Provide references for further information: Can you share references or external links related to CVE-2023-1955?

{'url': 'https://vuldb.com/?id.225342', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225342', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/User%20registration%20SQL%20injection.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1955?


Explain the CVE ID: What does the identifier CVE-2023-1956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1956.

A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_img of the component Image Handler. The manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225343.


Provide references for further information: Can you share references or external links related to CVE-2023-1956?

{'url': 'https://vuldb.com/?id.225343', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225343', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Any%20file%20deletion%20exists%20in%20the%20system%20management%20department.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1956?


Explain the CVE ID: What does the identifier CVE-2023-1957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1957.

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_sub_category of the component Subcategory Handler. The manipulation of the argument sub_category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225344.


Provide references for further information: Can you share references or external links related to CVE-2023-1957?

{'url': 'https://vuldb.com/?id.225344', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225344', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20subcategory%20list.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1957?


Explain the CVE ID: What does the identifier CVE-2023-1958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1958.

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_sub_category. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225345 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1958?

{'url': 'https://vuldb.com/?id.225345', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225345', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20present%20at%20subcategory%20deletion.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1958?


Explain the CVE ID: What does the identifier CVE-2023-1959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1959.

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225346 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1959?

{'url': 'https://vuldb.com/?id.225346', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225346', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20added%20category%20list.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1959?


Explain the CVE ID: What does the identifier CVE-2023-1960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1960.

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225347.


Provide references for further information: Can you share references or external links related to CVE-2023-1960?

{'url': 'https://vuldb.com/?id.225347', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225347', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20deletion%20point%20of%20the%20category%20list.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1960?


Explain the CVE ID: What does the identifier CVE-2023-1961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1961.

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=system_info. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225348.


Provide references for further information: Can you share references or external links related to CVE-2023-1961?

{'url': 'https://vuldb.com/?id.225348', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225348', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/Cross%20site%20scripting%20attack%20at%20system%20name%20setting.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1961?


Explain the CVE ID: What does the identifier CVE-2023-1962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1962.

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225361 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1962?

{'url': 'https://vuldb.com/?id.225361', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225361', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/PEOIzEve/bug_report/blob/main/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1962?


Explain the CVE ID: What does the identifier CVE-2023-1963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1963.

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php of the component Search. The manipulation of the argument searchinput leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225359.


Provide references for further information: Can you share references or external links related to CVE-2023-1963?

{'url': 'https://vuldb.com/?id.225359', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225359', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/search-locker-details.php_SQL_English.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1963?


Explain the CVE ID: What does the identifier CVE-2023-1964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1964.

A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file recovery.php of the component Password Reset. The manipulation of the argument uname/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225360.


Provide references for further information: Can you share references or external links related to CVE-2023-1964?

{'url': 'https://vuldb.com/?id.225360', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225360', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/password-recovery.php_SQL_English.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1964?


Explain the CVE ID: What does the identifier CVE-2023-1965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1965.

An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn't enabled by default.


Provide references for further information: Can you share references or external links related to CVE-2023-1965?

{'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/406235'}, {'url': 'https://hackerone.com/reports/1923672'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1965.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1965?


Explain the CVE ID: What does the identifier CVE-2023-1966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1966.

Instruments with Illumina Universal Copy Service v1.x and
v2.x contain an unnecessary privileges vulnerability. An unauthenticated
malicious actor could upload and execute code remotely at the operating system
level, which could allow an attacker to change settings, configurations,
software, or access sensitive data on the affected product.


Provide references for further information: Can you share references or external links related to CVE-2023-1966?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1966?


Explain the CVE ID: What does the identifier CVE-2023-1967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1967.

Keysight N8844A Data Analytics Web Service deserializes untrusted data without sufficiently verifying the resulting data will be valid.


Provide references for further information: Can you share references or external links related to CVE-2023-1967?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1967?


Explain the CVE ID: What does the identifier CVE-2023-1968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1968.

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.


Provide references for further information: Can you share references or external links related to CVE-2023-1968?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1968?


Explain the CVE ID: What does the identifier CVE-2023-1969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1969.

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/manage_stock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225406 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1969?

{'url': 'https://vuldb.com/?id.225406', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225406', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Gear-D/bug_report/blob/main/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1969?


Explain the CVE ID: What does the identifier CVE-2023-1970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1970.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the function Upload of the file application\admin\controller\Upload.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225407. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.


Provide references for further information: Can you share references or external links related to CVE-2023-1970?

{'url': 'https://vuldb.com/?id.225407', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225407', 'tags': ['signature', 'permissions-required']}, {'url': 'https://tib36.github.io/2023/04/09/tpAdmin-RCE/', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1970?


Explain the CVE ID: What does the identifier CVE-2023-1971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1971.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12. Affected is the function remote of the file application\admin\controller\Upload.php. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225408. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.


Provide references for further information: Can you share references or external links related to CVE-2023-1971?

{'url': 'https://vuldb.com/?id.225408', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225408', 'tags': ['signature', 'permissions-required']}, {'url': 'https://tib36.github.io/2023/04/09/tpAdmin-SSRF/', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1971?


