yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-36482: An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service restart.
Key phrases: buffer copy, nfc service restart
CVE-2023-36483: Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlierwhich allows remote attackers to retrieve sensitive data including customer data, security system status, and event history.
Key phrases: bypass can be achieved by session ID prediction, Authorization bypass, retrieve sensitive data including customer data, authorization bypass, session id prediction
CVE-2023-36484: ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to reflected Cross-Site Scripting (XSS).
Key phrases: cross-site scripting (xss)
CVE-2023-36485: The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file.
Key phrases: run arbitrary system, run arbitrary system commands on the application server
CVE-2023-36486: The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename.
Key phrases: run arbitrary system, run arbitrary system commands on the application server
CVE-2023-36487: The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.
Key phrases: take over the account, password reset function
CVE-2023-36488: ILIAS 7.21 and 8.0_beta1 through 8.2 is vulnerable to stored Cross Site Scripting (XSS).
Key phrases: cross site scripting (xss)
CVE-2023-36489: Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands. Affected products/versions are as follows: TL-WR802N firmware versions prior to 'TL-WR802N(JP)_V4_221008', TL-WR841N firmware versions prior to 'TL-WR841N(JP)_V14_230506', and TL-WR902AC firmware versions prior to 'TL-WR902AC(JP)_V3_230506'.
Key phrases: execute arbitrary OS commands, arbitrary os command
CVE-2023-3649: iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file
Key phrases: denial of service via packet injection or crafted, crash
CVE-2023-36490: Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local access.
Key phrases: potentially enable denial of service via local access, improper initialization
CVE-2023-36492: Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
Key phrases: execute an arbitrary script on the web browser, cross-site scripting, execute arbitrary
CVE-2023-36493: Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escalation of privilege via local access.
Key phrases: potentially enable escalation of privilege via local access, uncontrolled search path, escalation privilege
CVE-2023-36494: Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Key phrases: sensitive information
CVE-2023-36495: An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
Key phrases: execute arbitrary code, integer overflow
CVE-2023-36496: Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their permissions in the Directory Server.
Key phrases: elevate their permissions in the Directory Server, delegated admin privilege virtual attribute provider plugin
CVE-2023-36497: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.
Key phrases: elevate to admin privileges, guest user
CVE-2023-36498: A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell.
Key phrases: gain access, post-authentication command injection, arbitrary command injection, unrestricted shell, arbitrary commands
CVE-2023-36499: Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi.
Key phrases: buffer overflows
CVE-2023-3650: The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting
CVE-2023-36501: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <=9.0.2 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-36502: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <=1.3.2 versions.
Key phrases: improper neutralization of input during web page generation, cross-site scripting
CVE-2023-36503: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Max Foundry WordPress Button Plugin MaxButtons plugin <=9.5.3 versions.
Key phrases: cross-site scripting (xss)
CVE-2023-36507: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress  Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress  Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.64.
Key phrases: exposure of sensitive information
CVE-2023-36508: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft  Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft  Messages Database Plugin For WordPress: from n/a through 1.7.1.
Key phrases: DB by BestWebSoft  Messages Database Plugin For, sql injection
CVE-2023-3651: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Ant E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 11.
Key phrases: SQL Injection, sql injection
CVE-2023-36511: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Order Barcodes plugin <=1.6.4 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-36513: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <=5.7.5 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-36514: Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Shipping Multiple Addresses plugin <=3.8.5 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-36517: Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <=2.6.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-3652: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Reflected XSS.This issue affects E-Commerce Software: before 11.
Key phrases: Reflected XSS.This issue affects E-Commerce Software, improper neutralization of input during web page generation, cross-site scripting, reflected xss
CVE-2023-36520: Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12.
Key phrases: Bypass Through User-Controlled, Authorization Bypass, authorization bypass through user-controlled key
CVE-2023-36521: A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains avulnerability that may lead to a denial of service condition. An attacker maycause a denial of service situation of all socket-based communication of theaffected products if the result server is enabled.
Key phrases: denial of service condition
CVE-2023-36522: Cross-Site Request Forgery (CSRF) vulnerability in WePupil Quiz Expert plugin <=1.5.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-36523: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email download link.This issue affects Email download link: from n/a through 3.7.
Key phrases: exposure of sensitive information
CVE-2023-36527: Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0.
Key phrases: improper neutralization of formula elements
CVE-2023-36529: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme allows SQL Injection.This issue affects Houzez - Real Estate WordPress Theme: from n/a through 1.3.4.
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-3653: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Stored XSS.This issue affects E-Commerce Software: before 11.
