Provide references for further information: Can you share references or external links related to CVE-2023-1241?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1241?


Explain the CVE ID: What does the identifier CVE-2023-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1242.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.


Provide references for further information: Can you share references or external links related to CVE-2023-1242?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1242?


Explain the CVE ID: What does the identifier CVE-2023-1243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1243.


Provide references for further information: Can you share references or external links related to CVE-2023-1243?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1243?


Explain the CVE ID: What does the identifier CVE-2023-1244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1244.


Provide references for further information: Can you share references or external links related to CVE-2023-1244?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1244?


Explain the CVE ID: What does the identifier CVE-2023-1245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1245.


Provide references for further information: Can you share references or external links related to CVE-2023-1245?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1245?


Explain the CVE ID: What does the identifier CVE-2023-1246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1246.

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1246?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0140'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1246?


Explain the CVE ID: What does the identifier CVE-2023-1247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1247.


Provide references for further information: Can you share references or external links related to CVE-2023-1247?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1247?


Explain the CVE ID: What does the identifier CVE-2023-1248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1248.

Improper Input Validation vulnerability in OTRS AG OTRS (Ticket Actions modules), OTRS AG ((OTRS)) Community Edition (Ticket Actions modules) allows Cross-Site Scripting (XSS).This issue affects OTRS: from 7.0.X before 7.0.42; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.


Provide references for further information: Can you share references or external links related to CVE-2023-1248?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1248?


Explain the CVE ID: What does the identifier CVE-2023-1249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1249.

A use-after-free flaw was found in the Linux kernel’s core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 ("coredump: Use the vma snapshot in fill_files_note") not applied yet, then kernel could be affected.


Provide references for further information: Can you share references or external links related to CVE-2023-1249?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1249?


Explain the CVE ID: What does the identifier CVE-2023-1250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1250.

Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Edition (ACL modules) allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments and ACL-names
This issue affects OTRS: from 7.0.X before 7.0.42, from 8.0.X before 8.0.31; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.


Provide references for further information: Can you share references or external links related to CVE-2023-1250?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1250?


Explain the CVE ID: What does the identifier CVE-2023-1251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1251.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03.


Provide references for further information: Can you share references or external links related to CVE-2023-1251?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0136'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1251?


Explain the CVE ID: What does the identifier CVE-2023-1252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1252.

A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially escalate their privileges on the system. Only if patch 9a2544037600 ("ovl: fix use after free in struct ovl_aio_req") not applied yet, the kernel could be affected.


Provide references for further information: Can you share references or external links related to CVE-2023-1252?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1252?


Explain the CVE ID: What does the identifier CVE-2023-1253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1253.

A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222483.


Provide references for further information: Can you share references or external links related to CVE-2023-1253?

{'url': 'https://vuldb.com/?id.222483', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222483', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/2689469248/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1253?


Explain the CVE ID: What does the identifier CVE-2023-1254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1254.

A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file birthing_print.php. The manipulation of the argument birth_id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222484.


Provide references for further information: Can you share references or external links related to CVE-2023-1254?

{'url': 'https://vuldb.com/?id.222484', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222484', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/2689469248/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1254?


Explain the CVE ID: What does the identifier CVE-2023-1255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1255.

Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM
platform contains a bug that could cause it to read past the input buffer,
leading to a crash.

Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM
platform can crash in rare circumstances. The AES-XTS algorithm is usually
used for disk encryption.

The AES-XTS cipher decryption implementation for 64 bit ARM platform will read
past the end of the ciphertext buffer if the ciphertext size is 4 mod 5 in 16
byte blocks, e.g. 144 bytes or 1024 bytes. If the memory after the ciphertext
buffer is unmapped, this will trigger a crash which results in a denial of
service.

If an attacker can control the size and location of the ciphertext buffer
being decrypted by an application using AES-XTS on 64 bit ARM, the
application is affected. This is fairly unlikely making this issue
a Low severity one.


Provide references for further information: Can you share references or external links related to CVE-2023-1255?

{'name': 'OpenSSL Advisory', 'tags': ['vendor-advisory'], 'url': 'https://www.openssl.org/news/secadv/20230419.txt'}, {'name': '3.1.1 git commit', 'tags': ['patch'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bc2f61ad70971869b242fc1cb445b98bad50074a'}, {'name': '3.0.9 git commit', 'tags': ['patch'], 'url': 'https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=02ac9c9420275868472f33b01def01218742b8bb'}, {'url': 'https://security.netapp.com/advisory/ntap-20230908-0006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1255?


