yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-33264: In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
Key phrases: view some of the secrets
CVE-2023-33265: In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing authenticated users to execute tasks on members without the required permissions granted.
Key phrases: execute tasks on members without the required permissions
CVE-2023-33268: An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection (blind).
Key phrases: os command injection (blind)
CVE-2023-33269: An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection (blind).
Key phrases: os command injection (blind)
CVE-2023-33270: An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection (blind).
Key phrases: os command injection (blind)
CVE-2023-33271: An issue was discovered in DTS Monitoring 3.57.0. The parameter common_name within the SSL Certificate check function is vulnerable to OS command injection (blind).
Key phrases: os command injection (blind)
CVE-2023-33272: An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection (blind).
Key phrases: os command injection (blind)
CVE-2023-33273: An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection (blind).
Key phrases: os command injection (blind)
CVE-2023-33274: The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and affects all instances of SNMP Web Pro 1.1 without HTTP Digest authentication enabled, regardless of the password used for the web interface.
Key phrases: directly access Common Gateway Interface (CGI)
CVE-2023-33276: The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).
Key phrases: reflective cross-site scripting (xss)
CVE-2023-33277: The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.
Key phrases: read sensitive files via directory-traversal sequences, directory traversal
CVE-2023-33278: In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.
Key phrases: sensitive sql calls, blind sql injection
CVE-2023-33279: In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.
Key phrases: sensitive sql calls, blind sql injection
CVE-2023-3328: The Custom Field For WP Job Manager WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting
CVE-2023-33280: In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection.
Key phrases: blind sql injection
CVE-2023-33281: The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in the exploit demonstration does not match any technology that Nissan provides to customers.
Key phrases: customers, replay
CVE-2023-33282: Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote attacker is able to login and create a valid session. This makes it possible to make backend calls to endpoints in the application.
Key phrases: default credentials, valid session, default credentials,
CVE-2023-33283: Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key.
Key phrases: static encryption key
CVE-2023-33284: Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote attacker authenticated as any user is able to execute code in context of the web server.
Key phrases: remote code execution, execute code
CVE-2023-33285: An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.
Key phrases: buffer over-read, buffer over read
CVE-2023-33287: A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arbitrary JavaScript via a crafted payload injected into the tables.
Key phrases: execute arbitrary JavaScript, store and execute arbitrary JavaScript via a crafted, cross-site scripting (xss)
CVE-2023-33288: An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition.
Key phrases: crash the system due to a race condition, use-after-free, use after free, crash system
CVE-2023-33289: The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs.
Key phrases: Denial of Service (ReDos), lib.rs, regular expression denial of service (redos)
CVE-2023-3329: SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative privileges could overwrite files on the webserver using the HMI's upload file feature. This could create size zero files anywhere on the webserver, potentially overwriting system files and creating a denial-of-service condition.
Key phrases: path traversal, denial-of-service condition, denial of service
CVE-2023-33290: The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issue to CVE-2023-32758 (Python).
Key phrases: Denial of Service (ReDos), normalize_url in lib.rs, regular expression denial of service (redos), (python)
CVE-2023-33291: In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate allow generation of OTP messages to any e-mail address or phone number without validation. (It cannot be exploited with e-mail addresses or phone numbers that are registered in the application.)
Key phrases: any e-mail address or phone number, exploited
CVE-2023-33293: An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.localhost with subdomains for each installed applications, e.g., myapp.localhost. An attacker can make fetch requests to api-deamon to determine if a given app is installed and read the manifest.webmanifest contents, including the app version.
CVE-2023-33294: An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a local web server that responds to GET and POST requests on port 2929. The server accepts arbitrary Bash commands and executes them as root. Because it is not permission or context restricted and returns proper CORS headers, it's accessible to all websites via the browser. At a bare minimum, this allows an attacker to retrieve a list of the user's installed apps, notifications, and downloads. It also allows an attacker to delete local files and modify system properties including the boolean persist.moz.killswitch property (which would render the device inoperable). This vulnerability is partially mitigated by SELinux which prevents reads, writes, or modifications to files or permissions within protected partitions.
Key phrases: accepts arbitrary Bash commands, retrieve a list of the user's installed, delete local files and modify system properties including, device inoperable
CVE-2023-33295: Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation.
Key phrases: incorrect access control
CVE-2023-33297: Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.
