Provide references for further information: Can you share references or external links related to CVE-2023-1000?

{'url': 'https://vuldb.com/?id.262230', 'name': 'VDB-262230 | cyanomiko dcnnt-py Notification notifications.py main command injection', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.262230', 'name': 'VDB-262230 | CTI Indicators (IOB, IOC, TTP, IOA)', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/cyanomiko/dcnnt-py/pull/23', 'tags': ['issue-tracking']}, {'url': 'https://github.com/cyanomiko/dcnnt-py/commit/b4021d784a97e25151a5353aa763a741e9a148f5', 'tags': ['patch']}, {'url': 'https://github.com/cyanomiko/dcnnt-py/releases/tag/0.9.1', 'tags': ['patch']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1000?


Explain the CVE ID: What does the identifier CVE-2023-1001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1001.

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 3.7.10 is able to address this issue. The patch is named d70b0e089740b65a22c89c106ebc4627ac48a22d. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-266123.


Provide references for further information: Can you share references or external links related to CVE-2023-1001?

{'url': 'https://vuldb.com/?id.266123', 'name': 'VDB-266123 | xuliangzhan vxe-table vxe-textarea textarea.js export cross site scripting', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.266123', 'name': 'VDB-266123 | CTI Indicators (IOB, IOC, TTP, IOA)', 'tags': ['signature', 'permissions-required']}, {'url': 'https://gitee.com/xuliangzhan_admin/vxe-table/issues/I8O21R', 'tags': ['issue-tracking']}, {'url': 'https://gitee.com/xuliangzhan_admin/vxe-table/commit/d70b0e089740b65a22c89c106ebc4627ac48a22d', 'tags': ['patch']}, {'url': 'https://gitee.com/xuliangzhan_admin/vxe-table/tree/3.7.10', 'tags': ['patch']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1001?


Explain the CVE ID: What does the identifier CVE-2023-1002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1002.

A vulnerability, which was classified as problematic, has been found in MuYuCMS 2.2. This issue affects some unknown processing of the file index.php. The manipulation of the argument file_path leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221735.


Provide references for further information: Can you share references or external links related to CVE-2023-1002?

{'url': 'https://vuldb.com/?id.221735', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221735', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/MuYuCMS/MuYuCMS/issues/3', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1002?


Explain the CVE ID: What does the identifier CVE-2023-1003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1003.

A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Handler. The manipulation leads to code injection. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.8 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221736.


Provide references for further information: Can you share references or external links related to CVE-2023-1003?

{'url': 'https://vuldb.com/?id.221736', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221736', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/typora/typora-issues/issues/5623', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1003?


Explain the CVE ID: What does the identifier CVE-2023-1004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1004.

A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component WSH JScript Handler. The manipulation leads to code injection. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221737 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1004?

{'url': 'https://vuldb.com/?id.221737', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221737', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/marktext/marktext/issues/3575', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1004?


Explain the CVE ID: What does the identifier CVE-2023-1005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1005.

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-221738 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1005?

{'url': 'https://vuldb.com/?id.221738', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221738', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/JP1016/Markdown-Electron/issues/3', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1005?


Explain the CVE ID: What does the identifier CVE-2023-1006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1006.

A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been classified as problematic. This affects an unknown part of the component New Record Handler. The manipulation of the argument Firstname/Middlename/Lastname/Suffix/Nationality/Doctor Fullname/Doctor Suffix with the input "><script>prompt(1)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-221739.


Provide references for further information: Can you share references or external links related to CVE-2023-1006?

{'url': 'https://vuldb.com/?id.221739', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221739', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1006?


Explain the CVE ID: What does the identifier CVE-2023-1007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1007.

A vulnerability was found in Twister Antivirus 8.17. It has been declared as critical. This vulnerability affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221740.


Provide references for further information: Can you share references or external links related to CVE-2023-1007?

{'url': 'https://vuldb.com/?id.221740', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221740', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1007', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1wh20g2Ze4gwCtripe7QeHNXd3bS4aZNG/view?usp=sharing', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1007?


Explain the CVE ID: What does the identifier CVE-2023-1008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1008.

A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-221741 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1008?

{'url': 'https://vuldb.com/?id.221741', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221741', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1008', 'tags': ['related']}, {'url': 'https://drive.google.com/file/d/1fdQWJ1uvXELnXnDm2Jk81bA0fwwqQCpY/view?usp=sharing', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1008?


Explain the CVE ID: What does the identifier CVE-2023-1009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1009.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub_1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option with the input /../etc/passwd- leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221742 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.