Explain the CVE ID: What does the identifier CVE-2023-1256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1256.

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.


Provide references for further information: Can you share references or external links related to CVE-2023-1256?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1256?


Explain the CVE ID: What does the identifier CVE-2023-1257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1257.

An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options can then be altered, allowing the attacker to access the terminal. From the terminal, the attacker can modify the device’s authentication files to create a new user and gain full access to the system.


Provide references for further information: Can you share references or external links related to CVE-2023-1257?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1257?


Explain the CVE ID: What does the identifier CVE-2023-1258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1258.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1258?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1258?


Explain the CVE ID: What does the identifier CVE-2023-1259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1259.

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjar_site_id in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.


Provide references for further information: Can you share references or external links related to CVE-2023-1259?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1259?


Explain the CVE ID: What does the identifier CVE-2023-1260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1260.

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch one that they already have access to. This might allow evasion of SCC admission restrictions, thereby gaining control of a privileged pod.


Provide references for further information: Can you share references or external links related to CVE-2023-1260?

{'url': 'https://access.redhat.com/errata/RHSA-2023:3976', 'name': 'RHSA-2023:3976', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:4093', 'name': 'RHSA-2023:4093', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:4312', 'name': 'RHSA-2023:4312', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:4898', 'name': 'RHSA-2023:4898', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:5008', 'name': 'RHSA-2023:5008', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/security/cve/CVE-2023-1260', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2176267', 'name': 'RHBZ#2176267', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}, {'url': 'https://github.com/advisories/GHSA-92hx-3mh6-hc49'}, {'url': 'https://security.netapp.com/advisory/ntap-20231020-0010/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1260?


Explain the CVE ID: What does the identifier CVE-2023-1261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1261.

Missing MAC layer security in Silicon Labs Wi-SUN SDK v1.5.0 and earlier allows malicious node to route malicious messages through network.


Provide references for further information: Can you share references or external links related to CVE-2023-1261?

{'tags': ['patch'], 'url': 'https://github.com/SiliconLabs/gecko_sdk'}, {'tags': ['vendor-advisory'], 'url': 'https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000SMyfRQAT?operationContext=S1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1261?


Explain the CVE ID: What does the identifier CVE-2023-1262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1262.

Missing MAC layer security in Silicon Labs Wi-SUN Linux Border Router v1.5.2 and earlier allows malicious node to route malicious messages through network.


Provide references for further information: Can you share references or external links related to CVE-2023-1262?

{'tags': ['patch'], 'url': 'https://github.com/SiliconLabs/wisun-br-linux'}, {'tags': ['vendor-advisory'], 'url': 'https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000SMyfRQAT?operationContext=S1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1262?


Explain the CVE ID: What does the identifier CVE-2023-1263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1263.

The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6  via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even when maintenance mode is enabled.


Provide references for further information: Can you share references or external links related to CVE-2023-1263?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1263?


Explain the CVE ID: What does the identifier CVE-2023-1264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1264.

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.


Provide references for further information: Can you share references or external links related to CVE-2023-1264?

{'url': 'https://huntr.dev/bounties/b2989095-88f3-413a-9a39-c1c58a6e6815'}, {'url': 'https://github.com/vim/vim/commit/7ac5023a5f1a37baafbe1043645f97ba3443d9f6'}, {'name': 'FEDORA-2023-43cb13aefb', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/'}, {'name': 'FEDORA-2023-d4ebe53978', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/'}, {'name': 'FEDORA-2023-030318ca00', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1264?


Explain the CVE ID: What does the identifier CVE-2023-1265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1265.

An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The condition allows for a privileged attacker, under certain conditions, to obtain session tokens from all users of a GitLab instance.


Provide references for further information: Can you share references or external links related to CVE-2023-1265?

{'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/394960'}, {'url': 'https://hackerone.com/reports/1888690'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1265.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1265?


Explain the CVE ID: What does the identifier CVE-2023-1267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1267.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ulkem Company PtteM Kart.This issue affects PtteM Kart: before 2.1.


Provide references for further information: Can you share references or external links related to CVE-2023-1267?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0133'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1267?


Explain the CVE ID: What does the identifier CVE-2023-1269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1269.

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1269?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1269?


Explain the CVE ID: What does the identifier CVE-2023-1270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1270.

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1270?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1270?


