yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-4557: A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_purchase_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238158 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-45572: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the fn parameter of the tgfile.htm function.
Key phrases: execute arbitrary code, execute arbitrary code via the fn parameter of, buffer overflow
CVE-2023-45573: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the n parameter of the mrclfile_del.asp function.
Key phrases: execute arbitrary code, execute arbitrary code via the n parameter of, buffer overflow
CVE-2023-45574: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the fn parameter of the file.data function.
Key phrases: execute arbitrary code, execute arbitrary code via the fn parameter of, buffer overflow
CVE-2023-45575: Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the ip parameter of the ip_position.asp function.
Key phrases: execute arbitrary code, execute arbitrary code via the ip parameter of, stack overflow
CVE-2023-45576: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the remove_ext_proto/remove_ext_port parameter of the upnp_ctrl.asp function.
Key phrases: execute arbitrary code, execute arbitrary code via the remove_ext_proto/remove_ext_port, buffer overflow
CVE-2023-45577: Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the wanid parameter of the H5/speedlimit.data function.
Key phrases: execute arbitrary code, execute arbitrary code via the wanid parameter of, stack overflow
CVE-2023-45578: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the pap_en/chap_en parameter of the pppoe_base.asp function.
Key phrases: execute arbitrary code, execute arbitrary code via the pap_en/chap_en, buffer overflow
CVE-2023-45579: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the ip/type parameter of the jingx.asp function.
Key phrases: execute arbitrary code, execute arbitrary code via the ip/type, buffer overflow
CVE-2023-4558: A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file staff_data.php. The manipulation of the argument columns[0][data] leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238159.
Key phrases: sql injection
CVE-2023-45580: Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the wild/mx and other parameters of the ddns.asp function
Key phrases: execute arbitrary code, execute arbitrary code via the wild/mx, buffer overflow
CVE-2023-45581: An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows anSite administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.
Key phrases: perform global administrative operations affecting other sites via, cwe-269, improper privilege management
CVE-2023-45582: An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0 through 7.0.6 and before 6.4.8 may allow an unauthenticated attacker to perform a brute force attack on the affected endpoints via repeated login attempts.
Key phrases: perform a brute force attack on the affected, cwe-307
CVE-2023-45585: An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version  6.6.3 and below, version 6.5.1 and below, version 6.4.2 and below, version 6.3.3 and below, version 6.2.1 and below, version 6.1.2 and below, version 5.4.0, version 5.3.3 and below may allow an authenticated user to view an encrypted ElasticSearch password via debug log files generated when FortiSIEM is configured with ElasticSearch Event Storage.
Key phrases: view an encrypted ElasticSearch password via debug log, log file, sensitive information, sensitive information log file
CVE-2023-45587: An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSandbox version 4.4.1 and 4.4.0 and 4.2.0 through 4.2.5 and 4.0.0 through 4.0.3 and 3.2.0 through 3.2.4 and 3.1.0 through 3.1.5 allows attacker to execute unauthorized code or commands via crafted HTTP requests
Key phrases: execute unauthorized code or commands via crafted HTTP, cross-site scripting, improper neutralization of input during web page generation
CVE-2023-4559: A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some unknown functionality of the file index.php?module=api&action=user&m=upload of the component POST Request Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-238160.
