Provide references for further information: Can you share references or external links related to CVE-2023-1109?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1109?


Explain the CVE ID: What does the identifier CVE-2023-1110 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1110.

The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks


Provide references for further information: Can you share references or external links related to CVE-2023-1110?

{'url': 'https://wpscan.com/vulnerability/1830e829-4a43-4d98-8214-eecec6bef694', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1110?


Explain the CVE ID: What does the identifier CVE-2023-1111 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1111.

A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component New Article Tab. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266126 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1111?

{'url': 'https://vuldb.com/?id.266126', 'name': 'VDB-266126 | FastCMS New Article Tab cross site scripting', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.266126', 'name': 'VDB-266126 | CTI Indicators (IOB, IOC, TTP, IOA)', 'tags': ['signature', 'permissions-required']}, {'url': 'https://gitee.com/dianbuapp_admin/fastcms/issues/I8ERNV', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1111?


Explain the CVE ID: What does the identifier CVE-2023-1112 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1112.

A vulnerability was found in Drag and Drop Multiple File Upload Contact Form 7 5.0.6.1 on WordPress. It has been classified as critical. Affected is an unknown function of the file admin-ajax.php. The manipulation of the argument upload_name leads to relative path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222072.


Provide references for further information: Can you share references or external links related to CVE-2023-1112?

{'url': 'https://vuldb.com/?id.222072', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222072', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Nickguitar/Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1112?


Explain the CVE ID: What does the identifier CVE-2023-1113 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1113.

A vulnerability was found in SourceCodester Simple Payroll System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file admin/?page=admin of the component POST Parameter Handler. The manipulation of the argument fullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222073 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1113?

{'url': 'https://vuldb.com/?id.222073', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222073', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/lcg-22266/bug_report/blob/main/vendors/oretnom23/Simple%20Payroll%20System/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1113?


Explain the CVE ID: What does the identifier CVE-2023-1114 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1114.

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation.This issue affects e-Belediye: from 1.0.0.95 before 1.0.0.100.


Provide references for further information: Can you share references or external links related to CVE-2023-1114?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0113-2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1114?


Explain the CVE ID: What does the identifier CVE-2023-1115 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1115.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.


Provide references for further information: Can you share references or external links related to CVE-2023-1115?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1115?


Explain the CVE ID: What does the identifier CVE-2023-1116 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1116.


Provide references for further information: Can you share references or external links related to CVE-2023-1116?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1116?


Explain the CVE ID: What does the identifier CVE-2023-1117 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1117.


Provide references for further information: Can you share references or external links related to CVE-2023-1117?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1117?


Explain the CVE ID: What does the identifier CVE-2023-1118 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1118.

A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user detaching rc device. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.


Provide references for further information: Can you share references or external links related to CVE-2023-1118?

{'url': 'https://github.com/torvalds/linux/commit/29b0589a865b6f66d141d79b2dd1373e4e50fe17'}, {'url': 'https://security.netapp.com/advisory/ntap-20230413-0003/'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'name': '[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1118?


Explain the CVE ID: What does the identifier CVE-2023-1119 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1119.

The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1119?

{'url': 'https://wpscan.com/vulnerability/2e78735a-a7fc-41fe-8284-45bf451eff06', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1119?


Explain the CVE ID: What does the identifier CVE-2023-1120 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1120.

The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


Provide references for further information: Can you share references or external links related to CVE-2023-1120?

{'url': 'https://wpscan.com/vulnerability/c2defd30-7e4c-4a28-8a68-282429061f3f', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1120?


Explain the CVE ID: What does the identifier CVE-2023-1121 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1121.


Provide references for further information: Can you share references or external links related to CVE-2023-1121?

{'url': 'https://wpscan.com/vulnerability/7ead9fb9-d81f-47c6-a1b4-21f29183cc15', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1121?


Explain the CVE ID: What does the identifier CVE-2023-1122 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1122.

The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its Giveaways options, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


Provide references for further information: Can you share references or external links related to CVE-2023-1122?

{'url': 'https://wpscan.com/vulnerability/71f5d630-2726-48c7-b9e5-7bebc786b561', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1122?


