yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-4723: The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.12.7 via the ajax_eae_post_data function. This can allow unauthenticated attackers to extract sensitive data including post/page ids and titles including  those of with pending/draft/future/private status.
Key phrases: extract sensitive data including post/page ids, sensitive information exposure
CVE-2023-47230: Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <=1.6.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47231: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bainternet ShortCodes UI plugin <=1.9.8 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47233: The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.
Key phrases: use-after-free, real world scenario, use after free
CVE-2023-47234: An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).
Key phrases: mp_unreach_nlri attribute, crash
CVE-2023-47235: An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when a malformed BGP UPDATE message with an EOR is processed, because the presence of EOR does not lead to a treat-as-withdraw outcome.
Key phrases: eor, crash
CVE-2023-47236: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Flipbook For WordPress.This issue affects iPages Flipbook For WordPress: from n/a through 1.4.8.
Key phrases: sql command, sql injection
CVE-2023-47237: Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson Auto Publish for Google My Business plugin <=3.7 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47238: Cross-Site Request Forgery (CSRF) vulnerability in WebberZone Top 10  WordPress Popular posts by WebberZone plugin <=3.3.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47239: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Scott Paterson Easy PayPal Shopping Cart plugin <=1.1.10 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-4724: The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary command on the remote server
Key phrases: run arbitrary command, run arbitrary command on the remote server, arbitrary commands
CVE-2023-47240: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap plugin <=1.1.11 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47242: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <=7.5 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47243: Cross-Site Request Forgery (CSRF) vulnerability in CodeMShop ???? ?????  MSHOP MY SITE.This issue affects ???? ?????  MSHOP MY SITE: from n/a through 1.1.6.
Key phrases: cross-site request forgery (csrf)
CVE-2023-47244: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Omnisend Email Marketing for WooCommerce by Omnisend.This issue affects Email Marketing for WooCommerce by Omnisend: from n/a through 1.13.8.
Key phrases: exposure of sensitive information
CVE-2023-47245: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <=1.7 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47246: In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
Key phrases: path traversal, code execution, to write files
CVE-2023-47247: In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102.
Key phrases: edge case
CVE-2023-47248: Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied input files).This vulnerability only affects PyArrow, not other Apache Arrow implementations or bindings.It is recommended that users of PyArrow upgrade to 14.0.1. Similarly, it is recommended that downstream libraries upgrade their dependency requirements to PyArrow 14.0.1 or later. PyPI packages are already available, and we hope that conda-forge packages will be available soon.If it is not possible to upgrade, we provide a separate package `pyarrow-hotfix` that disables the vulnerability on older PyArrow versions. See  https://pypi.org/project/pyarrow-hotfix/  for instructions.
Key phrases: allows arbitrary code execution, 14.0.1
CVE-2023-47249: In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read.
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-4725: The Simple Posts Ticker WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting
CVE-2023-47250: In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11 server sockets allows authenticated attackers (with access to a VNC session) to access the X11 desktops of other users by specifying their DISPLAY ID. This allows complete control of their desktop, including the ability to inject keystrokes and perform a keylogging attack.
Key phrases: a VNC session) to access the X11, inject keystrokes and perform a keylogging attack, access control on server sockets
CVE-2023-47251: In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem.
Key phrases: a VNC session) to automatically transfer malicious, directory traversal
CVE-2023-47253: Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.
Key phrases: execute arbitrary code, execute arbitrary code via PHP code in the
CVE-2023-47254: An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system commands and escalate privileges via any account created within the web interface.
Key phrases: execute arbitrary system commands, execute arbitrary system commands and escalate privileges via, os command injection
CVE-2023-47256: ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings
Key phrases: connect to arbitrary relay servers via implicit trust
CVE-2023-47257: ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages.
Key phrases: achieve remote code execution via crafted messages, man in the middle
CVE-2023-47258: Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.
Key phrases: XSS in a Markdown formatter, xss
CVE-2023-47259: Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter.
Key phrases: XSS in the Textile formatter, xss
CVE-2023-4726: The Ultimate Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.7.7. due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-47260: Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.
Key phrases: XSS via thumbnails, xss
CVE-2023-47261: Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/gettingstarted request contains a connection string for privileged SQL Server database access, and xp_cmdshell can be enabled.
