of Service attack.

The function DH_check() is itself called by a number of other OpenSSL functions.
An application calling any of those other functions may similarly be affected.
The other functions affected by this are DH_check_ex() and
EVP_PKEY_param_check().

Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications
when using the "-check" option.

The OpenSSL SSL/TLS implementation is not affected by this issue.

The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-606, CWE-834
References: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5; https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644; https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f
CVE: CVE-2023-3997
Published: 2023-07-31
Description: Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk SOAR a maliciously crafted web request containing special ANSI characters to cause log file poisoning. When a terminal user attempts to view the poisoned logs, this can tamper with the terminal and cause possible malicious code execution from the terminal user’s action.
CVSS Score: 8.6 (HIGH)
CWE: CWE-117, CWE-116
References: https://advisory.splunk.com/advisories/SVD-2023-0702; https://advisory.splunk.com/advisories/SVD-2023-0702
CVE: CVE-2023-4004
Published: 2023-07-31
Description: A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/errata/RHSA-2023:4961; https://access.redhat.com/errata/RHSA-2023:4962; https://access.redhat.com/errata/RHSA-2023:4967
CVE: CVE-2023-4010
Published: 2023-07-31
Description: A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usb_giveback_urb function has a logic loophole in its implementation. Due to the inappropriate judgment condition of the goto statement, the function cannot return under the input of a specific malformed descriptor file, so it falls into an endless loop, resulting in a denial of service.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://access.redhat.com/security/cve/CVE-2023-4010; https://bugzilla.redhat.com/show_bug.cgi?id=2227726; https://github.com/wanrenmi/a-usb-kernel-bug
CVE: CVE-2023-4026
Published: 2023-07-31
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4024. Reason: This record is a duplicate of CVE-2023-4024. Notes: All CVE users should reference CVE-2023-4024 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-38989
Published: 2023-07-31
Description: An issue in the delete function in the UserController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete the Administrator's role information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/thinkgem/jeesite/issues/518; https://github.com/thinkgem/jeesite/issues/518
CVE: CVE-2023-3983
Published: 2023-07-31
Description: An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform blind SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.tenable.com/security/research/tra-2023-24; https://www.tenable.com/security/research/tra-2023-24
CVE: CVE-2022-42182
Published: 2023-07-31
Description: Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://docs.precisely.com/docs/sftw/spectrum/release-notes/spectrum-2020-1-S56-release-notes.pdf; https://zxsecurity.co.nz/research/advisories/precisely-spectrum-spatial-analyst-20-1; https://docs.precisely.com/docs/sftw/spectrum/release-notes/spectrum-2020-1-S56-release-notes.pdf
CVE: CVE-2022-42183
Published: 2023-07-31
Description: Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery (SSRF).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://docs.precisely.com/docs/sftw/spectrum/release-notes/spectrum-2020-1-S56-release-notes.pdf; https://zxsecurity.co.nz/research/advisories/precisely-spectrum-spatial-analyst-20-1; https://docs.precisely.com/docs/sftw/spectrum/release-notes/spectrum-2020-1-S56-release-notes.pdf
CVE: CVE-2023-39122
Published: 2023-07-31
Description: BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 (and is also fixed by a patch for 9.0.20.200).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/DojoSecurity/BMC-Control-M-Unauthenticated-SQL-Injection; https://github.com/DojoSecurity/BMC-Control-M-Unauthenticated-SQL-Injection