Explain the CVE ID: What does the identifier CVE-2023-1124 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1124.

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.


Provide references for further information: Can you share references or external links related to CVE-2023-1124?

{'url': 'https://wpscan.com/vulnerability/229b93cd-544b-4877-8d9f-e6debda9511c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1124?


Explain the CVE ID: What does the identifier CVE-2023-1125 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1125.

The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than their own.


Provide references for further information: Can you share references or external links related to CVE-2023-1125?

{'url': 'https://wpscan.com/vulnerability/e8a4b6ab-47f8-495d-a22c-dcf914dfb58c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1125?


Explain the CVE ID: What does the identifier CVE-2023-1126 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1126.

The WP FEvents Book WordPress plugin through 0.46 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Cross-Site Scripting attacks


Provide references for further information: Can you share references or external links related to CVE-2023-1126?

{'url': 'https://wpscan.com/vulnerability/87ce3c59-b234-47bf-abca-e690b53bbe82', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1126?


Explain the CVE ID: What does the identifier CVE-2023-1127 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1127.

Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.


Provide references for further information: Can you share references or external links related to CVE-2023-1127?

{'url': 'https://huntr.dev/bounties/2d4d309e-4c96-415f-9070-36d0815f1beb'}, {'url': 'https://github.com/vim/vim/commit/e0f869196930ef5f25a0ac41c9215b09c9ce2d3c'}, {'name': 'FEDORA-2023-27958e9307', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDVN5HSWPNVP4QXBPCEGZDLZKURLJWTE/'}, {'name': 'FEDORA-2023-ccf283d7e1', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ6TMKKBXHGVUHWFGM4X46VIJO7ZAG2W/'}, {'name': 'FEDORA-2023-030318ca00', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1127?


Explain the CVE ID: What does the identifier CVE-2023-1129 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1129.

The WP FEvents Book WordPress plugin through 0.46 does not ensures that bookings to be updated belong to the user making the request, allowing any authenticated user to book, add notes, or cancel booking on behalf of other users.


Provide references for further information: Can you share references or external links related to CVE-2023-1129?

{'url': 'https://wpscan.com/vulnerability/d40479de-fb04-41b8-9fb0-41b9eefbd8af', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1129?


Explain the CVE ID: What does the identifier CVE-2023-1130 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1130.

A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file processlogin. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222105 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1130?

{'url': 'https://vuldb.com/?id.222105', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222105', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/WhiteA1so/Cvetest/blob/main/Sql1.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1130?


Explain the CVE ID: What does the identifier CVE-2023-1131 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1131.

A vulnerability has been found in SourceCodester Computer Parts Sales and Inventory System 1.0 and classified as problematic. This vulnerability affects unknown code of the file customer.php. The manipulation of the argument FIRST_NAME/LAST_NAME/PHONE_NUMBER leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222106 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1131?

{'url': 'https://vuldb.com/?id.222106', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222106', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/WhiteA1so/Cvetest/blob/main/1.pdf', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1131?


Explain the CVE ID: What does the identifier CVE-2023-1132 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1132.

Compiler removal of buffer clearing in

sli_se_driver_key_agreement

 in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.


Provide references for further information: Can you share references or external links related to CVE-2023-1132?

{'tags': ['patch'], 'url': 'https://github.com/SiliconLabs/gecko_sdk'}, {'tags': ['vendor-advisory'], 'url': 'https://community.silabs.com/sfc/servlet.shepherd/document/download/0698Y00000U19lGQAR?operationContext=S1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1132?


Explain the CVE ID: What does the identifier CVE-2023-1133 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1133.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. The service accepts the unverified UDP packets and deserializes the content, which could allow an unauthenticated attacker to remotely execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2023-1133?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1133?


Explain the CVE ID: What does the identifier CVE-2023-1134 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1134.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a path traversal vulnerability, which could allow an attacker to read local files, disclose plaintext credentials, and escalate privileges.


Provide references for further information: Can you share references or external links related to CVE-2023-1134?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1134?


Explain the CVE ID: What does the identifier CVE-2023-1135 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1135.