Key phrases: Stored XSS.This issue affects E-Commerce Software, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-36530: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smartypants SP Project & Document Manager plugin <=4.67 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-36532: Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.
Key phrases: enable a denial of service via network access, buffer overflow
CVE-2023-36533: Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access.
Key phrases: enable a denial of service via network access, uncontrolled resource consumption
CVE-2023-36534: Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
Key phrases: enable an escalation of privilege via network access, path traversal, escalation privilege
CVE-2023-36535: Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.
Key phrases: enable information disclosure via network access
CVE-2023-36536:  Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
Key phrases: enable an escalation of privilege via local access, untrusted search path, escalation privilege
CVE-2023-36537:  Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
Key phrases: enable an escalation of privilege via local access, improper privilege management, escalation privilege
CVE-2023-36538:  Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
Key phrases: enable an escalation of privilege via local access, improper access control, escalation privilege
CVE-2023-36539: Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
Key phrases: exposure of information, disclosure of sensitive information
CVE-2023-3654: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a origin bypass via the host header in an HTTP request.This vulnerability can be triggered by an HTTP endpoint exposed to the network.
Key phrases: bypass via the host header in an HTTP request, origin bypass
CVE-2023-36540: Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
Key phrases: enable an escalation of privilege via local access, untrusted search path, escalation privilege
CVE-2023-36541: Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
Key phrases: enable an escalation of privilege via network access, insufficient verification of data authenticity, escalation privilege
CVE-2023-36542: Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retrieving drivers, which allows an authenticated and authorized user to configure a location that enables custom code execution. The resolution introduces a new Required Permission for referencing remote resources, restricting configuration of these components to privileged users. The permission prevents unprivileged users from configuring Processors and Controller Services annotated with the new Reference Remote Resources restriction. Upgrading to Apache NiFi 1.23.0 is the recommended mitigation.
Key phrases: configure a location that enables custom code execution
CVE-2023-36543: Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang.It is recommended to upgrade to a version that is not affected
CVE-2023-36547: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
Key phrases: execute unauthorized code or commands via specifically crafted, os command injection
CVE-2023-36548: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
Key phrases: execute unauthorized code or commands via specifically crafted, os command injection
CVE-2023-36549: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
Key phrases: execute unauthorized code or commands via specifically crafted, os command injection
CVE-2023-3655: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a dangerous methods, that allows to leak the database (system settings, user accounts,...).This vulnerability can be triggered by an HTTP endpoint exposed to the network.
Key phrases: leak the database (system settings, dangerous methods, http endpoint
CVE-2023-36550: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
Key phrases: execute unauthorized code or commands via specifically crafted, os command injection
CVE-2023-36551: A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows attacker to information disclosure via a crafted http request.
Key phrases: information disclosure via a crafted http request, exposure of sensitive information
CVE-2023-36553: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 and 5.0.0 through 5.0.1 and 4.10.0 and 4.9.0 and 4.7.2 allows attacker to execute unauthorized code or commands via crafted API requests.
Key phrases: execute unauthorized code or commands via crafted API, os command injection
CVE-2023-36554: A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, version 6.4.0 through 6.4.13, 6.2 all versions allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
Key phrases: execute unauthorized code or commands via specially crafted, improper access control
CVE-2023-36555: An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via the SAML and Security Fabric components.
Key phrases: execute unauthorized code or commands via the SAML
CVE-2023-36556: An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6.4.7 allows an authenticated attacker to login on other users accounts from the same web domain via crafted HTTP or HTTPs requests.
Key phrases: login on other users accounts from the same, authorization, cwe-863
CVE-2023-36557: PrintHTML API Remote Code Execution Vulnerability
Key phrases: printhtml api remote code execution
CVE-2023-36558: ASP.NET Core - Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-36559: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Key phrases: spoofing
CVE-2023-3656: cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network.
Key phrases: unauthenticated remote code execution
CVE-2023-36560: ASP.NET Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, asp.net security feature bypass
CVE-2023-36561: Azure DevOps Server Elevation of Privilege Vulnerability
Key phrases: azure devops server elevation of privilege
CVE-2023-36562: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-36563: Microsoft WordPad Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-36564: Windows Search Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows search security feature bypass
CVE-2023-36565: Microsoft Office Graphics Elevation of Privilege Vulnerability
Key phrases: microsoft office graphics elevation of privilege
CVE-2023-36566: Microsoft Common Data Model SDK Denial of Service Vulnerability
Key phrases: denial of service
CVE-2023-36567: Windows Deployment Services Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-36568: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Key phrases: click-to-run elevation of privilege
CVE-2023-36569: Microsoft Office Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-3657: A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects some unknown processing of the file Master.php?f=save_book of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-234011.
