Provide references for further information: Can you share references or external links related to CVE-2023-1589?

{'url': 'https://vuldb.com/?id.223654', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223654', 'tags': ['signature', 'permissions-required']}, {'url': 'https://blog.csdn.net/weixin_43864034/article/details/129729911', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1589?


Explain the CVE ID: What does the identifier CVE-2023-1590 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1590.

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223655.


Provide references for further information: Can you share references or external links related to CVE-2023-1590?

{'url': 'https://vuldb.com/?id.223655', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223655', 'tags': ['signature', 'permissions-required']}, {'url': 'https://blog.csdn.net/weixin_43864034/article/details/129730106', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1590?


Explain the CVE ID: What does the identifier CVE-2023-1591 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1591.

A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. This affects an unknown part of the file classes/Users.php?f=save_ruser. The manipulation of the argument id/email leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223659.


Provide references for further information: Can you share references or external links related to CVE-2023-1591?

{'url': 'https://vuldb.com/?id.223659', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223659', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1591?


Explain the CVE ID: What does the identifier CVE-2023-1592 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1592.

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file admin/courses/view_class.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-223660.


Provide references for further information: Can you share references or external links related to CVE-2023-1592?

{'url': 'https://vuldb.com/?id.223660', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223660', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1592?


Explain the CVE ID: What does the identifier CVE-2023-1593 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1593.

A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generator System 1.0. This issue affects some unknown processing of the file classes/Master.php?f=save_class. The manipulation of the argument description leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-223661 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1593?

{'url': 'https://vuldb.com/?id.223661', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223661', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1593?


Explain the CVE ID: What does the identifier CVE-2023-1594 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1594.

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223662 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1594?

{'url': 'https://vuldb.com/?id.223662', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223662', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/OYyunshen/Poc/blob/main/Novel-PlusV3.6.2Sqli.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1594?


Explain the CVE ID: What does the identifier CVE-2023-1595 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1595.

A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223663.


Provide references for further information: Can you share references or external links related to CVE-2023-1595?

{'url': 'https://vuldb.com/?id.223663', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223663', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/1610349395/novel-plus-v3.6.2----Background-SQL-Injection-Vulnerability-/blob/main/novel-plus%20v3.6.2%20--%20Background%20SQL%20Injection%20Vulnerability.md', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1595?


Explain the CVE ID: What does the identifier CVE-2023-1596 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1596.

The tagDiv Composer WordPress plugin before 4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin


Provide references for further information: Can you share references or external links related to CVE-2023-1596?

{'url': 'https://wpscan.com/vulnerability/cada9be9-522a-4ce8-847d-c8fff2ddcc07', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1596?


Explain the CVE ID: What does the identifier CVE-2023-1597 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1597.

The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves as an admin of the blog.


Provide references for further information: Can you share references or external links related to CVE-2023-1597?

{'url': 'https://wpscan.com/vulnerability/4eafe111-8874-4560-83ff-394abe7a803b', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1597?


Explain the CVE ID: What does the identifier CVE-2023-1598 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1598.


Provide references for further information: Can you share references or external links related to CVE-2023-1598?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1598?


Explain the CVE ID: What does the identifier CVE-2023-1601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1601.


Provide references for further information: Can you share references or external links related to CVE-2023-1601?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1601?


Explain the CVE ID: What does the identifier CVE-2023-1602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1602.

The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output escaping in versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.


Provide references for further information: Can you share references or external links related to CVE-2023-1602?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1602?


Explain the CVE ID: What does the identifier CVE-2023-1603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1603.

Permission bypass when importing or synchronizing entries in User vault

 in Devolutions Server 2022.3.13 and prior versions allows users with restricted rights to bypass entry permission via id collision.


Provide references for further information: Can you share references or external links related to CVE-2023-1603?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1603?


Explain the CVE ID: What does the identifier CVE-2023-1604 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1604.

The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.8. This is due to missing or incorrect nonce validation on the configuration_page function. This makes it possible for unauthenticated attackers to add and import redirects, including comments containing cross-site scripting as detailed in CVE-2023-1602, granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1604?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1604?


Explain the CVE ID: What does the identifier CVE-2023-1605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1605.

Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.


Provide references for further information: Can you share references or external links related to CVE-2023-1605?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1605?