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set incorrect directory permissions, which could result in local privilege escalation.


Provide references for further information: Can you share references or external links related to CVE-2023-1135?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1135?


Explain the CVE ID: What does the identifier CVE-2023-1136 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1136.

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an unauthenticated attacker could generate a valid token, which would lead to authentication bypass.


Provide references for further information: Can you share references or external links related to CVE-2023-1136?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1136?


Explain the CVE ID: What does the identifier CVE-2023-1137 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1137.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which a low-level user could extract files and plaintext credentials of administrator users, resulting in privilege escalation.


Provide references for further information: Can you share references or external links related to CVE-2023-1137?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1137?


Explain the CVE ID: What does the identifier CVE-2023-1138 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1138.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain an improper access control vulnerability, which could allow an attacker to retrieve Gateway configuration files to obtain plaintext credentials.


Provide references for further information: Can you share references or external links related to CVE-2023-1138?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1138?


Explain the CVE ID: What does the identifier CVE-2023-1139 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1139.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-gateway service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.


Provide references for further information: Can you share references or external links related to CVE-2023-1139?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1139?


Explain the CVE ID: What does the identifier CVE-2023-1140 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1140.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability that could allow an attacker to achieve unauthenticated remote code execution in the context of an administrator.


Provide references for further information: Can you share references or external links related to CVE-2023-1140?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1140?


Explain the CVE ID: What does the identifier CVE-2023-1141 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1141.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a command injection vulnerability that could allow an attacker to inject arbitrary commands, which could result in remote code execution.


Provide references for further information: Can you share references or external links related to CVE-2023-1141?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1141?


Explain the CVE ID: What does the identifier CVE-2023-1142 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1142.

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.


Provide references for further information: Can you share references or external links related to CVE-2023-1142?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1142?


Explain the CVE ID: What does the identifier CVE-2023-1143 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1143.

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2023-1143?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1143?


Explain the CVE ID: What does the identifier CVE-2023-1144 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1144.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and bypass authorization, which could result in privilege escalation.


Provide references for further information: Can you share references or external links related to CVE-2023-1144?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1144?


Explain the CVE ID: What does the identifier CVE-2023-1145 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1145.

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.


Provide references for further information: Can you share references or external links related to CVE-2023-1145?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1145?


Explain the CVE ID: What does the identifier CVE-2023-1146 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1146.

Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1146?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1146?


Explain the CVE ID: What does the identifier CVE-2023-1147 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1147.

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1147?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1147?


Explain the CVE ID: What does the identifier CVE-2023-1148 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1148.


Provide references for further information: Can you share references or external links related to CVE-2023-1148?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1148?


Explain the CVE ID: What does the identifier CVE-2023-1149 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1149.

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1149?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1149?


Explain the CVE ID: What does the identifier CVE-2023-1150 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1150.

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets.


Provide references for further information: Can you share references or external links related to CVE-2023-1150?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1150?


Explain the CVE ID: What does the identifier CVE-2023-1151 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1151.

A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file administrator.php of the component Cookie Handler. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222163.


Provide references for further information: Can you share references or external links related to CVE-2023-1151?

{'url': 'https://vuldb.com/?id.222163', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222163', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/lcg-22266/bug_report/blob/main/vendors/Patrick%20Mvuma/Electronic%20Medical%20Records%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1151?


Explain the CVE ID: What does the identifier CVE-2023-1152 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1152.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93.


Provide references for further information: Can you share references or external links related to CVE-2023-1152?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0154-2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1152?


Explain the CVE ID: What does the identifier CVE-2023-1153 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1153.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection.This issue affects Pacsrapor: before 1.22.


Provide references for further information: Can you share references or external links related to CVE-2023-1153?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0163'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1153?


Explain the CVE ID: What does the identifier CVE-2023-1154 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1154.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pacsrapor allows Reflected XSS.This issue affects Pacsrapor: before 1.22.


Provide references for further information: Can you share references or external links related to CVE-2023-1154?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1154?


Explain the CVE ID: What does the identifier CVE-2023-1155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1155.

The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_icon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.