Key phrases: sql injection
CVE-2023-36570: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36571: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36572: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36573: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36574: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36575: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36576: Windows Kernel Information Disclosure Vulnerability
Key phrases: windows kernel information disclosure
CVE-2023-36577: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-36578: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36579: Microsoft Message Queuing Denial of Service Vulnerability
Key phrases: microsoft message queuing denial of service
CVE-2023-3658: A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file Master.php?f=delete_book of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-234012.
Key phrases: sql injection
CVE-2023-36581: Microsoft Message Queuing Denial of Service Vulnerability
Key phrases: microsoft message queuing denial of service
CVE-2023-36582: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36583: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36584: Windows Mark of the Web Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows mark of the web security feature bypass
CVE-2023-36585: Windows upnphost.dll Denial of Service Vulnerability
Key phrases: denial of service
CVE-2023-36589: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-3659: A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=user/manage_user. The manipulation of the argument firstname/middlename leads to cross site scripting. The attack can be launched remotely. The identifier VDB-234013 was assigned to this vulnerability.
Key phrases: cross site scripting
CVE-2023-36590: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36591: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36592: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36593: Microsoft Message Queuing Remote Code Execution Vulnerability
Key phrases: microsoft message queuing remote code execution
CVE-2023-36594: Windows Graphics Component Elevation of Privilege Vulnerability
Key phrases: windows graphics component elevation of privilege
CVE-2023-36596: Remote Procedure Call Information Disclosure Vulnerability
Key phrases: remote procedure call information disclosure
CVE-2023-36598: Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-3660: A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/add_user_modal.php. The manipulation of the argument un leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-234014 is the identifier assigned to this vulnerability.
CVE-2023-36602: Windows TCP/IP Denial of Service Vulnerability
Key phrases: windows tcp ip denial of service
CVE-2023-36603: Windows TCP/IP Denial of Service Vulnerability
Key phrases: windows tcp ip denial of service
CVE-2023-36605: Windows Named Pipe Filesystem Elevation of Privilege Vulnerability
Key phrases: windows named pipe filesystem elevation of privilege
CVE-2023-36606: Microsoft Message Queuing Denial of Service Vulnerability
Key phrases: microsoft message queuing denial of service
CVE-2023-36607: The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.
Key phrases: authorization, missing authorization, run commands, sensitive information
CVE-2023-36608: The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.
Key phrases: insecure
CVE-2023-36609: The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.
Key phrases: root privileges, malicious script
CVE-2023-3661: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=save_inquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-234015.
Key phrases: sql injection
CVE-2023-36610: ?The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successfully brute force the token and authenticate themselves.
Key phrases: insufficient entropy
CVE-2023-36611: The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with user privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.
Key phrases: access software security tokens of higher privilege, access files requiring higher privileges by establishing an, tbox rtus
CVE-2023-36612: Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write arbitrary files in the application's private directory. Additionally, by using a malicious intent, the attacker may redirect the server's responses (containing sensitive information) to third-party applications by using a custom-crafted deeplink scheme.
Key phrases: write arbitrary files, write arbitrary files in the application's private, directory traversal, malicious intent, sensitive information
CVE-2023-36617: A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.
Key phrases: redos issue, execution time
CVE-2023-36618: Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users.
Key phrases: execution of OS commands as root user by
CVE-2023-36619: Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users.
Key phrases: execution of administrative scripts by unauthenticated users
CVE-2023-3662: In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context .
Key phrases: for execution of binaries from the current working
CVE-2023-36620: An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup="false" attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is used to authenticate requests to the API.
Key phrases: backup the internal memory of the app to
CVE-2023-36621: An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing.
CVE-2023-36622: The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter.
Key phrases: inject arbitrary OS commands, inject arbitrary OS commands via the timezone parameter, arbitrary os command
CVE-2023-36623: The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges.
Key phrases: calculate the root password and escalate privileges, hard-coded secrets
CVE-2023-36624: Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via the Sudo configuration. This allows the elevated execution of binaries without a password requirement.
Key phrases: escalate privileges via the Sudo configuration, the elevated execution of binaries without a password, sudo configuration
CVE-2023-36627: A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly. 
Key phrases: functioning properly
CVE-2023-36628: A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.
Key phrases: gain root access, a vSphere/ESXi VMware admin on a, privilege escalation
CVE-2023-36629: The ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out-of-bounds read.
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-3663: In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server.
