yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-46420: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function.
Key phrases: remote command execution (rce)
CVE-2023-46421: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411D00 function.
Key phrases: remote command execution (rce)
CVE-2023-46422: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.
Key phrases: remote command execution (rce)
CVE-2023-46423: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_417094 function.
Key phrases: remote command execution (rce)
CVE-2023-46424: TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_422BD4 function.
Key phrases: remote command execution (rce)
CVE-2023-46426: Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) via gf_fwrite component in at utils/os_file.c.
Key phrases: execute arbitrary code, denial of service (DoS), execute arbitrary code and cause a denial of, heap-based buffer overflow, denial of service (dos)
CVE-2023-46427: An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive information via null pointer deference in gf_dash_setup_period component in media_tools/dash_client.c.
Key phrases: execute arbitrary code, denial of service (DoS), obtain sensitive information, denial of service (dos), null pointer deference
CVE-2023-46428: An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted file, arbitrary file upload
CVE-2023-4643: The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PHP Object Injection when a suitable gadget is present on the blog
Key phrases: perform PHP Object Injection when a suitable gadget, php object injection
CVE-2023-46435: Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view_service&id.
Key phrases: sql injection
CVE-2023-46445: An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."
Key phrases: control the extension info message (RFC 8308, man-in-the-middle, rogue extension negotiation, man in the middle
CVE-2023-46446: An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."
Key phrases: control the remote end of an SSH client, packet injection removal, shell emulation, rogue session
CVE-2023-46447: The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted glucose measurements over BLE.
Key phrases: unencrypted glucose measurements
CVE-2023-46448: Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images.
Key phrases: run arbitrary code, run arbitrary code via crafted string in metadata, reflected cross-site scripting (xss)
CVE-2023-46449: Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.
Key phrases: incorrect access control
CVE-2023-4645: The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai_ajax function. This can allow unauthenticated attackers to extract sensitive data such as post titles and slugs (including those of protected posts along with their passwords), usernames, available roles, the plugin license key provided the remote debugging option is enabled. In the default state it is disabled.
Key phrases: extract sensitive data such as post titles and, sensitive information exposure
CVE-2023-46450: Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier function.
Key phrases: cross site scripting (xss)
CVE-2023-46451: Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field.
Key phrases: cross site scripting (xss)
CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality.
Key phrases: inject arbitrary shell commands
CVE-2023-46455: In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality.
Key phrases: write arbitrary files, path traversal, file upload
CVE-2023-46456: In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.
Key phrases: inject arbitrary shell commands, openvpn client file upload functionality
CVE-2023-4646: The Simple Posts Ticker WordPress plugin before 1.1.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Key phrases: perform Stored Cross-Site Scripting attacks, stored cross-site scripting
CVE-2023-46467: Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload to, cross site scripting
CVE-2023-46468: An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted file to
CVE-2023-4647: An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which the projects API pagination can be skipped, potentially leading to DoS on certain instances.
Key phrases: dos
CVE-2023-46470: Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser.
Key phrases: execute arbitrary code, execute arbitrary code via crafted telecommand in the, cross site scripting
CVE-2023-46471: Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer.
Key phrases: execute arbitrary code, execute arbitrary code via the text variable scriptContainer, cross site scripting
CVE-2023-46474: File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the start_import.php file.
Key phrases: execute arbitrary code, execute arbitrary code and escalate privileges via a, file upload, pmb
CVE-2023-46475: A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the name field of the project, they can inject malicious JavaScript code.
Key phrases: stored cross-site scripting
CVE-2023-46478: An issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the customer_data parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted script to
CVE-2023-4648: The WP Customer Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Key phrases: inject arbitrary web scripts, stored cross-site scripting
CVE-2023-46480: An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.
Key phrases: execute arbitrary code, obtain sensitive information, execute arbitrary code and obtain sensitive information via
CVE-2023-46482: SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Backup Functionality in the coreframe/app/database/admin/index.php component.
Key phrases: execute arbitrary code, execute arbitrary code via the Database Backup Functionality, sql injection
CVE-2023-46483: Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted payload to, cross site scripting
CVE-2023-46484: An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function.
Key phrases: execute arbitrary code, execute arbitrary code via the setLedCfg function
CVE-2023-46485: An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component.
Key phrases: execute arbitrary code, execute arbitrary code via the setTracerouteCfg function of
CVE-2023-4649: Session Fixation in GitHub repository instantsoft/icms2 prior to 2.16.1.
Key phrases: session fixation
CVE-2023-46490: SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the managers.php function.
