deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-31236
Published: 2023-06-12
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in unFocus Projects Scripts n Styles plugin <= 3.5.7 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/scripts-n-styles/wordpress-scripts-n-styles-plugin-3-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/scripts-n-styles/wordpress-scripts-n-styles-plugin-3-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32118
Published: 2023-06-12
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce plugin <= 1.2.1 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/salert/wordpress-salert-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/salert/wordpress-salert-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32961
Published: 2023-06-12
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://lourcode.kr/posts/CVE-2023-32961-Analysis/; https://patchstack.com/database/vulnerability/zotpress/wordpress-zotpress-plugin-7-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://lourcode.kr/posts/CVE-2023-32961-Analysis/
CVE: CVE-2023-34581
Published: 2023-06-12
Description: Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ashikkunjumon/cve-reports/blob/main/README.md; https://packetstormsecurity.com/files/172559/Service-Provider-Management-System-1.0-SQL-Injection.html; https://vulners.com/packetstorm/PACKETSTORM:172559
CVE: CVE-2023-35042
Published: 2023-06-12
Description: GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.geoserver.org/stable/en/user/services/wps/operations.html#execute; https://isc.sans.edu/diary/29936; https://docs.geoserver.org/stable/en/user/services/wps/operations.html#execute
CVE: CVE-2023-3206
Published: 2023-06-12
Description: A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown functionality of the file /send_order.cgi?parameter=restart. The manipulation of the argument restart with the input reboot leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231229 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404, CWE-77
References: https://github.com/shulao2020/cve/blob/main/Flying%20Fish.md; https://vuldb.com/?ctiid.231229; https://vuldb.com/?id.231229
CVE: CVE-2023-3208
Published: 2023-06-12
Description: A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3. Affected by this issue is some unknown functionality of the file /Log/Query?appid=0B[PII_REDACTED]-4D66-B9C0-15CAC149EB05&tabid=tab_0B[PII_REDACTED]4D66B9C015CAC149EB05 of the component Login. The manipulation of the argument sidx/sord leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-231230 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/yangxixx/vulhub/blob/master/activemq/RoadFlow.md; https://vuldb.com/?ctiid.231230; https://vuldb.com/?id.231230
CVE: CVE-2023-28933
Published: 2023-06-12
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in StPeteDesign Call Now Accessibility Button plugin <= 1.1 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/accessibility-help-button/wordpress-call-now-accessibility-button-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/accessibility-help-button/wordpress-call-now-accessibility-button-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-29385
Published: 2023-06-12
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-abstracts-manuscripts-manager/wordpress-wp-abstracts-plugin-2-6-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-abstracts-manuscripts-manager/wordpress-wp-abstracts-plugin-2-6-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-34026
Published: 2023-06-12
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BrokenCrust This Day In History plugin <= 3.10.1 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/this-day-in-history/wordpress-this-day-in-history-plugin-3-10-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/this-day-in-history/wordpress-this-day-in-history-plugin-3-10-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-34212
Published: 2023-06-12
Description: The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of untrusted data from a remote location.

The resolution validates the JNDI URL and restricts locations to a set of allowed schemes.

You are recommended to upgrade to version 1.22.0 or later which fixes this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502, CWE-502
References: http://www.openwall.com/lists/oss-security/2023/06/12/2; https://lists.apache.org/thread/w5rm46fxmvxy216tglf0dv83wo6gnzr5; https://nifi.apache.org/security.html#CVE-2023-34212
CVE: CVE-2023-34468
Published: 2023-06-12
Description: The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution.

The resolution validates the Database URL and rejects H2 JDBC locations.