Explain the CVE ID: What does the identifier CVE-2023-1606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1606.

A vulnerability was found in novel-plus 3.6.2 and classified as critical. Affected by this issue is some unknown functionality of the file DictController.java. The manipulation of the argument orderby leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223736.


Provide references for further information: Can you share references or external links related to CVE-2023-1606?

{'url': 'https://vuldb.com/?id.223736', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223736', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/OYyunshen/Poc/blob/main/Novel-PlusSqli1.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1606?


Explain the CVE ID: What does the identifier CVE-2023-1607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1607.

A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the file /common/sysFile/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223737 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1607?

{'url': 'https://vuldb.com/?id.223737', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223737', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/1610349395/novel-plus-v3.6.2----SQL-Injection-Vulnerability-/blob/main/novel-plus%20v3.6.2%20--%20%20SQL%20Injection%20Vulnerability%20.md', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1607?


Explain the CVE ID: What does the identifier CVE-2023-1608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1608.

A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been declared as critical. This vulnerability affects the function getAdminList of the file /api/admin/store/product/list. The manipulation of the argument cateId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-223738 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1608?

{'url': 'https://vuldb.com/?id.223738', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223738', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/crmeb/crmeb_java/issues/11', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1608?


Explain the CVE ID: What does the identifier CVE-2023-1609 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1609.

A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic. This issue affects the function save of the file /api/admin/store/product/save. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223739.


Provide references for further information: Can you share references or external links related to CVE-2023-1609?

{'url': 'https://vuldb.com/?id.223739', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223739', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/crmeb/crmeb_java/issues/12', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1609?


Explain the CVE ID: What does the identifier CVE-2023-1610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1610.

A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some unknown functionality of the file /project/tasks/list. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223742 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1610?

{'url': 'https://vuldb.com/?id.223742', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223742', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/getrebuild/rebuild/issues/597', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1610?


Explain the CVE ID: What does the identifier CVE-2023-1611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1611.

A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea


Provide references for further information: Can you share references or external links related to CVE-2023-1611?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2181342'}, {'url': 'https://lore.kernel.org/linux-btrfs/35b9a70650ea947387cf352914a8774b4f7e8a6f.1679481128.git.fdmanana%40suse.com/'}, {'name': 'FEDORA-2023-98251cef79', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWECAZ7V7EPSXMINO6Q6KWNKDY2CO6ZW/'}, {'name': 'FEDORA-2023-d525cf5272', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5QCM6XO4HSPLGR3DFYWFRIA3GCBIHZR4/'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'url': 'https://github.com/torvalds/linux/commit/2f1a6be12ab6c8470d5776e68644726c94257c54'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1611?


Explain the CVE ID: What does the identifier CVE-2023-1612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1612.

A vulnerability, which was classified as critical, was found in Rebuild up to 3.2.3. This affects an unknown part of the file /files/list-file. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-223743.


Provide references for further information: Can you share references or external links related to CVE-2023-1612?

{'url': 'https://vuldb.com/?id.223743', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223743', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/getrebuild/rebuild/issues/598', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1612?


Explain the CVE ID: What does the identifier CVE-2023-1613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1613.

A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-223744.


Provide references for further information: Can you share references or external links related to CVE-2023-1613?

{'url': 'https://vuldb.com/?id.223744', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223744', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/getrebuild/rebuild/issues/596', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1613?


Explain the CVE ID: What does the identifier CVE-2023-1614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1614.

The WP Custom Author URL WordPress plugin before 1.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).


Provide references for further information: Can you share references or external links related to CVE-2023-1614?

{'url': 'https://wpscan.com/vulnerability/56abd1e2-0ea9-47f7-9a1b-2093ac15d39c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1614?


Explain the CVE ID: What does the identifier CVE-2023-1615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1615.

The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in versions up to, and including, 3.1.23. This makes it possible for authenticated attackers of any authorization level to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.


Provide references for further information: Can you share references or external links related to CVE-2023-1615?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1615?


Explain the CVE ID: What does the identifier CVE-2023-1616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1616.

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223800.


Provide references for further information: Can you share references or external links related to CVE-2023-1616?