Provide references for further information: Can you share references or external links related to CVE-2023-1155?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1155?


Explain the CVE ID: What does the identifier CVE-2023-1156 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1156.

A vulnerability classified as problematic was found in SourceCodester Health Center Patient Record Management System 1.0. This vulnerability affects unknown code of the file admin/fecalysis_form.php. The manipulation of the argument itr_no leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222220.


Provide references for further information: Can you share references or external links related to CVE-2023-1156?

{'url': 'https://vuldb.com/?id.222220', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222220', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Lacer23/bug_report/blob/main/bug_report/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1156?


Explain the CVE ID: What does the identifier CVE-2023-1157 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1157.

A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elf_parser::Elf_parser::get_segments of the file elf_parser.cpp. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-222222 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1157?

{'url': 'https://vuldb.com/?id.222222', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222222', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/10cksYiqiyinHangzhouTechnology/elf-parser_segments_poc', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1157?


Explain the CVE ID: What does the identifier CVE-2023-1158 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1158.

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x expose dashboard prompts to users who are not part of the authorization list.


Provide references for further information: Can you share references or external links related to CVE-2023-1158?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1158?


Explain the CVE ID: What does the identifier CVE-2023-1159 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1159.

The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrative privileges to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.


Provide references for further information: Can you share references or external links related to CVE-2023-1159?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1159?


Explain the CVE ID: What does the identifier CVE-2023-1160 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1160.

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1160?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1160?


Explain the CVE ID: What does the identifier CVE-2023-1161 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1161.

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2023-1161?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2023-08.html'}, {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/18839'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1161.json'}, {'name': '[debian-lts-announce] 20230429 [SECURITY] [DLA 3402-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html'}, {'name': 'DSA-5429', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5429'}, {'name': 'GLSA-202309-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202309-02'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1161?


Explain the CVE ID: What does the identifier CVE-2023-1162 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1162.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222258 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.


Provide references for further information: Can you share references or external links related to CVE-2023-1162?

{'url': 'https://vuldb.com/?id.222258', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222258', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/xxy1126/Vuln/blob/main/Draytek/2.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1162?


Explain the CVE ID: What does the identifier CVE-2023-1163 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1163.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability is the function getSyslogFile of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222259. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.


Provide references for further information: Can you share references or external links related to CVE-2023-1163?

{'url': 'https://vuldb.com/?id.222259', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222259', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/xxy1126/Vuln/blob/main/Draytek/3.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1163?


Explain the CVE ID: What does the identifier CVE-2023-1164 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1164.

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.11-23 and 1.30.10-5.p23 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-222260.


Provide references for further information: Can you share references or external links related to CVE-2023-1164?

{'url': 'https://vuldb.com/?id.222260', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222260', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/i900008/vulndb/blob/main/kylin-activation_vuln.md', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1164?


Explain the CVE ID: What does the identifier CVE-2023-1165 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1165.

A vulnerability was found in Zhong Bang CRMEB Java 1.3.4. It has been classified as critical. This affects an unknown part of the file /api/admin/system/store/order/list. The manipulation of the argument keywords leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-222261 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1165?

{'url': 'https://vuldb.com/?id.222261', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222261', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/ha1yuYiqiyinHangzhouTechn0logy/crmeb_java/blob/main/README.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1165?


Explain the CVE ID: What does the identifier CVE-2023-1166 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1166.

The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).


Provide references for further information: Can you share references or external links related to CVE-2023-1166?

{'url': 'https://wpscan.com/vulnerability/825eccf9-f351-4a5b-b238-9969141b94fa', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1166?


Explain the CVE ID: What does the identifier CVE-2023-1167 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1167.

Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 allows an unauthorized access to security reports in MR.


Provide references for further information: Can you share references or external links related to CVE-2023-1167?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1167?


Explain the CVE ID: What does the identifier CVE-2023-1168 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1168.

An authenticated remote code execution vulnerability
    exists in the AOS-CX Network Analytics Engine. Successful
    exploitation of this vulnerability results in the ability to
    execute arbitrary code as a privileged user on the underlying
    operating system, leading to a complete compromise of the
    switch running AOS-CX.