Key phrases: unrestricted upload
CVE-2023-45591: A CWE-122 Heap-based Buffer Overflow vulnerability in the logger_generic function of the Ax_rtu binary allows a remote authenticated attacker to trigger a memory corruption in the context of the binary. This may result in a Denial-of-Service (DoS) condition, possibly in the execution of arbitrary code with the same privileges of the process (root), or have other unspecified impacts on the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: trigger a memory corruption in the context of, cwe-122 heap-based buffer overflow, unspecified impacts, arbitrary code
CVE-2023-45592: A CWE-250 Execution with Unnecessary Privileges vulnerability in the embedded Chromium browser (due to the binary being executed with the --no-sandbox option and with root privileges) exacerbates the impacts of successful attacks executed against the browser. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: cwe-250 execution with unnecessary privileges, impacts, successful, root privilege
CVE-2023-45593: A CWE-693 Protection Mechanism Failure vulnerability in the embedded Chromium browser (concerning the handling of alternative URLs, other than  http://localhost http://localhost ) allows a physical attacker to read arbitrary files on the file system, alter the configuration of the embedded browser, and have other unspecified impacts to the confidentiality, integrity, and availability of the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: read arbitrary files, read arbitrary files on the file system, cwe-693 protection mechanism failure, unspecified impacts, confidentiality, confidentiality and integrity, integrity and availability
CVE-2023-45594: A CWE-552 Files or Directories Accessible to External Parties vulnerability in the embedded Chromium browser allows a physical attacker to arbitrarily download/upload files to/from the file system, with unspecified impacts to the confidentiality, integrity, and availability of the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: arbitrarily download/upload files to/from, cwe-552 files or directories accessible to external parties, unspecified impacts, confidentiality, confidentiality and integrity, integrity and availability
CVE-2023-45595: A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability in the file_configuration functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: upload any arbitrary type of file into the, cwe-434 unrestricted upload of file with dangerous type
CVE-2023-45596: A CWE-862 Missing Authorization vulnerability in the file_configuration functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: access confidential configuration files, cwe-862 missing authorization
CVE-2023-45597: A CWE-1236 Improper Neutralization of Formula Elements in a CSV File vulnerability in the file_configuration functionality of the web application (concerning the function export_file) allows a remote authenticated attacker to inject arbitrary formulas inside generated CSV files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: inject arbitrary formulas, inject arbitrary formulas inside generated CSV files, cwe-1236
CVE-2023-45598: A CWE-862 Missing Authorization vulnerability in the measure functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: access confidential measure information, cwe-862 missing authorization
CVE-2023-45599: A CWE-646 Reliance on File Name or Extension of Externally-Supplied File vulnerability in the iec61850 functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: upload any arbitrary type of file into the, cwe-646 reliance on file name or extension of externally-supplied file
CVE-2023-4560: Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.
Key phrases: improper authorization
CVE-2023-45600: A CWE-613 Insufficient Session Expiration vulnerability in the web application, due to the session cookie sessionid lasting two weeks, facilitates session hijacking attacks against victims. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Key phrases: cwe-613 insufficient session expiration, session hijacking
CVE-2023-45601: A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All versions < V36.0.169), Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain a stack overflow vulnerability while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21290)
Key phrases: execute code in the context of the current, stack overflow
CVE-2023-45602: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <=5.785 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-45603: Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts  Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts  Enable Users to Submit Posts from the Front End: from n/a through 20230902.
Key phrases: dangerous type
CVE-2023-45604: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Scott Reilly Get Custom Field Values plugin <=4.0.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-45605: Cross-Site Request Forgery (CSRF) vulnerability in Christopher Finke Feed Statistics plugin <=4.1 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45606: Cross-Site Request Forgery (CSRF) vulnerability in Lasso Simple URLs plugin <=120 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45607: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Hector Cabrera WordPress Popular Posts plugin <=6.3.2 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-45608: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Nicola Modugno Smart Cookie Kit plugin <=2.3.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-45609: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POWR.Io Contact Form  Custom Builder, Payment Form, and More allows Stored XSS.This issue affects Contact Form  Custom Builder, Payment Form, and More: from n/a through 2.1.0.
Key phrases: Stored XSS.This issue affects Contact Form  Custom, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-4561: Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4.
Key phrases: cross-site scripting (xss)
CVE-2023-45612: In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
Key phrases: xxe
CVE-2023-45613: In JetBrains Ktor before 2.3.5 server certificates were not verified
CVE-2023-45614: There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Key phrases: execute arbitrary code, buffer overflow, remote code execution
CVE-2023-45615: There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Key phrases: execute arbitrary code, buffer overflow, remote code execution
CVE-2023-45616: There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Key phrases: execute arbitrary code, buffer overflow, remote code execution
CVE-2023-45617: There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.
Key phrases: arbitrary file deletion vulnerabilities, interrupt normal operation, integrity of the access point
CVE-2023-45618: There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.
Key phrases: arbitrary file deletion vulnerabilities, interrupt normal operation, integrity of the access point
CVE-2023-45619: There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.
Key phrases: delete arbitrary files, arbitrary file deletion, interrupt normal operation, integrity of the access point
CVE-2023-4562: Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending illegitimate messages.