Explain the CVE ID: What does the identifier CVE-2023-1271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1271.


Provide references for further information: Can you share references or external links related to CVE-2023-1271?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1271?


Explain the CVE ID: What does the identifier CVE-2023-1273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1273.

The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks


Provide references for further information: Can you share references or external links related to CVE-2023-1273?

{'url': 'https://wpscan.com/vulnerability/0805ed7e-395d-48de-b484-6c3ec1cd4b8e', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1273?


Explain the CVE ID: What does the identifier CVE-2023-1274 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1274.

The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as subscriber to perform LFI attacks


Provide references for further information: Can you share references or external links related to CVE-2023-1274?

{'url': 'https://wpscan.com/vulnerability/267acb2c-1a95-487f-a714-516de05d2b2f', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1274?


Explain the CVE ID: What does the identifier CVE-2023-1275 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1275.

A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222598 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1275?

{'url': 'https://vuldb.com/?id.222598', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222598', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/blairting/bug_report/blob/main/vendors/Roo/Phone%20Shop%20Sales%20Managements%20System/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1275?


Explain the CVE ID: What does the identifier CVE-2023-1276 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1276.

A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown processing of the file application\merch\controller\Order.php. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-222599.


Provide references for further information: Can you share references or external links related to CVE-2023-1276?

{'url': 'https://vuldb.com/?id.222599', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222599', 'tags': ['signature', 'permissions-required']}, {'url': 'https://tib36.github.io/2023/03/04/SUL1SS-shop-SQLi/', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1276?


Explain the CVE ID: What does the identifier CVE-2023-1277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1277.

A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. Affected is the function InstallSnap of the component Update Handler. The manipulation leads to command injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222600.


Provide references for further information: Can you share references or external links related to CVE-2023-1277?

{'url': 'https://vuldb.com/?id.222600', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222600', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/cn-lwj/vuldb/blob/master/kylin-system-updater_vuln.md', 'tags': ['broken-link', 'exploit', 'patch']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1277?


Explain the CVE ID: What does the identifier CVE-2023-1278 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1278.

A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobil/index.php. The manipulation of the argument accesstoken leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-222608.


Provide references for further information: Can you share references or external links related to CVE-2023-1278?

{'url': 'https://vuldb.com/?id.222608', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222608', 'tags': ['signature', 'permissions-required']}, {'url': 'https://gitee.com/ibos/IBOS/issues/I6G5IJ', 'tags': ['issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1278?


Explain the CVE ID: What does the identifier CVE-2023-1279 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1279.

An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 where it was possible to create a URL that would redirect to a different project.


Provide references for further information: Can you share references or external links related to CVE-2023-1279?

{'name': 'GitLab Issue #395437', 'tags': ['issue-tracking'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/395437'}, {'name': 'HackerOne Bug Bounty Report #1889230', 'tags': ['technical-description', 'exploit', 'permissions-required'], 'url': 'https://hackerone.com/reports/1889230'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1279?


Explain the CVE ID: What does the identifier CVE-2023-1281 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1281.

Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the destroyed tcf_ext. A local attacker user can use this vulnerability to elevate its privileges to root.
This issue affects Linux Kernel: from 4.14 before git commit ee059170b1f7e94e55fa6cadee544e176a6e59c2.


Provide references for further information: Can you share references or external links related to CVE-2023-1281?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1281?


Explain the CVE ID: What does the identifier CVE-2023-1282 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1282.

The Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard WordPress plugin before 2.11.1 and Drag and Drop Multiple File Upload PRO - Contact Form 7 with Remote Storage Integrations WordPress plugin before 5.0.6.4 do not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins.


Provide references for further information: Can you share references or external links related to CVE-2023-1282?

{'url': 'https://wpscan.com/vulnerability/8a9548c5-59ea-46b0-bfa5-a0f7a259351a', 'tags': ['exploit', 'vdb-entry', 'technical-description']}, {'url': 'https://wpscan.com/vulnerability/f4b2617f-5235-4587-9eaf-d0f6bb23dc27', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1282?


Explain the CVE ID: What does the identifier CVE-2023-1283 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1283.

Code Injection in GitHub repository builderio/qwik prior to 0.21.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1283?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1283?


Explain the CVE ID: What does the identifier CVE-2023-1285 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1285.

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in Ethernet communication by sending a large number of specially crafted packets to any UDP port when GC-ENET-COM is configured as a Modbus TCP Server. The communication resumes only when the power of the main unit is turned off and on or when the GC-ENET-COM is hot-swapped from the main unit.