Provide references for further information: Can you share references or external links related to CVE-2023-1168?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1168?


Explain the CVE ID: What does the identifier CVE-2023-1169 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1169.

The OoohBoi Steroids for Elementor plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'file_uploader_callback' function in versions up to, and including, 2.1.4. This makes it possible for subscriber-level attackers to upload image attachments to the site.


Provide references for further information: Can you share references or external links related to CVE-2023-1169?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1169?


Explain the CVE ID: What does the identifier CVE-2023-1170 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1170.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376.


Provide references for further information: Can you share references or external links related to CVE-2023-1170?

{'url': 'https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4'}, {'url': 'https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c'}, {'name': 'FEDORA-2023-43cb13aefb', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/'}, {'name': 'FEDORA-2023-d4ebe53978', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/'}, {'name': 'FEDORA-2023-030318ca00', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1170?


Explain the CVE ID: What does the identifier CVE-2023-1172 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1172.

The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.


Provide references for further information: Can you share references or external links related to CVE-2023-1172?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1172?


Explain the CVE ID: What does the identifier CVE-2023-1173 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1173.


Provide references for further information: Can you share references or external links related to CVE-2023-1173?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1173?


Explain the CVE ID: What does the identifier CVE-2023-1174 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1174.

This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.


Provide references for further information: Can you share references or external links related to CVE-2023-1174?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1174?


Explain the CVE ID: What does the identifier CVE-2023-1175 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1175.

Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.


Provide references for further information: Can you share references or external links related to CVE-2023-1175?

{'url': 'https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e'}, {'url': 'https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba'}, {'name': 'FEDORA-2023-43cb13aefb', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/'}, {'name': 'FEDORA-2023-d4ebe53978', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/'}, {'name': 'FEDORA-2023-030318ca00', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/'}, {'name': '[debian-lts-announce] 20230612 [SECURITY] [DLA 3453-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1175?


Explain the CVE ID: What does the identifier CVE-2023-1176 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1176.

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.


Provide references for further information: Can you share references or external links related to CVE-2023-1176?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1176?


Explain the CVE ID: What does the identifier CVE-2023-1177 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1177.

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.


Provide references for further information: Can you share references or external links related to CVE-2023-1177?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1177?


Explain the CVE ID: What does the identifier CVE-2023-1178 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1178.

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a release containing a ref to another commit.


Provide references for further information: Can you share references or external links related to CVE-2023-1178?

{'url': 'https://hackerone.com/reports/1778009'}, {'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/381815'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1178.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1178?


Explain the CVE ID: What does the identifier CVE-2023-1179 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1179.

A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument company_name/province/city/phone_number leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222330 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1179?

{'url': 'https://vuldb.com/?id.222330', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222330', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Amat0eur/MyCve/blob/main/Computer-Parts-Sales-And-Inventory-System-Xss.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1179?


Explain the CVE ID: What does the identifier CVE-2023-1180 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1180.

A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file hematology_print.php. The manipulation of the argument hem_id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222331.


Provide references for further information: Can you share references or external links related to CVE-2023-1180?

{'url': 'https://vuldb.com/?id.222331', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222331', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/Yuuuhd/bug_report/blob/main/vendors/razormist/Health%20Center%20Patient%20Record%20Management/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1180?


Explain the CVE ID: What does the identifier CVE-2023-1181 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1181.

Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.


Provide references for further information: Can you share references or external links related to CVE-2023-1181?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1181?


Explain the CVE ID: What does the identifier CVE-2023-1183 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1183.

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.


Provide references for further information: Can you share references or external links related to CVE-2023-1183?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1183', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2208506', 'name': 'RHBZ#2208506', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}, {'url': 'https://www.libreoffice.org/about-us/security/advisories/cve-2023-1183/'}, {'url': 'http://www.openwall.com/lists/oss-security/2023/12/28/4'}, {'url': 'http://www.openwall.com/lists/oss-security/2024/01/03/4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1183?


Explain the CVE ID: What does the identifier CVE-2023-1184 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1184.

A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is some unknown functionality of the file admin/database.php of the component Backup Database Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222356.