Key phrases: obtain sequence programs from the product or write malicious sequence programs, improper authentication
CVE-2023-45620: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.
Key phrases: unauthenticated denial-of-service (dos)
CVE-2023-45621: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.
Key phrases: unauthenticated denial-of-service (dos)
CVE-2023-45622: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.
Key phrases: unauthenticated denial-of-service (dos)
CVE-2023-45623: Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.
Key phrases: unauthenticated denial-of-service (dos)
CVE-2023-45624: An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.
Key phrases: denial-of-service (dos)
CVE-2023-45625: Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Key phrases: execute arbitrary commands, authenticated command injection
CVE-2023-45626: An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles.
Key phrases: effectively establish highly privileged persistent arbitrary code execution, authenticated
CVE-2023-45627: An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulnerability results in the ability to interrupt the normaloperation of the affected access point.
Key phrases: denial-of-service (dos)
CVE-2023-45628: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in QROkes QR Twitter Widget plugin <=0.2.3 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-45629: Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Gallery  Image and Video Gallery with Thumbnails plugin <=2.0.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45630: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery  Image and Video Gallery with Thumbnails plugin <=2.0.3 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-45632: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado SpiderVPlayer plugin <=1.5.22 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-45634: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Biztechc Copy or Move Comments plugin <=5.0.4 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-45637: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime EventPrime  Events Calendar, Bookings and Tickets plugin <=3.1.5 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-45638: Cross-Site Request Forgery (CSRF) vulnerability in euPago Eupago Gateway For Woocommerce plugin <=3.1.9 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45639: Cross-Site Request Forgery (CSRF) vulnerability in Codex-m Sort SearchResult By Title plugin <=10.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4564: This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter within the admin panel.
Key phrases: store a malicious JavaScript payload in the broadcast
CVE-2023-45640: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TechnoWich WP ULike  Most Advanced WordPress Marketing Toolkit plugin <=4.6.8 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-45641: Cross-Site Request Forgery (CSRF) vulnerability in Caret Inc. Caret Country Access Limit plugin <=1.0.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45642: Cross-Site Request Forgery (CSRF) vulnerability in Hassan Ali Snap Pixel plugin <=1.5.7 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45643: Cross-Site Request Forgery (CSRF) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <=1.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45644: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anurag Deshmukh CPT Shortcode Generator plugin <=1.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-45645: Cross-Site Request Forgery (CSRF) vulnerability in InfoD74 WP Open Street Map plugin <=1.25 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45646: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Henryholtgeerts PDF Block plugin <=1.1.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-45647: Cross-Site Request Forgery (CSRF) vulnerability in MailMunch Constant Contact Forms by MailMunch plugin <=2.0.10 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45648: Improper Input Validation vulnerability in Apache Tomcat.Tomcatfrom 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP trailer headers. A specially crafted, invalid trailer header could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy.Users are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fix the issue.
Key phrases: improper input validation, request smuggling
CVE-2023-4565: Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable.
Key phrases: broadcast permission control, unavailable
CVE-2023-45650: Cross-Site Request Forgery (CSRF) vulnerability in Fla-shop.Com HTML5 Maps plugin <=1.7.1.4 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45651: Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments plugin <=5.0.6 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45653: Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <=6.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45654: Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <=1.1.7 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45655: Cross-Site Request Forgery (CSRF) vulnerability in PixelGrade PixFields plugin <=0.7.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45656: Cross-Site Request Forgery (CSRF) vulnerability in Kevin Weber Lazy Load for Videos plugin <=2.18.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45657: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.
Key phrases: SQL Injection, sql injection
CVE-2023-45659: Engelsystem is a shift planning system for chaos events.  If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixed in the commit `dbb089315ff3d`. Users are advised to update their installations. There are no known workarounds for this vulnerability.
CVE-2023-4566: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: vulnerability of trust relationships, service confidentiality
CVE-2023-45660: Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies allows for an attacker to abuse the proxy endpoint to denial of service a third server. It is recommended that the Nextcloud Mail is upgraded to 2.2.8 or 3.3.0. There are no known workarounds for this vulnerability.
Key phrases: abuse the proxy endpoint to denial of service, missing check of origin
CVE-2023-45661: stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds memcpy read in `stbi__gif_load_next`. This happens because two_back points to a memory address lower than the start of the buffer out. This issue may be used to leak internal memory allocation information.
