yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-26553: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Key phrases: out-of-bounds write, out of bounds write
CVE-2023-26554: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\\\\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
Key phrases: out-of-bounds write, out of bounds write
CVE-2023-26555: praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.
Key phrases: out-of-bounds write, out of bounds write
CVE-2023-26556: io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)
Key phrases: timing side-channel
CVE-2023-26557: io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse. An example leak is in crypto/paillier/paillier.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)
Key phrases: timing side-channel
CVE-2023-26559: A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion before 5.0.3 build 2023022015 allows an attacker to read files from a WEB-INF directory via a crafted HTTP request. (XML Web Author 24.1.0.3 build 2023021714 and 23.1.1.4 build 2023021715 are also fixed versions.)
Key phrases: read files from a WEB-INF directory, directory traversal
CVE-2023-2656: A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file /classes/Master.php?f=delete_service. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-228798 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-26560: Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and potentially discover credentials.
Key phrases: read arbitrary files, leverage the Scheduled Reports feature to read arbitrary
CVE-2023-26562: In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messages when configured for Imap/smtp.
Key phrases: closed account
CVE-2023-26563: The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: - On Windows, list files in any directory, read any file, delete any file, upload any file to any directory accessible by the web server. - On Linux, read any file, download any directory, delete any file, upload any file to any directory accessible by the web server.
Key phrases: directory traversal, file upload
CVE-2023-26564: The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As a result, an unauthenticated attacker can list files within a directory, download any file, or upload any file to any directory accessible by the web server.
Key phrases: models physicalfileprovider.cs directory traversal, file upload
CVE-2023-26567: Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables. This exposes cleartext authentication credentials for the Asterisk Database (MariaDB/MySQL) and Asterisk Manager Interface. For example, an attacker can make a /ari/asterisk/variable?variable=AMPDBPASS API call.
Key phrases: cleartext authentication credentials
CVE-2023-26568: Unauthenticated SQL injection in the GetStudentGroupStudents method in IDAttends IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. 
Key phrases: extraction or modification of all data by unauthenticated, unauthenticated sql injection, modification of data
CVE-2023-26569: Unauthenticated SQL injection in the StudentPopupDetails_Timetable method in IDAttends IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.  
Key phrases: extraction or modification of all data by unauthenticated, unauthenticated sql injection, modification of data
CVE-2023-2657: A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228799.
Key phrases: cross site scripting
CVE-2023-26570: Missing authentication in the StudentPopupDetails_Timetable method in IDAttends IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers.  
Key phrases: extraction sensitive student data by unauthenticated attackers, missing authentication
CVE-2023-26571: Missing authentication in the SetStudentNotes  method in IDAttends IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers.  
Key phrases: modification of student data by unauthenticated attackers, missing authentication
CVE-2023-26572: Unauthenticated SQL injection in the GetExcursionList method in IDAttends IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.  
Key phrases: extraction or modification of all data by unauthenticated, unauthenticated sql injection, modification of data
CVE-2023-26573: Missing authentication in the SetDB method in IDAttends IDWeb application 3.1.052 and earlier allows denial of service or theft of database login credentials.  
Key phrases: denial of service or theft of database login, missing authentication
CVE-2023-26574: Missing authentication in the SearchStudents method in IDAttends IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers. 
Key phrases: extraction sensitive student data by unauthenticated attackers, missing authentication
CVE-2023-26575: Missing authentication in the SearchStudentsStaff  method in IDAttends IDWeb application 3.1.052 and earlier allows extraction sensitive student and teacher data by unauthenticated attackers. 
Key phrases: extraction sensitive student and teacher data by unauthenticated, missing authentication
CVE-2023-26576: Missing authentication in the SearchStudentsRFID   method in IDAttends IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers. 
Key phrases: extraction sensitive student data by unauthenticated attackers, missing authentication
CVE-2023-26577: Stored cross-site scripting in the IDAttends IDWeb application 3.1.052 and earlier allows attackers to hijack the browsing session of the logged in user.  
Key phrases: hijack the browsing session of the logged in, stored cross-site scripting
CVE-2023-26578: Arbitrary file upload to web root in the IDAttends IDWeb application 3.1.013 allows authenticated attackers to upload dangerous files to web root such as ASP or ASPX, gaining command execution on the affected server.  