You are recommended to upgrade to version 1.22.0 or later which fixes this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/174398/Apache-NiFi-H2-Connection-String-Remote-Code-Execution.html; http://www.openwall.com/lists/oss-security/2023/06/12/3; https://lists.apache.org/thread/7b82l4f5blmpkfcynf3y6z4x1vqo59h8
CVE: CVE-2023-35053
Published: 2023-06-12
Description: In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-35054
Published: 2023-06-12
Description: In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-30198
Published: 2023-06-12
Description: Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/173136/PrestaShop-Winbiz-Payment-Improper-Limitation.html; https://friends-of-presta.github.io/security-advisories/modules/2023/06/08/winbizpayment.html; https://github.com/PrestaShop/PrestaShop/blob/6c05518b807d014ee8edb811041e3de232520c28/classes/Tools.php#L1247
CVE: CVE-2023-34105
Published: 2023-06-12
Description: SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's `api-server` server is vulnerable to a drive-by command injection. An attacker may send a request to the `/api/v1/snapshots` endpoint containing any commands to be executed as part of the body of the POST request. This issue may lead to Remote Code Execution (RCE). Versions 5.0.157, 5.0-b1, and 6.0.48 contain a fix.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78, CWE-77
References: https://github.com/ossrs/srs/blob/1d11d02e4b82fc3f37e4b048cff483b1581482c1/trunk/research/api-server/server.go#L761; https://github.com/ossrs/srs/commit/1d878c2daaf913ad01c6d0bc2f247116c8050338; https://github.com/ossrs/srs/security/advisories/GHSA-vpr5-779c-cx62
CVE: CVE-2023-34246
Published: 2023-06-12
Description: Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. Prior to version 5.6.6, Doorkeeper automatically processes authorization requests without user consent for public clients that have been previous approved. Public clients are inherently vulnerable to impersonation, their identity cannot be assured. This issue is fixed in version 5.6.6.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://github.com/doorkeeper-gem/doorkeeper/issues/1589; https://github.com/doorkeeper-gem/doorkeeper/pull/1646; https://github.com/doorkeeper-gem/doorkeeper/releases/tag/v5.6.6
CVE: CVE-2023-34341
Published: 2023-06-12
Description: AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can read and write to arbitrary locations
within the memory context of the IPMI server process, which may lead to code
execution, denial of service, information disclosure, or data tampering.






CVSS Score: 7.2 (HIGH)
CWE: CWE-119, CWE-119
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf
CVE: CVE-2023-34344
Published: 2023-06-12
Description: AMI BMC contains a vulnerability in the IPMI
handler, where an unauthorized attacker can use certain oracles to guess a
valid username, which may lead to information disclosure.






CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf
CVE: CVE-2023-34345
Published: 2023-06-12
Description: AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can access arbitrary files, which may
lead to information disclosure.






CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf
CVE: CVE-2022-36331
Published: 2023-06-12
Description: Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain access to user data.
This issue affects My Cloud OS 5 devices: before 5.25.132; My Cloud Home and My Cloud Home Duo: before 8.13.1-102; SanDisk ibi: before 8.13.1-102.


CVSS Score: 10.0 (CRITICAL)
CWE: CWE-290, CWE-290
References: https://https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update; https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update; https://https://www.westerndigital.com/support/product-security/wdc-22020-my-cloud-os-5-my-cloud-home-ibi-firmware-update
CVE: CVE-2023-0431
Published: 2023-06-12
Description: The File Away WordPress plugin through 3.9.9.0.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/fdcbd9a3-552d-439e-b283-1d3d934889af; https://wpscan.com/vulnerability/fdcbd9a3-552d-439e-b283-1d3d934889af
CVE: CVE-2023-1323
Published: 2023-06-12
Description: The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/d3a2af00-719c-4b86-8877-b1d68a589192; https://wpscan.com/vulnerability/d3a2af00-719c-4b86-8877-b1d68a589192
CVE: CVE-2023-2362
Published: 2023-06-12
Description: The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before 1.5.1, Counter Box WordPress plugin before 1.2.2, Floating Button WordPress plugin before 5.3.1, Herd Effects WordPress plugin before 5.2.2, Popup Box WordPress plugin before 2.2.2, Side Menu Lite WordPress plugin before 4.0.2, Sticky Buttons WordPress plugin before 3.1.1, Wow Skype Buttons WordPress plugin before 4.0.2, WP Coder WordPress plugin before 2.5.6 do not escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/27e70507-fd68-4915-88cf-0b96ed55208e; https://wpscan.com/vulnerability/27e70507-fd68-4915-88cf-0b96ed55208e
CVE: CVE-2023-2398
Published: 2023-06-12
Description: The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/16d47d20-58aa-4d04-9275-fd91ce926ff3; https://wpscan.com/vulnerability/16d47d20-58aa-4d04-9275-fd91ce926ff3
CVE: CVE-2023-2568
Published: 2023-06-12
Description: The Photo Gallery by Ays WordPress plugin before 5.1.7 does not escape some parameters before outputting it back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/b1704a12-459b-4f5d-aa2d-a96646ddaf3e; https://wpscan.com/vulnerability/b1704a12-459b-4f5d-aa2d-a96646ddaf3e
CVE: CVE-2023-2718
Published: 2023-06-12
Description: The Contact Form Email WordPress plugin before 1.3.38 does not escape submitted values before displaying them in the HTML, leading to a Stored XSS vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8ad824a6-2d49-4f02-8252-393c59aa9705; https://www.onvio.nl/nieuws/research-day-discovering-vulnerabilities-in-wordpress-plugins; https://wpscan.com/vulnerability/8ad824a6-2d49-4f02-8252-393c59aa9705
CVE: CVE-2023-34334
Published: 2023-06-12
Description: AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can inject arbitrary shell commands,
which may lead to code execution, denial of service, information disclosure, or
data tampering.