Key phrases: out of bounds memcpy read
CVE-2023-45662: stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to `TRUE` and `req_comp` is set to a number that doesnt match the real number of components per pixel, the library attempts to flip the image vertically. A crafted image file can trigger `memcpy` out-of-bounds read because `bytes_per_pixel` used to calculate `bytes_per_row` doesnt match the real image array dimensions. 
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-45663: stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typically a file) into the specified buffer. In case the file stream points to the end, it returns zero. There are two places where its return value is not checked: In the `stbi__hdr_load` function and in the `stbi__tga_load` function. The latter of the two is likely more exploitable as an attacker may also control the size of an uninitialized buffer.
Key phrases: exploitable, uninitialized buffer
CVE-2023-45664: stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_main_outofmem` attempt to double-free the out variable. This happens in `stbi__load_gif_main` because when the `layers * stride` value is zero the behavior is implementation defined, but common that realloc frees the old memory and returns null pointer. Since it attempts to double-free the memory a few lines below the first free, the issue can be potentially exploited only in a multi-threaded environment. In the worst case this may lead to code execution.
Key phrases: code execution, double free, null pointer
CVE-2023-45666: stb_image is a single file MIT licensed library for processing images.  It may look like `stbi__load_gif_main` doesnt give guarantees about the content of output value `*delays` upon failure. Although it sets `*delays` to zero at the beginning, it doesnt do it in case the image is not recognized as GIF and a call to `stbi__load_gif_main_outofmem` only frees possibly allocated memory in `*delays` without resetting it to zero. Thus it would be fair to say the caller of `stbi__load_gif_main` is responsible to free the allocated memory in `*delays` only if `stbi__load_gif_main` returns a non null value. However at the same time the function may return null value, but fail to free the memory in `*delays` if internally `stbi__convert_format` is called and fails. Thus the issue may lead to a memory leak if the caller chooses to free `delays` only when `stbi__load_gif_main` didnt fail or to a double-free if the `delays` is always freed
Key phrases: memory leak, double-free, double free
CVE-2023-45667: stb_image is a single file MIT licensed library for processing images.If `stbi__load_gif_main` in `stbi_load_gif_from_memory` fails it returns a null pointer and may keep the `z` variable uninitialized. In case the caller also sets the flip vertically flag, it continues and calls `stbi__vertical_flip_slices` with the null pointer result value and the uninitialized `z` value. This may result in a program crash.
Key phrases: program crash, null pointer
CVE-2023-45669: WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter value during authentication, webauthn4j-spring-security-core does not properly persist the value, which means cloned authenticator detection does not work. An attacker who cloned valid authenticator in some way can use the cloned authenticator without being detected. This issue has been addressed in version `0.9.1.RELEASE`. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2023-45670: Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the `config/save` and `config/set` endpoints of Frigate do not implement any CSRF protection. This makes it possible for a request sourced from another site to update the configuration of the Frigate server (e.g. via "drive-by" attack). Exploiting this vulnerability requires the attacker to both know very specific information about a user's Frigate server and requires an authenticated user to be tricked into clicking a specially crafted link to their Frigate instance. This vulnerability could exploited by an attacker under the following circumstances: Frigate publicly exposed to the internet (even with authentication); attacker knows the address of a user's Frigate instance; attacker crafts a specialized page which links to the user's Frigate instance; attacker finds a way to get an authenticated user to visit their specialized page and click the button/link. This issue can lead to arbitrary configuration updates for the Frigate server, resulting in denial of service and possible data exfiltration. Version 0.13.0 Beta 3 contains a patch.
Key phrases: denial of service, data exfiltration
CVE-2023-45671: Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, there is a reflected cross-site scripting vulnerability in any API endpoints reliant on the `/<camera_name>` base path as values provided for the path are not sanitized. Exploiting this vulnerability requires the attacker to both know very specific information about a user's Frigate server and requires an authenticated user to be tricked into clicking a specially crafted link to their Frigate instance. This vulnerability could exploited by an attacker under the following circumstances: Frigate publicly exposed to the internet (even with authentication); attacker knows the address of a user's Frigate instance; attacker crafts a specialized page which links to the user's Frigate instance; attacker finds a way to get an authenticated user to visit their specialized page and click the button/link. As the reflected values included in the URL are not sanitized or escaped, this permits execution arbitrary Javascript payloads. Version 0.13.0 Beta 3 contains a patch for this issue.