Provide references for further information: Can you share references or external links related to CVE-2023-1184?

{'url': 'https://vuldb.com/?id.222356', 'tags': ['vdb-entry']}, {'url': 'https://vuldb.com/?ctiid.222356', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/wjzdalao/ecshop4.1.8/issues/1', 'tags': ['broken-link', 'exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1184?


Explain the CVE ID: What does the identifier CVE-2023-1185 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1185.

A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of the component New Product Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222357 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1185?

{'url': 'https://vuldb.com/?id.222357', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222357', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/wjzdalao/ecshop4.1.8/issues/2', 'tags': ['broken-link', 'exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1185?


Explain the CVE ID: What does the identifier CVE-2023-1186 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1186.

A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1186?

{'url': 'https://vuldb.com/?id.222358', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222358', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1186?


Explain the CVE ID: What does the identifier CVE-2023-1187 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1187.

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the library ftwebcam.sys of the component Global Variable Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222359.


Provide references for further information: Can you share references or external links related to CVE-2023-1187?

{'url': 'https://vuldb.com/?id.222359', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222359', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1187', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1187?


Explain the CVE ID: What does the identifier CVE-2023-1188 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1188.

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0x222018 in the library ftwebcam.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222360.


Provide references for further information: Can you share references or external links related to CVE-2023-1188?

{'url': 'https://vuldb.com/?id.222360', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222360', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1188', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1_gVQtfbpywhh8Z6g4Y03Qg7UT3Aobz2e/view?usp=sharing', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1188?


Explain the CVE ID: What does the identifier CVE-2023-1189 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1189.

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-222361 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1189?

{'url': 'https://vuldb.com/?id.222361', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222361', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1189', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1189?


Explain the CVE ID: What does the identifier CVE-2023-1190 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1190.

A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file imageinfo.hpp. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-222362 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1190?

{'url': 'https://vuldb.com/?id.222362', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222362', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/xiaozhuai/imageinfo/issues/1', 'tags': ['issue-tracking']}, {'url': 'https://github.com/10cksYiqiyinHangzhouTechnology/imageinfo_poc', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1190?


Explain the CVE ID: What does the identifier CVE-2023-1191 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1191.

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/TemplateController.java of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-222363.


Provide references for further information: Can you share references or external links related to CVE-2023-1191?

{'url': 'https://vuldb.com/?id.222363', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222363', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/my-fastcms/fastcms/issues/1', 'tags': ['issue-tracking']}, {'url': 'https://github.com/ha1yuYiqiyinHangzhouTechn0logy/fastcms/blob/main/README.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1191?


Explain the CVE ID: What does the identifier CVE-2023-1192 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1192.

A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region, leading to a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2023-1192?

{'tags': ['vdb-entry', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/security/cve/CVE-2023-1192'}, {'name': 'RHBZ#2154178', 'tags': ['issue-tracking', 'x_refsource_REDHAT'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2154178'}, {'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d527f51331cace562393a8038d870b3e9916686f'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1192?


Explain the CVE ID: What does the identifier CVE-2023-1193 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1193.

A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work.


Provide references for further information: Can you share references or external links related to CVE-2023-1193?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1193', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2154177', 'name': 'RHBZ#2154177', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}, {'url': 'https://lkml.kernel.org/linux-cifs/20230401084951.6085-2-linkinjeon@kernel.org/T/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1193?


Explain the CVE ID: What does the identifier CVE-2023-1194 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1194.

An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of `NameOffset` in the `parse_lease_state()` function, the `create_context` object can access invalid memory.


Provide references for further information: Can you share references or external links related to CVE-2023-1194?

{'url': 'https://access.redhat.com/security/cve/CVE-2023-1194', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2154176', 'name': 'RHBZ#2154176', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}, {'url': 'https://www.spinics.net/lists/stable-commits/msg303065.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20231221-0006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1194?


Explain the CVE ID: What does the identifier CVE-2023-1195 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1195.

A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free pointer server->hostname to NULL, leading to an invalid pointer request.


Provide references for further information: Can you share references or external links related to CVE-2023-1195?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1195?


