deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-36459
Published: 2023-07-06
Description: Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 1.3 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker using carefully crafted oEmbed data can bypass the HTML sanitization performed by Mastodon and include arbitrary HTML in oEmbed preview cards. This introduces a vector for cross-site scripting (XSS) payloads that can be rendered in the user's browser when a preview card for a malicious link is clicked through. Versions 3.5.9, 4.0.5, and 4.1.3 contain a patch for this issue.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2023/07/06/5; https://github.com/mastodon/mastodon/commit/6d8e0fae3e96f3cf4febe03fa7fcf5b95ff761b2; https://github.com/mastodon/mastodon/releases/tag/v3.5.9
CVE: CVE-2023-36460
Published: 2023-07-06
Description: Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, attackers using carefully crafted media files can cause Mastodon's media processing code to create arbitrary files at any location. This allows attackers to create and overwrite any file Mastodon has access to, allowing Denial of Service and arbitrary Remote Code Execution. Versions 3.5.9, 4.0.5, and 4.1.3 contain a patch for this issue.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2023/07/06/4; https://github.com/mastodon/mastodon/commit/dc8f1fbd976ae544720a4e07120d9a91b2722440; https://github.com/mastodon/mastodon/releases/tag/v3.5.9
CVE: CVE-2023-36461
Published: 2023-07-06
Description: Mastodon is a free, open-source social network server based on ActivityPub. When performing outgoing HTTP queries, Mastodon sets a timeout on individual read operations. Prior to versions 3.5.9, 4.0.5, and 4.1.3, a malicious server can indefinitely extend the duration of the response through slowloris-type attacks. This vulnerability can be used to keep all Mastodon workers busy for an extended duration of time, leading to the server becoming unresponsive. Versions 3.5.9, 4.0.5, and 4.1.3 contain a patch for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://www.openwall.com/lists/oss-security/2023/07/06/7; https://github.com/mastodon/mastodon/commit/c5929798bf7e56cc2c79b15bed0c4692ded3dcb6; https://github.com/mastodon/mastodon/releases/tag/v3.5.9
CVE: CVE-2023-3529
Published: 2023-07-06
Description: A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the file /LandingPages/api/otp/send?id=[ID][ampersand]method=sms of the component OTP URI Interface. The manipulation leads to information exposure through discrepancy. It is possible to initiate the attack remotely. The identifier VDB-233253 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://vuldb.com/?ctiid.233253; https://vuldb.com/?id.233253; https://vuldb.com/?ctiid.233253
CVE: CVE-2023-30195
Published: 2023-07-06
Description: In the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal informations without restriction formatted in json.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://friends-of-presta.github.io/security-advisories/modules/2023/06/22/lgdetailedorder.html; https://friends-of-presta.github.io/security-advisories/modules/2023/06/22/lgdetailedorder.html
CVE: CVE-2023-35934
Published: 2023-07-06
Description: yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host. This vulnerable behavior is present in yt-dlp prior to 2023.07.06 and nightly 2023.07.06.185519. All native and external downloaders are affected, except for `curl` and `httpie` (version 3.1.0 or later).

At the file download stage, all cookies are passed by yt-dlp to the file downloader as a `Cookie` header, thereby losing their scope. This also occurs in yt-dlp's info JSON output, which may be used by external tools. As a result, the downloader or external tool may indiscriminately send cookies with requests to domains or paths for which the cookies are not scoped.

yt-dlp version 2023.07.06 and nightly 2023.07.06.185519 fix this issue by removing the `Cookie` header upon HTTP redirects; having native downloaders calculate the `Cookie` header from the cookiejar, utilizing external downloaders' built-in support for cookies instead of passing them as header arguments, disabling HTTP redirectiong if the external downloader does not have proper cookie support, processing cookies passed as HTTP headers to limit their scope, and having a separate field for cookies in the info dict storing more information about scoping

