deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-26286
Published: 2023-04-26
Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX runtime services library to execute arbitrary commands.  IBM X-Force ID:  248421.
CVSS Score: 8.4 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/248421; https://www.ibm.com/support/pages/node/6983236; https://exchange.xforce.ibmcloud.com/vulnerabilities/248421
CVE: CVE-2023-24796
Published: 2023-04-26
Description: Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints.
CVSS Score: 9.8 (CRITICAL)
References: https://gist.github.com/yinfei6/3664387cb5b66b68c7eff4bfdb51b2d6; https://gist.github.com/yinfei6/3664387cb5b66b68c7eff4bfdb51b2d6
CVE: CVE-2023-29257
Published: 2023-04-26
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of one database may execute code or read/write files from another database within the same instance.  IBM X-Force ID:  252011.
CVSS Score: 7.2 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/252011; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6985691
CVE: CVE-2022-25273
Published: 2023-04-26
Description: Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.drupal.org/sa-core-2022-008; https://www.drupal.org/sa-core-2022-008
CVE: CVE-2022-25274
Published: 2023-04-26
Description: Drupal 9.3 implemented a generic entity access API for entity revisions. However, this API was not completely integrated with existing permissions, resulting in some possible access bypass for users who have access to use revisions of content generally, but who do not have access to individual items of node and media content. This vulnerability only affects sites using Drupal's revision system.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.drupal.org/sa-core-2022-009; https://www.drupal.org/sa-core-2022-009
CVE: CVE-2022-25275
Published: 2023-04-26
Description: In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when generating derivative images using the image styles system. Access to a non-public file is checked only if it is stored in the "private" file system. However, some contributed modules provide additional file systems, or schemes, which may lead to this vulnerability. This vulnerability is mitigated by the fact that it only applies when the site sets (Drupal 9) $config['image.settings']['allow_insecure_derivatives'] or (Drupal 7) $conf['image_allow_insecure_derivatives'] to TRUE. The recommended and default setting is FALSE, and Drupal core does not provide a way to change that in the admin UI. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing files or image styles after updating.
CVSS Score: 7.5 (HIGH)
References: https://www.drupal.org/sa-core-2022-012; https://www.drupal.org/sa-core-2022-012
CVE: CVE-2022-39989
Published: 2023-04-26
Description: An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor prompt the administrators to change the credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://gist.github.com/0xHop/43c4da65e0d101328a46b1bd5a11b262; https://gist.github.com/0xHop/6ed962a1978edb1bd620c9c487400403; https://www.sourcecodester.com/php/12824/fighting-cock-information-system.html
CVE: CVE-2023-1387
Published: 2023-04-26
Description: Grafana is an open-source platform for monitoring and observability. 

Starting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token. 

By enabling the "url_login" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-200
References: https://github.com/grafana/bugbounty/security/advisories/GHSA-5585-m9r5-p86j; https://grafana.com/security/security-advisories/cve-2023-1387/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-22728
Published: 2023-04-26
Description: Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Users should upgrade to Silverstripe Framework 4.12.15 or above to address the issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/silverstripe/silverstripe-framework/commit/fd5d8217e83768d7bf841e94b2d4d82642d5bc58; https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-jh3w-6jp2-vqqm; https://github.com/silverstripe/silverstripe-framework/commit/fd5d8217e83768d7bf841e94b2d4d82642d5bc58
CVE: CVE-2023-30112
Published: 2023-04-26
Description: Medicine Tracker System in PHP 1.0.0 is vulnerable to SQL Injection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Rajeshwar40/CVE/blob/main/CVE-2023-30112; https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-mts_0.zip; https://github.com/Rajeshwar40/CVE/blob/main/CVE-2023-30112
CVE: CVE-2023-30265
Published: 2023-04-26
Description: CLTPHP <=6.0 is vulnerable to Directory Traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://gist.github.com/HuBenLab/1d1bc201d5df41426d719e56d4421b30; https://gist.github.com/HuBenLab/1d1bc201d5df41426d719e56d4421b30
CVE: CVE-2023-30266
Published: 2023-04-26
Description: CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://gist.github.com/HuBenLab/a6ef7e5efeae2635f54cb69327409a19; https://gist.github.com/HuBenLab/a6ef7e5efeae2635f54cb69327409a19
CVE: CVE-2023-30267
Published: 2023-04-26
Description: CLTPHP <=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gist.github.com/HuBenLab/e26ee91c43d4409437df350398ec6cf6; https://gist.github.com/HuBenLab/e26ee91c43d4409437df350398ec6cf6
CVE: CVE-2023-30269
Published: 2023-04-26
Description: CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-1284
References: https://gist.github.com/HuBenLab/f5eb8ebbba20c835a3170d392c9e46a4; https://gist.github.com/HuBenLab/f5eb8ebbba20c835a3170d392c9e46a4
CVE: CVE-2022-25276
Published: 2023-04-26
Description: The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. Under certain circumstances, this could lead to cross-site scripting, leaked cookies, or other vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.drupal.org/sa-core-2022-015; https://www.drupal.org/sa-core-2022-015
CVE: CVE-2022-25277
Published: 2023-04-26
Description: Drupal core sanitizes filenames with dangerous extensions upon upload (reference: SA-CORE-2020-012) and strips leading and trailing dots from filenames to prevent uploading server configuration files (reference: SA-CORE-2019-010). However, the protections for these two vulnerabilities previously did not work correctly together. As a result, if the site were configured to allow the upload of files with an htaccess extension, these files' filenames would not be properly sanitized. This could allow bypassing the protections provided by Drupal core's default .htaccess files and possible remote code execution on Apache web servers. This issue is mitigated by the fact that it requires a field administrator to explicitly configure a file field to allow htaccess as an extension (a restricted permission), or a contributed module or custom code that overrides allowed file uploads.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://www.drupal.org/sa-core-2022-014; https://www.drupal.org/sa-core-2022-014
CVE: CVE-2022-25278
Published: 2023-04-26
Description: Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. This may lead to a user being able to alter data they should not have access to. No forms provided by Drupal core are known to be vulnerable. However, forms added through contributed or custom modules or themes may be affected.