{'url': 'https://vuldb.com/?id.223800', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.223800', 'tags': ['signature', 'permissions-required']}, {'url': 'https://gitee.com/xiaobingby/TeaCMS/issues/I6L9Z2', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1616?


Explain the CVE ID: What does the identifier CVE-2023-1617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1617.

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules).  This vulnerability may allow an unauthenticated network-based attacker to bypass the authentication mechanism of the VC4 visualization on affected devices. The impact of this vulnerability depends on the functionality provided in the visualization.
This issue affects B&R VC4: from 3.* through 3.96.7, from 4.0* through 4.06.7, from 4.1* through 4.16.3, from 4.2* through 4.26.8, from 4.3* through 4.34.6, from 4.4* through 4.45.1, from 4.5* through 4.45.3, from 4.7* through 4.72.9.


Provide references for further information: Can you share references or external links related to CVE-2023-1617?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1617?


Explain the CVE ID: What does the identifier CVE-2023-1618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1618.

Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 **** and prior allows a remote unauthenticated attacker to bypass authentication and illegally log into the affected module by connecting to it via telnet which is hidden function and is enabled by default when shipped from the factory. As a result, a remote attacker with unauthorized login can reset the module, and if certain conditions are met, he/she can disclose or tamper with the module's configuration or rewrite the firmware.


Provide references for further information: Can you share references or external links related to CVE-2023-1618?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1618?


Explain the CVE ID: What does the identifier CVE-2023-1619 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1619.

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.


Provide references for further information: Can you share references or external links related to CVE-2023-1619?

{'tags': ['vendor-advisory'], 'url': 'https://cert.vde.com/en/advisories/VDE-2023-006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1619?


Explain the CVE ID: What does the identifier CVE-2023-1620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1620.

Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.


Provide references for further information: Can you share references or external links related to CVE-2023-1620?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1620?


Explain the CVE ID: What does the identifier CVE-2023-1621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1621.

An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to commit to projects even from a restricted IP address.


Provide references for further information: Can you share references or external links related to CVE-2023-1621?

{'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/399774'}, {'url': 'https://hackerone.com/reports/1914049'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1621.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1621?


Explain the CVE ID: What does the identifier CVE-2023-1622 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1622.


Provide references for further information: Can you share references or external links related to CVE-2023-1622?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1622?


Explain the CVE ID: What does the identifier CVE-2023-1623 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1623.

The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers to make a logged in admin send such information to an arbitrary email address via a CSRF attack.


Provide references for further information: Can you share references or external links related to CVE-2023-1623?

{'url': 'https://wpscan.com/vulnerability/a04d3808-f4fc-4d77-a1bd-be623cd7053e', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1623?


Explain the CVE ID: What does the identifier CVE-2023-1624 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1624.

The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to make users with the wpcode_activate_snippets capability delete arbitrary log files on the server, including outside of the blog folders


Provide references for further information: Can you share references or external links related to CVE-2023-1624?

{'url': 'https://wpscan.com/vulnerability/132b70e5-4368-43b4-81f6-2d01bc09dc8f', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1624?


Explain the CVE ID: What does the identifier CVE-2023-1625 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1625.

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.


Provide references for further information: Can you share references or external links related to CVE-2023-1625?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1625', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2181621', 'name': 'RHBZ#2181621', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}, {'url': 'https://github.com/openstack/heat/commit/a49526c278e52823080c7f3fcb72785b93fd4dcb'}, {'url': 'https://launchpad.net/bugs/1999665'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1625?


Explain the CVE ID: What does the identifier CVE-2023-1626 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1626.

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224008.


Provide references for further information: Can you share references or external links related to CVE-2023-1626?

{'url': 'https://vuldb.com/?id.224008', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224008', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned31', 'tags': ['broken-link']}, {'url': 'https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1626?


Explain the CVE ID: What does the identifier CVE-2023-1627 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1627.

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier VDB-224009 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1627?

{'url': 'https://vuldb.com/?id.224009', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224009', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned29', 'tags': ['broken-link']}, {'url': 'https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1627?


Explain the CVE ID: What does the identifier CVE-2023-1628 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1628.

A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1628?

{'url': 'https://vuldb.com/?id.224010', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224010', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30', 'tags': ['broken-link']}, {'url': 'https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1628?