Provide references for further information: Can you share references or external links related to CVE-2023-1009?

{'url': 'https://vuldb.com/?id.221742', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221742', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/xxy1126/Vuln/blob/main/Draytek/1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1009?


Explain the CVE ID: What does the identifier CVE-2023-1010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1010.

A vulnerability classified as critical was found in vox2png 1.0. Affected by this vulnerability is an unknown functionality of the file vox2png.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221743.


Provide references for further information: Can you share references or external links related to CVE-2023-1010?

{'url': 'https://vuldb.com/?id.221743', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221743', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/10cksYiqiyinHangzhouTechnology/vox2png/blob/main/README.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1010?


Explain the CVE ID: What does the identifier CVE-2023-1011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1011.

The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing attackers to make a logged in admin set XSS payloads in them.


Provide references for further information: Can you share references or external links related to CVE-2023-1011?

{'url': 'https://wpscan.com/vulnerability/d1784446-b3da-4175-9dac-20b030f19984', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1011?


Explain the CVE ID: What does the identifier CVE-2023-1013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1013.

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Virames Vira-Investing allows Cross-Site Scripting (XSS).This issue affects Vira-Investing: before 1.0.84.86.


Provide references for further information: Can you share references or external links related to CVE-2023-1013?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0183'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1013?


Explain the CVE ID: What does the identifier CVE-2023-1014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1014.

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.This issue affects Vira-Investing: before 1.0.84.86.


Provide references for further information: Can you share references or external links related to CVE-2023-1014?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1014?


Explain the CVE ID: What does the identifier CVE-2023-1015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1015.


Provide references for further information: Can you share references or external links related to CVE-2023-1015?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1015?


Explain the CVE ID: What does the identifier CVE-2023-1016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1016.

The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.3, due to insufficient escaping on the user supplied 'objects' and 'tags' parameters and lack of sufficient preparation in the 'update_options' function as well as the 'refresh' function which runs queries on the same values. This allows authenticated attackers, with administrator permissions, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Note that this attack may only be practical on configurations where it is possible to bypass addslashes due to the database using a nonstandard character set such as GBK.


Provide references for further information: Can you share references or external links related to CVE-2023-1016?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1016?


Explain the CVE ID: What does the identifier CVE-2023-1017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1017.

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.


Provide references for further information: Can you share references or external links related to CVE-2023-1017?

{'name': 'TCG TPM2.0 Errata Version 1.4 ', 'url': 'https://trustedcomputinggroup.org/wp-content/uploads/TCGVRT0007-Advisory-FINAL.pdf'}, {'name': 'TCG Security Advisories', 'url': 'https://trustedcomputinggroup.org/about/security/'}, {'name': 'CERT/CC Advisory VU#782720', 'url': 'https://kb.cert.org/vuls/id/782720'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1017?


Explain the CVE ID: What does the identifier CVE-2023-1018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1018.

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.


Provide references for further information: Can you share references or external links related to CVE-2023-1018?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1018?


Explain the CVE ID: What does the identifier CVE-2023-1019 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1019.

The Help Desk WP WordPress plugin through 1.2.0 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.


Provide references for further information: Can you share references or external links related to CVE-2023-1019?

{'url': 'https://wpscan.com/vulnerability/a6331ca8-9603-4134-af39-8e77ac9d511c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1019?


Explain the CVE ID: What does the identifier CVE-2023-1020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1020.

The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.


Provide references for further information: Can you share references or external links related to CVE-2023-1020?

{'url': 'https://wpscan.com/vulnerability/4e5aa9a3-65a0-47d6-bc26-a2fb6cb073ff', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1020?


Explain the CVE ID: What does the identifier CVE-2023-1021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1021.

The amr ical events lists WordPress plugin through 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


Provide references for further information: Can you share references or external links related to CVE-2023-1021?

{'url': 'https://wpscan.com/vulnerability/91d04f96-11b2-46dc-860c-dc6c26360bf3', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1021?


Explain the CVE ID: What does the identifier CVE-2023-1022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1022.

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized options update due to a missing capability check on the wpmsGGSaveInformation function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to update google analytics options maintained by the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role.


Provide references for further information: Can you share references or external links related to CVE-2023-1022?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1022?


Explain the CVE ID: What does the identifier CVE-2023-1023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1023.

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the saveSitemapSettings function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to change sitemap-related settings of the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role.


Provide references for further information: Can you share references or external links related to CVE-2023-1023?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1023?


Explain the CVE ID: What does the identifier CVE-2023-1024 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1024.