Key phrases: a GettingStarted/SaveSQLConnectionAsync /#/gettingstarted request contains a, remote code execution
CVE-2023-47262: The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and/or modified via physical access to an internal serial port. Direct physical access is required to exploit.
Key phrases: physical access, direct physical access
CVE-2023-47263: Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 15 and later.
Key phrases: Denial of Service (DoS), a Denial of Service (DoS) in, denial of service (dos)
CVE-2023-47264: Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 15 and later.
Key phrases: denial of service (DoS), buffer over-read, denial of service (dos), buffer over read
CVE-2023-47265: Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG.This Javascript can be executed on the client side of any of the user who looks at the tasks in the browser sandbox. While this issue does not allow to exit the browser sandbox or manipulation of the server-side data - more than the DAG author already has, it allows to modify what the user looking at the DAG details sees in the browser - which opens up all kinds of possibilities of misleading other users.Users of Apache Airflow are recommended to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability
Key phrases: add an unbounded and not-sanitized javascript, exit the browser sandbox or manipulation of the, modify what the user looking at the DAG, stored xss
CVE-2023-47267: An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file.
Key phrases: gain escalated privileges, gain escalated privileges via crafted changes to memory, memory mapped file, escalate privilege
CVE-2023-47271: PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.
CVE-2023-47272: Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or download).
Key phrases: XSS via a Content-Type or Content, xss
CVE-2023-47279: In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying.
Key phrases: obtain plaintext credentials, disclose user information through a single UDP packet
CVE-2023-4728: The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscriber-level access and above to change the LadiPage key (a key fully controlled by the attacker), enabling them to freely create new pages, including web pages that trigger stored XSS
Key phrases: unauthorized modification of data, missing capability check, stored xss
CVE-2023-47283: Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system.
Key phrases: obtain files in the system., directory traversal
CVE-2023-4729: The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to change the LadiPage key (a key fully controlled by the attacker), enabling them to freely create new pages, including web pages that trigger stored XSS via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Key phrases: cross-site request forgery, stored xss
CVE-2023-47304: An issue was discovered in Vonage Box Telephone Adapter VDV23 version VDV21-3.2.11-0.5.1, allows local attackers to bypass UART authentication controls and read/write arbitrary values to the memory of the device.
Key phrases: write arbitrary values, bypass UART authentication, bypass UART authentication controls and read/write, uart authentication controls
CVE-2023-47307: Buffer Overflow vulnerability in /apply.cgi in Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 allows attackers to cause a denial of service via the ApCliAuthMode parameter.
Key phrases: cause a denial of service via the ApCliAuthMode, buffer overflow
CVE-2023-47308: In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected versions. The method `NewsletterpopsendVerificationModuleFrontController::checkEmailSubscription()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
Key phrases: sql injection
CVE-2023-47309: Nukium nkmgls before version 3.0.2 is vulnerable to Cross Site Scripting (XSS) via NkmGlsCheckoutModuleFrontController::displayAjaxSavePhoneMobile.
Key phrases: cross site scripting (xss)
CVE-2023-4731: The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.4. This makes it possible for unauthenticated attackers to modify a variety of settings, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. An attacker can directly modify the 'ladipage_key' which enables them to create new posts on the website and inject malicious web scripts,
Key phrases: cross-site request forgery, forged request
CVE-2023-47311: An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.
Key phrases: send aribitrary telelcommands in a Command Stack via, clickjacking
CVE-2023-47312: Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to Login Credential Leakage via Audit Entries.
Key phrases: incorrect access control, login credential leakage
CVE-2023-47313: Headwind MDM Web panel 5.22.1 is vulnerable to Directory Traversal. The application uses an API call to move the uploaded temporary file to the file directory during the file upload process. This API call receives two input parameters, such as path and localPath. The first one refers to the temporary file with an absolute path without validating it. Attackers may modify this API call by referring to arbitrary files. As a result, arbitrary files can be moved to the files directory and so they can be downloaded.
Key phrases: directory traversal, file upload, arbitrary file
CVE-2023-47314: Headwind MDM Web panel 5.22.1 is vulnerable to cross-site scripting (XSS). The file upload function allows APK and arbitrary files to be uploaded. By exploiting this issue, attackers may upload HTML files and share the download URL pointing to these files with the victims. As the file download function returns the file in inline mode, the victims browser will immediately render the content of the HTML file as a web page. As a result, the uploaded client-side code will be evaluated and executed in the victims browser, allowing attackers to perform common XSS attacks.