Key phrases: manipulate the content of notifications received via HTTP, integrity check
CVE-2023-36630: In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
Key phrases: authentication bypass, insecure file upload, privilege escalation
CVE-2023-36631: Lack of access control in wfc.exe in Malwarebytes Binisoft Windows Firewall Control 6.9.2.0 allows local unprivileged users to bypass Windows Firewall restrictions via the user interface's rules tab. NOTE: the vendor's perspective is "this is intended behavior as the application can be locked using a password."
Key phrases: bypass Windows Firewall restrictions, bypass Windows Firewall restrictions via the user interface, local unprivileged users
CVE-2023-36632: The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via a crafted argument. This argument is plausibly an untrusted value from an application's input data that was supposed to contain a name and an e-mail address. NOTE: email.utils.parseaddr is categorized as a Legacy API in the documentation of the Python email package. Applications should instead use the email.parser.BytesParser or email.parser.Parser class. NOTE: the vendor's perspective is that this is neither a vulnerability nor a bug. The email package is intended to have size limits and to throw an exception when limits are exceeded; they were exceeded by the example demonstration code.
Key phrases: trigger "RecursionError: maximum recursion depth exceeded
CVE-2023-36633: An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests.
Key phrases: see and modify the title of address book, improper authorization, cwe-285
CVE-2023-36634: An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially crafted command arguments.
Key phrases: delete arbitrary files, list and delete arbitrary files and directory via, special elements
CVE-2023-36635: An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.27.0.0 through 7.0.1 may allow a remote authenticated read-only user to modify the interface settings via the API.
Key phrases: modify the interface settings via the API, improper access control
CVE-2023-36637: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to inject HTML tags in FortiMail's calendar via input fields.
Key phrases: inject HTML tags in FortiMail's calendar via, web page generation, cwe-79, improper neutralization of input during web page generation
CVE-2023-36638: An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions API may allow a remote and authenticated API admin user to access some system settings such as the mail server settings through the API via a stolen GUI session ID.
Key phrases: access some system settings such as the mail, privilege management, cwe-269, improper privilege management
CVE-2023-36639: A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiPAM versions 1.0.0 through 1.0.3 allows attacker to execute unauthorized code or commands  via specially crafted API requests.
Key phrases: execute unauthorized code or commands  via specially, externally-controlled format string
CVE-2023-3664: The FileOrganizer WordPress plugin through 1.0.2 does not restrict functionality on multisite instances, allowing site admins to gain full control over the server.
Key phrases: gain full control, gain full control over the server
CVE-2023-36641: A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all  versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version 7.2.0 through 7.2.5, FortiOS version 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions allows attacker to denial of service via specifically crafted HTTP requests.
Key phrases: denial of service via specifically crafted HTTP requests, numeric truncation error
CVE-2023-36642: An improper neutralization of special elements used in an OS command vulnerability [CWE-78]in the management interface of FortiTester 3.0.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
Key phrases: execute unauthorized commands via specifically crafted arguments to, os command
CVE-2023-36646: Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker with low privileges to execute privileged functions and achieve privilege escalation via REST API endpoint invocation.
Key phrases: execute privileged functions and achieve privilege escalation via, incorrect user role checking
CVE-2023-36647: A hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate arbitrary users and roles in web management and REST API endpoints via crafted JWT tokens.
Key phrases: impersonate arbitrary users, impersonate arbitrary users and roles in web management
CVE-2023-36648: Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read potentially sensitive information and deny service to users by directly reading and writing data in Apache Kafka (as consumer and producer).
Key phrases: read potentially sensitive information and deny service to, missing authentication, deny service to users
CVE-2023-36649: Insertion of sensitive information in the centralized (Grafana) logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs (as a Granafa authenticated user) or from the Loki REST API without authentication.
Key phrases: impersonate other users in web management and the, sensitive information
CVE-2023-3665: A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables,leading to denial of service and or the execution of arbitrary code.
Key phrases: code injection, denial of service, execution of arbitrary code
CVE-2023-36650: A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands as the root Linux user on the host system via forged update packages.
Key phrases: execute OS commands as the root Linux user, missing integrity check
CVE-2023-36651: Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consume the most privileged REST API endpoints via these credentials.
Key phrases: login to web management as super-admin, hidden and hard-coded credentials, hard coded credentials
CVE-2023-36652: A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read database data via SQL commands injected in the search parameter.
Key phrases: read database data via SQL commands injected in, sql injection
CVE-2023-36654: Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download host server SSH private keys (associated with a Linux root user) by injecting paths inside REST API endpoint parameters.
Key phrases: download host server SSH private keys (associated, directory traversal
CVE-2023-36655: The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the users store) allows a remote blocked user to login and obtain an authentication token by specifying a username with different uppercase/lowercase character combination.