Key phrases: denial of service (e.g., CPU consumption), cause a denial of service (e.g., cpu consumption
CVE-2023-33298: com.perimeter81.osx.HelperTool in Perimeter81 10.0.0.19 on macOS allows Local Privilege Escalation (to root) via shell metacharacters in usingCAPath.
Key phrases: root) via shell metacharacters in usingCAPath, local privilege escalation
CVE-2023-33299: A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed.
Key phrases: execute unauthorized code or commands via specifically crafted, deserialization of untrusted data
CVE-2023-3330: Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allowsa attackertoobtain specific files in the product.
Key phrases: improper limitation of a pathname to a restricted directory
CVE-2023-33301: An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a restricted resource from a non trusted host.
Key phrases: access a restricted resource from a non trusted, access control, improper access control
CVE-2023-33303: A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthorized code or commands via api request
Key phrases: execute unauthorized code or commands via api request, insufficient session expiration
CVE-2023-33304: A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials.
Key phrases: bypass system protections, bypass system protections via the use of static, hard-coded credentials, hard coded credentials
CVE-2023-33305: A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0.0 through 7.0.10, FortiOS 6.4 all versions,  FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiProxy version 7.2.0 through 7.2.3, FortiProxy version 7.0.0 through 7.0.9, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiWeb version 7.2.0 through 7.2.1, FortiWeb version 7.0.0 through 7.0.6, FortiWeb 6.4 all versions, FortiWeb 6.3 all versions allows attacker to perform a denial of service via specially crafted HTTP requests.
Key phrases: perform a denial of service via specially crafted, loop with unreachable exit condition, infinite loop
CVE-2023-33306: A null pointer dereference in Fortinet FortiOS before 7.2.5,  before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.
Key phrases: denial of sslvpn service via specifically crafted request, null pointer dereference
CVE-2023-33307: A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to denial of sslvpn service via specifically crafted request in network parameter.
Key phrases: denial of sslvpn service via specifically crafted request, null pointer dereference
CVE-2023-33308: A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted packets reaching proxy policies or firewall policies with proxy mode alongside deep or full packet inspection.
Key phrases: execute arbitrary code or command, execute arbitrary code or command via crafted packets, stack-based overflow, stack based overflow
CVE-2023-33309: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Awesome Motive Duplicator Pro plugin <=4.5.11 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-3331: Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allowsa attackertodelete specific files in the product.
Key phrases: improper limitation of a pathname to a restricted directory
CVE-2023-33311: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CRM Perks Contact Form Entries plugin <=1.3.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-33312: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wppal Easy Captcha plugin <=1.0 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-33313: Cross-Site Request Forgery (CSRF) vulnerability in ThemeinProgress WIP Custom Login plugin <=1.2.9 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-33314: Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR plugin <=1.1.3.1 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-33315: Cross-Site Request Forgery (CSRF) vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin <=1.1.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-33316: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <=4.9.40 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-33317: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <=2.1.6 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-33318: Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.
Key phrases: unrestricted upload of file with dangerous type
CVE-2023-33319: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <=4.9.40 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-3332: Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allowsa attackertoexecute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Key phrases: improper neutralization of input during web page generation, arbitrary script
CVE-2023-33320: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mohammad I. Okfie WP-Hijri plugin <=1.5.1 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-33322: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design Front End Users allows Reflected XSS.This issue affects Front End Users: from n/a before 3.2.25.
Key phrases: Reflected XSS.This issue affects Front End Users:, improper neutralization of input during web page generation, cross-site scripting, reflected xss, front end users
CVE-2023-33323: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <=4.0.2 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-33325: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <=3.30.1 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-33326: Unauth. Reflected (XSS) Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <=2.8.6 versions.
CVE-2023-33328: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps MailChimp Subscribe Form plugin <=4.0.9.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-33329: Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Hijiri Custom Post Type Generator plugin <=2.4.2 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-3333: Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allowsa attackertoexecute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Key phrases: improper neutralization of special elements, os command, arbitrary os command, root privilege
CVE-2023-33330: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.50.
Key phrases: sql command, sql injection
CVE-2023-33331: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.76.
Key phrases: SQL Injection, improper neutralization of special elements, sql command, sql injection
CVE-2023-33332: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Product Vendors plugin <=2.1.76 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-33333: Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Complianz, Really Simple Plugins Complianz Premium allows Cross-Site Scripting (XSS).This issue affects Complianz: from n/a through 6.4.4; Complianz Premium: from n/a through 6.4.6.1.