Key phrases: obtain sensitive information, obtain sensitive information via the form_actions(), sql injection
CVE-2023-46491: ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.
Key phrases: cross site scripting (xss)
CVE-2023-46492: Cross Site Scripting vulnerability in MLDB.ai v.2017.04.17.0 allows a remote attacker to execute arbitrary code via a crafted payload to the public_html/doc/index.html.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload to, cross site scripting
CVE-2023-46493: Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted request to, directory traversal
CVE-2023-46494: Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted request to the ProductGrid function in admin/productGrid/Grid.jsx.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted request to, cross site scripting
CVE-2023-46495: Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the sortBy parameter.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted request to, cross site scripting
CVE-2023-46496: Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the DELETE function in api/files endpoint.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted request to, directory traversal
CVE-2023-46497: Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the mkdirSync function in the folderCreate/createFolder.js endpoint.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted request to, directory traversal
CVE-2023-46498: An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file.
Key phrases: execute arbitrary code, obtain sensitive information, obtain sensitive information and execute arbitrary code via
CVE-2023-46499: Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted scripts to, cross site scripting
CVE-2023-4650: Improper Access Control in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
Key phrases: improper access control
CVE-2023-46501: An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function.
Key phrases: obtain sensitive information, obtain sensitive information via a crafted payload to
CVE-2023-46502: An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory.
Key phrases: read internal files and execute server side request, insecure documentbuilderfactory, server side request forgery
CVE-2023-46503: Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules.
Key phrases: execute arbitrary code, execute arbitrary code via the reader management and, cross site scripting (xss)
CVE-2023-46504: Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component.
Key phrases: execute arbitrary code, execute arbitrary code via the library name function, cross site scripting (xss)
CVE-2023-46505: Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file.
Key phrases: execute arbitrary code, execute arbitrary code via the content1 parameter in, cross site scripting
CVE-2023-46509: An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.
Key phrases: execute arbitrary code, execute arbitrary code via the texteditor.php component
CVE-2023-4651: Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1.
Key phrases: server-side request forgery (ssrf)
CVE-2023-46510: An issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via the cig-bin/cstecgi.cgi to the settings/setPasswordCfg function.
Key phrases: execute arbitrary code, execute arbitrary code via the cig-bin
CVE-2023-46518: Mercury A15 V1.0 20230818_1.0.3 was discovered to contain a command execution vulnerability via the component cloudDeviceTokenSuccCB.
Key phrases: command execution
CVE-2023-4652: Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
Key phrases: cross-site scripting (xss)
CVE-2023-46520: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function uninstallPluginReqHandle.
Key phrases: stack overflow
CVE-2023-46521: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function RegisterRegister.
Key phrases: stack overflow
CVE-2023-46522: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function deviceInfoRegister.
Key phrases: stack overflow
CVE-2023-46523: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function upgradeInfoRegister.
Key phrases: stack overflow
CVE-2023-46525: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function loginRegister.
Key phrases: stack overflow
CVE-2023-46526: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function resetCloudPwdRegister.
Key phrases: stack overflow
CVE-2023-46527: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function bindRequestHandle.
Key phrases: stack overflow
CVE-2023-4653: Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
Key phrases: cross-site scripting (xss)
CVE-2023-46534: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function modifyAccPwdRegister.
Key phrases: stack overflow
CVE-2023-46535: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getResetVeriRegister.
Key phrases: stack overflow
CVE-2023-46536: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function chkRegVeriRegister.
Key phrases: stack overflow
CVE-2023-46537: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function getRegVeriRegister.
Key phrases: stack overflow
CVE-2023-46538: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function chkResetVeriRegister.
Key phrases: stack overflow
CVE-2023-46539: TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin was discovered to contain a stack overflow via the function registerRequestHandle.
Key phrases: stack overflow
CVE-2023-4654: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1.
Key phrases: sensitive cookie
CVE-2023-46540: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp.
Key phrases: stack overflow
CVE-2023-46541: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup.
Key phrases: stack overflow
CVE-2023-46542: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMeshUploadConfig.
Key phrases: stack overflow
CVE-2023-46543: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey.
Key phrases: stack overflow
CVE-2023-46544: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl.
Key phrases: stack overflow
CVE-2023-46545: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc.
Key phrases: stack overflow
CVE-2023-46546: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats.
Key phrases: stack overflow
CVE-2023-46547: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog.
Key phrases: stack overflow
CVE-2023-46548: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect.
Key phrases: stack overflow
CVE-2023-46549: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg.