Key phrases: be uploaded, perform common XSS attacks, cross-site scripting (xss), common xss, file upload, arbitrary file, arbitrary file upload
CVE-2023-47315: Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the applications JWT token and verify the incoming user-supplied tokens.
Key phrases: incorrect access control, hardcoded
CVE-2023-47316: Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to potentially sensitive API calls such as listing users and their data, file management API calls and audit-related API calls.
Key phrases: gain access, gain access to potentially sensitive API calls such, incorrect access control
CVE-2023-4732: A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.
Key phrases: denial of service problem, bug statement
CVE-2023-47320: Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below.
Key phrases: incorrect access control, broken access control
CVE-2023-47321: Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets.
Key phrases: deploy .WAR portlets, incorrect access control
CVE-2023-47322: The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user in the application.
Key phrases: cross site request forgery (csrf), privilege escalation
CVE-2023-47323: The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators.
Key phrases: read all messages sent between other users;
CVE-2023-47324: Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.
Key phrases: cross site scripting (xss)
CVE-2023-47325: Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.
Key phrases: broken access control
CVE-2023-47326: Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function.
Key phrases: cross site request forgery (csrf)
CVE-2023-47327: The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
Key phrases: create a space by navigating to the correct, access control
CVE-2023-4733: Use After Free in GitHub repository vim/vim prior to 9.0.1840.
Key phrases: use after free
CVE-2023-47335: Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the geo-fence and fly into no-fly zones.
Key phrases: breach the geo-fence and fly into, insecure permissions
CVE-2023-4734: Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
Key phrases: integer overflow, wraparound
CVE-2023-47345: Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero.
Key phrases: cause a denial of service via crafted PFCP, buffer overflow
CVE-2023-47346: Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages.
Key phrases: cause a denial of service via crafted PFCP, buffer overflow
CVE-2023-47347: Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes.
Key phrases: cause a denial of service via crafted PFCP, buffer overflow
CVE-2023-4735: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
Key phrases: out-of-bounds write
CVE-2023-47350: Cross-Site Request Forgery (CSRF) vulnerability in SwiftyEdit Content Management System prior to v1.2.0, allows remote attackers to escalate privileges via the user password update functionality.
Key phrases: escalate privileges via the user password update functionality, cross-site request forgery (csrf)
CVE-2023-47352: Technicolor TC8715D devices have predictable default WPA2 security passwords. An attacker who scans for SSID and BSSID values may be able to predict these passwords.
Key phrases: predictable default security passwords
CVE-2023-47353: An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitrary files.
Key phrases: force the download of arbitrary files
CVE-2023-47354: An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent
Key phrases: arbitrarily reset or power off the device via
CVE-2023-47355: The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation.
Key phrases: unauthorized broadcasts, missing input validation
CVE-2023-47359: Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.
Key phrases: heap-based buffer overflow, memory corruption
CVE-2023-4736: Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.
Key phrases: untrusted search path
CVE-2023-47360: Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
Key phrases: integer underflow
CVE-2023-47363: The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notifications to victims.
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47364: The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications to victims
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47365: The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims.
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47366: The leakage of channel access token in craft_members Line 13.6.1 allows remote attackers to send malicious notifications to victims.
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47367: The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notifications to victims.
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47368: The leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send malicious notifications to victims.
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47369: The leakage of channel access token in best_training_member Line 13.6.1 allows remote attackers to send malicious notifications.
Key phrases: send malicious notifications, channel access token
CVE-2023-4737: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hedef Tracking Admin Panel allows SQL Injection.This issue affects Admin Panel: before 1.2.
Key phrases: SQL Injection, sql command, sql injection, admin panel
CVE-2023-47370: The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to victims.
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47372: The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims.
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47373: The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims.
Key phrases: send malicious notifications to victims, leakage of channel access token
CVE-2023-47379: Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.
Key phrases: stored cross site scripting (xss), file upload
CVE-2023-4738: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
Key phrases: heap-based buffer overflow
CVE-2023-47380: Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).