Provide references for further information: Can you share references or external links related to CVE-2023-1285?

{'tags': ['vendor-advisory'], 'url': 'https://mitsubishielectric.in/fa/cnc-pdf/DoS_in_Ethernet_Communication_Extension_Unit_GC_ENET_COM_of_GOC35_Series.pdf'}, {'tags': ['government-resource'], 'url': 'https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-15'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1285?


Explain the CVE ID: What does the identifier CVE-2023-1286 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1286.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.


Provide references for further information: Can you share references or external links related to CVE-2023-1286?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1286?


Explain the CVE ID: What does the identifier CVE-2023-1287 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1287.

An XSL template vulnerability in
ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.


Provide references for further information: Can you share references or external links related to CVE-2023-1287?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1287?


Explain the CVE ID: What does the identifier CVE-2023-1288 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1288.

An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.


Provide references for further information: Can you share references or external links related to CVE-2023-1288?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1288?


Explain the CVE ID: What does the identifier CVE-2023-1289 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1289.

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial of service. When ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will generate about 10G.


Provide references for further information: Can you share references or external links related to CVE-2023-1289?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2176858'}, {'url': 'https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j96m-mjp6-99xr'}, {'url': 'https://github.com/ImageMagick/ImageMagick/commit/c5b23cbf2119540725e6dc81f4deb25798ead6a4'}, {'name': '[debian-lts-announce] 20240222 [SECURITY] [DLA 3737-1] imagemagick security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1289?


Explain the CVE ID: What does the identifier CVE-2023-1290 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1290.

A vulnerability, which was classified as critical, has been found in SourceCodester Sales Tracker Management System 1.0. Affected by this issue is some unknown functionality of the file admin/clients/view_client.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222644.


Provide references for further information: Can you share references or external links related to CVE-2023-1290?

{'url': 'https://vuldb.com/?id.222644', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222644', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Mart1nD0t/vul-test/blob/main/sts-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1290?


Explain the CVE ID: What does the identifier CVE-2023-1291 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1291.

A vulnerability, which was classified as critical, was found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/clients/manage_client.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222645 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1291?

{'url': 'https://vuldb.com/?id.222645', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222645', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Mart1nD0t/vul-test/blob/main/sts-2.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1291?


Explain the CVE ID: What does the identifier CVE-2023-1292 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1292.

A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function delete_client of the file classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222646 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1292?

{'url': 'https://vuldb.com/?id.222646', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222646', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Mart1nD0t/vul-test/blob/main/sts-3.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1292?


Explain the CVE ID: What does the identifier CVE-2023-1293 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1293.

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects the function mysqli_query of the file admin_cs.php. The manipulation leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222647.


Provide references for further information: Can you share references or external links related to CVE-2023-1293?

{'url': 'https://vuldb.com/?id.222647', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222647', 'tags': ['signature', 'permissions-required']}, {'url': 'https://blog.csdn.net/weixin_43864034/article/details/129418770', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1293?


Explain the CVE ID: What does the identifier CVE-2023-1294 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1294.

A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /file_manager/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222648.


Provide references for further information: Can you share references or external links related to CVE-2023-1294?

{'url': 'https://vuldb.com/?id.222648', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222648', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1294?


Explain the CVE ID: What does the identifier CVE-2023-1295 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1295.

A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which allows a local user to elevate their privileges to root. Introduced in b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb, patched in 9eac1904d3364254d622bf2c771c4f85cd435fc2, backported to stable in 788d0824269bef539fe31a785b1517882eafed93.


Provide references for further information: Can you share references or external links related to CVE-2023-1295?

{'tags': ['patch'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9eac1904d3364254d622bf2c771c4f85cd435fc2'}, {'tags': ['patch'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=788d0824269bef539fe31a785b1517882eafed93'}, {'url': 'https://kernel.dance/9eac1904d3364254d622bf2c771c4f85cd435fc2'}, {'url': 'https://kernel.dance/788d0824269bef539fe31a785b1517882eafed93'}, {'tags': ['related'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b5dba59e0cf7e2cc4d3b3b1ac5fe81ddf21959eb'}, {'url': 'https://security.netapp.com/advisory/ntap-20230731-0006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1295?


Explain the CVE ID: What does the identifier CVE-2023-1296 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1296.

HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1.