Key phrases: reflected cross-site scripting
CVE-2023-45672: Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, an unsafe deserialization vulnerability was identified in the endpoints used to save configurations for Frigate. This can lead to unauthenticated remote code execution. This can be performed through the UI at `/config` or through a direct call to `/api/config/save`. Exploiting this vulnerability requires the attacker to both know very specific information about a user's Frigate server and requires an authenticated user to be tricked into clicking a specially crafted link to their Frigate instance. This vulnerability could exploited by an attacker under the following circumstances: Frigate publicly exposed to the internet (even with authentication); attacker knows the address of a user's Frigate instance; attacker crafts a specialized page which links to the user's Frigate instance; attacker finds a way to get an authenticated user to visit their specialized page and click the button/link. Input is initially accepted through `http.py`. The user-provided input is then parsed and loaded by `load_config_with_no_duplicates`. However, `load_config_with_no_duplicates` does not sanitize this input by merit of using `yaml.loader.Loader` which can instantiate custom constructors. A provided payload will be executed directly at `frigate/util/builtin.py:110`. This issue may lead to pre-authenticated Remote Code Execution. Version 0.13.0 Beta 3 contains a patch.
Key phrases: deserialization, unauthenticated remote code execution, pre-authenticated remote code execution, unsafe deserialization
CVE-2023-45674: Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database (including the user table). This issue may lead to Information Disclosure. This issue has been patched in version 15.8.4. Users are advised to upgrade. There are no known workarounds for this issue.
Key phrases: extract arbitrary data, extract arbitrary data from its database (including, sql injection, information disclosure
CVE-2023-45675: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] = (char)'\\\\0';`. The root cause is that if the len read in `start_decoder` is `-1` and `len + 1` becomes 0 when passed to `setup_malloc`. The `setup_malloc` behaves differently when `f->alloc.alloc_buffer` is pre-allocated. Instead of returning `NULL` as in `malloc` case it shifts the pre-allocated buffer by zero and returns the currently available memory block. This issue may lead to code execution.
Key phrases: out of bounds write, code execution
CVE-2023-45676: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution.
Key phrases: out of bounds write, integer overflow, code execution
CVE-2023-45677: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] = (char)'\\\\0';`. The root cause is that if `len` read in `start_decoder` is a negative number and `setup_malloc` successfully allocates memory in that case, but memory write is done with a negative index `len`. Similarly if len is INT_MAX the integer overflow len+1 happens in `f->vendor = (char*)setup_malloc(f, sizeof(char) * (len+1));` and `f->comment_list[i] = (char*)setup_malloc(f, sizeof(char) * (len+1));`. This issue may lead to code execution.
Key phrases: out of bounds write, integer overflow, code execution
CVE-2023-45678: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in `start_decoder` because at maximum `m->submaps` can be 16 but `submap_floor` and `submap_residue` are declared as arrays of 15 elements. This issue may lead to code execution.
Key phrases: out of buffer write, code execution
CVE-2023-45679: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, but some of the pointers in `f->comment_list` are left initialized and later `setup_free` is called on these pointers in `vorbis_deinit`. This issue may lead to code execution.
Key phrases: code execution
CVE-2023-4568: PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.
Key phrases: be run by default, unauthenticated xmlrpc commands
CVE-2023-45680: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in `start_decoder`. In that case the function returns early, the `f->comment_list` is set to `NULL`, but `f->comment_list_length` is not reset. Later in `vorbis_deinit` it tries to dereference the `NULL` pointer. This issue may lead to denial of service.
Key phrases: denial of service
CVE-2023-45681: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in `start_decoder`. The root cause is a potential integer overflow in `sizeof(char*) * (f->comment_list_length)` which may make `setup_malloc` allocate less memory than required. Since there is another integer overflow an attacker may overflow it too to force `setup_malloc` to return 0 and make the exploit more reliable. This issue may lead to code execution.