Key phrases: Cross-Site Scripting (XSS).This issue affects, cross-site request forgery (csrf), cross-site scripting (xss)
CVE-2023-33335: Cross Site Scripting (XSS) in Sophos Sophos iView (The EOL was December 31st 2020) in grpname parameter that allows arbitrary script to be executed.
Key phrases: allows arbitrary script, be executed, cross site scripting (xss)
CVE-2023-33336: Reflected cross site scripting (XSS) vulnerability was discovered in Sophos Web Appliance v4.3.9.1 that allows for arbitrary code to be inputted via the double quotes.
Key phrases: be inputted via the double quotes, reflected cross site scripting (xss), arbitrary code
CVE-2023-33338: Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.
Key phrases: sql injection
CVE-2023-3335: Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00.
Key phrases: gain sensitive information
CVE-2023-33355: IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information.
Key phrases: insecure permissions, unauthorized access, disclosure of sensitive information
CVE-2023-33356: IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).
Key phrases: cross site scripting (xss)
CVE-2023-33359: Piwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function.
Key phrases: cross site request forgery (csrf)
CVE-2023-3336: TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.
Key phrases: determine whether a user is valid during password, user enumeration, brute force
CVE-2023-33361: Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.
Key phrases: sql injection
CVE-2023-33362: Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.
Key phrases: sql injection
CVE-2023-33363: An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers.
Key phrases: authentication bypass, access some functionality on BioStar 2 servers
CVE-2023-33364: An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server.
Key phrases: execute arbitrary OS commands, execute arbitrary OS commands on the BioStar 2, os command injection, arbitrary os command
CVE-2023-33365: A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files from the server's web server.
Key phrases: fetch arbitrary files, fetch arbitrary files from the server's web, path traversal
CVE-2023-33366: A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.
Key phrases: inject arbitrary SQL directives, inject arbitrary SQL directives into an SQL statement, sql injection, execute arbitrary
CVE-2023-33367: A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server's root directory, resulting in remote code execution.
Key phrases: write PHP files on the server's root, sql injection, remote code execution
CVE-2023-33368: Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes.
Key phrases: api routes, sensitive information
CVE-2023-33369: A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure filesystem, causing a denial of service.
Key phrases: delete arbitrary files, delete arbitrary files on IDSecure filesystem, path traversal, denial of service
CVE-2023-3337: A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The attack can be launched remotely. The identifier VDB-232009 was assigned to this vulnerability.
Key phrases: improper authentication
CVE-2023-33370: An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service.
Key phrases: cause the main web server of IDSecure to, uncaught exception, denial of service, crash
CVE-2023-33371: Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attackers to sign arbitrary session tokens and bypass authentication.
Key phrases: sign arbitrary session tokens, bypass authentication, sign arbitrary session tokens and bypass authentication, hardcoded cryptographic key
CVE-2023-33372: Connected IO v2.1.0 and prior uses a hard-coded username/password pair embedded in their device's firmware used for device communication using MQTT. An attacker who gained access to these credentials is able to connect to the MQTT broker and send messages on behalf of devices, impersonating them. in order to sign and verify JWT session tokens, allowing attackers to sign arbitrary session tokens and bypass authentication.
Key phrases: sign arbitrary session tokens, bypass authentication, sign arbitrary session tokens and bypass authentication, impersonate
CVE-2023-33373: Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the credentials and use them to impersonate the devices.
Key phrases: exfiltrate the credentials and use them to impersonate, clear-text format
CVE-2023-33374: Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote command execution.
Key phrases: specify arbitrary OS commands, specify arbitrary OS commands for devices to execute, dangerous functionality, arbitrary remote command execution, arbitrary os command
CVE-2023-33375: Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices.
Key phrases: stack-based buffer overflow, control over devices, stack based buffer overflow
CVE-2023-33376: Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.
Key phrases: execute arbitrary OS commands, argument injection, arbitrary os commands
CVE-2023-33377: Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices.
Key phrases: execute arbitrary OS commands, os command injection, arbitrary os commands
CVE-2023-33378: Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.
Key phrases: execute arbitrary OS commands, argument injection, arbitrary os commands
CVE-2023-33379: Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands to all of Connected IO's devices.
Key phrases: connect to the broker and issue commands to, impersonate
CVE-2023-3338: A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.
Key phrases: crash the system, null pointer dereference flaw, crash system
CVE-2023-33381: A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0b7_2). The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function.