 








CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf
CVE: CVE-2023-34335
Published: 2023-06-12
Description: AMI BMC contains a vulnerability in the IPMI handler, where an
unauthenticated host is allowed to write to a host SPI flash, bypassing secure
boot protections. An exploitation of this vulnerability may lead to a loss of
integrity or denial of service.





 








CVSS Score: 7.7 (HIGH)
CWE: CWE-288, CWE-306
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf
CVE: CVE-2023-34336
Published: 2023-06-12
Description: AMI BMC contains a vulnerability in the IPMI handler, where an
attacker with the required privileges can cause a buffer overflow, which may
lead to code execution, denial of service, or escalation of privileges.






 








CVSS Score: 8.1 (HIGH)
CWE: CWE-120, CWE-120
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf
CVE: CVE-2023-34342
Published: 2023-06-12
Description: AMI BMC contains a vulnerability in the IPMI handler, where an
attacker can upload and download arbitrary files under certain circumstances,
which may lead to denial of service, escalation of privileges, information
disclosure, or data tampering.






CVSS Score: 6.0 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf
CVE: CVE-2023-34343
Published: 2023-06-12
Description: AMI BMC contains a vulnerability in the SPX REST API, where an
attacker with the required privileges can inject arbitrary shell commands,
which may lead to code execution, denial of service, information disclosure, or
data tampering.






CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023005.pdf
CVE: CVE-2022-27539
Published: 2023-06-12
Description: Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367, CWE-367
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835
CVE: CVE-2022-27541
Published: 2023-06-12
Description: Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367, CWE-367
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835
CVE: CVE-2022-43777
Published: 2023-06-12
Description: Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367, CWE-367
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835
CVE: CVE-2022-43778
Published: 2023-06-12
Description: Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367, CWE-367
References: https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835; https://support.hp.com/us-en/document/ish_7[PII_REDACTED]835-16/hpsbhf03835
CVE: CVE-2023-1897
Published: 2023-06-12
Description: Atlas Copco Power Focus 6000 web server does not sanitize the login information stored by the authenticated user’s browser, which could allow an attacker with access to the user’s computer to gain credential information of the controller.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-312
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01
CVE: CVE-2023-1898
Published: 2023-06-12
Description: Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-330
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01
CVE: CVE-2023-1899
Published: 2023-06-12
Description: Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sensitive information by monitoring network traffic between user and controller.
CVSS Score: 9.4 (CRITICAL)
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-159-01
CVE: CVE-2023-28478
Published: 2023-06-12
Description: TP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 have a Buffer Overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0006.md; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0006.md
CVE: CVE-2023-33622
Published: 2023-06-12
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31475. Reason: This record is a reservation duplicate of CVE-2023-31475. Notes: All CVE users should reference CVE-2023-31475 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-33623
Published: 2023-06-12
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31478. Reason: This record is a reservation duplicate of CVE-2023-31478. Notes: All CVE users should reference CVE-2023-31478 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-33624
Published: 2023-06-12
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31472. Reason: This record is a reservation duplicate of CVE-2023-31472. Notes: All CVE users should reference CVE-2023-31472 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-33625
Published: 2023-06-12
Description: D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/naihsin/IoT/blob/main/D-Link/DIR-600/cmd%20injection/README.md; https://github.com/naihsin/IoT/tree/main/D-Link/DIR-600/cmd%20injection; https://hackmd.io/%40naihsin/By2datZD2
CVE: CVE-2023-33626
Published: 2023-06-12
Description: D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/naihsin/IoT/blob/main/D-Link/DIR-600/overflow/README.md; https://github.com/naihsin/IoT/tree/main/D-Link/DIR-600/overflow; https://www.dlink.com/en/security-bulletin/