yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-45857: An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.
Key phrases: view sensitive information
CVE-2023-45859: In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster.
Key phrases: access data stored in the cluster
CVE-2023-4586: A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostname validation when using TLS, possibly resulting in a man-in-the-middle (MITM) attack.
Key phrases: man in the middle
CVE-2023-45860: In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem.
Key phrases: security issue
CVE-2023-45862: An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation.
Key phrases: object
CVE-2023-45863: An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.
Key phrases: root access, race condition, out-of-bounds write, out of bounds write
CVE-2023-45864: A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modifications of values within certain areas.
Key phrases: unintended modifications of values within certain areas, race condition issue
CVE-2023-45866: Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue.
Key phrases: injection of hid messages
CVE-2023-45867: ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion vulnerability in the ScormAicc module. An attacker with a privileged account, typically holding the tutor role, can exploit this to gain unauthorized access to and potentially retrieve confidential files stored on the web server. The attacker can access files that are readable by the web server user www-data; this may include sensitive configuration files and documents located outside the documentRoot. The vulnerability is exploited by an attacker who manipulates the file parameter in a URL, inserting directory traversal sequences in order to access unauthorized files. This manipulation allows the attacker to retrieve sensitive files, such as /etc/passwd, potentially compromising the system's security. This issue poses a significant risk to confidentiality and is remotely exploitable over the internet.
Key phrases: gain unauthorized access, retrieve sensitive files, directory traversal local file inclusion, directory traversal sequences, significant risk to confidentiality
CVE-2023-45868: The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user privileges) to achieve a high-impact Directory Traversal attack on confidentiality and availability. By exploiting this network-based vulnerability, the attacker can move specified directories, normally outside the documentRoot, to a publicly accessible location via the PHP function rename(). This results in a total loss of confidentiality, exposing sensitive resources, and potentially denying access to the affected component and the operating system's components. To exploit this, an attacker must manipulate a POST request during the creation of an exercise unit, by modifying the old_name and new_name parameters via directory traversal. However, it's essential to note that, when exploiting this vulnerability, the specified directory will be relocated from its original location, rendering all files obtained from there unavailable.
Key phrases: achieve a high-impact Directory Traversal attack, directory traversal, network-based, confidentiality, availability
CVE-2023-45869: ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged account accesses an XSS payload. The injected commands are executed via the exec() function in the execQuoted() method of the ilUtil class (/Services/Utilities/classes/class.ilUtil.php) This allows attackers to inject malicious commands into the system, potentially compromising the integrity, confidentiality, and availability of the ILIAS installation and the underlying operating system.
Key phrases: execute arbitrary operating system, execute arbitrary operating system commands remotely, inject malicious commands into the system, xss payload, integrity, confidentiality, availability
CVE-2023-4587: An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server.
Key phrases: obtain registered user backup files or device configuration files, idor
CVE-2023-45871: An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.
CVE-2023-45873: An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (application exist) because of the OOM killer.
Key phrases: denial of service (application exist), data reader, oom killer
CVE-2023-45874: An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads).
Key phrases: denial of service (outage of reader threads), data reader
CVE-2023-45875: An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster.
Key phrases: private key leak
CVE-2023-45878: GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set, the defined path is used as the destination folder, concatenated with the absolute path of the installation directory. The content of the img parameter is base64 decoded and written to the defined file path. This allows creation of PHP files that permit Remote Code Execution (unauthenticated).
Key phrases: allows Arbitrary File Write, be a base64 encoded image, creation of PHP files that permit Remote Code, arbitrary file write, remote code execution
CVE-2023-45879: GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component.
Key phrases: the Messager component, html injection
CVE-2023-4588: File accessibility vulnerability in Delinea Secret Server, in its v10.9.000002 and v11.4.000002 versions. Exploitation of this vulnerability could allow an authenticated user with administrative privileges to create a backup file in the application's webroot directory, changing the default backup directory to the wwwroot folder, and download it with some configuration files such as encryption.config/ and database.config stored in the wwwroot directory, exposing the database credentials in plain text.
Key phrases: create a backup file in the application's, file accessibility
CVE-2023-45880: GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot.
Key phrases: an arbitrary pathname (and extension), creation of PHP files outside of the uploads, directory traversal
CVE-2023-45881: GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response.
Key phrases: Y to return HTML code, xss, file upload
CVE-2023-45883: A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows. When a standard user triggers a repair of the software, a pop-up window opens with SYSTEM privileges. Standard users may use this to gain arbitrary code execution as SYSTEM.
Key phrases: gain arbitrary code execution, privilege escalation
CVE-2023-45884: Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.