Explain the CVE ID: What does the identifier CVE-2023-1629 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1629.

A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224011.


Provide references for further information: Can you share references or external links related to CVE-2023-1629?

{'url': 'https://vuldb.com/?id.224011', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224011', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1629', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1629?


Explain the CVE ID: What does the identifier CVE-2023-1630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1630.

A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012.


Provide references for further information: Can you share references or external links related to CVE-2023-1630?

{'url': 'https://vuldb.com/?id.224012', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224012', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1630', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1630?


Explain the CVE ID: What does the identifier CVE-2023-1631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1631.

A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224013 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1631?

{'url': 'https://vuldb.com/?id.224013', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224013', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1631', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1631?


Explain the CVE ID: What does the identifier CVE-2023-1632 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1632.


Provide references for further information: Can you share references or external links related to CVE-2023-1632?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1632?


Explain the CVE ID: What does the identifier CVE-2023-1633 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1633.

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.


Provide references for further information: Can you share references or external links related to CVE-2023-1633?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1633', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2181761', 'name': 'RHBZ#2181761', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1633?


Explain the CVE ID: What does the identifier CVE-2023-1634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1634.

A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224016.


Provide references for further information: Can you share references or external links related to CVE-2023-1634?

{'url': 'https://vuldb.com/?id.224016', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224016', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/BigTiger2020/2023-1/blob/main/ssrf/ssrf.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1634?


Explain the CVE ID: What does the identifier CVE-2023-1635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1635.

A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the file apiRun.php. The manipulation of the argument mode leads to cross site scripting. The attack can be launched remotely. The identifier VDB-224017 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1635?

{'url': 'https://vuldb.com/?id.224017', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224017', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/BigTiger2020/2023/blob/main/XSS.md', 'tags': ['related']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1635?


Explain the CVE ID: What does the identifier CVE-2023-1636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1636.

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.


Provide references for further information: Can you share references or external links related to CVE-2023-1636?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1636', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2181765', 'name': 'RHBZ#2181765', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1636?


Explain the CVE ID: What does the identifier CVE-2023-1637 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1637.

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.


Provide references for further information: Can you share references or external links related to CVE-2023-1637?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1637?


Explain the CVE ID: What does the identifier CVE-2023-1638 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1638.

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue is the function 0x8001E024/0x8001E040 in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-224018 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1638?

{'url': 'https://vuldb.com/?id.224018', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224018', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1638', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1_jYlCkQMNaUwGV5QJtyz4zhdTqaGCv6Z/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1638?


Explain the CVE ID: What does the identifier CVE-2023-1639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1639.

A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224019.


Provide references for further information: Can you share references or external links related to CVE-2023-1639?

{'url': 'https://vuldb.com/?id.224019', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224019', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1639', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1hWgHhboaekq4hGIj2kNgEI54rM-u_rvV/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1639?


Explain the CVE ID: What does the identifier CVE-2023-1640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1640.

A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224020.


Provide references for further information: Can you share references or external links related to CVE-2023-1640?

{'url': 'https://vuldb.com/?id.224020', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224020', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1640', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1AcwSxTA0_zh7mmxU5J8WphRqg_mQsO-g/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1640?


Explain the CVE ID: What does the identifier CVE-2023-1641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1641.

A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affects the function 0x222018 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224021 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1641?

{'url': 'https://vuldb.com/?id.224021', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224021', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1641', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1ncqfaxSdeu-mGVAOnYxqxYtyyFZClHBF/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1641?


Explain the CVE ID: What does the identifier CVE-2023-1642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1642.

A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the function 0x222034/0x222038/0x22203C/0x222040 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-224022 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1642?

{'url': 'https://vuldb.com/?id.224022', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224022', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1642', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1iWdqJ9PsBp1W5xINpUdQ28xbx_tB9xxf/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1642?


Explain the CVE ID: What does the identifier CVE-2023-1643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1643.

A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulnerability is the function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224023.


Provide references for further information: Can you share references or external links related to CVE-2023-1643?

{'url': 'https://vuldb.com/?id.224023', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224023', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1643', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1dHdltwenfMdwAPeb3JPex0fHxfK_iLYh/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1643?


Explain the CVE ID: What does the identifier CVE-2023-1644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1644.

