deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30951
Published: 2023-08-03
Description: The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack (XXE). 
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://palantir.safebase.us/?tcuUid=fe021f28-9e25-42c4-acd8-772cd8006ced; https://palantir.safebase.us/?tcuUid=fe021f28-9e25-42c4-acd8-772cd8006ced
CVE: CVE-2023-30952
Published: 2023-08-03
Description: A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 .
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://palantir.safebase.us/?tcuUid=42bdb7fa-9a6d-4462-b89d-cabc62f281f4; https://palantir.safebase.us/?tcuUid=42bdb7fa-9a6d-4462-b89d-cabc62f281f4
CVE: CVE-2023-30958
Published: 2023-08-03
Description: A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed.

This defect was resolved with the release of Foundry Frontend 6.225.0.


CVSS Score: 4.7 (MEDIUM)
CWE: CWE-83, CWE-79
References: https://palantir.safebase.us/?tcuUid=5764b094-d3c0-4380-90f2-234f36116c9b; https://palantir.safebase.us/?tcuUid=5764b094-d3c0-4380-90f2-234f36116c9b
CVE: CVE-2023-37497
Published: 2023-08-03
Description: The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.

CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106547; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106547
CVE: CVE-2023-37498
Published: 2023-08-03
Description: A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator.  It is possible that an attacker could potentially escalate their privileges.

CVSS Score: 8.1 (HIGH)
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106545; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106545
CVE: CVE-2023-37499
Published: 2023-08-03
Description: A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform.  An attacker could hijack a user's session and perform other attacks.

CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106555; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106555
CVE: CVE-2023-37500
Published: 2023-08-03
Description: A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform.  An attacker could hijack a user's session and perform other attacks.

CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106554; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106554
CVE: CVE-2023-37501
Published: 2023-08-03
Description: A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign.  An attacker could hijack a user's session and perform other attacks.

CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106556; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106556
CVE: CVE-2023-38949
Published: 2023-08-03
Description: An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request.
CVSS Score: 7.5 (HIGH)
References: http://zkteco.com; https://claroty.com/team82/disclosure-dashboard/cve-2023-38949; http://zkteco.com
CVE: CVE-2023-38950
Published: 2023-08-03
Description: A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120[PII_REDACTED]6 of ZKBioTime.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://zkteco.com; https://claroty.com/team82/disclosure-dashboard/cve-2023-38950; http://zkteco.com
CVE: CVE-2023-38951
Published: 2023-08-03
Description: ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20[PII_REDACTED]6) allows authenticated attackers to create or overwrite arbitrary files on the server via crafted requests to /base/sftpsetting/ endpoints that abuse a path traversal issue in the Username field and a lack of input sanitization on the SSH Key field. Overwriting specific files may lead to arbitrary code execution as NT AUTHORITY\SYSTEM.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://claroty.com/team82/disclosure-dashboard/cve-2023-38951; https://github.com/omair2084/biotime-rce-8.5.5/blob/main/biotime_enum.py; https://krashconsulting.com/fury-of-fingers-biotime-rce/
CVE: CVE-2023-38952
Published: 2023-08-03
Description: Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing the application by default. Privilege restrictions between non-admin and admin users are not enforced and any authenticated user can leverage admin functions without restriction by making direct requests to administrative endpoints.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-552
References: http://zkteco.com; https://claroty.com/team82/disclosure-dashboard/cve-2023-38952; https://github.com/omair2084/biotime-rce-8.5.5/blob/main/biotime_enum.py
CVE: CVE-2023-0525
Published: 2023-08-04
Description: Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions 01.49.000 and prior, GS21 model versions 01.49.000 and prior, GT Designer3 Version1 (GOT2000) versions 1.295H and prior and GT SoftGOT2000 versions 1.295H and prior allows a remote unauthenticated attacker to obtain plaintext passwords by sniffing packets containing encrypted passwords and decrypting the encrypted passwords, in the case of transferring data with GT Designer3 Version1(GOT2000) and GOT2000 Series or GOT SIMPLE Series with the Data Transfer Security function enabled, or in the case of transferring data by the SoftGOT-GOT link function with GT SoftGOT2000 and GOT2000 series with the Data Transfer Security function enabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-261, CWE-326
References: https://jvn.jp/vu/JVNVU95285923/index.html; https://www.cisa.gov/news-events/ics-advisories/icsa-23-215-02; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-008_en.pdf
CVE: CVE-2023-30297
Published: 2023-08-04
Description: An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server.
CVSS Score: 7.0 (HIGH)
References: https://status.n-able.com/2023/07/27/cve-2023-30297-release-note/; https://www.n-able.com/; https://status.n-able.com/2023/07/27/cve-2023-30297-release-note/
CVE: CVE-2023-33665
Published: 2023-08-04
Description: ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/08/01/aitable.html; https://www.boutique.ai-dev.fr/en/ergonomie/56-table-attributes.html; https://security.friendsofpresta.org/modules/2023/08/01/aitable.html
CVE: CVE-2023-36131
Published: 2023-08-04
Description: PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter.
CVSS Score: 9.8 (CRITICAL)
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/availability-booking-calendar/; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36132
Published: 2023-08-04
Description: PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/availability-booking-calendar/; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36133
Published: 2023-08-04
Description: PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
CVSS Score: 9.8 (CRITICAL)
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/availability-booking-calendar/; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36134
Published: 2023-08-04
Description: In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/class-scheduling-system; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36135
Published: 2023-08-04
Description: User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 7.5 (HIGH)
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/class-scheduling-system; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36137
Published: 2023-08-04
Description: There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Class Scheduling System 1.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/class-scheduling-system; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36138
Published: 2023-08-04
Description: PHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/cleaning-business-software/; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36139
Published: 2023-08-04
Description: In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/cleaning-business-software/; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36141
Published: 2023-08-04
Description: User enumeration is found in in PHPJabbers Cleaning Business Software 1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 5.3 (MEDIUM)
References: https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4; https://www.phpjabbers.com/cleaning-business-software/; https://medium.com/%40bcksec/multiple-vulnerabilities-in-php-jabbers-scripts-25af4afcadd4
CVE: CVE-2023-36158
Published: 2023-08-04
Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://toll.com; https://cyberredteam.tech/posts/cve-2023-36158/; https://github.com/unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md
CVE: CVE-2023-36159
Published: 2023-08-04
Description: Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lost.com; https://cyberredteam.tech/posts/cve-2023-36159/; https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html
CVE: CVE-2023-38941
Published: 2023-08-04
Description: django-sspanel v2022.2.2 was discovered to contain a remote command execution (RCE) vulnerability via the component sspanel/admin_view.py -> GoodsCreateView._post.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/Ehco1996/django-sspanel; https://github.com/Ehco1996/django-sspanel
CVE: CVE-2023-38991
Published: 2023-08-04
Description: An issue in the delete function in the ActModelController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete models created by the Administrator.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-732
References: https://github.com/thinkgem/jeesite/issues/520; https://github.com/thinkgem/jeesite/issues/520
CVE: CVE-2023-3373
Published: 2023-08-04
Description: Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 model versions 01.49.000 and prior allows a remote unauthenticated attacker to hijack data connections (session hijacking) or prevent legitimate users from establishing data connections (to cause DoS condition) by guessing the listening port of the data connection on FTP server and connecting to it.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-342, CWE-330
References: https://jvn.jp/vu/JVNVU92167394/index.html; https://www.cisa.gov/news-events/ics-advisories/icsa-23-215-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-006_en.pdf
CVE: CVE-2023-30146
Published: 2023-08-04
Description: Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://de.assmann.shop/de/Gebaeude-Technik/Sicherheitstechnik/Ueberwachungskameras/; https://github.com/L1-0/CVE-2023-30146; https://de.assmann.shop/de/Gebaeude-Technik/Sicherheitstechnik/Ueberwachungskameras/
CVE: CVE-2023-38708
Published: 2023-08-04
Description: Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. A path traversal vulnerability exists in the `AssetController::importServerFilesAction`, which allows an attacker to overwrite or modify sensitive files by manipulating the pimcore_log parameter.This can lead to potential denial of service---key file overwrite.
The impact of this vulnerability allows attackers to: overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information. This could also cause a denial of service (DoS) if critical system files are overwritten or deleted.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c; https://github.com/pimcore/pimcore/security/advisories/GHSA-34hj-v8fm-x887; https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c
CVE: CVE-2023-39343
Published: 2023-08-04
Description: Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email) exists and which one do not exist. Sulu Installation not using the old Symfony 5.4 security System and previous version are not impacted by this Security issue. The vulnerability has been patched in version 2.5.10. 