Key phrases: upload dangerous files to web root such as, arbitrary file upload, command execution
CVE-2023-26579: Missing authentication in the DeleteStaff method in IDAttends IDWeb application 3.1.013 allows deletion of staff information by unauthenticated attackers.  
Key phrases: deletion of staff information by unauthenticated attackers, missing authentication
CVE-2023-2658: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228800.
Key phrases: sql injection
CVE-2023-26580: Unauthenticated arbitrary file read in the IDAttends IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers.  
Key phrases: the retrieval of any file present on the, unauthenticated arbitrary file read
CVE-2023-26581: Unauthenticated SQL injection in the GetVisitors  method in IDAttends IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.  
Key phrases: extraction or modification of all data by unauthenticated, unauthenticated sql injection, modification of data
CVE-2023-26582: Unauthenticated SQL injection in the GetExcursionDetails   method in IDAttends IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.  
Key phrases: extraction or modification of all data by unauthenticated, unauthenticated sql injection, modification of data
CVE-2023-26583: Unauthenticated SQL injection in the GetCurrentPeriod    method in IDAttends IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.  
Key phrases: extraction or modification of all data by unauthenticated, unauthenticated sql injection, modification of data
CVE-2023-26584: Unauthenticated SQL injection in the GetStudentInconsistencies     method in IDAttends IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.  
Key phrases: extraction or modification of all data by unauthenticated, unauthenticated sql injection, modification of data
CVE-2023-26585: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
Key phrases: potentially enable denial of service via local access, improper access control
CVE-2023-26586: Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Key phrases: potentially enable denial of service via adjacent access
CVE-2023-26587: Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access.
Key phrases: potentially enable escalation of privilege via local access, improper input validation, escalation privilege
CVE-2023-26588: Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier
Key phrases: access the debug function of the product, hard-coded credentials, hard coded credentials
CVE-2023-26589: Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local access.
Key phrases: use after free, denial of service
CVE-2023-2659: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file view_product.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228801 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-26590: A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead to a denial of service.
Key phrases: floating point exception, denial of service
CVE-2023-26591: Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable denial of service via physical access.
Key phrases: potentially enable denial of service via physical access, unchecked return value
CVE-2023-26592: Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access.
Key phrases: potentially enable a denial of service via local, deserialization of untrusted data, local access
CVE-2023-26593: CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access the computer where the affected product is installed tampers the password file stored in the computer, the user privilege which CENTUM managed may be escalated. As a result, the control system may be operated with the escalated user privilege. To exploit this vulnerability, the following prerequisites must be met: (1)An attacker has obtained user credentials where the affected product is installed, (2)CENTUM Authentication Mode is used for user authentication when CENTUM VP is used. The affected products and versions are as follows: CENTUM CS 1000, CENTUM CS 3000 (Including CENTUM CS 3000 Entry Class) R2.01.00 to R3.09.50, CENTUM VP (Including CENTUM VP Entry Class) R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, and R6.01.00 and later, B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R7.04.51 and R8.01.01 and later
Key phrases: cleartext storage, sensitive information
CVE-2023-26595: Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service condition.
Key phrases: cause a denial of service condition, denial-of-service (dos)
CVE-2023-26596: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
Key phrases: potentially enable denial of service via local access, improper access control
CVE-2023-26597: Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller.
Key phrases: controller dos, buffer overflow
CVE-2023-26599: XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link.
Key phrases: inject client-side code to run as, xss
CVE-2023-2660: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_categories.php. The manipulation of the argument c leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228802 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-26600: ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports.
Key phrases: privilege escalation via query reports
CVE-2023-26601: Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS).
Key phrases: Denial-of-Service (DoS), denial-of-service (dos)
CVE-2023-26602: ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.
Key phrases: execute arbitrary code, execute arbitrary code by using SNMP to create, command execution
CVE-2023-26604: systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.
Key phrases: local privilege escalation
CVE-2023-26605: In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid.
Key phrases: use-after-free, use after free
CVE-2023-26606: In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c.
Key phrases: use-after-free, use after free
CVE-2023-26607: In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-26608: SOLDR (System of Orchestration, Lifecycle control, Detection and Response) 1.1.0 allows stored XSS via the module editor.
Key phrases: stored XSS via the module editor, stored xss
CVE-2023-26609: ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.
Key phrases: execute arbitrary code, execute arbitrary code via shell metacharacters in the
CVE-2023-2661: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228803.