Key phrases: stack overflow
CVE-2023-4655: Cross-site Scripting (XSS) - Reflected in GitHub repository instantsoft/icms2 prior to 2.16.1.
Key phrases: cross-site scripting (xss)
CVE-2023-46550: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.
Key phrases: stack overflow
CVE-2023-46551: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl.
Key phrases: stack overflow
CVE-2023-46552: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP.
Key phrases: stack overflow
CVE-2023-46553: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl.
Key phrases: stack overflow
CVE-2023-46554: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel.
Key phrases: stack overflow
CVE-2023-46555: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw.
Key phrases: stack overflow
CVE-2023-46556: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter.
Key phrases: stack overflow
CVE-2023-46557: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN.
Key phrases: stack overflow
CVE-2023-46558: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.
Key phrases: stack overflow
CVE-2023-46559: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr.
Key phrases: stack overflow
CVE-2023-46560: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup.
Key phrases: stack overflow
CVE-2023-46562: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg.
Key phrases: stack overflow
CVE-2023-46563: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS.
Key phrases: stack overflow
CVE-2023-46564: TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ.
Key phrases: stack overflow
CVE-2023-46569: An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-46570: An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-46574: An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.
Key phrases: execute arbitrary code, execute arbitrary code via the FileName parameter of
CVE-2023-46575: A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the order parameter
Key phrases: execute arbitrary code, sql injection, sensitive information
CVE-2023-4658: An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the `Allowed to merge` permission as a guest user, when granted the permission through a group.
CVE-2023-46580: Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component.
Key phrases: execute arbitrary code, execute arbitrary code via the pname parameter of, cross-site scripting (xss)
CVE-2023-46581: SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component.
Key phrases: execute arbitrary code, execute arbitrary code via the name, sql injection
CVE-2023-46582: SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the id, sql injection
CVE-2023-46583: Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted payload injected, cross-site scripting (xss)
CVE-2023-46584: SQL Injection vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint.
Key phrases: escalate privileges via a crafted request to the, sql injection
CVE-2023-46587: Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted TIF file, buffer overflow
CVE-2023-46589: Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy.Users are recommended to upgrade to version 11.0.0-M11onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue.
Key phrases: improper input validation, request smuggling
CVE-2023-4659: Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an unprivileged remote user is able to create, delete and modify users within theapplication.
Key phrases: perform different actions on the platform as an, cross-site request forgery
CVE-2023-46590: A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external entity (XXE) injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system.
Key phrases: read arbitrary files, interfere with an application's processing of XML, xml external entity (xxe)
CVE-2023-46595: Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editorallows an attackerto obtain victims domain credentials and Net-NTLM hash which can leadto relay domain attacks. Fixed inA32.20 (b570 or above),  A32.50 (b390 or above)
Key phrases: obtain victims domain credentials, net-ntlm leak, html injection, relay domain
CVE-2023-46596: Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60 permits an attacker to initiate an XSS attack by injecting malicious executable scripts into the application's code. Fixed in version A32.20 (b600 and above), A32.50 (b430 and above), A32.60 (b250 and above)
Key phrases: xss, improper input validation
CVE-2023-46601: A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in making the SQLServer connection. This could allow an attacker to query the database directly to access information that the user should not have access to.
Key phrases: query the database directly to access information that
CVE-2023-46602: In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2023-46603: In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPrmg.cpp in libSampleICC.a.
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-46604: The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath.Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.
Key phrases: run arbitrary shell commands, either a Java-based OpenWire broker or, remote code execution
CVE-2023-4661: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Connect allows SQL Injection.This issue affects Saphira Connect: before 9.
Key phrases: SQL Injection, sql command, sql injection
CVE-2023-46613: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jens Kuerschner Add to Calendar Button plugin <=1.5.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46614: Cross-Site Request Forgery (CSRF) vulnerability in Mat Bao Corp WP Helper Premium plugin <=4.5.1 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46615: Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7.
Key phrases: deserialization of untrusted data
CVE-2023-46617: Cross-Site Request Forgery (CSRF) vulnerability in AdFoxly AdFoxly  Ad Manager, AdSense Ads & Ads.Txt.This issue affects AdFoxly  Ad Manager, AdSense Ads & Ads.Txt: from n/a through 1.8.5.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46618: Cross-Site Request Forgery (CSRF) vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin <=2.5 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46619: Cross-Site Request Forgery (CSRF) vulnerability in WebDorado WDSocialWidgets plugin <=1.0.15 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4662: Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion.This issue affects Saphira Connect: before 9.
