yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-50989: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
Key phrases: command injection
CVE-2023-5099: The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other safe file types can be uploaded and included.
Key phrases: execute arbitrary files, bypass access controls, obtain sensitive data, include and execute arbitrary files on the server, local file inclusion, code execution
CVE-2023-50990: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.
Key phrases: buffer overflow
CVE-2023-50991: Buffer Overflow vulnerability in Tenda i29 versions 1.0 V1.0.0.5 and 1.0 V1.0.0.2, allows remote attackers to cause a denial of service (DoS) via the pingIp parameter in the pingSet function.
Key phrases: denial of service (DoS), cause a denial of service (DoS), buffer overflow, denial of service (dos)
CVE-2023-50992: Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function.
Key phrases: stack overflow
CVE-2023-50993: Ruijie WS6008 v1.x v2.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 and WS6108 v1.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 was discovered to contain a command injection vulnerability via the function downFiles.
Key phrases: command injection
CVE-2023-5100: Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows anunprivileged remote attacker to retrieve potentially sensitive information via intercepting network trafficthat is not encrypted.
Key phrases: retrieve potentially sensitive information via intercepting network trafficthat, cleartext transmission
CVE-2023-51006: An issue in the openFile method of Chinese Perpetual Calendar v9.0.0 allows attackers to read any file via unspecified vectors.
Key phrases: read any file via unspecified vectors
CVE-2023-5101: Files or Directories Accessible to External Parties in RDT400 in SICK APU allows anunprivileged remote attacker to download various files from the server via HTTP requests.
Key phrases: download various files from the server via HTTP
CVE-2023-51010: An issue in the export component AdSdkH5Activity of com.sdjictec.qdmetro v4.2.2 allows attackers to open a crafted URL without any filtering or checking.
Key phrases: open a crafted URL without any filtering or
CVE-2023-51011: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter of the setLanConfig interface of the cstecgi .cgi
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51012: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter of the setLanConfig interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51013: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter of the setLanConfig interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51014: TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter of the setLanConfig interface of the cstecgi .cgi
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51015: TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the enable parameter of the setDmzCfg interface of the cstecgi .cgi
Key phrases: arbitrary command execution, arbitrary commands
CVE-2023-51016: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51017: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter of the setLanConfig interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51018: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the opmode parameter of the setWiFiApConfig interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51019: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the key5g parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-5102: Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.
Key phrases: potentially enable hidden functionality via HTTP requests, insufficient control flow management
CVE-2023-51020: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the langType parameter of the setLanguageCfg interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51021: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the merge parameter of the setRptWizardCfg interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51022: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the langFlag parameter of the setLanguageCfg interface of the cstecgi .cgi.
Key phrases: arbitrary command execution, arbitrary commands
CVE-2023-51023: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the host_time parameter of the NTPSyncWithHost interface of the cstecgi .cgi.
Key phrases: arbitrary command execution, arbitrary commands
CVE-2023-51024: TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the tz parameter of the setNtpCfg interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51025: TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the admuser parameter of the setPasswordCfg interface of the cstecgi .cgi.
Key phrases: arbitrary command execution, arbitrary commands
CVE-2023-51026: TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the hour parameter of the setRebootScheCfg interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51027: TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliAuthMode parameter of the setWiFiExtenderConfig interface of the cstecgi .cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-51028: TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the cstecgi.cgi.
Key phrases: unauthorized arbitrary command execution, arbitrary commands
CVE-2023-5103: Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user intoclicking on an actionable item using an iframe.
Key phrases: potentially reveal sensitive information via tricking a user, improper restriction
CVE-2023-51033: TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.
Key phrases: arbitrary command execution, arbitrary commands
CVE-2023-51034: TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.
Key phrases: arbitrary command execution, arbitrary commands
CVE-2023-51035: TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.
Key phrases: arbitrary command execution, arbitrary commands
CVE-2023-5104: Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0.