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the regenerateSitemaps function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to generate sitemaps. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role.


Provide references for further information: Can you share references or external links related to CVE-2023-1024?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1024?


Explain the CVE ID: What does the identifier CVE-2023-1025 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1025.

The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).


Provide references for further information: Can you share references or external links related to CVE-2023-1025?

{'url': 'https://wpscan.com/vulnerability/13621b13-8d31-4214-a665-cb15981f3ec1', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1025?


Explain the CVE ID: What does the identifier CVE-2023-1026 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1026.

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the listPostsCategory function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to get post listings by category as long as those posts are published. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role.


Provide references for further information: Can you share references or external links related to CVE-2023-1026?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1026?


Explain the CVE ID: What does the identifier CVE-2023-1027 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1027.

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the checkAllCategoryInSitemap function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to obtain post categories. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role.


Provide references for further information: Can you share references or external links related to CVE-2023-1027?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1027?


Explain the CVE ID: What does the identifier CVE-2023-1028 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1028.

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the setIgnore function. This makes it possible for unauthenticated attackers to update plugin options via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1028?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1028?


Explain the CVE ID: What does the identifier CVE-2023-1029 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1029.

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the regenerateSitemaps function. This makes it possible for unauthenticated attackers to regenerate Sitemaps via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1029?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1029?


Explain the CVE ID: What does the identifier CVE-2023-1030 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1030.

A vulnerability has been found in SourceCodester Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221755.


Provide references for further information: Can you share references or external links related to CVE-2023-1030?

{'url': 'https://vuldb.com/?id.221755', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221755', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/jidle123/bug_report/blob/main/vendors/winex01/Online%20Boat%20Reservation%20System/XSS-1.md#online-boat-reservation-system-v10-by-winex01-has-cross-site-scripting-reflected', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1030?


Explain the CVE ID: What does the identifier CVE-2023-1031 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1031.

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `settings` endpoint and first_name parameter.


Provide references for further information: Can you share references or external links related to CVE-2023-1031?

{'url': 'https://fluidattacks.com/advisories/napoli'}, {'url': 'https://www.monicahq.com/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1031?


Explain the CVE ID: What does the identifier CVE-2023-1032 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1032.

The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.


Provide references for further information: Can you share references or external links related to CVE-2023-1032?

{'tags': ['issue-tracking'], 'url': 'https://www.openwall.com/lists/oss-security/2023/03/13/2'}, {'tags': ['issue-tracking'], 'url': 'https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1032'}, {'tags': ['third-party-advisory'], 'url': 'https://ubuntu.com/security/notices/USN-6033-1'}, {'tags': ['third-party-advisory'], 'url': 'https://ubuntu.com/security/notices/USN-6024-1'}, {'tags': ['third-party-advisory'], 'url': 'https://ubuntu.com/security/notices/USN-5977-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1032?


Explain the CVE ID: What does the identifier CVE-2023-1033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1033.

Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.


Provide references for further information: Can you share references or external links related to CVE-2023-1033?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1033?


Explain the CVE ID: What does the identifier CVE-2023-1034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1034.

Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9.


Provide references for further information: Can you share references or external links related to CVE-2023-1034?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1034?


Explain the CVE ID: What does the identifier CVE-2023-1035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1035.

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. Affected is an unknown function of the file update_user.php. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221784.


Provide references for further information: Can you share references or external links related to CVE-2023-1035?

{'url': 'https://vuldb.com/?id.221784', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221784', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/clinics%20patient%20management%20system/clinics-patient-management-system%20vlun2.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1035?


Explain the CVE ID: What does the identifier CVE-2023-1036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1036.

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221794 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1036?

{'url': 'https://vuldb.com/?id.221794', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221794', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/nightcloudos/bug_report/blob/main/vendors/jkev/Dental%20Clinic%20Appointment%20Reservation%20System/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1036?


Explain the CVE ID: What does the identifier CVE-2023-1037 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1037.

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221795.


Provide references for further information: Can you share references or external links related to CVE-2023-1037?

{'url': 'https://vuldb.com/?id.221795', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221795', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/nightcloudos/bug_report/blob/main/vendors/jkev/Dental%20Clinic%20Appointment%20Reservation%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1037?


Explain the CVE ID: What does the identifier CVE-2023-1038 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1038.

A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Affected is an unknown function of the file /reviewer_0/admins/assessments/pretest/questions-view.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221796.


Provide references for further information: Can you share references or external links related to CVE-2023-1038?