Provide references for further information: Can you share references or external links related to CVE-2023-1296?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1296?


Explain the CVE ID: What does the identifier CVE-2023-1297 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1297.

Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3


Provide references for further information: Can you share references or external links related to CVE-2023-1297?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1297?


Explain the CVE ID: What does the identifier CVE-2023-1298 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1298.

ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts.


Provide references for further information: Can you share references or external links related to CVE-2023-1298?

{'tags': ['vendor-advisory'], 'url': 'https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1310230'}, {'url': 'https://www.linkedin.com/in/osamay/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1298?


Explain the CVE ID: What does the identifier CVE-2023-1299 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1299.

HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.


Provide references for further information: Can you share references or external links related to CVE-2023-1299?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1299?


Explain the CVE ID: What does the identifier CVE-2023-1300 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1300.

A vulnerability classified as critical was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file patient-report.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222661 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1300?

{'url': 'https://vuldb.com/?id.222661', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222661', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/mhz2846415362/bug_report/blob/main/vendors/unyasoft/COVID%2019%20Testing%20Management%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1300?


Explain the CVE ID: What does the identifier CVE-2023-1301 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1301.

A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222662 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1301?

{'url': 'https://vuldb.com/?id.222662', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222662', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/a-xsg/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1301?


Explain the CVE ID: What does the identifier CVE-2023-1302 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1302.

A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file normal/borrow1.php. The manipulation of the argument id with the input 1"><script>alert(1111)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222663.


Provide references for further information: Can you share references or external links related to CVE-2023-1302?

{'url': 'https://vuldb.com/?id.222663', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222663', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1302?


Explain the CVE ID: What does the identifier CVE-2023-1303 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1303.

A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-222683.


Provide references for further information: Can you share references or external links related to CVE-2023-1303?

{'url': 'https://vuldb.com/?id.222683', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222683', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/yztale/taley/blob/main/README.md', 'tags': ['related']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1303?


Explain the CVE ID: What does the identifier CVE-2023-1304 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1304.

An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.


Provide references for further information: Can you share references or external links related to CVE-2023-1304?

{'tags': ['release-notes'], 'url': 'https://docs.divvycloud.com/changelog/23321-release-notes'}, {'tags': ['third-party-advisory'], 'url': 'https://nephosec.com/exploiting-rapid7s-insightcloudsec/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1304?


Explain the CVE ID: What does the identifier CVE-2023-1305 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1305.

An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided those files can be parsed as yaml or JSON. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.


Provide references for further information: Can you share references or external links related to CVE-2023-1305?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1305?


Explain the CVE ID: What does the identifier CVE-2023-1306 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1306.

An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jinja template, which can lead to code execution. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the Self-Managed version of InsightCloudSec.


Provide references for further information: Can you share references or external links related to CVE-2023-1306?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1306?


Explain the CVE ID: What does the identifier CVE-2023-1307 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1307.

Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.


Provide references for further information: Can you share references or external links related to CVE-2023-1307?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1307?


Explain the CVE ID: What does the identifier CVE-2023-1308 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1308.

A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222696.


Provide references for further information: Can you share references or external links related to CVE-2023-1308?

{'url': 'https://vuldb.com/?id.222696', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222696', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/gtest1112/111/blob/main/sqli-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1308?


Explain the CVE ID: What does the identifier CVE-2023-1309 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1309.

A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/search_it.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222697 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1309?

{'url': 'https://vuldb.com/?id.222697', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222697', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/gtest1112/111/blob/main/sqli-2.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1309?


Explain the CVE ID: What does the identifier CVE-2023-1310 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1310.

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222698 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1310?

{'url': 'https://vuldb.com/?id.222698', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222698', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/gtest1112/111/blob/main/sqli-3.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1310?


Explain the CVE ID: What does the identifier CVE-2023-1311 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1311.

A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This affects an unknown part of the file large.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222699.


Provide references for further information: Can you share references or external links related to CVE-2023-1311?

{'url': 'https://vuldb.com/?id.222699', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222699', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/tangtangtang123456/bug_report/blob/main/vendors/Skynidnine/Friendly%20Island%20Pizza%20Website%20and%20Ordering%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1311?


Explain the CVE ID: What does the identifier CVE-2023-1312 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1312.

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.


Provide references for further information: Can you share references or external links related to CVE-2023-1312?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1312?


Explain the CVE ID: What does the identifier CVE-2023-1313 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1313.

Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.