Key phrases: improper input validation
CVE-2023-51042: In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.
Key phrases: fence use-after-free, use after free
CVE-2023-51043: In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic commit and a driver unload.
Key phrases: use-after-free, race condition, use after free
CVE-2023-51048: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php.
Key phrases: sql injection
CVE-2023-51049: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php.
Key phrases: sql injection
CVE-2023-5105: The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as `wp-config.php`
Key phrases: bypass the file download logic and download files
CVE-2023-51050: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php.
Key phrases: sql injection
CVE-2023-51051: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php.
Key phrases: sql injection
CVE-2023-51052: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajax.php.
Key phrases: sql injection
CVE-2023-51059: An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface.
Key phrases: escalate privileges via the session management component of
CVE-2023-5106: An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports.
Key phrases: impersonate users in CI pipelines through direct transfer, direct transfer group imports
CVE-2023-51062: An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 allows attackers to disclose the SMB Log contents via executing a crafted command.
Key phrases: disclose the SMB Log contents via executing a, unauthenticated log file, file read
CVE-2023-51063: QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulnerability within the component qnme-ajax?method=tree_level.
Key phrases: dom based reflected cross site scripting (xss)
CVE-2023-51064: QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the component qnme-ajax?method=tree_table.
Key phrases: dom based reflected xss
CVE-2023-51065: Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system backups and other sensitive information from the QStar Server.
Key phrases: obtain system backups and other sensitive information, obtain system backups and other sensitive information from, incorrect access control
CVE-2023-51066: An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbitrarily execute commands.
Key phrases: arbitrarily execute commands, remote code execution
CVE-2023-51067: An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link.
Key phrases: execute arbitrary javascript, execute arbitrary javascript on a victim's browser, unauthenticated reflected cross-site scripting (xss)
CVE-2023-51068: An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers to execute arbitrary javascript on a victim's browser via a crafted link.
Key phrases: execute arbitrary javascript, execute arbitrary javascript on a victim's browser, authenticated reflected cross-site scripting (xss)
CVE-2023-51070: An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server.
Key phrases: arbitrarily adjust sensitive SMB settings on the QStar, access control issue
CVE-2023-51071: An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link.
Key phrases: arbitrarily disable the SMB service on a victim, access control issue
CVE-2023-51072: A stored cross-site scripting (XSS) vulnerability in the NOC component of Nagios XI version up to and including 2024R1 allows low-privileged users to execute malicious HTML or JavaScript code via the audio file upload functionality from the Operation Center section. This allows any authenticated user to execute arbitrary JavaScript code on behalf of other users, including the administrators.
Key phrases: execute arbitrary JavaScript code, execute malicious HTML or JavaScript code via the, execute arbitrary JavaScript code on behalf of other, stored cross-site scripting (xss), file upload
CVE-2023-51073: An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.
Key phrases: execute arbitrary code, execute arbitrary code via the Firmware Update Script
CVE-2023-51074: json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method.
Key phrases: stack overflow
CVE-2023-51075: hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), infinite loop, denial of service (dos)
CVE-2023-51079: A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because "the only thing that you could expect is that the parser will take a crazy amount of time to complete its task."
CVE-2023-5108: The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Key phrases: sql injection
CVE-2023-51080: The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
Key phrases: stack overflow
CVE-2023-51084: hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.
Key phrases: stack overflow
CVE-2023-5109: The WP Mailto Links  Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpml_mailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This was partially patched in version 3.1.3 and fully patched in version 3.1.4.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51090: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
Key phrases: stack overflow
CVE-2023-51091: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
Key phrases: stack overflow
CVE-2023-51092: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
Key phrases: stack overflow
CVE-2023-51093: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
Key phrases: stack overflow
CVE-2023-51094: Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
Key phrases: command execution
CVE-2023-51095: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
Key phrases: stack overflow
CVE-2023-51097: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.
Key phrases: stack overflow
CVE-2023-51098: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .
Key phrases: command injection
CVE-2023-51099: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .
Key phrases: command injection
CVE-2023-5110: The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' shortcode in versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51100: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .
Key phrases: command injection
CVE-2023-51101: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
Key phrases: stack overflow
CVE-2023-51102: Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
Key phrases: stack overflow
CVE-2023-51103: A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in functon fz_new_pixmap_from_float_data() of pixmap.c.
Key phrases: floating point exception
CVE-2023-51104: A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero.
Key phrases: floating point exception
CVE-2023-51105: A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function bmp_decompress_rle4() of load-bmp.c.
Key phrases: floating point exception
CVE-2023-51106: A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero.
Key phrases: floating point exception
CVE-2023-51107: A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in functon compute_color() of jquant2.c.
Key phrases: floating point exception
CVE-2023-5111: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.This vulnerability allows attackers to inject JS through the "featured_type_name[1]" parameter,potentially leading to unauthorized execution of scripts within a user's web browser.
Key phrases: inject JS through the "featured_type_name[1]", cross-site scripting (xss), unauthorized execution
CVE-2023-5112: Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability.This vulnerability allows attackers to inject JS through the "specials_type_name[1]" parameter,potentially leading to unauthorized execution of scripts within a user's web browser.
Key phrases: inject JS through the "specials_type_name[1]", cross-site scripting (xss), unauthorized execution
CVE-2023-51123: An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted POST request
CVE-2023-51126: Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter.
Key phrases: run arbitrary commands, run arbitrary commands via the value parameter, command injection
CVE-2023-51127: FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction. This vulnerability allows an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file.
Key phrases: obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file, directory traversal
CVE-2023-5113: Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to WS-Print request and potential injections of Cross Site Scripting via jQuery-UI.
Key phrases: denial of service, ws-print request, cross site scripting
CVE-2023-51133: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
Key phrases: stack overflow
CVE-2023-51135: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
Key phrases: stack overflow
CVE-2023-51136: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
Key phrases: stack overflow
CVE-2023-5114: The idbbee plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idbbee' shortcode in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51146: Buffer Overflow vulnerability in TRENDnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_add_user action.
Key phrases: execute arbitrary code, execute arbitrary code via the adm_add_user action, buffer overflow
CVE-2023-51147: Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_mod_pwd action.
Key phrases: execute arbitrary code, execute arbitrary code via the adm_mod_pwd action, buffer overflow
CVE-2023-51148: An issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP v.3.00b06 allows an attacker to execute arbitrary code via the 'mycli' command-line interface component.
Key phrases: execute arbitrary code, execute arbitrary code via the 'mycli'
CVE-2023-5115: An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path.
Key phrases: craft a malicious Ansible role and make the, absolute path traversal, overwrite
CVE-2023-51154: Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php.
Key phrases: arbitrary file download
CVE-2023-5116: The Live updates from Excel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ipushpull_page' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-5118: The application is vulnerable to Stored Cross-Site Scripting (XSS) in the endpoint /sofer/DocumentService.asc/SaveAnnotation, where input data transmitted via the POST method in the parameters author and text are not adequately sanitized and validated. This allows for the injection of malicious JavaScript code. The vulnerability was identified in the function for adding new annotations while editing document content.Reporters inform that the vulnerability has been removed in software versions above 11.1.x. Previous versions may also be vulnerable, but this has not been confirmed.
Key phrases: for the injection of malicious JavaScript code, stored cross-site scripting (xss)
CVE-2023-5119: The Forminator WordPress plugin before 1.27.0 does not properly sanitize the redirect-url field in the form submission settings, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfiltered_html capability is disallowed (for example in a multisite setup).
Key phrases: inject arbitrary web scripts, inject arbitrary web scripts even when the unfiltered_html, redirect-url field
CVE-2023-51197: An issue discovered in shell command execution in ROS2 (Robot Operating System 2) Foxy Fitzroy, with ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows an attacker to run arbitrary commands and cause other impacts.