{'url': 'https://vuldb.com/?id.221796', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221796', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/believeti/bug_report/blob/main/vendors/janobe/Online%20Reviewer%20Management%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1038?


Explain the CVE ID: What does the identifier CVE-2023-1039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1039.

A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221797 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1039?

{'url': 'https://vuldb.com/?id.221797', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221797', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/anquanclub/bug_report/blob/main/vendors/Cherylda%20Jardeliza%20Ohiman/Class%20and%20Exam%20Timetabling%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1039?


Explain the CVE ID: What does the identifier CVE-2023-1040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1040.

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/add_acc.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-221798 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1040?

{'url': 'https://vuldb.com/?id.221798', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221798', 'tags': ['signature', 'permissions-required']}, {'url': 'https://blog.csdn.net/weixin_43864034/article/details/129228718', 'tags': ['broken-link', 'exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1040?


Explain the CVE ID: What does the identifier CVE-2023-1041 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1041.

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Responsive Tourism Website 1.0. This affects an unknown part of the file /tourism/rate_review.php. The manipulation of the argument id with the input 1"><script>alert(1111)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221799.


Provide references for further information: Can you share references or external links related to CVE-2023-1041?

{'url': 'https://vuldb.com/?id.221799', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221799', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/verylazycat/bug_report/blob/main/vendors/oretnom23/Simple%20Responsive%20Tourism%20Website/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1041?


Explain the CVE ID: What does the identifier CVE-2023-1042 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1042.

A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /pet_shop/admin/orders/update_status.php. The manipulation of the argument oid with the input 1"><script>alert(1111)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221800.


Provide references for further information: Can you share references or external links related to CVE-2023-1042?

{'url': 'https://vuldb.com/?id.221800', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221800', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/hujianjie123/bug_report/blob/main/vendors/oretnom23/Online%20Pet%20Shop%20We%20App/XSS-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1042?


Explain the CVE ID: What does the identifier CVE-2023-1043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1043.

A vulnerability was found in MuYuCMS 2.2. It has been classified as problematic. Affected is an unknown function of the file /editor/index.php. The manipulation of the argument dir_path leads to relative path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221802 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1043?

{'url': 'https://vuldb.com/?id.221802', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221802', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/MuYuCMS/MuYuCMS/issues/4', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1043?


Explain the CVE ID: What does the identifier CVE-2023-1044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1044.

A vulnerability was found in MuYuCMS 2.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /editor/index.php. The manipulation of the argument file_path leads to relative path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221803.


Provide references for further information: Can you share references or external links related to CVE-2023-1044?

{'url': 'https://vuldb.com/?id.221803', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221803', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/MuYuCMS/MuYuCMS/issues/5', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1044?


Explain the CVE ID: What does the identifier CVE-2023-1045 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1045.

A vulnerability was found in MuYuCMS 2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin.php/accessory/filesdel.html. The manipulation of the argument filedelur leads to relative path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221804.


Provide references for further information: Can you share references or external links related to CVE-2023-1045?

{'url': 'https://vuldb.com/?id.221804', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221804', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/MuYuCMS/MuYuCMS/issues/6', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1045?


Explain the CVE ID: What does the identifier CVE-2023-1046 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1046.

A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221805 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1046?

{'url': 'https://vuldb.com/?id.221805', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221805', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/MuYuCMS/MuYuCMS/issues/7', 'tags': ['exploit', 'issue-tracking']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1046?


Explain the CVE ID: What does the identifier CVE-2023-1047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1047.

A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown code in the library WinRing0x64.sys. The manipulation leads to improper initialization. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-221806 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1047?

{'url': 'https://vuldb.com/?id.221806', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221806', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1047', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1047?


Explain the CVE ID: What does the identifier CVE-2023-1048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1048.

A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in the library WinRing0x64.sys. The manipulation leads to improper initialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221807.


Provide references for further information: Can you share references or external links related to CVE-2023-1048?

{'url': 'https://vuldb.com/?id.221807', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221807', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1048', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1048?


Explain the CVE ID: What does the identifier CVE-2023-1049 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1049.

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
could cause execution of malicious code when an unsuspicious user loads a project file from the
local filesystem into the HMI.


Provide references for further information: Can you share references or external links related to CVE-2023-1049?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1049?


Explain the CVE ID: What does the identifier CVE-2023-1050 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1050.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection.This issue affects Web Report System: before 23.03.10.


Provide references for further information: Can you share references or external links related to CVE-2023-1050?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0166'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1050?


Explain the CVE ID: What does the identifier CVE-2023-1051 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1051.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web Report System allows Reflected XSS.This issue affects Web Report System: before 23.03.10.