Some workarounds are available for those who are unable to upgrade. Avoid using cookies and user authentication methods. While extractors may set custom cookies, these usually do not contain sensitive information. Alternatively, avoid using `--load-info-json`. Or, if authentication is a must: verify the integrity of download links from unknown sources in browser (including redirects) before passing them to yt-dlp; use `curl` as external downloader, since it is not impacted; and/or avoid fragmented formats such as HLS/m3u8, DASH/mpd and ISM.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-200, CWE-601
References: https://github.com/yt-dlp/yt-dlp-nightly-builds/releases/tag/2023.07.06.185519; https://github.com/yt-dlp/yt-dlp/commit/1ceb657bdd254ad961489e5060f2ccc7d556b729; https://github.com/yt-dlp/yt-dlp/commit/[PII_REDACTED]487c9c690d3d39bfd2579addf96e07
CVE: CVE-2023-36462
Published: 2023-07-06
Description: Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 2.6.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker can craft a verified profile link using specific formatting to conceal arbitrary parts of the link, enabling it to appear to link to a different URL altogether. The link is visually misleading, but clicking on it will reveal the actual link. This can still be used for phishing, though, similar to IDN homograph attacks. Versions 3.5.9, 4.0.5, and 4.1.3 contain a patch for this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://github.com/mastodon/mastodon/commit/610731b03dfcadd887078cb0399f4e514aa1931c; https://github.com/mastodon/mastodon/releases/tag/v3.5.9; https://github.com/mastodon/mastodon/releases/tag/v4.0.5
CVE: CVE-2023-3531
Published: 2023-07-06
Description: Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nilsteampassnet/teampass/commit/cb8ea5ccca61653895bb6881547e463baa50293d; https://huntr.dev/bounties/c9f0b3ff-bbc4-4ea1-a59e-8594b48bb414; https://github.com/nilsteampassnet/teampass/commit/cb8ea5ccca61653895bb6881547e463baa50293d
CVE: CVE-2023-29824
Published: 2023-07-06
Description: A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: http://www.square16.org/achievement/cve-2023-29824/; https://github.com/scipy/scipy/issues/14713; https://github.com/scipy/scipy/issues/14713#issuecomment[PII_REDACTED]
CVE: CVE-2023-20899
Published: 2023-07-06
Description: VMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the application under VMware SD-WAN Management.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.vmware.com/security/advisories/VMSA-2023-0015.html; https://www.vmware.com/security/advisories/VMSA-2023-0015.html
CVE: CVE-2023-31277
Published: 2023-07-06
Description: 




PiiGAB M-Bus transmits credentials in plaintext format.






CVSS Score: 7.5 (HIGH)
CWE: CWE-523
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-33868
Published: 2023-07-06
Description: 


The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication.




CVSS Score: 5.9 (MEDIUM)
CWE: CWE-307
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-35987
Published: 2023-07-06
Description: 






PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.








CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-36829
Published: 2023-07-06
Description: Sentry is an error tracking and performance monitoring platform. Starting in version 23.6.0 and prior to version 23.6.2, the Sentry API incorrectly returns the `access-control-allow-credentials: true` HTTP header if the `Origin` request header ends with the `system.base-hostname` option of Sentry installation. This only affects installations that have `system.base-hostname` option explicitly set, as it is empty by default. Impact is limited since recent versions of major browsers have cross-site cookie blocking enabled by default. However, this flaw could allow other multi-step attacks. The patch has been released in Sentry 23.6.2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863, CWE-942, CWE-697
References: https://github.com/getsentry/self-hosted/releases/tag/23.6.2; https://github.com/getsentry/sentry/commit/ee44c6be35e5e464bc40637580f39867898acd8b; https://github.com/getsentry/sentry/pull/52276
CVE: CVE-2023-36859
Published: 2023-07-06
Description: 
PiiGAB M-Bus 

SoftwarePack 900S

does not correctly sanitize user input, which could allow an attacker to inject arbitrary commands.


CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-32652
Published: 2023-07-07
Description: 








PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.












CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-34433
Published: 2023-07-07
Description: 












PiiGAB M-Bus stores passwords using a weak hash algorithm.


CVSS Score: 7.5 (HIGH)
CWE: CWE-916
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-34995
Published: 2023-07-07
Description: 














There are no requirements for setting a complex password for PiiGAB M-Bus, which could contribute to a successful brute force attack if the password is inline with recommended password guidelines.




CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-35120
Published: 2023-07-07
Description: 
PiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then the device could execute the GET or POST link request.


CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-35765
Published: 2023-07-07
Description: 








PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.










CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE: CVE-2023-37192
Published: 2023-07-07
Description: Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, potentially allowing them to redirect Bitcoin transactions to wallets of their own choosing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://bitcoin.org/en/bitcoin-core/; https://satoshihunter1.blogspot.com/2023/06/the-bitcoin-app-is-vulnerable-to-hackers.html; https://www.youtube.com/watch?v=oEl4M1oZim0
CVE: CVE-2023-35890
Published: 2023-07-07
Description: IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file.  IBM X-Force ID:  258637.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://https://www.ibm.com/support/pages/node/7007857; https://www.ibm.com/support/pages/node/7007857; https://https://www.ibm.com/support/pages/node/7007857
CVE: CVE-2023-3532
Published: 2023-07-07
Description: Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/outline/outline/commit/9431df45c210e85b77cd27f2ffaf0358b837afa3; https://huntr.dev/bounties/ebd2428a-e2cb-480e-ba37-dd89ad62cf1b; https://github.com/outline/outline/commit/9431df45c210e85b77cd27f2ffaf0358b837afa3
CVE: CVE-2023-32183
Published: 2023-07-07
Description: Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root
This issue affects openSUSE Tumbleweed.


CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32183; https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32183
CVE: CVE-2023-33008
Published: 2023-07-07
Description: Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon.


A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal. 