Key phrases: Remote Code Inclusion, execution with unnecessary privileges, remote code inclusion
CVE-2023-46620: Cross-Site Request Forgery (CSRF) vulnerability in Fluenx DeepL API translation plugin <=2.3.9.1 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46621: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Enej Bajgoric / Gagan Sandhu / CTLT DEV User Avatar plugin <=1.4.11 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46622: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ollybach WPPizza  A Restaurant Plugin plugin <=3.18.2 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46623: Improper Control of Generation of Code ('Code Injection') vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2.
Key phrases: improper control of generation of code, code injection
CVE-2023-46624: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11.
Key phrases: url redirection, open redirect
CVE-2023-46625: Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Autolinks Manager plugin <=1.10.04 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46626: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FLOWFACT WP Connector plugin <=2.1.7 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46627: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <=2.1 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46629: Cross-Site Request Forgery (CSRF) vulnerability in themelocation Remove Add to Cart WooCommerce plugin <=1.4.4.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4663: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Saphira Saphira Connect allows Reflected XSS.This issue affects Saphira Connect: before 9.
Key phrases: Reflected XSS.This issue affects Saphira Connect: before, improper neutralization of script-related html tags, basic xss, reflected xss
CVE-2023-46634: Cross-Site Request Forgery (CSRF) vulnerability in phoeniixx Custom My Account for Woocommerce allows Cross-Site Scripting (XSS).This issue affects Custom My Account for Woocommerce: from n/a through 2.1.
Key phrases: Cross-Site Scripting (XSS).This issue affects, cross-site request forgery (csrf), cross-site scripting (xss)
CVE-2023-46636: Cross-Site Request Forgery (CSRF) vulnerability in David Stckl Custom Header Images plugin <=1.2.1 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-46638: Cross-Site Request Forgery (CSRF) vulnerability in Webcodin WCP OpenWeather plugin <=2.5.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-4664: Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation.This issue affects Saphira Connect: before 9.
Key phrases: Privilege Escalation, incorrect default permissions, privilege escalation
CVE-2023-46640: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in D. Relton Medialist plugin <=1.3.9 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46641: Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.24.
Key phrases: server-side request forgery (ssrf)
CVE-2023-46642: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin <=1.2.2 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46643: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GARY JEZORSKI CloudNet360 plugin <=3.2.0 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-46645: A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1. This vulnerability was reported via the GitHub Bug Bounty program.
Key phrases: allowed arbitrary file reading, path traversal
CVE-2023-46646: Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint. This vulnerability did not allow unauthorized access to any repository content besides the name.This vulnerability affected GitHub Enterprise Server version 3.7.0 and above and was fixed in version 3.17.19, 3.8.12, 3.9.7 3.10.4, and 3.11.0.
Key phrases: view private repository names via the "Get, any repository content besides the name, improper access control, unauthorized access
CVE-2023-46647: Improper privilege management in all versions of GitHub Enterprise Server allows users with authorized access to the management console with an editor role to escalate their privileges by making requests to the endpoint used for bootstrapping the instance.This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.6, 3.10.3, and 3.11.0.
Key phrases: the management console with an editor role to, improper privilege management, escalate privilege
CVE-2023-46648: An insufficient entropy vulnerability was identified in GitHub Enterprise Server (GHES) that allowed an attacker to brute force a user invitation to the GHES Management Console. To exploit this vulnerability, an attacker would need knowledge that a user invitation was pending. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1. This vulnerability was reported via the GitHub Bug Bounty program.
Key phrases: insufficient entropy
CVE-2023-46649: A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploit this, an organization needs to be converted from a user.This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
Key phrases: exploit this, race condition
CVE-2023-4665: Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation.This issue affects Saphira Connect: before 9.
Key phrases: Privilege Escalation, incorrect execution-assigned permissions, privilege escalation
CVE-2023-46650: Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Key phrases: stored cross-site scripting (xss)
CVE-2023-46651: Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1.
Key phrases: access and capture credentials they are not entitled
CVE-2023-46652: A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of LAMBDATEST credentials stored in Jenkins.
Key phrases: enumerate credentials IDs of LAMBDATEST credentials stored in, permission check
CVE-2023-46653: Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, potentially resulting in its exposure.
CVE-2023-46654: Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to delete arbitrary files on the Jenkins controller file system.
Key phrases: delete arbitrary files, configure jobs to delete arbitrary files on the, symbolic links
CVE-2023-46655: Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to publish arbitrary files from the Jenkins controller file system to the previously configured CloudBees CD server.