Key phrases: view sensitive information via the flexibleLayout plugin, cross site request forgery (csrf)
CVE-2023-45885: Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.
Key phrases: run arbitrary code, run arbitrary code via the new component feature, cross site scripting (xss)
CVE-2023-45886: The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.
Key phrases: cause a denial of service by sending crafted, malformed attribute
CVE-2023-45887: DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to execute arbitrary code on a game-playing client's machine via a modified GPCM message.
Key phrases: execute arbitrary code, execute arbitrary code on a game-playing
CVE-2023-45889: A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. NOTE: this issue exists because of an incomplete fix for CVE-2022-48612.
Key phrases: inject JavaScript into any webpage, universal cross site scripting (uxss)
CVE-2023-4589: Insufficient verification of data authenticity vulnerability in Delinea Secret Server, in its v10.9.000002 version. An attacker with an administrator account could perform software updates without proper integrity verification mechanisms. In this scenario, the update process lacks digital signatures and fails to validate the integrity of the update package, allowing the attacker to inject malicious applications during the update.
Key phrases: inject malicious applications during the update, data authenticity, integrity
CVE-2023-45892: An issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information.
Key phrases: view sensitive customer information
CVE-2023-45893: An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information.
Key phrases: view sensitive customer information, indirect object reference (idor)
CVE-2023-45894: The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques.
Key phrases: achieve remote code execution via standard kiosk breakout, kiosk breakout techniques
CVE-2023-45897: exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.
Key phrases: out-of-bounds memory access, out of bounds memory
CVE-2023-45898: The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.
Key phrases: use-after-free, use after free
CVE-2023-45899: An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call.
Key phrases: bypass authentication, bypass authentication via a crafted HTTP call
CVE-2023-4590: Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.
Key phrases: execute arbitrary code, execute arbitrary code via a long filename argument, buffer overflow
CVE-2023-45901: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\\\\/category\\\\/add.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45902: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45903: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45904: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45905: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45906: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45907: Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.
Key phrases: cross-site request forgery (csrf)
CVE-2023-45909: zzzcms v2.2.0 was discovered to contain an open redirect vulnerability.
Key phrases: open redirect
CVE-2023-4591: A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion (LFI) via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the loading of a PHP file on the server, leading to a critical webshell exploit.
Key phrases: perform a local file inclusion (LFI), local file inclusion (lfi), critical webshell exploit
CVE-2023-45911: An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password.
Key phrases: login as any user without a password
CVE-2023-45912: WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from the underlying operating system and obtain directory listings.
Key phrases: obtain directory listings., read files from the underlying operating system and, user sessions
CVE-2023-45913: Mesa v23.0.4 was discovered to contain a NULL pointer dereference via the function dri2GetGlxDrawableFromXDrawableId(). This vulnerability is triggered when the X11 server sends an DRI2_BufferSwapComplete event unexpectedly when the application is using DRI3. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
Key phrases: null pointer dereference
CVE-2023-45918: ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.
Key phrases: null pointer dereference
CVE-2023-45919: Mesa 23.0.4 was discovered to contain a buffer over-read in glXQueryServerString(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
Key phrases: buffer over-read, uninterrupted operation, buffer over read
CVE-2023-4592: A Cross-Site Scripting vulnerability has been detected in WPN-XM Serverstack affecting version 0.8.6. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload through the /tools/webinterface/index.php parameter and retrieve the cookie session details of an authenticated user, resulting in a session hijacking.
Key phrases: send a specially crafted JavaScript payload through the, cross-site scripting, session hijacking
CVE-2023-45920: Xfig v3.2.8 was discovered to contain a NULL pointer dereference when calling XGetWMHints(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server or window manager.
Key phrases: null pointer dereference
CVE-2023-45922: glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation violation when calling __glXGetDrawableAttribute(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
Key phrases: segmentation violation
CVE-2023-45924: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.
Key phrases: segmentation violation
CVE-2023-45925: GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).
Key phrases: null pointer dereference
CVE-2023-45927: S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().
Key phrases: arithmetic exception
CVE-2023-45929: S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().
Key phrases: segmentation fault
CVE-2023-4593: Path traversal vulnerability whose exploitation could allow an authenticated remote user to bypass SecurityManager's intended restrictions and list a parent directory via any filename, such as a multiple ..%2F value affecting the 'dodoc' parameter in the /MailAdmin_dll.htm file.
Key phrases: bypass SecurityManager's intended restrictions, bypass SecurityManager's intended restrictions and list a, path traversal
CVE-2023-45931: Mesa 23.0.4 was discovered to contain a NULL pointer dereference in check_xshm() for the has_error state. NOTE: this is disputed because there is no scenario in which the vulnerability was demonstrated.