Key phrases: sql injection
CVE-2023-26612: D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo.
Key phrases: buffer overflow
CVE-2023-26613: An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCU_SHELL.
Key phrases: execute arbitrary operating system, execute arbitrary operating system commands via a crafted, os command injection
CVE-2023-26615: D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password.
Key phrases: reset the WEB page management password, password reset
CVE-2023-26616: D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo.
Key phrases: buffer overflow
CVE-2023-2662: In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.
Key phrases: color space object
CVE-2023-2663: In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow.
Key phrases: stack overflow
CVE-2023-2664: In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.
Key phrases: stack overflow
CVE-2023-2665: Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
Key phrases: storage of sensitive data, mechanism without access control
CVE-2023-2666: Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16.
Key phrases: allocation of resources
CVE-2023-2667: A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228883.
Key phrases: cross site scripting
CVE-2023-2668: A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this issue is the function manager_category of the file admin/?page=categories/manage_category of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228884.
Key phrases: sql injection
CVE-2023-2669: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as critical. This affects an unknown part of the file admin/?page=categories/view_category of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228885 was assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-26692: ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Management System (ZBBS) 4.14k is vulnerable to Cross Site Scripting (XSS).
Key phrases: cross site scripting (xss)
CVE-2023-2670: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/?page=user/manage_user. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228886 is the identifier assigned to this vulnerability.
Key phrases: improper access control
CVE-2023-2671: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file classes/Master.php?f=save_inquiry of the component Contact Form. The manipulation of the argument fullname/contact/message leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228887.
Key phrases: cross site scripting
CVE-2023-2672: A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228888.
Key phrases: sql injection
CVE-2023-2673: Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allowUDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks.
Key phrases: bypass the filter, improper input validation, flooding
CVE-2023-26733: Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame function in tinytiffreader.c file.
Key phrases: cause a denial of service via the TinyTiffReader_readNextFrame, buffer overflow
CVE-2023-26735: blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured.
Key phrases: detect intranet ports and services, access control issue
CVE-2023-2674: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.
Key phrases: improper access control
CVE-2023-2675: Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.
Key phrases: improper restriction of excessive authentication attempts
CVE-2023-26750: SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code via the runAction function. NOTE: the software maintainer's position is that the vulnerability is in third-party code, not in the framework.
Key phrases: execute arbitrary code, execute arbitrary code via the runAction function, sql injection
CVE-2023-26756: The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks.
Key phrases: brute force
CVE-2023-26758: Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceService.
Key phrases: arbitrary file download vulnerabilty
CVE-2023-26759: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component.
Key phrases: os command injection
CVE-2023-2676: A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may be used. VDB-228890 is the identifier assigned to this vulnerability.
Key phrases: stack-based buffer overflow, stack based buffer overflow
CVE-2023-26760: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint. This vulnerability allows attackers to access cleartext credentials needed to authenticate to the AS400 system.
Key phrases: access cleartext credentials needed to authenticate to the, information disclosure
CVE-2023-26762: Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.
Key phrases: arbitrary file upload
CVE-2023-26767: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.
Key phrases: cause a denial of service via the lou_logFile, buffer overflow
CVE-2023-26768: Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions.
Key phrases: cause a denial of service via the compileTranslationTable.c, buffer overflow
CVE-2023-26769: Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.
Key phrases: cause a denial of service via the resolveSubtable, buffer overflow
CVE-2023-2677: A vulnerability, which was classified as critical, was found in SourceCodester Covid-19 Contact Tracing System 1.0. This affects an unknown part of the file admin/establishment/manage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228891.
Key phrases: sql injection
CVE-2023-26773: Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file.
Key phrases: gain privileges, gain privileges via the product list function in, cross site scripting
CVE-2023-26774: An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint.
Key phrases: access sensitive information via sales.php component of the
CVE-2023-26775: File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the assets/php/upload.php endpoint.
Key phrases: oexecute arbitrary code, the assets/php/upload.php endpoint, file upload
CVE-2023-26776: Cross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute arbitrary code via the title parameter of the post_receiver-services.php file.
Key phrases: execute arbitrary code, execute arbitrary code via the title parameter of, cross site scripting
CVE-2023-26777: Cross Site Scripting vulnerability found in : louislam Uptime Kuma v.1.19.6 and before allows a remote attacker to execute arbitrary commands via the description, title, footer, and incident creation parameter of the status_page.js endpoint.