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-204
References: https://github.com/sulu/sulu/commit/5f6c98ba030b2005793e2dc647cc938937ea889b; https://github.com/sulu/sulu/releases/tag/2.5.10; https://github.com/sulu/sulu/security/advisories/GHSA-wmwf-49vv-p3mr
CVE: CVE-2023-4002
Published: 2023-08-04
Description: An issue has been discovered in GitLab EE affecting all versions starting from 14.1 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for EE-licensed users to link any security policy project by its ID to projects or groups the user has access to, potentially revealing the security projects's configured security policies.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-201
References: https://gitlab.com/gitlab-org/gitlab/-/issues/416647; https://gitlab.com/gitlab-org/gitlab/-/issues/416647
CVE: CVE-2023-4139
Published: 2023-08-04
Description: The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Sensitive Information Exposure  via Directory Listing due to missing restriction in export folder indexing in versions up to, and including, 7.9.8. This makes it possible for unauthenticated attackers to list and view exported files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset/2944635/wp-ultimate-csv-importer/trunk/wp-ultimate-csv-importer.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/6404476e-0c32-4f8e-882f-6a1785ba5748?source=cve; https://plugins.trac.wordpress.org/changeset/2944635/wp-ultimate-csv-importer/trunk/wp-ultimate-csv-importer.php
CVE: CVE-2023-4140
Published: 2023-08-04
Description: The WP Ultimate CSV Importer plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.9.8 due to insufficient restriction on the 'get_header_values' function. This makes it possible for authenticated attackers, with minimal permissions such as an author, if the administrator previously grants access in the plugin settings, to modify their user role by supplying the 'wp_capabilities->cus1' parameter.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-269
References: https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.9.6/importExtensions/ImportHelpers.php#L205; https://plugins.trac.wordpress.org/changeset/2944635/wp-ultimate-csv-importer/trunk/wp-ultimate-csv-importer.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/5fdba41f-daa5-44e8-bc47-aa8b7bd31054?source=cve
CVE: CVE-2023-4141
Published: 2023-08-04
Description: The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 7.9.8 via the '->cus2' parameter. This allows authenticated attackers with author-level permissions or above, if the administrator previously grants access in the plugin settings, to create a PHP file and execute code on the server. The author resolved this vulnerability by removing the ability for authors and editors to import files, please note that this means php file creation is still allowed for site administrators, use the plugin with caution.
CVSS Score: 8.0 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.9.6/importExtensions/ImportHelpers.php#L205; https://plugins.trac.wordpress.org/changeset/2944635/wp-ultimate-csv-importer/trunk/wp-ultimate-csv-importer.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/b4fe8b1f-da1c-4f94-9ab4-272766b488c3?source=cve
CVE: CVE-2023-4142
Published: 2023-08-04
Description: The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 7.9.8 via the '->cus1' parameter. This allows authenticated attackers with author-level permissions or above, if the administrator previously grants access in the plugin settings, to execute code on the server. The author resolved this vulnerability by removing the ability for authors and editors to import files, please note that this means remote code execution is still possible for site administrators, use the plugin with caution.
CVSS Score: 8.0 (HIGH)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.9.6/importExtensions/ImportHelpers.php#L205; https://plugins.trac.wordpress.org/changeset/2944635/wp-ultimate-csv-importer/trunk/wp-ultimate-csv-importer.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/db1bad2e-55df-40c5-9a3f-651858a19b42?source=cve
CVE: CVE-2023-39379
Published: 2023-08-04
Description: Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As a result, the password for the proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Software Infrastructure Manager Advanced Edition V2.8.0.060, Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX V2.8.0.060, and Fujitsu Software Infrastructure Manager Essential Edition V2.8.0.060.

CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://jvn.jp/en/jp/JVN38847224/; https://support.ts.fujitsu.com/IndexProdSecurity.asp?lng=en; https://jvn.jp/en/jp/JVN38847224/
CVE: CVE-2023-34037
Published: 2023-08-04
Description: VMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with network access may be able to perform HTTP smuggle requests.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-444
References: https://www.vmware.com/security/advisories/VMSA-2023-0017.html; https://www.vmware.com/security/advisories/VMSA-2023-0017.html
CVE: CVE-2023-34038
Published: 2023-08-04
Description: VMware Horizon Server contains an information disclosure vulnerability. A malicious actor with network access may be able to access information relating to the internal network configuration.


CVSS Score: 5.3 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2023-0017.html; https://www.vmware.com/security/advisories/VMSA-2023-0017.html
CVE: CVE-2023-4135
Published: 2023-08-04
Description: A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/security/cve/CVE-2023-4135; https://bugzilla.redhat.com/show_bug.cgi?id=2229101; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-29505
Published: 2023-08-04
Description: An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-29505; https://excellium-services.com/cert-xlm-advisory/CVE-2023-29505; https://www.manageengine.com/itom/advisory/cve-2023-29505.html
CVE: CVE-2023-29689
Published: 2023-08-04
Description: PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious attacker to send customized commands to the server and execute arbitrary code on the affected system.
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/174088/Pyro-CMS-3.9-Server-Side-Template-Injection.html; https://cupc4k3.lol/ssti-leads-to-rce-on-pyrocms-7515be27c811; http://packetstormsecurity.com/files/174088/Pyro-CMS-3.9-Server-Side-Template-Injection.html