Key phrases: null pointer dereference
CVE-2023-45935: Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server.
Key phrases: null pointer dereference
CVE-2023-4594: Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmin_dll.htm file.
Key phrases: store a malicious JavaScript payload via GET and, stored xss
CVE-2023-4595: An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve sensitive information stored on the server such as credential files, configuration files, application files, etc., simply by appending any of the following parameters to the end of the URL: %00 %0a, %20, %2a, %a0, %aa, %c0 and %ca.
Key phrases: retrieve sensitive information stored on the server such, information exposure
CVE-2023-45951: lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.
Key phrases: sql injection
CVE-2023-45952: An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file.
Key phrases: execute arbitrary code, execute arbitrary code via uploading a crafted file, arbitrary file upload
CVE-2023-45955: An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands.
Key phrases: cause a denial of service via crafted write
CVE-2023-45956: An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands.
Key phrases: cause a denial of service via crafted Move
CVE-2023-45957: A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees before 1.5.0 allows attackers to execute arbitrary web script or HTML via $e->getMessage() error mishandling.
Key phrases: execute arbitrary web script or HTML, execute arbitrary web script or HTML via $, stored cross-site scripting (xss)
CVE-2023-45958: Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php. This vulnerability allows attackers to execute arbitrary JavaScript in the web browser of a user via a crafted payload.
Key phrases: execute arbitrary JavaScript, execute arbitrary JavaScript in the web browser of, reflected cross-site scripting (xss)
CVE-2023-4596: The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function in versions up to, and including, 1.24.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Key phrases: upload arbitrary files, arbitrary file uploads, remote code execution
CVE-2023-45966: umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability.
Key phrases: blind server-side request forgery (ssrf)
CVE-2023-4597: The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slimstat' shortcode in versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-4598: The Slimstat Analytics plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Key phrases: sql injection, sensitive information
CVE-2023-45984: TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
Key phrases: stack overflow
CVE-2023-45985: TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), stack overflow, denial of service (dos)
CVE-2023-4599: The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-45990: Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges.
Key phrases: escalate privileges, insecure permissions
CVE-2023-45992: A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A successful attack, combined with a certain admin activity, could allow the attacker to gain full admin privileges on the exploited system.
Key phrases: gain full admin privileges, execute persistent XSS and CSRF attacks against a, gain full admin privileges on the exploited system, persistent xss
CVE-2023-45996: SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the member_type.php.
Key phrases: execute arbitrary code, obtain sensitive information, obtain sensitive information and execute arbitrary code via, sql injection
CVE-2023-45998: kodbox 1.44 is vulnerable to Cross Site Scripting (XSS). Customizing global HTML results in storing XSS.
Key phrases: cross site scripting (xss), storing xss
CVE-2023-4600: The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in versions up to, and including, 2.14.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to activate arbitrary plugins.
Key phrases: activate arbitrary plugins, unauthorized modification of data, missing capability check
CVE-2023-46001: Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isom_read.c:2807:51 function in gf_isom_get_user_data.
Key phrases: cause a denial of service via the gpac, buffer overflow
CVE-2023-46003: I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.
Key phrases: cross site scripting (xss)
CVE-2023-46004: Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update_user function.
Key phrases: arbitrary file upload
CVE-2023-46005: Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_branch.php.
Key phrases: sql injection
CVE-2023-46006: Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_user.php.
Key phrases: sql injection
CVE-2023-46007: Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php.
Key phrases: sql injection
CVE-2023-46009: gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream at src/xform.c.
Key phrases: floating point exception (fpe)
CVE-2023-4601: A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and all previous versions.
Key phrases: stack-based buffer overflow, information disclosure, stack based buffer overflow, arbitrary code, arbitrary code execution
CVE-2023-46010: An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.
Key phrases: execute arbitrary commands, execute arbitrary commands via the admin_safe.php component
CVE-2023-46014: SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail' and 'hpassword' parameters.
Key phrases: run arbitrary SQL commands, run arbitrary SQL commands via 'hemail', sql injection
CVE-2023-46015: Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL.
Key phrases: run arbitrary code, run arbitrary code via 'msg' parameter, cross site scripting (xss)
CVE-2023-46016: Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL.
Key phrases: run arbitrary code, run arbitrary code via the 'search', cross site scripting (xss)
CVE-2023-46017: SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail' and 'rpassword' parameters.