Key phrases: cross site scripting (xss)
CVE-2023-47384: MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), memory leak, denial of service (dos)
CVE-2023-4739: A vulnerability, which was classified as critical, has been found in Beijing Baichuo Smart S85F Management Platform up to 20230820 on Smart. Affected by this issue is some unknown functionality of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238628. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: unrestricted upload, disclosure
CVE-2023-47390: Headscale through 0.22.3 writes bearer tokens to info-level logs.
Key phrases: bearer tokens
CVE-2023-47392: An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted add order request.
Key phrases: view the carts of other users via sending, access control issue
CVE-2023-47393: An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors.
Key phrases: view the maintenance orders of other users and, access control issue, unspecified vectors
CVE-2023-47397: WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.
Key phrases: code injection
CVE-2023-4740: A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&archiveId=0 of the component Delete Draft Handler. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238629 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: sql injection, disclosure
CVE-2023-4741: A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the component Delete Logs Handler. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-238630 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: sql injection, disclosure
CVE-2023-47415: Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the cli_text parameter.
Key phrases: os command injection
CVE-2023-47417: Cross Site Scripting (XSS) vulnerability in the component /shells/embedder.html of DZSlides after v2011.07.25 allows attackers to execute arbitrary code via a crafted payload.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload, cross site scripting (xss)
CVE-2023-47418: Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript.
Key phrases: create a new interface in the service management, remote code execution (rce)
CVE-2023-4742: A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/user/export&uid=X. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238631. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: sql injection, disclosure
CVE-2023-47422: An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL.
Key phrases: bypass authentication, bypass authentication on any endpoint via a crafted, access control issue
CVE-2023-4743: A vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown function of the file /upload/ueditorConfig?action=config. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238632. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: disclosure
CVE-2023-47430: Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the SendContainer() function at tivo_commands.c.
Key phrases: cause a denial of service via via the, stack-buffer-overflow, stack buffer overflow
CVE-2023-47437: A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script.
Key phrases: execute a cross-site scripting (XSS
CVE-2023-47438: SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.
Key phrases: obtain sensitive information, obtain sensitive information or other system information via, sql injection
CVE-2023-4744: A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238633 was assigned to this vulnerability.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2023-47440: Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine.
Key phrases: extract sensitive files in the host machine, directory traversal
CVE-2023-47444: An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server.
Key phrases: authenticated backend users having common/security write, remote code execution
CVE-2023-47445: Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page.
Key phrases: sql injection
CVE-2023-47446: Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting (XSS) on the profile.php page via fullname parameter.
Key phrases: cross site scripting (xss)
CVE-2023-4745: A vulnerability was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-238634 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-47452: An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory.
Key phrases: gain escalated privileges, gain escalated privileges through the msimg32.dll file in, untrusted search path, escalate privilege
CVE-2023-47453: An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in the current working directory.
Key phrases: gain escalated privileges, gain escalated privileges through the version.dll file in, untrusted search path, escalate privilege
CVE-2023-47454: An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory.
Key phrases: gain escalated privileges, gain escalated privileges through the urlmon.dll file in, untrusted search path, escalate privilege
CVE-2023-47455: Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.
Key phrases: heap overflow
CVE-2023-47456: Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.
Key phrases: stack overflow
CVE-2023-47458: An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.
Key phrases: escalate privileges via the lack of permissions control
CVE-2023-47459: An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName component.
Key phrases: obtain sensitive information, obtain sensitive information via the /DiscoveryReview/Service
CVE-2023-4746: A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation leads to format string. It is possible to initiate the attack remotely. The root-cause of the vulnerability is a format string issue. But the impact is to bypass the validation which leads to to OS command injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238635.
Key phrases: bypass the validation, os command injection
CVE-2023-47460: SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component.
Key phrases: execute arbitrary code, execute arbitrary code via the /DiscoveryProcess/Service, sql injection
CVE-2023-47462: Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file sharing function.
Key phrases: execute arbitrary code, execute arbitrary code via the file sharing function, insecure permissions
CVE-2023-47463: Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the gl_nas_sys authentication function.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted script to, insecure permissions
CVE-2023-47464: Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function.
Key phrases: execute arbitrary code, execute arbitrary code via the upload API function, insecure permissions
CVE-2023-47465: An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/box_code_base.c.
Key phrases: denial of service (DoS), cause a denial of service (DoS), denial of service (dos)
CVE-2023-47467: Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure.