A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is the function 0x8018E010 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224024.


Provide references for further information: Can you share references or external links related to CVE-2023-1644?

{'url': 'https://vuldb.com/?id.224024', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224024', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1644', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1TVezyDiS9Kyw7ttNlLBCstpEUqxozha0/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1644?


Explain the CVE ID: What does the identifier CVE-2023-1645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1645.

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224025 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1645?

{'url': 'https://vuldb.com/?id.224025', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224025', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1645', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1RmFSm1sQWwQXPXjkeZtgf8q51hGD8tTf/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1645?


Explain the CVE ID: What does the identifier CVE-2023-1646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1646.

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224026 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1646?

{'url': 'https://vuldb.com/?id.224026', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224026', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1GITWzh29cRcycVqVJgMJuX6emE_f1KPV/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1646?


Explain the CVE ID: What does the identifier CVE-2023-1647 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1647.

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7.


Provide references for further information: Can you share references or external links related to CVE-2023-1647?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1647?


Explain the CVE ID: What does the identifier CVE-2023-1648 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1648.


Provide references for further information: Can you share references or external links related to CVE-2023-1648?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1648?


Explain the CVE ID: What does the identifier CVE-2023-1649 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1649.

The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


Provide references for further information: Can you share references or external links related to CVE-2023-1649?

{'url': 'https://wpscan.com/vulnerability/ea806115-14ab-4bc4-a272-2141cb14454a', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1649?


Explain the CVE ID: What does the identifier CVE-2023-1650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1650.

The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP Object Injection when a suitable gadget is present on the blog


Provide references for further information: Can you share references or external links related to CVE-2023-1650?

{'url': 'https://wpscan.com/vulnerability/7d7fe498-0aa3-4fa7-b560-610b42b2abed', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1650?


Explain the CVE ID: What does the identifier CVE-2023-1651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1651.

The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users, such as subscriber to update them. Furthermore, due to the lack of escaping of the settings, this could also lead to Stored XSS


Provide references for further information: Can you share references or external links related to CVE-2023-1651?

{'url': 'https://wpscan.com/vulnerability/c88b22ba-4fc2-49ad-a457-224157521bad', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1651?


Explain the CVE ID: What does the identifier CVE-2023-1652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1652.

A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem.


Provide references for further information: Can you share references or external links related to CVE-2023-1652?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1652?


Explain the CVE ID: What does the identifier CVE-2023-1654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1654.

Denial of Service in GitHub repository gpac/gpac prior to 2.4.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1654?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1654?


Explain the CVE ID: What does the identifier CVE-2023-1655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1655.

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1655?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1655?


Explain the CVE ID: What does the identifier CVE-2023-1656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1656.

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server (RCS) LDAP Connector on Windows, MacOS, Linux allows Remote Services with Stolen Credentials.This issue affects OpenIDM and Java Remote Connector Server (RCS): from 1.5.20.9 through 1.5.20.13.


Provide references for further information: Can you share references or external links related to CVE-2023-1656?

{'tags': ['vendor-advisory'], 'url': 'https://backstage.forgerock.com/knowledge/kb/article/a14149722'}, {'tags': ['product'], 'url': 'https://backstage.forgerock.com/downloads/browse/idm/all/productId:idm-connectors/subProductId:ldap/minorVersion:1.5/version:1.5.20.14'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1656?


Explain the CVE ID: What does the identifier CVE-2023-1659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1659.


Provide references for further information: Can you share references or external links related to CVE-2023-1659?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1659?


Explain the CVE ID: What does the identifier CVE-2023-1660 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1660.

The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to Stored XSS due to the lack of escaping when outputting them in the admin dashboard


Provide references for further information: Can you share references or external links related to CVE-2023-1660?

{'url': 'https://wpscan.com/vulnerability/1a5cbcfc-fa55-433a-a76b-3881b6c4bea2', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1660?


Explain the CVE ID: What does the identifier CVE-2023-1661 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1661.

The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.


Provide references for further information: Can you share references or external links related to CVE-2023-1661?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1661?


Explain the CVE ID: What does the identifier CVE-2023-1663 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1663.

Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vulnerability is an insecurely configured servlet mapping for the underlying Apache Tomcat server. As a result, the downloads directory and its contents are accessible. 5.9 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C)


Provide references for further information: Can you share references or external links related to CVE-2023-1663?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1663?