Key phrases: execute arbitrary commands, execute arbitrary commands via the description, cross site scripting
CVE-2023-26779: CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).
Key phrases: deserialization, remote code execution (rce)
CVE-2023-2678: A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /file_manager/admin/save_user.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228892.
Key phrases: cross site scripting
CVE-2023-26780: CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection.
Key phrases: sql injection
CVE-2023-26781: SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.
Key phrases: run arbitrary SQL commands, run arbitrary SQL commands via Author Center ->Reader, sql injection
CVE-2023-26782: An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface ->System Configuration->Cache Configuration->Cache security characters.
Key phrases: cause a denial of service via Backend management
CVE-2023-26784: SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter.
Key phrases: execute arbitrary code, execute arbitrary code via the /admin.php?controller=admin_commonuser, sql injection
CVE-2023-26788: Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.
Key phrases: host header injection, unexpected ways
CVE-2023-26789: Veritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser.
Key phrases: cause arbitrary HTML, reflected cross-site scripting (xss)
CVE-2023-2679: Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.
Key phrases: observe other users data, data leakage
CVE-2023-2680: This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.
CVE-2023-26800: Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function.
Key phrases: command injetion
CVE-2023-26801: LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg.
Key phrases: command injection
CVE-2023-26802: An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request.
Key phrases: execute arbitrary commands, bypass authentication, bypass authentication and execute arbitrary commands via a
CVE-2023-26805: Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify.
Key phrases: buffer overflow
CVE-2023-26806: Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime,
Key phrases: buffer overflow
CVE-2023-2681: An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the id parameter, managing to extract arbritary information from the database.
Key phrases: send queries with malicious SQL code on the, sql injection
CVE-2023-26813: SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do.
Key phrases: run arbitrary SQL commands, run arbitrary SQL commands via the TableName parameter, sql injection
CVE-2023-26817: codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php.
Key phrases: remote code execution (rce)
CVE-2023-26818: Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSERT_LIBRARIES flag.
Key phrases: access restricted files, dyld_insert_libraries flag
CVE-2023-2682: A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component Mini_HTTPD. The manipulation of the argument address with the input ;id;uname${IFS}-a leads to command injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-228911. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: command injection, disclosure
CVE-2023-26820: siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js.
Key phrases: path traversal
CVE-2023-26822: D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main.
Key phrases: command injection
CVE-2023-26829: An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.
Key phrases: authentication bypass, set a new password for any valid user, full authentication bypass
CVE-2023-2683: A memory leak in the EFR32 Bluetooth LE stack 5.1.0 through 5.1.1 allows an attacker to send an invalid pairing message and cause future legitimate connection attempts to fail. A reset of the device immediately clears the error.
Key phrases: send an invalid pairing message and cause future, memory leak
CVE-2023-26830: An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server.
Key phrases: execute arbitrary code, execute arbitrary code by uploading malicious files to, file upload, unrestricted file upload
CVE-2023-26839: A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to edit information for existing people on the site.
Key phrases: edit information for existing people on the site, cross-site request forgery (csrf), cross site request forgery
CVE-2023-2684: The File Renaming on Upload WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2023-26840: A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator.
Key phrases: set a person to a user and set, cross-site request forgery (csrf), cross site request forgery
CVE-2023-26841: A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to change any user's password except for the user that is currently logged in.
Key phrases: change any user's password except for the, cross-site request forgery (csrf), cross site request forgery
CVE-2023-26842: A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross-site scripting (xss)
CVE-2023-26843: A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross-site scripting (xss)
CVE-2023-26845: A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors.
Key phrases: force users into submitting web requests via unspecified, cross-site request forgery (csrf), unspecified vectors
CVE-2023-26846: A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, stored cross-site scripting (xss)
CVE-2023-26847: A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates.
Key phrases: execute arbitrary web scripts or HTML, execute arbitrary web scripts or HTML via a, stored cross-site scripting (xss)
CVE-2023-26848: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules.
Key phrases: command injection
CVE-2023-2685: A vulnerability was found in AO-OPC server versions mentioned above. As the directory information for the service entry is not enclosed in quotation marks, potential attackers could possibly call up another application than the AO-OPC server by starting the service. The service might be started with system user privileges which could cause a shift in user access privileges.It is unlikely to exploit the vulnerability in well maintained Windows installations since the attacker would need write access to system folders.An update is available that resolves the vulnerability found during an internal review in the product AO-OPC = 3.2.1
Key phrases: shift in user access privileges
CVE-2023-26852: An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute arbitrary code by uploading a crafted PHP file.