Explain the CVE ID: What does the identifier CVE-2023-1196 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1196.

The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present.


Provide references for further information: Can you share references or external links related to CVE-2023-1196?

{'url': 'https://wpscan.com/vulnerability/cf376ca2-92f6-44ff-929a-ace809460a33', 'tags': ['exploit', 'vdb-entry', 'technical-description']}, {'url': 'https://wpscan.com/vulnerability/8e5ec88e-0e66-44e4-bbf2-74155d849ede', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1196?


Explain the CVE ID: What does the identifier CVE-2023-1197 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1197.

Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0.


Provide references for further information: Can you share references or external links related to CVE-2023-1197?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1197?


Explain the CVE ID: What does the identifier CVE-2023-1198 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1198.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saysis Starcities allows SQL Injection.This issue affects Starcities: through 1.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1198?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0140'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1198?


Explain the CVE ID: What does the identifier CVE-2023-1200 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1200.

A vulnerability was found in ehuacui bbs. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-222388.


Provide references for further information: Can you share references or external links related to CVE-2023-1200?

{'url': 'https://vuldb.com/?id.222388', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222388', 'tags': ['signature', 'permissions-required']}, {'url': 'https://gitee.com/ehuacui/ehuacui-bbs/issues/I6GDCB', 'tags': ['broken-link', 'exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1200?


Explain the CVE ID: What does the identifier CVE-2023-1201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1201.

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.


Provide references for further information: Can you share references or external links related to CVE-2023-1201?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1201?


Explain the CVE ID: What does the identifier CVE-2023-1202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1202.

Permission bypass when importing or synchronizing entries in User vault

 in Devolutions Remote Desktop Manager 2023.1.9 and prior versions allows users with restricted rights to bypass entry permission via id collision.


Provide references for further information: Can you share references or external links related to CVE-2023-1202?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1202?


Explain the CVE ID: What does the identifier CVE-2023-1203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1203.

Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule.


Provide references for further information: Can you share references or external links related to CVE-2023-1203?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1203?


Explain the CVE ID: What does the identifier CVE-2023-1204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1204.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as a public email and commit email by sending a specifically crafted request on user update settings.


Provide references for further information: Can you share references or external links related to CVE-2023-1204?

{'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/394745'}, {'url': 'https://hackerone.com/reports/1881598'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1204.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1204?


Explain the CVE ID: What does the identifier CVE-2023-1205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1205.

NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections.


Provide references for further information: Can you share references or external links related to CVE-2023-1205?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1205?


Explain the CVE ID: What does the identifier CVE-2023-1206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1206.

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.


Provide references for further information: Can you share references or external links related to CVE-2023-1206?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2175903'}, {'name': 'DSA-5480', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5480'}, {'name': 'DSA-5492', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5492'}, {'url': 'https://security.netapp.com/advisory/ntap-20230929-0006/'}, {'name': '[debian-lts-announce] 20231019 [SECURITY] [DLA 3623-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html'}, {'name': '[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1206?


Explain the CVE ID: What does the identifier CVE-2023-1207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1207.

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1207?

{'url': 'https://wpscan.com/vulnerability/6f3f460b-542a-4d32-8feb-afa1aef57e37', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1207?


Explain the CVE ID: What does the identifier CVE-2023-1208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1208.

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1208?

{'url': 'https://wpscan.com/vulnerability/e0cc6740-866a-4a81-a93d-ff486b79b7f7', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1208?


Explain the CVE ID: What does the identifier CVE-2023-1209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1209.

Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.


Provide references for further information: Can you share references or external links related to CVE-2023-1209?

{'tags': ['vendor-advisory'], 'url': 'https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1262967'}, {'tags': ['x_reporter'], 'url': 'https://www.linkedin.com/in/osamay/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1209?


Explain the CVE ID: What does the identifier CVE-2023-1210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1210.

An issue has been discovered in GitLab affecting all versions starting from 12.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible to leak a user's email via an error message for groups that restrict membership by email domain.


Provide references for further information: Can you share references or external links related to CVE-2023-1210?