This issue affects Apache Johnzon: through 1.2.20.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-502
References: https://lists.apache.org/thread/qbg14djo95gfpk7o560lr8wcrzfyw43l; https://lists.apache.org/thread/qbg14djo95gfpk7o560lr8wcrzfyw43l
CVE: CVE-2020-8934
Published: 2023-07-07
Description: The Site Kit by Google plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 1.8.0 This is due to the lack of capability checks on the admin_enqueue_scripts action which displays the connection key. This makes it possible for authenticated attackers with any level of access obtaining owner access to a site in the Google Search Console. We recommend upgrading to V1.8.1 or above.

CVSS Score: 4.3 (MEDIUM)
CWE: CWE-252, CWE-252
References: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/google-site-kit/site-kit-by-google-171-sensitive-information-disclosure; https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/google-site-kit/site-kit-by-google-171-sensitive-information-disclosure
CVE: CVE-2023-3534
Published: 2023-07-07
Description: A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-233286 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/DUA0G/cve/blob/main/1.pdf; https://vuldb.com/?ctiid.233286; https://vuldb.com/?id.233286
CVE: CVE-2023-34197
Published: 2023-07-07
Description: Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300, and SupportCenter Plus before 14300 have a privilege escalation vulnerability in the Release module that allows unprivileged users to access the Reminders of a release ticket and make modifications.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://www.manageengine.com/products/service-desk/CVE-2023-34197.html; https://www.manageengine.com/products/service-desk/CVE-2023-34197.html
CVE: CVE-2023-37308
Published: 2023-07-07
Description: Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.manageengine.com/products/active-directory-audit/cve-2023-37308.html; https://www.manageengine.com/products/active-directory-audit/cve-2023-37308.html
CVE: CVE-2023-3535
Published: 2023-07-07
Description: A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233287.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.233287; https://vuldb.com/?id.233287; https://vuldb.com/?ctiid.233287
CVE: CVE-2023-3536
Published: 2023-07-07
Description: A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233288.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.233288; https://vuldb.com/?id.233288; https://vuldb.com/?ctiid.233288
CVE: CVE-2023-37144
Published: 2023-07-07
Description: Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/DaDong-G/Vulnerability_info/blob/main/ac10_command_injection/Readme.md; https://github.com/DaDong-G/Vulnerability_info/blob/main/ac10_command_injection/Readme.md
CVE: CVE-2023-37145
Published: 2023-07-07
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/DaDong-G/Vulnerability_info/blob/main/TOTOLINK/lr350/1/Readme.md; https://github.com/DaDong-G/Vulnerability_info/blob/main/TOTOLINK/lr350/1/Readme.md
CVE: CVE-2023-37146
Published: 2023-07-07
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/DaDong-G/Vulnerability_info/tree/main/TOTOLINK/lr350/2; https://github.com/DaDong-G/Vulnerability_info/tree/main/TOTOLINK/lr350/2
CVE: CVE-2023-37148
Published: 2023-07-07
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/DaDong-G/Vulnerability_info/blob/main/TOTOLINK/lr350/3/README.md; https://github.com/DaDong-G/Vulnerability_info/blob/main/TOTOLINK/lr350/3/README.md
CVE: CVE-2023-37149
Published: 2023-07-07
Description: TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadSetting function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/DaDong-G/Vulnerability_info/blob/main/TOTOLINK/lr350/4/README.md; https://github.com/DaDong-G/Vulnerability_info/blob/main/TOTOLINK/lr350/4/README.md
CVE: CVE-2023-3537
Published: 2023-07-07
Description: A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-233289 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.233289; https://vuldb.com/?id.233289; https://vuldb.com/?ctiid.233289
CVE: CVE-2023-3538
Published: 2023-07-07
Description: A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.233290; https://vuldb.com/?id.233290; https://vuldb.com/?ctiid.233290
CVE: CVE-2023-3539
Published: 2023-07-07
Description: A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. This issue affects some unknown processing of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-233291.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://vuldb.com/?ctiid.233291; https://vuldb.com/?id.233291; https://vuldb.com/?ctiid.233291
CVE: CVE-2023-3540
Published: 2023-07-07
Description: A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-233292.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.233292; https://vuldb.com/?id.233292; https://vuldb.com/?ctiid.233292
CVE: CVE-2023-25201
Published: 2023-07-07
Description: Cross Site Request Forgery (CSRF) vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0 allows a remote attacker to execute arbitrary code via a crafted script upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://herolab.usd.de/security-advisories/; https://www.multitech.com; https://herolab.usd.de/security-advisories/
CVE: CVE-2023-29998
Published: 2023-07-07
Description: A Cross-site scripting (XSS) vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/g3w-suite; https://labs.yarix.com/2023/07/gis3w-persistent-xss-in-g3wsuite-3-5-cve-2023-29998/; https://github.com/g3w-suite
CVE: CVE-2023-33664
Published: 2023-07-07
Description: ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/06/28/aicombinationsonfly.html; https://www.boutique.ai-dev.fr/en/ergonomie/61-combinations-on-fly.html; https://security.friendsofpresta.org/modules/2023/06/28/aicombinationsonfly.html