Provide references for further information: Can you share references or external links related to CVE-2023-1051?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1051?


Explain the CVE ID: What does the identifier CVE-2023-1053 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1053.

A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. This issue affects some unknown processing of the file view_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221819.


Provide references for further information: Can you share references or external links related to CVE-2023-1053?

{'url': 'https://vuldb.com/?id.221819', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221819', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1053?


Explain the CVE ID: What does the identifier CVE-2023-1054 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1054.

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=user/manage. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221820.


Provide references for further information: Can you share references or external links related to CVE-2023-1054?

{'url': 'https://vuldb.com/?id.221820', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221820', 'tags': ['signature']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1054?


Explain the CVE ID: What does the identifier CVE-2023-1055 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1055.

A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead of the userCertificate attribute which could lead into sensitive information leaked. An attacker with a local account where the cockpit-389-ds is running can list the processes and display the hashed passwords. The highest threat from this vulnerability is to data confidentiality.


Provide references for further information: Can you share references or external links related to CVE-2023-1055?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2173517#c0'}, {'name': 'FEDORA-2023-c92be0dfa0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZOYQ5TCV6ZEPMDV4CSLK3KINAAO4SRI/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1055?


Explain the CVE ID: What does the identifier CVE-2023-1056 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1056.

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edoc/doctor/patient.php. The manipulation of the argument search12 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221821 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1056?

{'url': 'https://vuldb.com/?id.221821', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221821', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20docker%20search.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1056?


Explain the CVE ID: What does the identifier CVE-2023-1057 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1057.

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been rated as critical. Affected by this issue is the function edoc of the file login.php. The manipulation of the argument usermail leads to sql injection. VDB-221822 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1057?

{'url': 'https://vuldb.com/?id.221822', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221822', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun1.pdf', 'tags': ['related']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1057?


Explain the CVE ID: What does the identifier CVE-2023-1058 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1058.

A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an unknown part of the file create-account.php. The manipulation of the argument newemail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221823.


Provide references for further information: Can you share references or external links related to CVE-2023-1058?

{'url': 'https://vuldb.com/?id.221823', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221823', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun2.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1058?


Explain the CVE ID: What does the identifier CVE-2023-1059 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1059.

A vulnerability classified as critical was found in SourceCodester Doctors Appointment System 1.0. This vulnerability affects unknown code of the file /admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221824.


Provide references for further information: Can you share references or external links related to CVE-2023-1059?

{'url': 'https://vuldb.com/?id.221824', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221824', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun3.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1059?


Explain the CVE ID: What does the identifier CVE-2023-1060 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1060.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YKM YKM CRM allows Reflected XSS.This issue affects YKM CRM: before 23.03.30.


Provide references for further information: Can you share references or external links related to CVE-2023-1060?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1060?


Explain the CVE ID: What does the identifier CVE-2023-1061 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1061.

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument oldmail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221825 was assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1061?

{'url': 'https://vuldb.com/?id.221825', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221825', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun4.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1061?


Explain the CVE ID: What does the identifier CVE-2023-1062 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1062.

A vulnerability, which was classified as critical, was found in SourceCodester Doctors Appointment System 1.0. Affected is an unknown function of the file /admin/add-new.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221826 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1062?

{'url': 'https://vuldb.com/?id.221826', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221826', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun5.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1062?


Explain the CVE ID: What does the identifier CVE-2023-1063 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1063.

A vulnerability has been found in SourceCodester Doctors Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/patient.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221827.


Provide references for further information: Can you share references or external links related to CVE-2023-1063?

{'url': 'https://vuldb.com/?id.221827', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.221827', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/edoc%20doctor%20appointment%20system/edoc%20doctor%20appointment%20system%20vlun6.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1063?


Explain the CVE ID: What does the identifier CVE-2023-1064 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1064.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection.This issue affects Weighbridge Automation Software: before 1.1.


Provide references for further information: Can you share references or external links related to CVE-2023-1064?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0115'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1064?


Explain the CVE ID: What does the identifier CVE-2023-1065 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1065.

This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other, relevant, security issues. It does not expose the user of the integration to any direct security risk and no user data can be leaked. To exploit the vulnerability the attacker does not need to be authenticated to Snyk but does need to know the target's Integration ID (which may or may not be the same as the Organization ID, although this is an unpredictable UUID in either case).


Provide references for further information: Can you share references or external links related to CVE-2023-1065?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1065?


Explain the CVE ID: What does the identifier CVE-2023-1067 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1067.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.