Key phrases: run arbitrary SQL commands, run arbitrary SQL commands via 'remail', sql injection
CVE-2023-46018: SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \\\\allows attackers to run arbitrary SQL commands via 'remail' parameter.
Key phrases: run arbitrary SQL commands, sql injection
CVE-2023-46019: Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter.
Key phrases: run arbitrary code, run arbitrary code via the 'error', cross site scripting (xss)
CVE-2023-4602: The Namaste! LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'course_id'  parameter in versions up to, and including, 2.6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Key phrases: inject arbitrary web scripts, reflected cross-site scripting
CVE-2023-46020: Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters.
Key phrases: run arbitrary code, run arbitrary code via the 'rename', cross site scripting (xss)
CVE-2023-46021: SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter.
Key phrases: run arbitrary commands, run arbitrary commands via the 'reqid', sql injection
CVE-2023-46022: SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter.
Key phrases: run arbitrary SQL commands, run arbitrary SQL commands via the 'bid, sql injection
CVE-2023-46023: SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter.
Key phrases: obtain sensitive information, obtain sensitive information via the 'status', sql injection
CVE-2023-46024: SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQL commands and obtain sensitive information via the 'searchdata' parameter.
Key phrases: run arbitrary SQL commands, obtain sensitive information, run arbitrary SQL commands and obtain sensitive information, sql injection
CVE-2023-46025: SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain sensitive information via the 'editid' parameter.
Key phrases: obtain sensitive information, obtain sensitive information via the 'editid', sql injection
CVE-2023-46026: Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters.
Key phrases: run arbitrary code, run arbitrary code via the 'adminname', cross site scripting (xss)
CVE-2023-4603: The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'printersettings'  parameter in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Key phrases: inject arbitrary web scripts, reflected cross-site scripting
CVE-2023-46033: D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control.
Key phrases: incorrect access control
CVE-2023-46040: Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function.
Key phrases: execute arbitrary code, execute arbitrary code via the a crafted payload, cross site scripting
CVE-2023-46042: An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload to
CVE-2023-46045: Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.
Key phrases: out-of-bounds read, exploitability, out of bounds read
CVE-2023-46046: An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files.
Key phrases: run forever to process a series of atttacker, null pointer dereference
CVE-2023-46047: An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted file to
CVE-2023-46048: Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem.
Key phrases: null pointer dereference
CVE-2023-46049: LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto. NOTE: this is disputed because the relationship between pdflatex.fmt and any LLVM language front end is not explained, and because a crash of the llvm-lto application should be categorized as a usability problem.
Key phrases: null pointer dereference, crash
CVE-2023-46051: TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because it should be categorized as a usability problem.
Key phrases: a NULL pointer dereference in texk/web2c, null pointer dereference
CVE-2023-46052: Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration file. NOTE: this is disputed because there is no expectation that test.c code should be executed with an attacker-controlled configuration file.
Key phrases: heap bounds
CVE-2023-46054: Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script to the website_footer parameter in the admin/settings/save.php component.
Key phrases: escalate privileges via a crafted script to the, cross site scripting (xss)
CVE-2023-46055: An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint.
Key phrases: execute arbitrary code, execute arbitrary code and escalate privileges via a
CVE-2023-46058: Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the grp_desc parameter of the admin/group.php component.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload to, cross site scripting (xss)
CVE-2023-46059: Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the Service, and website URL to Ping parameters of the admin/trackback.php component.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload to, cross site scripting (xss)
CVE-2023-4606: An authenticated XCC user with Read-Only permission can change a different users password through a crafted API command.This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
Key phrases: read-only permission
CVE-2023-46066: Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Codedrafty Mediabay  Media Library Folders plugin <=1.6 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46067: Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rocket Font plugin <=1.2.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46068: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XQueue GmbH Maileon for WordPress plugin <=2.16.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46069: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Osmansorkar Ajax Archive Calendar plugin <=2.6.7 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-4607: An authenticated XCC user can change permissions for any user through a crafted API command.
CVE-2023-46070: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Emmanuel GEORJON EG-Attachments plugin <=2.1.3 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46071: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ClickDatos Proteccin de Datos RGPD plugin <=3.1.0 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46072: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <=2.0.9 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46074: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Borbis Media FreshMail For WordPress plugin <=2.3.2 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46075: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Contact Form Builder, Contact Widget plugin <=2.1.6 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46076: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <=1.2.102 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46077: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed  Custom Feed plugin <=2.2.5 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46078: Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin <=1.6.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4608: An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
Key phrases: blind sql injection
CVE-2023-46081: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <=1.1.34 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46084: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bPlugins LLC Icons Font Loader allows SQL Injection.This issue affects Icons Font Loader: from n/a through 1.1.2.