{'name': 'GitLab Issue #394775', 'tags': ['issue-tracking'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/394775'}, {'name': 'HackerOne Bug Bounty Report #1884672', 'tags': ['technical-description', 'exploit', 'permissions-required'], 'url': 'https://hackerone.com/reports/1884672'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1210?


Explain the CVE ID: What does the identifier CVE-2023-1211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1211.

SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.


Provide references for further information: Can you share references or external links related to CVE-2023-1211?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1211?


Explain the CVE ID: What does the identifier CVE-2023-1212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1212.

Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.


Provide references for further information: Can you share references or external links related to CVE-2023-1212?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1212?


Explain the CVE ID: What does the identifier CVE-2023-1213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1213.

Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2023-1213?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1213?


Explain the CVE ID: What does the identifier CVE-2023-1214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1214.

Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2023-1214?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1214?


Explain the CVE ID: What does the identifier CVE-2023-1215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1215.

Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2023-1215?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1215?


Explain the CVE ID: What does the identifier CVE-2023-1216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1216.

Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2023-1216?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1216?


Explain the CVE ID: What does the identifier CVE-2023-1217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1217.

Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2023-1217?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1217?


Explain the CVE ID: What does the identifier CVE-2023-1218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1218.

Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2023-1218?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1218?


Explain the CVE ID: What does the identifier CVE-2023-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1219.

Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2023-1219?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1219?


Explain the CVE ID: What does the identifier CVE-2023-1220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1220.

Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2023-1220?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1220?


Explain the CVE ID: What does the identifier CVE-2023-1221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1221.

Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1221?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1221?


Explain the CVE ID: What does the identifier CVE-2023-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1222.

Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1222?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1222?


Explain the CVE ID: What does the identifier CVE-2023-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1223.

Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1223?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1223?


Explain the CVE ID: What does the identifier CVE-2023-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1224.

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1224?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1224?


Explain the CVE ID: What does the identifier CVE-2023-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1225.

Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1225?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1225?


Explain the CVE ID: What does the identifier CVE-2023-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1226.

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1226?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1226?


Explain the CVE ID: What does the identifier CVE-2023-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1227.

Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1227?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1227?


Explain the CVE ID: What does the identifier CVE-2023-1228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1228.

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1228?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1228?


Explain the CVE ID: What does the identifier CVE-2023-1229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1229.

Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1229?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1229?


Explain the CVE ID: What does the identifier CVE-2023-1230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1230.

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1230?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1230?


Explain the CVE ID: What does the identifier CVE-2023-1231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1231.

Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium)


Provide references for further information: Can you share references or external links related to CVE-2023-1231?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1231?


Explain the CVE ID: What does the identifier CVE-2023-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1232.

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low)


Provide references for further information: Can you share references or external links related to CVE-2023-1232?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1232?


Explain the CVE ID: What does the identifier CVE-2023-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1233.

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low)


Provide references for further information: Can you share references or external links related to CVE-2023-1233?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1233?


Explain the CVE ID: What does the identifier CVE-2023-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1234.

Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)


Provide references for further information: Can you share references or external links related to CVE-2023-1234?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1234?


Explain the CVE ID: What does the identifier CVE-2023-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1235.

Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)


Provide references for further information: Can you share references or external links related to CVE-2023-1235?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1235?


Explain the CVE ID: What does the identifier CVE-2023-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1236.

Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low)


Provide references for further information: Can you share references or external links related to CVE-2023-1236?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1236?


Explain the CVE ID: What does the identifier CVE-2023-1237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1237.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.


Provide references for further information: Can you share references or external links related to CVE-2023-1237?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1237?


Explain the CVE ID: What does the identifier CVE-2023-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1238.


Provide references for further information: Can you share references or external links related to CVE-2023-1238?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1238?


Explain the CVE ID: What does the identifier CVE-2023-1239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1239.

Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.


Provide references for further information: Can you share references or external links related to CVE-2023-1239?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1239?


Explain the CVE ID: What does the identifier CVE-2023-1240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1240.


Provide references for further information: Can you share references or external links related to CVE-2023-1240?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1240?


Explain the CVE ID: What does the identifier CVE-2023-1241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1241.