Explain the CVE ID: What does the identifier CVE-2023-1664 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1664.

A flaw was found in Keycloak. This flaw depends on a non-default configuration "Revalidate Client Certificate" to be enabled and the reverse proxy is not validating the certificate before Keycloak. Using this method an attacker may choose the certificate which will be validated by the server. If this happens and the KC_SPI_TRUSTSTORE_FILE_FILE variable is missing/misconfigured, any trustfile may be accepted with the logging information of "Cannot validate client certificate trust: Truststore not available". This may not impact availability as the attacker would have no access to the server, but consumer applications Integrity or Confidentiality may be impacted considering a possible access to them. Considering the environment is correctly set to use "Revalidate Client Certificate" this flaw is avoidable.


Provide references for further information: Can you share references or external links related to CVE-2023-1664?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1664?


Explain the CVE ID: What does the identifier CVE-2023-1665 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1665.

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1665?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1665?


Explain the CVE ID: What does the identifier CVE-2023-1666 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1666.

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. This vulnerability affects unknown code of the file users/classes/view_class.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224104.


Provide references for further information: Can you share references or external links related to CVE-2023-1666?

{'url': 'https://vuldb.com/?id.224104', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224104', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/si-xiao-kai/bug_report/blob/main/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1666?


Explain the CVE ID: What does the identifier CVE-2023-1667 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1667.

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2023-1667?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1667'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2182199'}, {'url': 'http://www.libssh.org/security/advisories/CVE-2023-1667.txt'}, {'name': 'FEDORA-2023-5fa5ca2043', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27PD44ALQTZXX7K6JAM3BXBUHYA6DFFN/'}, {'name': '[debian-lts-announce] 20230529 [SECURITY] [DLA 3437-1] libssh security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00029.html'}, {'name': 'GLSA-202312-05', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202312-05'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1667?


Explain the CVE ID: What does the identifier CVE-2023-1668 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1668.

A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols (nw_proto is wildcarded) for this flow, but with an incorrect action, possibly causing incorrect handling of other IP packets with a != 0 IP protocol that matches this dp flow.


Provide references for further information: Can you share references or external links related to CVE-2023-1668?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2137666'}, {'url': 'https://www.openwall.com/lists/oss-security/2023/04/06/1'}, {'name': 'DSA-5387', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5387'}, {'name': 'FEDORA-2023-7da03dc2ae', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2GUNS3WSJG4TUDKZ5L7FXGJMVOD6EJZ/'}, {'name': '[debian-lts-announce] 20230501 [SECURITY] [DLA 3410-1] openvswitch security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00000.html'}, {'name': 'GLSA-202311-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202311-16'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1668?


Explain the CVE ID: What does the identifier CVE-2023-1669 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1669.

The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.


Provide references for further information: Can you share references or external links related to CVE-2023-1669?

{'url': 'https://wpscan.com/vulnerability/fb8791f5-2879-431e-9afc-06d5839e4b9d', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1669?


Explain the CVE ID: What does the identifier CVE-2023-1670 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1670.

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.


Provide references for further information: Can you share references or external links related to CVE-2023-1670?

{'url': 'https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz%40163.com/'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'name': '[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20230526-0010/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1670?


Explain the CVE ID: What does the identifier CVE-2023-1671 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1671.

A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2023-1671?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1671?


Explain the CVE ID: What does the identifier CVE-2023-1672 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1672.

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host.


Provide references for further information: Can you share references or external links related to CVE-2023-1672?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1672', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2180999', 'name': 'RHBZ#2180999', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}, {'url': 'https://github.com/latchset/tang/commit/8dbbed10870378f1b2c3cf3df2ea7edca7617096'}, {'url': 'https://www.openwall.com/lists/oss-security/2023/06/15/1'}, {'url': 'https://lists.debian.org/debian-lts-announce/2023/11/msg00004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1672?


Explain the CVE ID: What does the identifier CVE-2023-1673 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1673.


Provide references for further information: Can you share references or external links related to CVE-2023-1673?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1673?


Explain the CVE ID: What does the identifier CVE-2023-1674 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1674.