Key phrases: execute arbitrary code, execute arbitrary code by uploading a crafted PHP, arbitrary file upload
CVE-2023-26855: The hashing algorithm of ChurchCRM v4.5.3 utilizes a non-random salt value which allows attackers to use precomputed hash tables or dictionary attacks to crack the hashed passwords.
Key phrases: use precomputed hash tables or dictionary attacks to
CVE-2023-26856: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login.
Key phrases: sql injection
CVE-2023-26857: An arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
Key phrases: execute arbitrary code, execute arbitrary code via a crafted PHP file, arbitrary file upload
CVE-2023-26858: SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component.
Key phrases: escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component, sql injection
CVE-2023-26859: SQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote attacker to gain privileges via the ajaxOrderTracking.php component.
Key phrases: gain privileges, gain privileges via the ajaxOrderTracking.php component, sql injection
CVE-2023-2686: Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack.
Key phrases: write payload onto the stack, buffer overflow
CVE-2023-26860: SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component.
Key phrases: gain privileges, gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component, sql injection
CVE-2023-26861: SQL injection vulnerability found in PrestaShop vivawallet v.1.7.10 and before allows a remote attacker to gain privileges via the vivawallet() module.
Key phrases: gain privileges, gain privileges via the vivawallet() module, sql injection
CVE-2023-26864: SQL injection vulnerability found in PrestaShop smplredirectionsmanager v.1.1.19 and before allow a remote attacker to gain privileges via the SmplTools::getMatchingRedirectionsFromPartscomponent.
Key phrases: gain privileges, gain privileges via the SmplTools::getMatchingRedirectionsFromPartscomponent, sql injection
CVE-2023-26865: SQL injection vulnerability found in PrestaShop bdroppy v.2.2.12 and before allowing a remote attacker to gain privileges via the BdroppyCronModuleFrontController::importProducts component.
Key phrases: gain privileges, gain privileges via the BdroppyCronModuleFrontController::importProducts component, sql injection
CVE-2023-26866: GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover.
Key phrases: complete takeover, remote command injection, pre-login execution, root privileges
CVE-2023-2687: Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures on the heap.
Key phrases: overwrite limited structures on the heap, buffer overflow
CVE-2023-26876: SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.
Key phrases: execute arbitrary code, execute arbitrary code via the filter_user_id parameter to, sql injection
CVE-2023-2688: The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/uploads by default) outside of the web root.
Key phrases: move files uploaded with the plugin (located, path traversal, file upload
CVE-2023-2689: A vulnerability classified as critical was found in SourceCodester Billing Management System 1.0. This vulnerability affects unknown code of the file editproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228970 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2023-2690: A vulnerability, which was classified as critical, has been found in SourceCodester Personnel Property Equipment System 1.0. This issue affects some unknown processing of the file admin/returned_reuse_form.php of the component GET Parameter Handler. The manipulation of the argument client_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228971.
Key phrases: sql injection
CVE-2023-26905: An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id.
Key phrases: sql injection
CVE-2023-2691: A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/add_item.php of the component POST Parameter Handler. The manipulation of the argument item_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228972.
Key phrases: cross site scripting, cross-site scripting
CVE-2023-26911: ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.
Key phrases: launch processes with elevated privileges, unquoted service path, elevate privileges
CVE-2023-26912: Cross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button.
Key phrases: execute arbitrary code, execute arbitrary code via the evaluate button, cross site scripting (xss)
CVE-2023-26913: EVOLUCARE ECSIMAGING (aka ECS Imaging) < 6.21.5 is vulnerable to Cross Site Scripting (XSS) via new_movie. php.
Key phrases: cross site scripting (xss)
CVE-2023-26916: libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.
Key phrases: null pointer dereference
CVE-2023-26917: libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.
Key phrases: null pointer dereference
CVE-2023-26918: Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan horse that will be executed as LocalSystem. This occurs because %ProgramFiles%\\\\FileReplicationPro allows Everyone:(F) access.
Key phrases: escalate privileges by replacing a legitimate file with, Everyone:(F) access
CVE-2023-26919: delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process.
Key phrases: sandbox escape