Key phrases: run arbitrary commands, run arbitrary commands and cause other impacts, shell command execution
CVE-2023-51198: An issue in the permission and access control components within ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to gain escalate privileges.
Key phrases: gain escalate privileges
CVE-2023-51199: Buffer Overflow vulnerability in ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to run arbitrary code or cause a denial of service via improper handling of arrays or strings.
Key phrases: run arbitrary code, run arbitrary code or cause a denial of, buffer overflow, denial of service
CVE-2023-5120: The Migration, Backup, Staging  WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image file path parameter in versions up to, and including, 0.9.89 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrative privileges to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51200: An issue in the default configurations of ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows unauthenticated attackers to authenticate using default credentials.
Key phrases: authenticate using default credentials, default credentials,
CVE-2023-51201: Cleartext Transmission issue in ROS2 (Robot Operating System 2) Foxy Fitzroy, with ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to access sensitive information via a man-in-the-middle attack.
Key phrases: access sensitive information via a man-in, cleartext transmission, man-in-the-middle, man in the middle
CVE-2023-51202: OS command injection vulnerability in command processing or system call componentsROS2 (Robot Operating System 2) Foxy Fitzroy, with ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to run arbitrary commands.
Key phrases: run arbitrary commands, os command injection
CVE-2023-51204: Insecure deserialization in ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to execute arbitrary code via a crafted input.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted input, insecure deserialization
CVE-2023-51208: An Arbitrary File Upload vulnerability in ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to run arbitrary code and cause other impacts via upload of crafted file.
Key phrases: run arbitrary code, run arbitrary code and cause other impacts via, arbitrary file upload
CVE-2023-5121: The Migration, Backup, Staging  WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings (the backup path parameter) in versions up to, and including, 0.9.89 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51210: SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id_product parameters in the UpdateProductQuantity function.
Key phrases: execute arbitrary code, execute arbitrary code via the id_product parameters in, sql injection
CVE-2023-51217: An issue discovered in TenghuTOS TWS-200 firmware version:V4.0-201809201424 allows a remote attacker to execute arbitrary code via crafted command on the ping page component.
Key phrases: execute arbitrary code, execute arbitrary code via crafted command on the
CVE-2023-5122: Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this plugin was configured to send requests to a bare host with no path (e.g.  https://www.example.com/ https://www.example.com/` ), requests to an endpoint other than the one configured by the administrator could be triggered by a specially crafted request from any user, resulting in an SSRF vector. AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator 
Key phrases: send requests to a bare host with no, ssrf vector
CVE-2023-5123: The JSON datasource plugin ( https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ ) is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint (including a specific sub-path) configured by an administrator. Due to inadequate sanitization of the dashboard-supplied path parameter, it was possible to include path traversal characters (../) in the path parameter and send requests to paths on the configured endpoint outside the configured sub-path.                                         This means that if the datasource was configured by an administrator to point at some sub-path of a domain (e.g.  https://example.com/api/some_safe_api/ https://example.com/api/some_safe_api/ ), it was possible for an editor to create a dashboard referencing the datasource which issues queries containing path traversal characters, which would in turn cause the datasource to instead query arbitrary subpaths on the configured domain (e.g.  https://example.com/api/admin_api/) https://example.com/api/admin_api/) .In the rare case that this plugin is configured by an administrator to point back at the Grafana instance itself, this vulnerability becomes considerably more severe, as an administrator browsing a maliciously configured panel could be compelled to make requests to Grafana administrative API endpoints with their credentials, resulting in the potential for privilege escalation, hence the high score for this vulnerability.
Key phrases: query arbitrary subpaths, inadequate sanitization of the dashboard-supplied path, privilege escalation, path traversal
CVE-2023-5124: The Page Builder: Pagelayer WordPress plugin before 1.8.0 doesn't prevent attackers with administrator privileges from inserting malicious JavaScript inside a post's header or footer code, even when unfiltered_html is disallowed, such as in multi-site WordPress configurations.