A vulnerability was found in SourceCodester School Registration and Fee System 1.0 and classified as critical. This issue affects some unknown processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224231.


Provide references for further information: Can you share references or external links related to CVE-2023-1674?

{'url': 'https://vuldb.com/?id.224231', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224231', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/saintone98/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1674?


Explain the CVE ID: What does the identifier CVE-2023-1675 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1675.

A vulnerability was found in SourceCodester School Registration and Fee System 1.0. It has been classified as critical. Affected is an unknown function of the file /bilal final/edit_stud.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224232.


Provide references for further information: Can you share references or external links related to CVE-2023-1675?

{'url': 'https://vuldb.com/?id.224232', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224232', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/saintone98/bug_report/blob/main/vendors/hemedy99/School%20Registration%20and%20Fee%20System/SQLi-2.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1675?


Explain the CVE ID: What does the identifier CVE-2023-1676 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1676.

A vulnerability was found in DriverGenius 9.70.0.346. It has been declared as critical. Affected by this vulnerability is the function 0x9C402088 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224233 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1676?

{'url': 'https://vuldb.com/?id.224233', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224233', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1676', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1kYCec3kYCzD9s2Vnclp_aW5jLneWqHC_/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1676?


Explain the CVE ID: What does the identifier CVE-2023-1677 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1677.

A vulnerability was found in DriverGenius 9.70.0.346. It has been rated as problematic. Affected by this issue is the function 0x9c40a0c8/0x9c40a0dc/0x9c40a0e0/0x9c40a0d8/0x9c4060d4/0x9c402004/0x9c402088/0x9c40208c/0x9c4060d0/0x9c4060cc/0x9c4060c4/0x9c402084 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-224234 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1677?

{'url': 'https://vuldb.com/?id.224234', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224234', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1677', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1C7afiLbOOLuYZVeeslPW3AdNeOIwUea9/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1677?


Explain the CVE ID: What does the identifier CVE-2023-1678 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1678.

A vulnerability classified as critical has been found in DriverGenius 9.70.0.346. This affects the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224235.


Provide references for further information: Can you share references or external links related to CVE-2023-1678?

{'url': 'https://vuldb.com/?id.224235', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224235', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1678', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1VWI0i6Zq-Fi55kbZI6l3dHCeBq-NOlJc/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1678?


Explain the CVE ID: What does the identifier CVE-2023-1679 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1679.

A vulnerability classified as critical was found in DriverGenius 9.70.0.346. This vulnerability affects the function 0x9C406104/0x9C40A108 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224236.


Provide references for further information: Can you share references or external links related to CVE-2023-1679?

{'url': 'https://vuldb.com/?id.224236', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224236', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1679', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1Iz4VTUUVDveZlgtxN9WkvdygHkD1BUCr/view', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1679?


Explain the CVE ID: What does the identifier CVE-2023-1680 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1680.

A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown processing of the file /dayrui/My/View/main.html. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224237 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1680?

{'url': 'https://vuldb.com/?id.224237', 'tags': ['vdb-entry']}, {'url': 'https://vuldb.com/?ctiid.224237', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1680?


Explain the CVE ID: What does the identifier CVE-2023-1681 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1681.

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224238 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1681?

{'url': 'https://vuldb.com/?id.224238', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224238', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1681?


Explain the CVE ID: What does the identifier CVE-2023-1682 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1682.

A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224239.


Provide references for further information: Can you share references or external links related to CVE-2023-1682?

{'url': 'https://vuldb.com/?id.224239', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224239', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1682?


Explain the CVE ID: What does the identifier CVE-2023-1683 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1683.

A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/Fcms/View/system_log.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224240.


Provide references for further information: Can you share references or external links related to CVE-2023-1683?

{'url': 'https://vuldb.com/?id.224240', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224240', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1683?


Explain the CVE ID: What does the identifier CVE-2023-1684 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1684.

A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.php?c=app&a=superadmin:index. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224241 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1684?

{'url': 'https://vuldb.com/?id.224241', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224241', 'tags': ['signature', 'permissions-required']}, {'url': 'https://gitee.com/wkstestete/cve/blob/master/upload/HadSky.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1684?


Explain the CVE ID: What does the identifier CVE-2023-1685 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1685.

A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224242 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1685?