Key phrases: execute arbitrary OS commands, execute arbitrary OS commands by sending specially crafted, command injection, arbitrary os command
CVE-2023-33383: Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition that results in a device reload.
Key phrases: trigger a BLE out of bounds read fault, ble out of bounds read fault condition, device reload
CVE-2023-33386: MarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background.
Key phrases: arbitrary file upload
CVE-2023-33387: A reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link.
Key phrases: steal targeted users' login data by sending, reflected cross-site scripting (xss)
CVE-2023-3339: A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232015.
Key phrases: sql injection
CVE-2023-33394: skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS). Attackers can achieve backend XSS by deploying malicious JSON data.
Key phrases: cross site scripting (xss), backend xss
CVE-2023-3340: A vulnerability was found in SourceCodester Online School Fees System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajx.php of the component GET Parameter Handler. The manipulation of the argument name_startsWith leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232016.
Key phrases: sql injection
CVE-2023-33404: An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earlier allows remote attackers to execute remote code.
Key phrases: execute remote code, unrestricted upload
CVE-2023-33405: Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.
Key phrases: open redirect
CVE-2023-33408: Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to insufficient input validation in the application's user input handling in the security_helper.php file.
Key phrases: cross site scripting (xss), insufficient input validation
CVE-2023-33409: Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php.
Key phrases: cross site request forgery (csrf)
CVE-2023-3341: The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary.This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
CVE-2023-33410: Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on the Customer Name field in the Accounting module that is used to construct a CSV file.
Key phrases: execute remote code, csv injection, insufficient input validation
CVE-2023-33411: A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions up to 3.17.02, allows remote unauthenticated users to perform directory traversal, potentially disclosing sensitive information.
Key phrases: perform directory traversal, sensitive information
CVE-2023-33412: The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions before 3.17.02, allows remote authenticated users to execute arbitrary commands via a crafted request targeting vulnerable cgi endpoints.
Key phrases: execute arbitrary commands, execute arbitrary commands via a crafted request targeting, vulnerable cgi endpoints
CVE-2023-33413: The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11 and M11 based devices, with firmware versions through 3.17.02, allows remote authenticated users to execute arbitrary commands.
Key phrases: execute arbitrary commands
CVE-2023-3342: The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with subscriber-level capabilities or above to upload arbitrary files on the affected site's server which may make remote code execution possible. This was partially patched in version 3.0.2 and fully patched in version 3.0.2.1.
Key phrases: upload arbitrary files, arbitrary file uploads, remote code execution, hardcoded
CVE-2023-3343: The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1 via deserialization of untrusted input from the 'profile-pic-url' parameter. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Key phrases: delete arbitrary files, inject a PHP Object, php object injection, pop chain, sensitive data, execute code
CVE-2023-33438: A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML.
Key phrases: inject arbitrary web script or HTML, cross-site scripting (xss)
CVE-2023-33439: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_task.php?id=.
Key phrases: sql injection
CVE-2023-3344: The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2023-33440: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.
Key phrases: arbitrary code execution
CVE-2023-33443: Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrary administrative commands via a crafted payload sent to the desired endpoints.
Key phrases: execute arbitrary administrative commands via a crafted payload, incorrect access control
CVE-2023-3345: The LMS by Masteriyo WordPress plugin before 1.6.8 does not properly safeguards sensitive user information, like other user's email addresses, making it possible for any students to leak them via some of the plugin's REST API endpoints.
Key phrases: leak
CVE-2023-33457: In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow and crash.
Key phrases: buffer-overflow, crash, buffer overflow
CVE-2023-3346: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
Key phrases: execute arbitrary code, Denial of Service (DoS), cause Denial of Service (DoS) condition, buffer copy without checking size of input, classic buffer overflow, denial of service (dos)
CVE-2023-33460: There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
Key phrases: memory leak, out-of-memory, crash
CVE-2023-33461: iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.
Key phrases: null pointer dereference
CVE-2023-33466: Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).
Key phrases: overwrite arbitrary files, the Orthanc API to overwrite arbitrary files on, overwrite the configuration, remote code execution (rce)
CVE-2023-33468: KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.
Key phrases: obtain it directly from the physical screen., remote manipulation
CVE-2023-33469: In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.
Key phrases: local code execution
CVE-2023-3347: A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.