CVSS Score: 6.5 (MEDIUM)
References: https://www.drupal.org/sa-core-2022-013; https://www.drupal.org/sa-core-2022-013
CVE: CVE-2023-22729
Published: 2023-04-26
Description: Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Users should upgrade to Silverstripe Framework 4.12.15 or above to address the issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://github.com/silverstripe/silverstripe-framework/commit/1a5bb4cbece[PII_REDACTED]10b8ecd8b79c18dc77; https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-fw84-xgm8-9jmv; https://github.com/silverstripe/silverstripe-framework/commit/1a5bb4cbece[PII_REDACTED]10b8ecd8b79c18dc77
CVE: CVE-2022-27978
Published: 2023-04-26
Description: Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: http://tooljet.com; https://github.com/fourcube/security-advisories/blob/main/security-advisories/20220320-tooljet.md; http://tooljet.com
CVE: CVE-2022-27979
Published: 2023-04-26
Description: A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment Body component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://tooljet.com; https://github.com/fourcube/security-advisories/blob/main/security-advisories/20220321-tooljet-xss.md; http://tooljet.com
CVE: CVE-2023-30210
Published: 2023-04-26
Description: OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-tz-php-Reflection-xss/; https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-tz-php-Reflection-xss/
CVE: CVE-2023-30211
Published: 2023-04-26
Description: OURPHP <= 7.2.0 is vulnerable to SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-Background-SQL-injection/; https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-Background-SQL-injection/
CVE: CVE-2023-2307
Published: 2023-04-26
Description: Cross-Site Request Forgery (CSRF) in GitHub repository builderio/qwik prior to 0.104.0.


CVSS Score: 4.7 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/BuilderIO/qwik/pull/3862/commits/09190b70027354baf7ad3d208df9c05a87f75f57; https://huntr.dev/bounties/204ea12e-9e5c-4166-bf0e-fd49c8836917; https://github.com/BuilderIO/qwik/pull/3862/commits/09190b70027354baf7ad3d208df9c05a87f75f57
CVE: CVE-2023-30212
Published: 2023-04-26
Description: OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-out-php-Reflection-xss/; https://wanheiqiyihu.top/2023/03/27/OURPHP-v7-2-0-ourphp-out-php-Reflection-xss/
CVE: CVE-2023-29268
Published: 2023-04-26
Description: The Splus Server component of TIBCO Software Inc.'s TIBCO Spotfire Statistics Services contains a vulnerability that allows an unauthenticated remote attacker to upload or modify arbitrary files within the web server directory on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Statistics Services: versions 11.4.10 and below, versions 11.5.0, 11.6.0, 11.6.1, 11.6.2, 11.7.0, 11.8.0, 11.8.1, 12.0.0, 12.0.1, and 12.0.2, versions 12.1.0 and 12.2.0.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/services/support/advisories
CVE: CVE-2022-44232
Published: 2023-04-26
Description: libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow. In getInt() in decompile.c unknown type may lead to denial of service. This is a different vulnerability than CVE-2018-9132 and CVE-2018-20427.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/huanglei3/libming_crashes.git; https://github.com/huanglei3/libming_crashes.git
CVE: CVE-2023-0458
Published: 2023-04-26
Description: A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit[PII_REDACTED]05ddcf18f21782b9c99ad7d53a8c11
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/diff/kernel/sys.c?id=v6.1.8&id2=v6.1.7; https://github.com/torvalds/linux/commit/[PII_REDACTED]05ddcf18f21782b9c99ad7d53a8c11; https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
CVE: CVE-2023-26930
Published: 2023-04-26
Description: Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://gist.github.com/huanglei3/10e2a9bd07a109995b20ade306612a34; https://github.com/huanglei3/xpdf_aborted; https://gist.github.com/huanglei3/10e2a9bd07a109995b20ade306612a34
CVE: CVE-2023-26931
Published: 2023-04-26
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2022-30524. Reason: This record is a duplicate of CVE-2022-30524. Notes: All CVE users should reference CVE-2022-30524 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-26934
Published: 2023-04-26
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-26935
Published: 2023-04-26
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-26936
Published: 2023-04-26
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-26937
Published: 2023-04-26
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-26938
Published: 2023-04-26
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-30546
Published: 2023-04-26
Description: Contiki-NG is an operating system for Internet of Things devices. An off-by-one error can be triggered in the Antelope database management system in the Contiki-NG operating system in versions 4.8 and prior. The problem exists in the Contiki File System (CFS) backend for the storage of data (file os/storage/antelope/storage-cfs.c). In the functions `storage_get_index` and `storage_put_index`, a buffer for merging two strings is allocated with one byte less than the maximum size of the merged strings, causing subsequent function calls to the cfs_open function to read from memory beyond the buffer size. The vulnerability has been patched in the "develop" branch of Contiki-NG, and is expected to be included in the next release. As a workaround, the problem can be fixed by applying the patch in Contiki-NG pull request #2425.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-193