{'url': 'https://vuldb.com/?id.224242', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224242', 'tags': ['signature', 'permissions-required']}, {'url': 'https://gitee.com/xinbate/cve/blob/master/HadSky%20rce.md', 'tags': ['exploit']}, {'url': 'https://gitee.com/galaxies2580/cve/blob/master/hadSky.md', 'tags': ['related']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1685?


Explain the CVE ID: What does the identifier CVE-2023-1686 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1686.

A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <script>alert(233)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224243.


Provide references for further information: Can you share references or external links related to CVE-2023-1686?

{'url': 'https://vuldb.com/?id.224243', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224243', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Apeng96/bug_report/blob/main/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1686?


Explain the CVE ID: What does the identifier CVE-2023-1687 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1687.

A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=register_user. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-224244.


Provide references for further information: Can you share references or external links related to CVE-2023-1687?

{'url': 'https://vuldb.com/?id.224244', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224244', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1687?


Explain the CVE ID: What does the identifier CVE-2023-1688 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1688.

A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Master.php?a=save_expense. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-224307.


Provide references for further information: Can you share references or external links related to CVE-2023-1688?

{'url': 'https://vuldb.com/?id.224307', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224307', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1688?


Explain the CVE ID: What does the identifier CVE-2023-1689 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1689.

A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=save_earning. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-224308.


Provide references for further information: Can you share references or external links related to CVE-2023-1689?

{'url': 'https://vuldb.com/?id.224308', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224308', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1689?


Explain the CVE ID: What does the identifier CVE-2023-1690 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1690.

A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=register_user. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-224309 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1690?

{'url': 'https://vuldb.com/?id.224309', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.224309', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1690?


Explain the CVE ID: What does the identifier CVE-2023-1691 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1691.

Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.


Provide references for further information: Can you share references or external links related to CVE-2023-1691?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1691?


Explain the CVE ID: What does the identifier CVE-2023-1692 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1692.

The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality.


Provide references for further information: Can you share references or external links related to CVE-2023-1692?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1692?


Explain the CVE ID: What does the identifier CVE-2023-1693 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1693.

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.


Provide references for further information: Can you share references or external links related to CVE-2023-1693?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1693?


Explain the CVE ID: What does the identifier CVE-2023-1694 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1694.


Provide references for further information: Can you share references or external links related to CVE-2023-1694?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1694?


Explain the CVE ID: What does the identifier CVE-2023-1695 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1695.


Provide references for further information: Can you share references or external links related to CVE-2023-1695?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1695?


Explain the CVE ID: What does the identifier CVE-2023-1696 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1696.

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability.


Provide references for further information: Can you share references or external links related to CVE-2023-1696?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1696?


Explain the CVE ID: What does the identifier CVE-2023-1697 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1697.

An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a dcpfe process core and thereby a Denial of Service (DoS). Continued receipt of these specific frames will cause a sustained Denial of Service condition. This issue occurs when a specific malformed ethernet frame is received. This issue affects Juniper Networks Junos OS on QFX10000 Series, PTX1000 Series Series: All versions prior to 19.4R3-S10; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S1; 22.1 versions prior to 22.1R2-S1, 22.1R3; 22.2 versions prior to 22.2R1-S2, 22.2R2.


Provide references for further information: Can you share references or external links related to CVE-2023-1697?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1697?


Explain the CVE ID: What does the identifier CVE-2023-1698 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1698.

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.


Provide references for further information: Can you share references or external links related to CVE-2023-1698?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1698?


Explain the CVE ID: What does the identifier CVE-2023-1699 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1699.

Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability.  This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187.


Provide references for further information: Can you share references or external links related to CVE-2023-1699?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1699?


Explain the CVE ID: What does the identifier CVE-2023-1701 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1701.

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20.


Provide references for further information: Can you share references or external links related to CVE-2023-1701?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1701?


Explain the CVE ID: What does the identifier CVE-2023-1702 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1702.

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.


Provide references for further information: Can you share references or external links related to CVE-2023-1702?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1702?


Explain the CVE ID: What does the identifier CVE-2023-1703 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1703.


Provide references for further information: Can you share references or external links related to CVE-2023-1703?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1703?


Explain the CVE ID: What does the identifier CVE-2023-1704 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1704.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.