Provide references for further information: Can you share references or external links related to CVE-2023-1313?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1313?


Explain the CVE ID: What does the identifier CVE-2023-1314 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1314.

A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices that allows a local attacker with no administrative permissions to escalate their privileges on the affected device. This vulnerability exists because the MSI installer used by cloudflared relied on a world-writable directory.

An attacker with local access to the device (without Administrator rights) can use symbolic links to trick the MSI installer into deleting files in locations that the attacker would otherwise have no access to. By creating a symlink from the world-writable directory to the target file, the attacker can manipulate the MSI installer's repair functionality to delete the target file during the repair process.

Exploitation of this vulnerability could allow an attacker to delete important system files or replace them with malicious files, potentially leading to the affected device being compromised.

The cloudflared client itself is not affected by this vulnerability, only the installer for 32-bit Windows devices.


Provide references for further information: Can you share references or external links related to CVE-2023-1314?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1314?


Explain the CVE ID: What does the identifier CVE-2023-1315 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1315.

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.


Provide references for further information: Can you share references or external links related to CVE-2023-1315?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1315?


Explain the CVE ID: What does the identifier CVE-2023-1316 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1316.

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.


Provide references for further information: Can you share references or external links related to CVE-2023-1316?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1316?


Explain the CVE ID: What does the identifier CVE-2023-1317 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1317.


Provide references for further information: Can you share references or external links related to CVE-2023-1317?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1317?


Explain the CVE ID: What does the identifier CVE-2023-1318 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1318.

Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.


Provide references for further information: Can you share references or external links related to CVE-2023-1318?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1318?


Explain the CVE ID: What does the identifier CVE-2023-1319 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1319.


Provide references for further information: Can you share references or external links related to CVE-2023-1319?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1319?


Explain the CVE ID: What does the identifier CVE-2023-1320 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1320.


Provide references for further information: Can you share references or external links related to CVE-2023-1320?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1320?


Explain the CVE ID: What does the identifier CVE-2023-1321 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1321.

A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class.php. The manipulation of the argument id with the input -1 and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222727.


Provide references for further information: Can you share references or external links related to CVE-2023-1321?

{'url': 'https://vuldb.com/?id.222727', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222727', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1321?


Explain the CVE ID: What does the identifier CVE-2023-1322 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1322.

A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1) and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222728.


Provide references for further information: Can you share references or external links related to CVE-2023-1322?

{'url': 'https://vuldb.com/?id.222728', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222728', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1322?


Explain the CVE ID: What does the identifier CVE-2023-1323 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1323.

The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape some of its from parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


Provide references for further information: Can you share references or external links related to CVE-2023-1323?

{'url': 'https://wpscan.com/vulnerability/d3a2af00-719c-4b86-8877-b1d68a589192', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1323?


Explain the CVE ID: What does the identifier CVE-2023-1324 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1324.

The Easy Forms for Mailchimp WordPress plugin before 6.8.8 does not sanitise and escape some parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin


Provide references for further information: Can you share references or external links related to CVE-2023-1324?

{'url': 'https://wpscan.com/vulnerability/8f510b8c-b97a-44c9-a36d-2d775a4f7b81', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1324?


Explain the CVE ID: What does the identifier CVE-2023-1325 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1325.

The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks


Provide references for further information: Can you share references or external links related to CVE-2023-1325?

{'url': 'https://wpscan.com/vulnerability/5f37cbf3-2388-4582-876c-6a7b0943c2a7', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1325?


Explain the CVE ID: What does the identifier CVE-2023-1326 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1326.

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate privilege. It is extremely unlikely that a system administrator would configure sudo to allow unprivileged users to perform this class of exploit.


Provide references for further information: Can you share references or external links related to CVE-2023-1326?

{'tags': ['patch'], 'url': 'https://github.com/canonical/apport/commit/e5f78cc89f1f5888b6a56b785dddcb0364c48ecb'}, {'url': 'https://ubuntu.com/security/notices/USN-6018-1', 'tags': ['vendor-advisory']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1326?


Explain the CVE ID: What does the identifier CVE-2023-1327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1327.

Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device's web management interface by resetting the admin password.


Provide references for further information: Can you share references or external links related to CVE-2023-1327?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1327?


Explain the CVE ID: What does the identifier CVE-2023-1328 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1328.

A vulnerability was found in Guizhou 115cms 4.2. It has been classified as problematic. Affected is an unknown function of the file /admin/content/index. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222738 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1328?