References: https://github.com/contiki-ng/contiki-ng/pull/2425; https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-257g-w39m-5jj4; https://github.com/contiki-ng/contiki-ng/pull/2425
CVE: CVE-2023-30841
Published: 2023-04-26
Description: Baremetal Operator (BMO) is a bare metal host provisioning integration for Kubernetes. Prior to version 0.3.0, ironic and ironic-inspector deployed within Baremetal Operator using the included `deploy.sh` store their `.htpasswd` files as ConfigMaps instead of Secrets. This causes the plain-text username and hashed password to be readable by anyone having a cluster-wide read-access to the management cluster, or access to the management cluster's Etcd storage. This issue is patched in baremetal-operator PR#1241, and is included in BMO release 0.3.0 onwards. As a workaround, users may modify the kustomizations and redeploy the BMO, or recreate the required ConfigMaps as Secrets per instructions in baremetal-operator PR#1241.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-200, CWE-319
References: https://github.com/metal3-io/baremetal-operator/pull/1241; https://github.com/metal3-io/baremetal-operator/security/advisories/GHSA-9wh7-397j-722m; https://github.com/metal3-io/baremetal-operator/pull/1241
CVE: CVE-2023-31250
Published: 2023-04-26
Description: The file download facility doesn't sufficiently sanitize file paths in certain situations. This may result in users gaining access to private files that they should not have access to. Some sites may require configuration changes following this security release. Review the release notes for your Drupal version if you have issues accessing private files after updating.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.drupal.org/sa-core-2023-005; https://www.drupal.org/sa-core-2023-005
CVE: CVE-2020-36070
Published: 2023-04-26
Description: Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php file to the media component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-281, CWE-281
References: https://github.com/the-control-group/voyager/; https://github.com/the-control-group/voyager/
CVE: CVE-2022-45456
Published: 2023-04-26
Description: Denial of service due to unauthenticated API endpoint. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 30161.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://security-advisory.acronis.com/advisories/SEC-4149; https://security-advisory.acronis.com/advisories/SEC-4149
CVE: CVE-2023-26567
Published: 2023-04-26
Description: Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables. This exposes cleartext authentication credentials for the Asterisk Database (MariaDB/MySQL) and Asterisk Manager Interface. For example, an attacker can make a /ari/asterisk/variable?variable=AMPDBPASS API call.
CVSS Score: 8.1 (HIGH)
CWE: CWE-522, CWE-522
References: https://qsecure.com.cy/resources/advisories/sangoma-freepbx-linux-insecure-permissions; https://www.freepbx.org; https://www.sangoma.com/products/open-source/
CVE: CVE-2023-27559
Published: 2023-04-26
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using a specially crafted subquery.  IBM X-Force ID:  249196.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/249196; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6985667
CVE: CVE-2023-28008
Published: 2023-04-26
Description: HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104371; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104371
CVE: CVE-2023-28009
Published: 2023-04-26
Description: HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104371; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0104371
CVE: CVE-2023-29596
Published: 2023-04-26
Description: Buffer Overflow vulnerability found in ByronKnoll Cmix v.19 allows an attacker to execute arbitrary code and cause a denial of service via the paq8 function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/byronknoll/cmix/issues/54; https://github.com/byronknoll/cmix/issues/54
CVE: CVE-2023-29835
Published: 2023-04-26
Description: Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function.
CVSS Score: 7.8 (HIGH)
References: https://github.com/IthacaLabs/Wondershare/tree/main/Dr.Fone; https://github.com/IthacaLabs/Wondershare/tree/main/Dr.Fone
CVE: CVE-2023-29836
Published: 2023-04-26
Description: Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions (EUCS) v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/IthacaLabs/Exelysis; https://github.com/IthacaLabs/Exelysis/blob/main/EUCS%20Admin%20Login%20XSS.txt; https://github.com/IthacaLabs/Exelysis
CVE: CVE-2023-30280
Published: 2023-04-26
Description: Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute arbitrary code and cause a denial ofservice via the getInputData parameter of the fwSchedule.cgi page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/; https://www.netgear.com/about/security/; https://github.com/