Provide references for further information: Can you share references or external links related to CVE-2023-1067?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1067?


Explain the CVE ID: What does the identifier CVE-2023-1068 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1068.

The Download Read More Excerpt Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation on the read_more_excerpt_link_menu_options() function. This makes it possible for unauthenticated attackers to update he plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1068?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1068?


Explain the CVE ID: What does the identifier CVE-2023-1069 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1069.

The Complianz WordPress plugin before 6.4.2, Complianz Premium WordPress plugin before 6.4.2 do not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks


Provide references for further information: Can you share references or external links related to CVE-2023-1069?

{'url': 'https://wpscan.com/vulnerability/caacc50c-822e-46e9-bc0b-681349fd0dda', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1069?


Explain the CVE ID: What does the identifier CVE-2023-1070 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1070.

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.


Provide references for further information: Can you share references or external links related to CVE-2023-1070?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1070?


Explain the CVE ID: What does the identifier CVE-2023-1071 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1071.

An issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. Due to improper permissions checks it was possible for an unauthorised user to remove an issue from an epic.


Provide references for further information: Can you share references or external links related to CVE-2023-1071?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1071?


Explain the CVE ID: What does the identifier CVE-2023-1072 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1072.

An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible to trigger a resource depletion attack due to improper filtering for number of requests to read commits details.


Provide references for further information: Can you share references or external links related to CVE-2023-1072?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1072?


Explain the CVE ID: What does the identifier CVE-2023-1073 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1073.

A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system.


Provide references for further information: Can you share references or external links related to CVE-2023-1073?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2173403'}, {'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/id=b12fece4c64857e5fab4290bf01b2e0317a88456'}, {'url': 'https://www.openwall.com/lists/osssecurity/2023/01/17/3'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'name': '[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}, {'name': '[oss-security] 20231105 Re: Linux Kernel: hid: type confusions on hid report_list entry', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/11/05/2'}, {'name': '[oss-security] 20231105 Re: Linux Kernel: hid: NULL pointer dereference in hid_betopff_play()', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/11/05/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1073?


Explain the CVE ID: What does the identifier CVE-2023-1074 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1074.

A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2023-1074?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2173430'}, {'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=458e279f861d3f61796894cd158b780765a1569f'}, {'url': 'https://www.openwall.com/lists/oss-security/2023/01/23/1'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'name': '[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}, {'name': '[oss-security] 20231105 Re: Linux Kernel: sctp: KASLR leak in inet_diag_msg_sctpasoc_fill()', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/11/05/4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1074?


Explain the CVE ID: What does the identifier CVE-2023-1075 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1075.

A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec->tx_ready.


Provide references for further information: Can you share references or external links related to CVE-2023-1075?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1075?


Explain the CVE ID: What does the identifier CVE-2023-1076 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1076.

A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.


Provide references for further information: Can you share references or external links related to CVE-2023-1076?

{'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=66b2c338adce580dfce2199591e65e2bab889cff'}, {'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=a096ccca6e503a5c575717ff8a36ace27510ab0a'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1076?


Explain the CVE ID: What does the identifier CVE-2023-1077 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1077.

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.


Provide references for further information: Can you share references or external links related to CVE-2023-1077?

{'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=7c4a5b89a0b5a57a64b601775b296abf77a9fe97'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20230511-0002/'}, {'name': '[debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1077?


Explain the CVE ID: What does the identifier CVE-2023-1078 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1078.

A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.


Provide references for further information: Can you share references or external links related to CVE-2023-1078?

{'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=f753a68980cf4b59a80fe677619da2b1804f526d'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'name': '[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20230505-0004/'}, {'name': '[oss-security] 20231105 CVE-2023-1078: Linux: rds_rm_zerocopy_callback() bugs', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/11/05/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1078?


Explain the CVE ID: What does the identifier CVE-2023-1079 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1079.

A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconnecting in a malicious USB device, which advertises itself as an Asus device. Similarly to the previous known CVE-2023-25012, but in asus devices, the work_struct may be scheduled by the LED controller while the device is disconnecting, triggering a use-after-free on the struct asus_kbd_leds *led structure. A malicious USB device may exploit the issue to cause memory corruption with controlled data.


Provide references for further information: Can you share references or external links related to CVE-2023-1079?

{'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=4ab3a086d10eeec1424f2e8a968827a6336203df'}, {'name': '[debian-lts-announce] 20230502 [SECURITY] [DLA 3404-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html'}, {'name': '[debian-lts-announce] 20230503 [SECURITY] [DLA 3403-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1079?