Key phrases: obtain an authentication token by specifying a username, login and obtain an authentication token by specifying
CVE-2023-36656: Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component.
Key phrases: execute arbitrary code, execute arbitrary code via the KeyValuesTable component, cross site scripting (xss)
CVE-2023-36657: An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows (desktop shortcuts, narrator) can be abused for privilege escalation.
Key phrases: privilege escalation
CVE-2023-36658: An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally.
Key phrases: unquoted service path
CVE-2023-36659: An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service (loss of communication).
Key phrases: denial of service (loss of communication), cause a denial of service (loss of, long inputs
CVE-2023-36660: The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.
Key phrases: memory corruption
CVE-2023-36661: Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)
Key phrases: SSRF via a crafted KeyInfo element, ssrf
CVE-2023-36662: The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24.
Key phrases: stored XSS on the Bulk User Actions page, stored xss
CVE-2023-36663: it-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by authenticated users) via the sort parameter of the API interface.
Key phrases: SQL Injection (by authenticated users) via, sql injection
CVE-2023-36664: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
CVE-2023-36665: "protobuf.js (aka protobufjs) 6.10.0 through 7.x before 7.2.5 allows Prototype Pollution, a different vulnerability than CVE-2022-25878. A user-controlled protobuf message can be used by an attacker to pollute the prototype of Object.prototype by adding and overwriting its data and functions. Exploitation can involve: (1) using the function parse to parse protobuf messages on the fly, (2) loading .proto files by using load/loadSync functions, or (3) providing untrusted input to the functions ReflectionObject.setParsedOption and util.setProperty.
Key phrases: pollute the prototype of Object.prototype by adding and, prototype pollution
CVE-2023-36666: INEX IXP-Manager before 6.3.1 allows XSS. list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, page-header-preamble.foil.php, overview.foil.php, cust.foil.php, and view.foil.php may be affected.
Key phrases: XSS, xss
CVE-2023-36667: Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.
Key phrases: Directory Traversal, directory traversal
CVE-2023-36669: Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitrary control of the IDU/ODU system. Any attacker with layer-3 network access to the IDU can impersonate the Touch Panel Unit (TPU) within the IDU by sending crafted TCP requests to the IDU.
Key phrases: obtain arbitrary control, obtain arbitrary control of the IDU/ODU system, missing authentication, impersonate
CVE-2023-3667: The Bit Assist WordPress plugin before 1.1.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2023-36670: A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute arbitrary Linux commands as root by sending crafted TCP requests to the device.
Key phrases: execute arbitrary Linux commands, remotely exploitable command injection
CVE-2023-36671: An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the VPN server's IP address is sent in plaintext outside the VPN tunnel even if this traffic is not generated by the VPN client. This allows an adversary to trick the victim into sending plaintext traffic to the VPN server's IP address and thereby deanonymize the victim. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "ServerIP attack for only traffic to the real IP address of the VPN server" rather than to only Clario.
Key phrases: trick the victim into sending plaintext traffic to, deanonymize, serverip
CVE-2023-36672: An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the operating system such that traffic to the local network is sent in plaintext outside the VPN tunnel even if the local network is using a non-RFC1918 IP subnet. This allows an adversary to trick the victim into sending arbitrary IP traffic in plaintext outside the VPN tunnel. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in leakage of traffic in plaintext" rather than to only Clario.
Key phrases: sending arbitrary IP traffic, trick the victim into sending arbitrary IP traffic, leakage of traffic in plaintext
CVE-2023-36673: An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the VPN server's IP address is sent in plaintext outside the VPN tunnel, even if this traffic is not generated by the VPN client, while simultaneously using plaintext DNS to look up the VPN server's IP address. This allows an adversary to trick the victim into sending traffic to arbitrary IP addresses in plaintext outside the VPN tunnel. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "ServerIP attack, combined with DNS spoofing, that can leak traffic to an arbitrary IP address" rather than to only Avira Phantom VPN.
Key phrases: trick the victim into sending traffic to arbitrary, dns spoofing
CVE-2023-36674: An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possible to bypass the Bad image list (aka badFile) by using the thumb parameter (aka Manualthumb) of the File syntax.
Key phrases: bypass the Bad image list (aka badFile, bad image list (aka badfile)
CVE-2023-36675: An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature.
Key phrases: XSS in the partial blocks feature, xss
CVE-2023-36677: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager allows SQL Injection.This issue affects SP Project & Document Manager: from n/a through 4.67.
Key phrases: SQL Injection, sql command, sql injection