{'url': 'https://vuldb.com/?id.222738', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222738', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/niukongkong/asdasd/blob/master/115cmsArbitrary%20file%20upload%20vulnerability.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1328?


Explain the CVE ID: What does the identifier CVE-2023-1329 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1329.

A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products.


Provide references for further information: Can you share references or external links related to CVE-2023-1329?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1329?


Explain the CVE ID: What does the identifier CVE-2023-1330 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1330.

The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.


Provide references for further information: Can you share references or external links related to CVE-2023-1330?

{'url': 'https://wpscan.com/vulnerability/de4cff6d-0030-40e6-8221-fef56e12b4de', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1330?


Explain the CVE ID: What does the identifier CVE-2023-1331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1331.

The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack.


Provide references for further information: Can you share references or external links related to CVE-2023-1331?

{'url': 'https://wpscan.com/vulnerability/f81d9340-cf7e-46c4-b669-e61f2559cb8c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1331?


Explain the CVE ID: What does the identifier CVE-2023-1333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1333.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the clear_page_cache function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to delete the plugin's cache.


Provide references for further information: Can you share references or external links related to CVE-2023-1333?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1333?


Explain the CVE ID: What does the identifier CVE-2023-1334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1334.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized cache modification due to a missing capability check on the queue_posts function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to modify the plugin's cache.


Provide references for further information: Can you share references or external links related to CVE-2023-1334?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1334?


Explain the CVE ID: What does the identifier CVE-2023-1335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1335.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the ucss_connect function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to connect a new license key to the site.


Provide references for further information: Can you share references or external links related to CVE-2023-1335?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1335?


Explain the CVE ID: What does the identifier CVE-2023-1336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1336.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the ajax_deactivate function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to disable caching.


Provide references for further information: Can you share references or external links related to CVE-2023-1336?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1336?


Explain the CVE ID: What does the identifier CVE-2023-1337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1337.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the clear_uucss_logs function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to delete plugin log files.


Provide references for further information: Can you share references or external links related to CVE-2023-1337?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1337?


Explain the CVE ID: What does the identifier CVE-2023-1338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1338.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized cache modification due to a missing capability check on the attach_rule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to modify cache rules.


Provide references for further information: Can you share references or external links related to CVE-2023-1338?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1338?


Explain the CVE ID: What does the identifier CVE-2023-1339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1339.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the uucss_update_rule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to update caching rules.


Provide references for further information: Can you share references or external links related to CVE-2023-1339?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1339?


Explain the CVE ID: What does the identifier CVE-2023-1340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1340.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clear_uucss_logs function. This makes it possible for unauthenticated attackers to clear plugin logs via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1340?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1340?


Explain the CVE ID: What does the identifier CVE-2023-1341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1341.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ajax_deactivate function. This makes it possible for unauthenticated attackers to turn off caching via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1341?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1341?


Explain the CVE ID: What does the identifier CVE-2023-1342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1342.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ucss_connect function. This makes it possible for unauthenticated attackers to connect the site to a new license key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1342?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1342?


Explain the CVE ID: What does the identifier CVE-2023-1343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1343.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the attach_rule function. This makes it possible for unauthenticated attackers to modify the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1343?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1343?


Explain the CVE ID: What does the identifier CVE-2023-1344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1344.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the uucss_update_rule function. This makes it possible for unauthenticated attackers to modify the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1344?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1344?


Explain the CVE ID: What does the identifier CVE-2023-1345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1345.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the queue_posts function. This makes it possible for unauthenticated attackers to modify the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1345?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1345?


Explain the CVE ID: What does the identifier CVE-2023-1346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1346.

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clear_page_cache function. This makes it possible for unauthenticated attackers to clear the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1346?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1346?


Explain the CVE ID: What does the identifier CVE-2023-1347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1347.

The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present


Provide references for further information: Can you share references or external links related to CVE-2023-1347?

{'url': 'https://wpscan.com/vulnerability/356a5977-c90c-4fc6-98ed-032d5b27f272', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1347?


Explain the CVE ID: What does the identifier CVE-2023-1349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1349.

A vulnerability, which was classified as problematic, has been found in Hsycms 3.1. Affected by this issue is some unknown functionality of the file controller\cate.php of the component Add Category Module. The manipulation of the argument title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222842 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1349?

{'url': 'https://vuldb.com/?id.222842', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222842', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/yztale/hsycms/blob/main/README.md', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1349?