Key phrases: publish arbitrary files, configure jobs to publish arbitrary files from the, symbolic links
CVE-2023-46656: Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
Key phrases: obtain a valid webhook token., use statistical methods to obtain a valid webhook, non-constant time comparison function
CVE-2023-46657: Jenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
Key phrases: obtain a valid webhook token., use statistical methods to obtain a valid webhook, non-constant time comparison function
CVE-2023-46658: Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
Key phrases: obtain a valid webhook token., use statistical methods to obtain a valid webhook, non-constant time comparison function
CVE-2023-46659: Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Key phrases: stored cross-site scripting (xss)
CVE-2023-4666: The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE
Key phrases: create arbitrary files, create arbitrary files and lead to RCE, rce
CVE-2023-46660: Jenkins Zanata Plugin 0.6 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook token hashes are equal, potentially allowing attackers to use statistical methods to obtain a valid webhook token.
Key phrases: obtain a valid webhook token., use statistical methods to obtain a valid webhook, non-constant time comparison function
CVE-2023-46661: Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.
Key phrases: escalate privilege
CVE-2023-46662: Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this via a specially crafted request to gain access to sensitive information.
Key phrases: gain access, information disclosure, sensitive information, improper access control, access sensitive information
CVE-2023-46663: Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests.
Key phrases: perform certain actions via HTTP requests without performing, bypass authorization
CVE-2023-46664: Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources behind protected pages.
Key phrases: bypass authorization and access resources behind protected pages, improper access control
CVE-2023-46665: Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain unauthorized access to the affected device with administrative privileges.
Key phrases: authentication bypass, gain unauthorized access
CVE-2023-46666: An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a user is assigned limited access permissions to an item on a Sharepoint site then that user would have read permissions to all content on the Sharepoint site through Elasticsearch.
CVE-2023-46667: An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Servers log file in plain text. These enrolment tokens could allow someone to enrol an agent into an agent policy, and potentially use that to retrieve other secrets in the policy including for Elasticsearch and third-party services. Alternatively a threat actor could potentially enrol agents to the clusters and send arbitrary events to Elasticsearch.
Key phrases: send arbitrary events, enrol an agent into an agent policy
CVE-2023-46668: If Elastic Endpoint (v7.9.0 - v8.10.3) is configured to use a non-default option in which the logging level is explicitly set to debug, and when Elastic Agent is simultaneously configured to collect and send those logs to Elasticsearch, then Elastic Agent API keys can be viewed in Elasticsearch in plaintext. These API keys could be used to write arbitrary data and read Elastic Endpoint user artifacts.
Key phrases: write arbitrary data
CVE-2023-4667: The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is then executed when the GUI is opened by any users of the webserver administration interface.The root cause of the vulnerability is inadequate input validation and output encoding in the web administration interface component of the firmware.This could lead tounauthorized access and data leakage
Key phrases: store malicious scripts in some fields, inadequate input validation, data leakage
CVE-2023-46671: An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana 8.11.1 which resolves this issue. The error message recorded in the log may contain account credentials for the kibana_system user, API Keys, and credentials of Kibana end-users. The issue occurs infrequently, only if an error is returned from an Elasticsearch cluster, in cases where there is user interaction and an unhealthy cluster (for example, when returning circuit breaker or no shard exceptions).
Key phrases: sensitive information
CVE-2023-46672: An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances.The prerequisites for the manifestation of this issue are:  *  Logstash  is configured to log in JSON format https://www.elastic.co/guide/en/logstash/current/running-logstash-command-line.html , which is not the default logging format.  *  Sensitive data is stored in the Logstash keystore and referenced as a variable in Logstash configuration.
Key phrases: sensitive information
CVE-2023-46673: It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when calling the Simulate Pipeline API.
Key phrases: malformed scripts, crash
CVE-2023-46674: An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue.
Key phrases: unsafe deserialization
CVE-2023-46675: An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has released Kibana 8.11.2 which resolves this issue. The messages recorded in the log may contain Account credentials for the kibana_system user, API Keys, and credentials of Kibana end-users, Elastic Security package policy objects which can contain private keys, bearer token, and sessions of 3rd-party integrations and finally Authorization headers, client secrets, local file paths, and stack traces. The issue may occur in any Kibana instance running an affected version that could potentially receive an unexpected error when communicating to Elasticsearch causing it to include sensitive data into Kibana error logs. It could also occur under specific circumstances when debug level logging is enabled in Kibana. Note: It was found that the fix for ESA-2023-25 in Kibana 8.11.1 for a similar issue was incomplete.
Key phrases: sensitive information