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-46085: Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <=2.2.4 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46086: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SERVIT Software Solutions affiliate-toolkit  WordPress Affiliate Plugin allows Reflected XSS.This issue affects affiliate-toolkit  WordPress Affiliate Plugin: from n/a through 3.4.3.
Key phrases: Reflected XSS.This issue affects affiliate-toolkit  , improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2023-46087: Cross-Site Request Forgery (CSRF) vulnerability in Mahlamusa Who Hit The Page  Hit Counter plugin <=1.4.14.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46088: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <=1.6.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46089: Cross-Site Request Forgery (CSRF) vulnerability in Lee Le @ Userback Userback plugin <=1.0.13 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46090: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado WDSocialWidgets plugin <=1.0.15 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46091: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin <=2.5 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46092: Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.Com Webmaster Tools allows Stored XSS.This issue affects Webmaster Tools: from n/a through 2.0.
Key phrases: Stored XSS.This issue affects Webmaster Tools: from, cross-site request forgery (csrf), stored xss, webmaster tools
CVE-2023-46093: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in LionScripts.Com Webmaster Tools plugin <=2.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46094: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Conversios Track Google Analytics 4, Facebook Pixel & Conversions API via Google Tag Manager for WooCommerce plugin <=6.5.3 versions.
Key phrases: cross-site scripting (xss)
CVE-2023-46095: Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole Smooth Scroll Links [SSL] plugin <=1.1.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46096: A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly authenticate users in the PUD Manager web service. This could allow an unauthenticated adjacent attacker to generate a privileged token and upload additional documents.
Key phrases: generate a privileged token and upload additional documents
CVE-2023-46097: A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database.
Key phrases: execute SQL statements in the underlying database
CVE-2023-46098: A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.
Key phrases: trick a legitimate user to trigger unwanted behavior
CVE-2023-46099: A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). There is a stored cross-site scripting vulnerability in the Administration Console of the affected product, that could allow an attacker with high privileges to inject Javascript code into the application that is later executed by another legitimate user.
Key phrases: inject Javascript code into the application that is, stored cross-site scripting
CVE-2023-46100: in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource.
Key phrases: a local attacker get sensitive buffer information through, uninitialized resource
CVE-2023-46102: The Android Client application, when enrolled to the AppHub server, connects to an MQTTbroker to exchange messages and receive commands to execute on the HMI device.The protocol builds on top of MQTT to implement the remote management of the device is encrypted with a hard-coded DES symmetric key, that can be retrieved reversing both the Android Client application and the server-side web application.This issue allows an attacker able to control a malicious MQTT broker on the same subnetnetwork of the device, to craft malicious messages and send them to the HMI device, executing arbitrary commands on the device itself.
Key phrases: executing arbitrary commands, control a malicious MQTT broker on the same, execute arbitrary
CVE-2023-46104: Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.
Key phrases: uncontrolled resource consumption
CVE-2023-4611: A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak.
Key phrases: crash the system or lead to a kernel, use-after-free flaw, kernel information leak, use after free, crash system
CVE-2023-46115: Tauri is a framework for building binaries for all major desktop platforms. This advisory is not describing a vulnerability in the Tauri code base itself but a commonly used misconfiguration which could lead to leaking of the private key and updater key password into bundled Tauri applications using the Vite frontend in a specific configuration. The Tauri documentation used an insecure example configuration in the `Vite guide` to showcase how to use Tauri together with Vite.  Copying the following snippet `envPrefix: ['VITE_', 'TAURI_'],` from this guide into the `vite.config.ts` of a Tauri project leads to bundling the `TAURI_PRIVATE_KEY` and `TAURI_KEY_PASSWORD` into the Vite frontend code and therefore leaking this value to the released Tauri application. Using the `envPrefix: ['VITE_'],` or any other framework than Vite means you are not impacted by this advisory. Users are advised to rotate their updater private key if they are affected by this (requires Tauri CLI >=1.5.5). After updating the envPrefix configuration, generate a new private key with `tauri signer generate`, saving the new private key and updating the updater's `pubkey` value on `tauri.conf.json` with the new public key. To update your existing application, the next application build must be signed with the older private key in order to be accepted by the existing application.
CVE-2023-46116: Tutanota (Tuta Mail) is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the `file:` URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to check other harmful schemes such as `ftp:`, `smb:`, etc. which can also be used. Successful exploitation of this vulnerability will enable an attacker to gain code execution on a victim's computer. Version 3.118.2 contains a patch for this issue.
Key phrases: gain code execution, open links in emails in external applications, harmful schemes