Explain the CVE ID: What does the identifier CVE-2023-1080 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1080.

The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.


Provide references for further information: Can you share references or external links related to CVE-2023-1080?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1080?


Explain the CVE ID: What does the identifier CVE-2023-1081 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1081.

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1081?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1081?


Explain the CVE ID: What does the identifier CVE-2023-1082 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1082.

An remote attacker with low privileges can perform a command injection which can lead to root access.


Provide references for further information: Can you share references or external links related to CVE-2023-1082?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1082?


Explain the CVE ID: What does the identifier CVE-2023-1083 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1083.

An unauthenticated remote attacker who is aware of a MQTT  topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates.


Provide references for further information: Can you share references or external links related to CVE-2023-1083?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1083?


Explain the CVE ID: What does the identifier CVE-2023-1084 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1084.

An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project Maintainer may create a Project Access Token with Owner level privileges using a crafted request.


Provide references for further information: Can you share references or external links related to CVE-2023-1084?

{'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/390696'}, {'url': 'https://hackerone.com/reports/1805549'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1084.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1084?


Explain the CVE ID: What does the identifier CVE-2023-1086 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1086.

The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2023-1086?

{'url': 'https://wpscan.com/vulnerability/e2bda716-76dc-4a26-b26a-7a2a764757b0', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1086?


Explain the CVE ID: What does the identifier CVE-2023-1087 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1087.

The WC Sales Notification WordPress plugin before 1.2.3 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2023-1087?

{'url': 'https://wpscan.com/vulnerability/356c89a1-81b6-4600-9291-1a74788af7f9', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1087?


Explain the CVE ID: What does the identifier CVE-2023-1088 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1088.

The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2023-1088?

{'url': 'https://wpscan.com/vulnerability/a956f1cd-fce4-4235-b1af-4b7675a60ca2', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1088?


Explain the CVE ID: What does the identifier CVE-2023-1089 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1089.

The Coupon Zen WordPress plugin before 1.0.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2023-1089?

{'url': 'https://wpscan.com/vulnerability/9787e26f-33fe-4c65-abb3-7f5c76ae8d6f', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1089?


Explain the CVE ID: What does the identifier CVE-2023-1090 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1090.

The SMTP Mailing Queue WordPress plugin before 2.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


Provide references for further information: Can you share references or external links related to CVE-2023-1090?

{'url': 'https://wpscan.com/vulnerability/d470dd6c-dcac-4a3e-b42a-2489a31aca45', 'tags': ['exploit', 'vdb-entry', 'technical-description']}, {'url': 'https://github.com/youki992/youki992.github.io/blob/master/others/apply.md'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1090?


Explain the CVE ID: What does the identifier CVE-2023-1091 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1091.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.This issue affects Licensed Warehousing Automation System: through 2023.1.01.


Provide references for further information: Can you share references or external links related to CVE-2023-1091?

{'tags': ['government-resource'], 'url': 'https://www.usom.gov.tr/bildirim/tr-23-0139'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1091?


Explain the CVE ID: What does the identifier CVE-2023-1092 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1092.

The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sign On Premium WordPress plugin before 38.4.9 and OAuth Single Sign On Enterprise WordPress plugin before 48.4.9 do not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make logged in admins delete arbitrary IdP via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2023-1092?

{'url': 'https://wpscan.com/vulnerability/8fbf7efe-0bf2-42c6-aef1-7fcf2708b31b', 'tags': ['exploit', 'vdb-entry', 'technical-description']}, {'url': 'https://wpscan.com/vulnerability/f6e165d9-2193-4c76-ae2d-618a739fe4fb', 'tags': ['exploit', 'vdb-entry', 'technical-description']}, {'url': 'https://wpscan.com/vulnerability/52e29f16-b6dd-4132-9bb8-ad10bd3c39d7', 'tags': ['exploit', 'vdb-entry', 'technical-description']}, {'url': 'https://wpscan.com/vulnerability/5eb85df5-8aab-4f30-a401-f776a310b09c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1092?


Explain the CVE ID: What does the identifier CVE-2023-1093 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1093.

The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins delete all IdP via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2023-1093?

{'url': 'https://wpscan.com/vulnerability/1e13b9ea-a3ef-483b-b967-6ec14bd6d54d', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1093?


Explain the CVE ID: What does the identifier CVE-2023-1094 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1094.

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/food` endpoint and food parameter.


Provide references for further information: Can you share references or external links related to CVE-2023-1094?