Key phrases: malicious javascript, unfiltered_html
CVE-2023-51246: A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via the /admin/edit.php page.
Key phrases: cross site scripting (xss)
CVE-2023-5125: The Contact Form by FormGet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formget' shortcode in versions up to, and including, 5.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51252: PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing.
Key phrases: cross site scripting (xss), file upload
CVE-2023-51257: An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
Key phrases: execute arbitrary code, invalid memory write
CVE-2023-51258: A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the modules/preprocs/nasm/nasm-pp:1512.
Key phrases: cause a denial of service via the new_Token, memory leak
CVE-2023-5126: The Delete Me plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'plugin_delete_me' shortcode in versions up to, and including, 3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The shortcode is not displayed to administrators, so it cannot be used against administrator users.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-5127: The WP Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.7.9 due to insufficient input sanitization and output escaping on 'icon' user supplied attribute. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51277: nbviewer-app (aka Jupyter Notebook Viewer) before 0.1.6 has the get-task-allow entitlement for release builds.
Key phrases: entitlement for release builds, get-task-allow entitlement
CVE-2023-5128: The TCD Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'map' shortcode in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51281: Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters.
Key phrases: escalate privileges via a crafted script firstname, cross site scripting
CVE-2023-51282: An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted script to
CVE-2023-5130: A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
Key phrases: buffer overflow, code execution
CVE-2023-5131: A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
Key phrases: heap buffer-overflow, code execution, heap buffer overflow
CVE-2023-5132: The Soisy Pagamento Rateale plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the parseRemoteRequest function in versions up to, and including, 6.0.1. This makes it possible for unauthenticated attackers with knowledge of an existing WooCommerce Order ID to expose sensitive WooCommerce order information (e.g., Name, Address, Email Address, and other order metadata).
Key phrases: unauthorized access of data, missing capability check
CVE-2023-5133: This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.
Key phrases: manipulate its value, untrusted headers, malicious traffic
CVE-2023-5134: The Easy Registration Forms for WordPress is vulnerable to Information Disclosure via the 'erforms_user_meta' shortcode in versions up to, and including, 2.1.1 due to insufficient controls on the information retrievable via the shortcode. This makes it possible for authenticated attackers, with subscriber-level capabilities or above, to retrieve arbitrary sensitive user meta.
Key phrases: information disclosure
CVE-2023-5135: The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-turnstile' shortcode in versions up to, and including, 1.23.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-51350: A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the header.
Key phrases: execute arbitrary code, obtain sensitive information, obtain sensitive information and execute arbitrary code via, spoofing
CVE-2023-51354: Cross-Site Request Forgery (CSRF) vulnerability in WebbaPlugins Appointment & Event Booking Calendar Plugin  Webba Booking.This issue affects Appointment & Event Booking Calendar Plugin  Webba Booking: from n/a through 4.5.33.
Key phrases: cross-site request forgery (csrf)
CVE-2023-51358: Cross-Site Request Forgery (CSRF) vulnerability in Bright Plugins Block IPs for Gravity Forms.This issue affects Block IPs for Gravity Forms: from n/a through 1.0.1.
Key phrases: cross-site request forgery (csrf)
CVE-2023-5136: An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure.  An attacker could exploit this vulnerability by getting a user to open a specially crafted data file.
Key phrases: incorrect permission assignment, information disclosure
CVE-2023-51361: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button allows Stored XSS.This issue affects Sticky Chat Widget: Click to chat, SMS, Email, Messages, Call Button, Live Chat and Live Support Button: from n/a through 1.1.8.
Key phrases: chat, cross-site scripting, stored xss
CVE-2023-51363: VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain sensitive information.
Key phrases: obtain sensitive information
CVE-2023-51369: Cross-Site Request Forgery (CSRF) vulnerability in SysBasics Customize My Account for WooCommerce.This issue affects Customize My Account for WooCommerce: from n/a through 1.8.3.