Key phrases: obtain sensitive information, obtain sensitive information via the file directory structure, directory traversal
CVE-2023-4747: A vulnerability classified as critical was found in DedeCMS 5.7.110. This vulnerability affects unknown code of the file /uploads/tags.php. The manipulation of the argument tag_alias leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238636.
Key phrases: sql injection
CVE-2023-47470: Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service (DoS) via the ref_pic_list_struct function in libavcodec/evc_ps.c
Key phrases: execute arbitrary code, denial of service (DoS), achieve an out-of-array write, buffer overflow, denial of service (dos)
CVE-2023-47471: Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header function in the slice.cc component.
Key phrases: cause a denial of service via the slice_segment_header, buffer overflow
CVE-2023-47473: Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensitive information via a crafted script.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted script, directory traversal
CVE-2023-4748: A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238637 was assigned to this vulnerability.
Key phrases: path traversal
CVE-2023-47488: Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attrib_manager_id parameter in the General Information page and the id parameter in the contact page.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted script to, cross site scripting
CVE-2023-47489: CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and ajax.render.php components.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted script to, csv injection
CVE-2023-4749: A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-238638 is the identifier assigned to this vulnerability.
Key phrases: file inclusion
CVE-2023-4750: Use After Free in GitHub repository vim/vim prior to 9.0.1857.
Key phrases: use after free
CVE-2023-47503: An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted script to
CVE-2023-47505: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor.Com Elementor allows Cross-Site Scripting (XSS).This issue affects Elementor: from n/a through 3.16.4.
Key phrases: Cross-Site Scripting (XSS).This issue affects, improper neutralization of input during web page generation, cross-site scripting
CVE-2023-47506: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Master slider Master Slider Pro allows SQL Injection.This issue affects Master Slider Pro: from n/a through 3.6.5.
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-47507: Deserialization of Untrusted Data vulnerability in Master Slider Master Slider Pro.This issue affects Master Slider Pro: from n/a through 3.6.5.
Key phrases: deserialization of untrusted data
CVE-2023-47508: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Averta Master Slider Pro plugin <=3.6.5 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47509: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ioannup Edit WooCommerce Templates plugin <=1.1.1 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-4751: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
Key phrases: heap-based buffer overflow
CVE-2023-47510: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPSolutions-HQ WPDBSpringClean plugin <=1.6 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47511: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SO WP Pinyin Slugs plugin <=2.3.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-47512: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Gravity Master Product Enquiry for WooCommerce plugin <=3.0 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47514: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in lawrenceowen, gcubero, acunnningham, fmahmood Star CloudPRNT for WooCommerce plugin <=2.0.3 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47516: Cross-Site Request Forgery (CSRF) vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from n/a through 2.0.
Key phrases: Stored XSS.This issue affects Category Post List Widget, cross-site request forgery (csrf), stored xss
CVE-2023-47517: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <=1.23.11.6 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47518: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Matthew Muro Restrict Categories plugin <=2.6.4 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47519: Cross-Site Request Forgery (CSRF) vulnerability in WC Product Table WooCommerce Product Table Lite.This issue affects WooCommerce Product Table Lite: from n/a through 2.6.2.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4752: Use After Free in GitHub repository vim/vim prior to 9.0.1858.
Key phrases: use after free
CVE-2023-47520: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Uno (miunosoft) Responsive Column Widgets plugin <=1.2.7 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47521: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8.
Key phrases: Reflected XSS.This issue affects Q2W3 Post Order:, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2023-47522: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Feed plugin <=2.2.1 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47524: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability (requiresPHP 8.x) in CodeBard CodeBard's Patron Button and Widgets for Patreon plugin <=2.1.9 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-47525: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Event Monster  Event Management, Tickets Booking, Upcoming Event allows Stored XSS.This issue affects Event Monster  Event Management, Tickets Booking, Upcoming Event: from n/a through 1.3.2.
Key phrases: Stored XSS.This issue affects Event Monster  Event, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-47526: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chart Builder Team Chartify  WordPress Chart Plugin allows Stored XSS.This issue affects Chartify  WordPress Chart Plugin: from n/a through 2.0.6.
Key phrases: Stored XSS.This issue affects Chartify  WordPress Chart, improper neutralization of input during web page generation, cross-site scripting, stored xss