{'url': 'https://fluidattacks.com/advisories/napoli'}, {'url': 'https://www.monicahq.com/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1094?


Explain the CVE ID: What does the identifier CVE-2023-1095 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1095.

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.


Provide references for further information: Can you share references or external links related to CVE-2023-1095?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1095?


Explain the CVE ID: What does the identifier CVE-2023-1096 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1096.

SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to gain access as an admin user.


Provide references for further information: Can you share references or external links related to CVE-2023-1096?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1096?


Explain the CVE ID: What does the identifier CVE-2023-1097 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1097.

Baicells EG7035-M11 devices with firmware through  BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery.


Provide references for further information: Can you share references or external links related to CVE-2023-1097?

{'tags': ['patch', 'release-notes'], 'url': 'https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756'}, {'tags': ['patch'], 'url': 'https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.bin'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1097?


Explain the CVE ID: What does the identifier CVE-2023-1098 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1098.

An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1 will allow an admin to leak password from repository mirror configuration.


Provide references for further information: Can you share references or external links related to CVE-2023-1098?

{'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/383745'}, {'url': 'https://hackerone.com/reports/1784294'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1098.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1098?


Explain the CVE ID: What does the identifier CVE-2023-1099 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1099.

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222002 is the identifier assigned to this vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2023-1099?

{'url': 'https://vuldb.com/?id.222002', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222002', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/E1CHO/cve_hub/blob/main/Online%20student%20management%20system%20pdf/Online%20student%20management%20system%20sql%20vlun%201.pdf', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1099?


Explain the CVE ID: What does the identifier CVE-2023-1100 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1100.

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part of the file /reservation/add_message.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222003.


Provide references for further information: Can you share references or external links related to CVE-2023-1100?

{'url': 'https://vuldb.com/?id.222003', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.222003', 'tags': ['signature', 'permissions-required']}, {'url': 'https://github.com/jackswordsz/bug_report/blob/main/vendors/emoblazz/Online%20Catering%20Reservation%20System/SQLi-1.md', 'tags': ['exploit']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1100?


Explain the CVE ID: What does the identifier CVE-2023-1101 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1101.

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.


Provide references for further information: Can you share references or external links related to CVE-2023-1101?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1101?


Explain the CVE ID: What does the identifier CVE-2023-1103 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1103.


Provide references for further information: Can you share references or external links related to CVE-2023-1103?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1103?


Explain the CVE ID: What does the identifier CVE-2023-1104 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1104.

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1104?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1104?


Explain the CVE ID: What does the identifier CVE-2023-1105 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1105.

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1105?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1105?


Explain the CVE ID: What does the identifier CVE-2023-1106 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1106.

Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3.


Provide references for further information: Can you share references or external links related to CVE-2023-1106?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1106?


Explain the CVE ID: What does the identifier CVE-2023-1107 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1107.


Provide references for further information: Can you share references or external links related to CVE-2023-1107?


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1107?


Explain the CVE ID: What does the identifier CVE-2023-1108 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1108.

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.


Provide references for further information: Can you share references or external links related to CVE-2023-1108?

{'url': 'https://access.redhat.com/errata/RHSA-2023:1184', 'name': 'RHSA-2023:1184', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:1185', 'name': 'RHSA-2023:1185', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:1512', 'name': 'RHSA-2023:1512', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:1513', 'name': 'RHSA-2023:1513', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:1514', 'name': 'RHSA-2023:1514', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:1516', 'name': 'RHSA-2023:1516', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:2135', 'name': 'RHSA-2023:2135', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:3883', 'name': 'RHSA-2023:3883', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:3884', 'name': 'RHSA-2023:3884', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:3885', 'name': 'RHSA-2023:3885', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:3888', 'name': 'RHSA-2023:3888', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:3892', 'name': 'RHSA-2023:3892', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:3954', 'name': 'RHSA-2023:3954', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/errata/RHSA-2023:4612', 'name': 'RHSA-2023:4612', 'tags': ['vendor-advisory', 'x_refsource_REDHAT']}, {'url': 'https://access.redhat.com/security/cve/CVE-2023-1108', 'tags': ['vdb-entry', 'x_refsource_REDHAT']}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2174246', 'name': 'RHBZ#2174246', 'tags': ['issue-tracking', 'x_refsource_REDHAT']}, {'url': 'https://github.com/advisories/GHSA-m4mm-pg93-fv78'}, {'url': 'https://security.netapp.com/advisory/ntap-20231020-0002/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2023-1108?


Explain the CVE ID: What does the identifier CVE-2023-1109 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2023-1109.

In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the service.