Explain the CVE ID: What does the identifier CVE-2023-1350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1350.

A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item-link.txt leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222848.


Provide references for further information: Can you share references or external links related to CVE-2023-1350?

{'url': 'https://vuldb.com/?id.222848', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222848', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/lwindolf/liferea/commit/8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59', 'tags': ['patch']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1350?


Explain the CVE ID: What does the identifier CVE-2023-1351 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1351.

A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file cust_transac.php. The manipulation of the argument phonenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222849 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1351?

{'url': 'https://vuldb.com/?id.222849', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222849', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/chenxing0903/CveHub/blob/main/Computer-Parts-Sales-And-Inventory-System-Sql-Vulnerability.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1351?


Explain the CVE ID: What does the identifier CVE-2023-1352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1352.

A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. This issue affects some unknown processing of the file /admin/login.php. The manipulation of the argument txtusername/txtpassword leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222851.


Provide references for further information: Can you share references or external links related to CVE-2023-1352?

{'url': 'https://vuldb.com/?id.222851', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222851', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20sql(6).pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1352?


Explain the CVE ID: What does the identifier CVE-2023-1353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1353.

A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Affected is an unknown function of the file verification.php. The manipulation of the argument txtvaccinationID leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222852.


Provide references for further information: Can you share references or external links related to CVE-2023-1353?

{'url': 'https://vuldb.com/?id.222852', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222852', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(1).pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1353?


Explain the CVE ID: What does the identifier CVE-2023-1354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1354.

A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file register.php. The manipulation of the argument txtfullname/txtage/txtaddress/txtphone leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222853 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1354?

{'url': 'https://vuldb.com/?id.222853', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222853', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/covid-19-vaccination%20vlun%20pdf/covid-19-vaccination%20xss(2).pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1354?


Explain the CVE ID: What does the identifier CVE-2023-1355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1355.

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.


Provide references for further information: Can you share references or external links related to CVE-2023-1355?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1355?


Explain the CVE ID: What does the identifier CVE-2023-1356 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1356.

Reflected cross-site scripting in the StudentSearch component in IDAttend’s IDWeb application 3.1.052 and earlier allows hijacking of a user’s browsing session by attackers who have convinced the said user to click on a malicious link.


Provide references for further information: Can you share references or external links related to CVE-2023-1356?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1356?


Explain the CVE ID: What does the identifier CVE-2023-1357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1357.

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222860.


Provide references for further information: Can you share references or external links related to CVE-2023-1357?

{'url': 'https://vuldb.com/?id.222860', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222860', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1357?


Explain the CVE ID: What does the identifier CVE-2023-1358 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1358.

A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argument user_email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222861 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1358?

{'url': 'https://vuldb.com/?id.222861', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222861', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/heitaoa999/bug_report/blob/main/vendors/janobe/Gadget%20Works%20Online%20Ordering%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1358?


Explain the CVE ID: What does the identifier CVE-2023-1359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1359.

A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /philosophy/admin/user/controller.php?action=add of the component Add New User. The manipulation of the argument U_NAME leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222862 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1359?

{'url': 'https://vuldb.com/?id.222862', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222862', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/heitaoa999/bug_report/blob/main/vendors/janobe/Gadget%20Works%20Online%20Ordering%20System/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1359?


Explain the CVE ID: What does the identifier CVE-2023-1360 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1360.

A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222863.


Provide references for further information: Can you share references or external links related to CVE-2023-1360?

{'url': 'https://vuldb.com/?id.222863', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222863', 'tags': ['signature', 'permissions-required']}, {'url': 'https://blog.0xgabe.com/?p=90', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1360?


Explain the CVE ID: What does the identifier CVE-2023-1361 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1361.

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.


Provide references for further information: Can you share references or external links related to CVE-2023-1361?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1361?


Explain the CVE ID: What does the identifier CVE-2023-1362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1362.

Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.


Provide references for further information: Can you share references or external links related to CVE-2023-1362?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1362?


Explain the CVE ID: What does the identifier CVE-2023-1363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1363.

A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add User Account. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222870 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1363?

{'url': 'https://vuldb.com/?id.222870', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222870', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Songs-YZS/CveList/blob/main/Computer-Parts-Sales-and-Inventory-System-has-Cross-Site-Scriptin-vulnerability.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1363?


Explain the CVE ID: What does the identifier CVE-2023-1364 mean in the context of cybersecurity?