Key phrases: perform attacks, man-in-the-middle, affecting the integrity of the data, man in the middle
CVE-2023-33472: An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function.
Key phrases: execute arbitrary code, obtain sensitive information, escalate privileges, low-level authentication
CVE-2023-33476: ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.
Key phrases: buffer overflow, out-of-bounds read write
CVE-2023-33477: In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path.
Key phrases: obtain source code by directly requesting a special path
CVE-2023-33478: RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.
Key phrases: sql injection
CVE-2023-33479: RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.
Key phrases: sql injection
CVE-2023-3348: The Wrangler command line tool (<=wrangler@3.1.0 or <=wrangler@2.20.1)was affected by a directory traversal vulnerability when running a local development server for Pages (wrangler pages dev command). This vulnerability enabled an attacker in the same network as the victim to connect to the local development server and access the victim's files present outside of the directory for the development server.
Key phrases: directory traversal
CVE-2023-33480: RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged user credentials to create admin users, escalate privileges, and execute arbitrary code on the target system via a PHP shell. The vulnerabilities are caused by a lack of input validation and access control in the staff/register.php endpoint and the edit-my-profile.php page. By sending a series of specially crafted requests to the RemoteClinic application, an attacker can create admin users with more privileges than their own, upload a PHP file containing arbitrary code, and execute arbitrary commands via the PHP shell.
Key phrases: execute arbitrary code, critical vulnerability chain, escalate privilege, arbitrary commands
CVE-2023-33481: RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php.
Key phrases: sql injection
CVE-2023-33485: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.
Key phrases: post-authentication buffer overflow
CVE-2023-33486: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands through the "hostName", command insertion
CVE-2023-33487: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands through the "ip", command insertion
CVE-2023-3349: Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to retrieve sensitive information, such as usernames, IP addresses or SQL queries sent to the application. By accessing the URL /RPS2019Service/status.html, the application enables the logging mechanism by generating the log file, which can be downloaded.
Key phrases: retrieve sensitive information, information exposure
CVE-2023-33492: EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS).
Key phrases: cross site scripting (xss)
CVE-2023-33493: An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer (ajaxmanager) module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions.
Key phrases: upload dangerous files without restrictions, unrestricted upload of file with dangerous type
CVE-2023-33495: Craft CMS through 4.4.9 is vulnerable to HTML Injection.
Key phrases: html injection
CVE-2023-33496: xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec.NettyDecode#decode.
Key phrases: deserialization
CVE-2023-33498: alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.
Key phrases: incorrect access control
CVE-2023-3350: A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes coded with AES-CBC-128 bits algorithm, which can be decrypted with a .NET function, obtaining the username's password in plain text.
Key phrases: cryptographic issue
CVE-2023-33507: KramerAV VIA GO < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.
Key phrases: unauthenticated arbitrary file read
CVE-2023-33508: KramerAV VIA GO < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).
Key phrases: unauthenticated file upload, remote code execution (rce)
CVE-2023-33509: KramerAV VIA GO < 4.0.1.1326 is vulnerable to SQL Injection.
Key phrases: sql injection
CVE-2023-33510: Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters.
Key phrases: read arbitrary files, read arbitrary files through specific parameters
CVE-2023-33515: SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.
Key phrases: cross site scripting (xss)
CVE-2023-33517: carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System).
Key phrases: incorrect access control
CVE-2023-33518: emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory path and other information leaked by the server via a crafted web request.
Key phrases: obtain the web directory path and other information, information disclosure, information leak
CVE-2023-33524: Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses to the affected URL, one enumerates Contact information on the host which contains usernames, e-mail addresses, and other internal information stored within the web app.
Key phrases: directory traversal
CVE-2023-33528: halo v1.6.0 is vulnerable to Cross Site Scripting (XSS).
Key phrases: cross site scripting (xss)
CVE-2023-33530: There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an attacker gains web management privileges, they can inject commands gaining shell privileges.
Key phrases: command injection
CVE-2023-33532: There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.
Key phrases: command injection
CVE-2023-33533: Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges.
Key phrases: command injection
CVE-2023-33534: A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goform_set_cmd_process.
Key phrases: takeover user accounts via sending a crafted POST, cross-site request forgery (csrf)
CVE-2023-33536: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/WlanMacFilterRpm.
Key phrases: buffer overflow
CVE-2023-33537: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm.
Key phrases: buffer overflow
CVE-2023-33538: TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm .
Key phrases: command injection