Explain the CVE ID: What does the identifier CVE-2023-1972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1972.

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.


Provide references for further information: Can you share references or external links related to CVE-2023-1972?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2185646'}, {'url': 'https://sourceware.org/bugzilla/show_bug.cgi?id=30285'}, {'name': 'GLSA-202309-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202309-15'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1972?


Explain the CVE ID: What does the identifier CVE-2023-1973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1973.

A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, leading the server to an OutofMemory error, exhausting the server's memory.


Provide references for further information: Can you share references or external links related to CVE-2023-1973?

{'url': 'https://access.redhat.com/errata/RHSA-2024:1674', 'name': 'RHSA-2024:1674', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2024:1675', 'name': 'RHSA-2024:1675', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2024:1676', 'name': 'RHSA-2024:1676', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2024:1677', 'name': 'RHSA-2024:1677', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2024:2763', 'name': 'RHSA-2024:2763', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2024:2764', 'name': 'RHSA-2024:2764', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/security/cve/CVE-2023-1973', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2185662', 'name': 'RHBZ#2185662', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1973?


Explain the CVE ID: What does the identifier CVE-2023-1974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1974.

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.


Provide references for further information: Can you share references or external links related to CVE-2023-1974?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1974?


Explain the CVE ID: What does the identifier CVE-2023-1975 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1975.

Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.


Provide references for further information: Can you share references or external links related to CVE-2023-1975?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1975?


Explain the CVE ID: What does the identifier CVE-2023-1976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1976.

Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.


Provide references for further information: Can you share references or external links related to CVE-2023-1976?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1976?


Explain the CVE ID: What does the identifier CVE-2023-1977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1977.

The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.


Provide references for further information: Can you share references or external links related to CVE-2023-1977?

{'url': 'https://wpscan.com/vulnerability/842f3b1f-395a-4ea2-b7df-a36f70e8c790', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1977?


Explain the CVE ID: What does the identifier CVE-2023-1978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1978.

The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the query string in versions up to, and including, 4.9.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1978?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1978?


Explain the CVE ID: What does the identifier CVE-2023-1979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1979.

The Web Stories for WordPress plugin supports the WordPress built-in functionality of protecting content with a password. The content is then only accessible to website visitors after entering the password. In WordPress, users with the "Author" role can create stories, but don't have the ability to edit password protected stories. The vulnerability allowed users with said role to bypass this permission check when trying to duplicate the protected story in the plugin's own dashboard, giving them access to the seemingly protected content. We recommend upgrading to version 1.32 or beyond commit  ad49781c2a35c5c92ef704d4b621ab4e5cb77d68 https://github.com/GoogleForCreators/web-stories-wp/commit/ad49781c2a35c5c92ef704d4b621ab4e5cb77d68


Provide references for further information: Can you share references or external links related to CVE-2023-1979?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1979?


Explain the CVE ID: What does the identifier CVE-2023-1980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1980.

Two factor

authentication

bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to cancel the two factor authentication via the application user interface and open entries.


Provide references for further information: Can you share references or external links related to CVE-2023-1980?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1980?


Explain the CVE ID: What does the identifier CVE-2023-1981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1981.

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.


Provide references for further information: Can you share references or external links related to CVE-2023-1981?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1981'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2185911'}, {'url': 'https://github.com/lathiat/avahi/issues/375'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1981?


Explain the CVE ID: What does the identifier CVE-2023-1982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1982.

The Front Editor WordPress plugin through 4.0.4 does not sanitize and escape some of its form settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


Provide references for further information: Can you share references or external links related to CVE-2023-1982?

{'url': 'https://wpscan.com/vulnerability/51987966-8007-4e12-bc2e-997b92054739', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1982?


Explain the CVE ID: What does the identifier CVE-2023-1983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1983.

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manage_product.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225530 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1983?

{'url': 'https://vuldb.com/?id.225530', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225530', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/graywar1/bug_report/blob/main/SQLi.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1983?


Explain the CVE ID: What does the identifier CVE-2023-1984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1984.

A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/check_availability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225532.


Provide references for further information: Can you share references or external links related to CVE-2023-1984?

{'url': 'https://vuldb.com/?id.225532', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225532', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/qinyiqun/bug_report/blob/main/SQLi.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1984?


Explain the CVE ID: What does the identifier CVE-2023-1985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1985.

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. This issue affects the function save_brand of the file /classes/Master.php?f=save_brand. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225533 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1985?

{'url': 'https://vuldb.com/?id.225533', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225533', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/1-SQL%20injection%20exists%20at%20the%20location%20where%20the%20brand%20list%20is%20added.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1985?


Explain the CVE ID: What does the identifier CVE-2023-1986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1986.

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function delete_order of the file /classes/master.php?f=delete_order. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225534 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1986?

{'url': 'https://vuldb.com/?id.225534', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225534', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/3-SQL%20injection%20exists%20at%20order%20deletion%20point.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1986?