Key phrases: cross-site request forgery (csrf)
CVE-2023-5137: The Simply Excerpts WordPress plugin through 1.4 does not sanitize and escape some fields in the plugin settings, which could allow high-privilege users such as an administrator to inject arbitrary web scripts even when the unfiltered_html capability is disallowed (for example in a multisite setup).
Key phrases: inject arbitrary web scripts, inject arbitrary web scripts even when the unfiltered_html, unfiltered_html capability
CVE-2023-51370: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NinjaTeam WP Chat App allows Stored XSS.This issue affects WP Chat App: from n/a through 3.4.4.
Key phrases: Stored XSS.This issue affects WP Chat App:, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-51371: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating Chat Widget allows Stored XSS.This issue affects Chat Widget: WhatsApp Chat, Facebook Messenger Chat, Telegram Chat Bubble, Line Messenger, Live Chat Support Chat Button, WeChat, SMS, Call Button, Customer Support Button with floating Chat Widget: from n/a through 1.1.9.
Key phrases: Stored XSS.This issue affects Chat Widget: WhatsApp, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-51372: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HashBar  WordPress Notification Bar allows Stored XSS.This issue affects HashBar  WordPress Notification Bar: from n/a through 1.4.1.
Key phrases: Stored XSS.This issue affects HashBar  WordPress Notification, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-51373: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ian Kennerley Google Photos Gallery with Shortcodes allows Reflected XSS.This issue affects Google Photos Gallery with Shortcodes: from n/a through 4.0.2.
Key phrases: Reflected XSS.This issue affects Google Photos Gallery with, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2023-51374: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZeroBounce ZeroBounce Email Verification & Validation allows Stored XSS.This issue affects ZeroBounce Email Verification & Validation: from n/a through 1.0.11.
Key phrases: Stored XSS.This issue affects ZeroBounce Email Verification &, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-51378: Cross-Site Request Forgery (CSRF) vulnerability in Rise Themes Rise Blocks  A Complete Gutenberg Page Builder.This issue affects Rise Blocks  A Complete Gutenberg Page Builder: from n/a through 3.1.
Key phrases: cross-site request forgery (csrf)
CVE-2023-51379: An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content as it also required contents:write and issues:read permissions. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.17.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Key phrases: any repository content as it also required contents, authorization, unauthorized access
CVE-2023-5138: Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, except EFR32xG21B.
Key phrases: glitch detection
CVE-2023-51380: An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperly scoped token.This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.17.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Key phrases: incorrect authorization
CVE-2023-51384: In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.
CVE-2023-51385: In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
Key phrases: os command injection, shell metacharacters
CVE-2023-51386: Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially read data from the events table by sending request payloads to the events API, collecting information on planned events, timeframes, budgets and owner email addresses. This data access may allow users to get insights into upcoming events and join events which they have not been invited to. This issue has been patched in version 1.10.0.
Key phrases: get insights into upcoming events and join events, data access
CVE-2023-51387: Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a crafted alert expression to execute any command on hertzbeat server. A malicious user who has access to alert define function can execute any command in hertzbeat instance. This issue is fixed in version 1.4.1.
Key phrases: improper sanitization, execute commands
CVE-2023-51388: Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the expression function, and no security policy is configured, resulting in AviatorScript (which can execute any static method by default) script injection. Version 1.4.1 fixes this vulnerability.
Key phrases: aviatorscript, script injection
CVE-2023-51389: Hertzbeat is a real-time monitoring system. At the interface of `/define/yml`, SnakeYAML is used as a parser to parse yml content, but no security configuration is used, resulting in a YAML deserialization vulnerability. Version 1.4.1 fixes this vulnerability.
Key phrases: yaml deserialization
CVE-2023-5139: Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver
Key phrases: potential buffer overflow
CVE-2023-51390: journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including credential information contained in the configuration if any. The problem has been patched in journalpump 2.5.0.
Key phrases: logging