Key phrases: integer overflow, code execution
CVE-2023-45682: stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro when `var` is negative. As it can be seen in the definition of `DECODE_RAW` a negative `var` is a valid value. This issue may be used to leak internal memory allocation information.
Key phrases: out of bounds read, leak internal memory allocation information
CVE-2023-45683: github.com/crewjam/saml is a saml library for the go language. In affected versions the package does not validate the ACS Location URI according to the SAML binding being parsed. If abused, this flaw allows attackers to register malicious Service Providers at the IdP and inject Javascript in the ACS endpoint definition, achieving Cross-Site-Scripting (XSS) in the IdP context during the redirection at the end of a SAML SSO Flow. Consequently, an attacker may perform any authenticated action as the victim once the victims browser loaded the SAML IdP initiated SSO link for the malicious service provider. Note: SP registration is commonly an unrestricted operation in IdPs, hence not requiring particular permissions or publicly accessible to ease the IdP interoperability. This issue is fixed in version 0.4.14. Users unable to upgrade may perform external validation of URLs provided in SAML metadata, or restrict the ability for end-users to upload arbitrary metadata.
Key phrases: upload arbitrary metadata, register malicious Service Providers at the IdP and, cross-site-scripting (xss)
CVE-2023-45684: Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub.
Key phrases: SQL Injection, sql injection
CVE-2023-45685: Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal
Key phrases: write a file to any location on the, insufficient path validation, path traversal, to write files
CVE-2023-45686: Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal
Key phrases: write a file to any location on the, insufficient path validation, path traversal, to write files
CVE-2023-45687: A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's authentication if they can trick an administrator into authorizating a session id of their choosing
Key phrases: bypass the server's authentication, bypass the server's authentication if they can, session fixation
CVE-2023-45688: Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of an arbitrary file on the filesystem using path traversal in the ftp "SIZE" command
Key phrases: get the size of an arbitrary file on, path traversal
CVE-2023-45689: Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with administrative privileges to read any file on the filesystem via path traversal
Key phrases: read any file on the filesystem via path, path traversal
CVE-2023-4569: A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.
Key phrases: cause double-deactivations of catchall elements, memory leak flaw
CVE-2023-45690: Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem
Key phrases: the OS to read sensitive files on the, default file permissions
CVE-2023-45696: Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser.
Key phrases: be stored by the browser, sametime, sensitive fields
CVE-2023-45698: Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks.
Key phrases: sametime, clickjacking protection
CVE-2023-4570: An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost.  These services were previously thought to be unreachable outside of the node.  This affects measurement plug-ins written in Python using version 1.1.0 of the ni-measurementlink-servicePython package and all previous versions.
Key phrases: reach services exposed on localhost, improper access restriction
CVE-2023-45700: HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Key phrases: embed arbitrary HTML tags, embed arbitrary HTML tags in the Web UI, html injection, sensitive information disclosure
CVE-2023-45701: HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Key phrases: obtain sensitive information, obtain sensitive information when a detailed technical error, hcl launch
CVE-2023-45702: An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts..
Key phrases: non-standard location, denial of service
CVE-2023-45703: HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.
Key phrases: input validation, denial of service, resource exhaustion
CVE-2023-45705: An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.
Key phrases: server side request forgery (ssrf) exploit, smtp configuration options
CVE-2023-45706: An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration.
Key phrases: cross site scripting (xss)
CVE-2023-4571: In Splunk IT Service Intelligence (ITSI) versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject American National Standards Institute (ANSI) escape codes into Splunk ITSI log files that, when a vulnerable terminal application reads them, can run malicious code in the vulnerable application. This attack requires a user to use a terminal application that translates ANSI escape codes to read the malicious log file locally in the vulnerable terminal. The vulnerability also requires additional user interaction to succeed. The vulnerability does not directly affect Splunk ITSI. The indirect impact on Splunk ITSI can vary significantly depending on the permissions in the vulnerable terminal application, as well as where and how the user reads the malicious log file. For example, users can copy the malicious file from Splunk ITSI and read it on their local machine.
Key phrases: vulnerable terminal application, indirect impact
CVE-2023-45715: The console may experience a service interruption when processing file names with invalid characters.
Key phrases: service interruption, invalid characters
CVE-2023-45716: Sametime is impacted by sensitive information passed in URL. 
Key phrases: sametime, sensitive information passed in url