Explain the CVE ID: What does the identifier CVE-2023-1987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1987.

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is the function update_order_status of the file /classes/Master.php?f=update_order_status. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225535.


Provide references for further information: Can you share references or external links related to CVE-2023-1987?

{'url': 'https://vuldb.com/?id.225535', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225535', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/4-SQL%20injection%20present%20at%20order%20status%20update.pdf', 'tags': ['broken-link', 'exploit', 'patch']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1987?


Explain the CVE ID: What does the identifier CVE-2023-1988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1988.

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation of the argument Brand Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225536.


Provide references for further information: Can you share references or external links related to CVE-2023-1988?

{'url': 'https://vuldb.com/?id.225536', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.225536', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/5-%20There%20is%20a%20storage%20type%20cross%20site%20scripting%20attack%20at%20the%20brand%20name.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1988?


Explain the CVE ID: What does the identifier CVE-2023-1989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1989.

A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.


Provide references for further information: Can you share references or external links related to CVE-2023-1989?

{'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=f132c2d13088'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'name': '[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20230601-0004/'}, {'name': 'DSA-5492', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5492'}, {'name': '[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1989?


Explain the CVE ID: What does the identifier CVE-2023-1990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1990.

A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.


Provide references for further information: Can you share references or external links related to CVE-2023-1990?

{'url': 'https://lore.kernel.org/all/20230312160837.2040857-1-zyytlz.wz%40163.com/'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'name': '[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1990?


Explain the CVE ID: What does the identifier CVE-2023-1992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1992.

RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2023-1992?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2023-09.html'}, {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/18852'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1992.json'}, {'name': 'FEDORA-2023-f70fbf64cb', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/'}, {'name': 'FEDORA-2023-203eff67e0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/'}, {'name': 'FEDORA-2023-7af3ad9ffe', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/'}, {'name': '[debian-lts-announce] 20230429 [SECURITY] [DLA 3402-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html'}, {'name': 'DSA-5429', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5429'}, {'name': 'GLSA-202309-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202309-02'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1992?


Explain the CVE ID: What does the identifier CVE-2023-1993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1993.

LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2023-1993?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2023-10.html'}, {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/18900'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1993.json'}, {'name': 'FEDORA-2023-f70fbf64cb', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/'}, {'name': 'FEDORA-2023-203eff67e0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/'}, {'name': 'FEDORA-2023-7af3ad9ffe', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/'}, {'name': '[debian-lts-announce] 20230429 [SECURITY] [DLA 3402-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html'}, {'name': 'DSA-5429', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5429'}, {'name': 'GLSA-202309-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202309-02'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1993?


Explain the CVE ID: What does the identifier CVE-2023-1994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1994.

GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2023-1994?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2023-11.html'}, {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/18947'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1994.json'}, {'name': 'FEDORA-2023-f70fbf64cb', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EHLTD25WNQSPQNELX52UH6YLP4TBLKTT/'}, {'name': 'FEDORA-2023-203eff67e0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PFJERBHVWYLYWXO2B3V47QH66IEB6EZ3/'}, {'name': 'FEDORA-2023-7af3ad9ffe', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZA7IMATNNQPLIM6WMRPM3T5ZY24NRR2/'}, {'name': '[debian-lts-announce] 20230429 [SECURITY] [DLA 3402-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html'}, {'name': 'DSA-5429', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5429'}, {'name': 'GLSA-202309-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202309-02'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1994?


Explain the CVE ID: What does the identifier CVE-2023-1995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1995.

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23,

before 09-66-17,

before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W

, before 09-66-/Q

; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.


Provide references for further information: Can you share references or external links related to CVE-2023-1995?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1995?


Explain the CVE ID: What does the identifier CVE-2023-1996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1996.

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.


Provide references for further information: Can you share references or external links related to CVE-2023-1996?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1996?


Explain the CVE ID: What does the identifier CVE-2023-1997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1997.

An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.


Provide references for further information: Can you share references or external links related to CVE-2023-1997?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1997?


Explain the CVE ID: What does the identifier CVE-2023-1998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1998.

The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to attacks in some cases even after enabling the spectre-BTI mitigation with prctl. The same behavior can be observed on a bare-metal machine when forcing the mitigation to IBRS on boot command line.

This happened because when plain IBRS was enabled (not enhanced IBRS), the kernel had some logic that determined that STIBP was not needed. The IBRS bit implicitly protects against cross-thread branch target injection. However, with legacy IBRS, the IBRS bit was cleared on returning to userspace, due to performance reasons, which disabled the implicit STIBP and left userspace threads vulnerable to cross-thread branch target injection against which STIBP protects.


Provide references for further information: Can you share references or external links related to CVE-2023-1998?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1998?


Explain the CVE ID: What does the identifier CVE-2023-1999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1999.

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.


Provide references for further information: Can you share references or external links related to CVE-2023-1999?

{'url': 'https://chromium.googlesource.com/webm/libwebp'}, {'url': 'https://security.gentoo.org/glsa/202309-05'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1999?