Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-25910 State: PUBLISHED Published: 2023-06-13T08:17:04.612Z Last Updated: 2024-08-02T11:32:12.730Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:T/RC:C) Vendors: Siemens Products: SIMATIC PCS 7, SIMATIC S7-PM, SIMATIC STEP 7 V5 Problem Types: CWE-94 Description: A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7). The affected product contains a database management system that could allow remote users with low privileges to use embedded functions of the database (local or in a netwo
system that could allow remote users with low privileges to use embedded functions of the database (local or in a network share) that have impact on the server. An attacker with network access to the server network could leverage these embedded functions to run code with elevated privileges in the database management system's server. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-968170.pdf - https://cert-portal.siemens.com/productcert/html/ssa-968170.html
CVE ID: CVE-2023-25911 State: PUBLISHED Published: 2023-06-11T13:17:02.850Z Last Updated: 2025-01-09T07:56:42.059Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Danfoss Products: AK-EM100 Problem Types: CWE-77 Description: The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2023-25911/ - https://csirt.divd.nl/DIVD-2023-00021/
CVE ID: CVE-2023-25912 State: PUBLISHED Published: 2023-06-11T13:17:01.462Z Last Updated: 2025-01-09T07:56:42.597Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Danfoss Products: AK-EM100 Problem Types: CWE-200 Description: The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2023-25912/ - https://csirt.divd.nl/DIVD-2023-00021/
CVE ID: CVE-2023-25913 State: PUBLISHED Published: 2023-08-21T20:30:03.854Z Last Updated: 2025-01-09T07:56:41.147Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Danfoss Products: AK-SM800A Problem Types: CWE-200, CWE-287 Description: Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2023-25913 - https://csirt.divd.nl/DIVD-2023-00025
CVE ID: CVE-2023-25914 State: PUBLISHED Published: 2023-08-21T20:30:03.122Z Last Updated: 2025-07-19T05:15:44.063Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Danfoss Products: AK-SM800A Problem Types: CWE-22 Description: Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2023-25914 - https://csirt.divd.nl/DIVD-2023-00025
CVE ID: CVE-2023-25915 State: PUBLISHED Published: 2023-08-21T20:30:02.375Z Last Updated: 2025-01-09T07:56:40.947Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Danfoss Products: AK-SM800A Problem Types: CWE-20 Description: Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://csirt.divd.nl/CVE-2023-25915 - https://csirt.divd.nl/DIVD-2023-00025
CVE ID: CVE-2023-25921 State: PUBLISHED Published: 2024-02-29T00:36:01.872Z Last Updated: 2024-08-26T19:14:39.214Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-434 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247620. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6964516 - https://exchange.xforce.ibmcloud.com/vu
rogram Container: References: - https://www.ibm.com/support/pages/node/6964516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247620
CVE ID: CVE-2023-25922 State: PUBLISHED Published: 2024-02-28T21:44:51.466Z Last Updated: 2024-08-02T11:32:12.764Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-434 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 247621. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6964516 - https://exchange.xforce.ibmcloud.com/
Program Container: References: - https://www.ibm.com/support/pages/node/6964516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247621
CVE ID: CVE-2023-25923 State: PUBLISHED Published: 2023-03-21T15:07:53.940Z Last Updated: 2025-02-26T16:46:51.335Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: CWE-863 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service attack due to incorrect authorization. IBM X-Force ID: 247629. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6962729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247629
CVE ID: CVE-2023-25924 State: PUBLISHED Published: 2023-03-21T14:53:38.493Z Last Updated: 2025-02-26T16:48:20.517Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Security Key Lifecycle Manager Problem Types: CWE-863 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper authorization. IBM X-Force ID: 247630. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6962729 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247630
CVE ID: CVE-2023-25925 State: PUBLISHED Published: 2024-02-28T21:53:27.276Z Last Updated: 2024-08-02T11:32:12.735Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-78 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 247632. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6964516 - https://exchange.xforce.ibmcloud.com/vulnerabilit
tainer: References: - https://www.ibm.com/support/pages/node/6964516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247632
CVE ID: CVE-2023-25926 State: PUBLISHED Published: 2024-02-29T00:27:14.988Z Last Updated: 2024-08-02T11:39:05.322Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H) Vendors: IBM Products: Security Guardium Key Lifecycle Manager Problem Types: CWE-611 Description: IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 247599. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/su
247599. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6964516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247599
CVE ID: CVE-2023-25927 State: PUBLISHED Published: 2023-05-12T17:38:51.966Z Last Updated: 2025-11-03T21:47:28.686Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Security Verify Access Problem Types: CWE-20 Description: IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system. IBM X-Force ID: 247635. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/6989653 - https://exchange.xforce.ibmcloud.com/vulnerabil
: References: - https://https://www.ibm.com/support/pages/node/6989653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247635
CVE ID: CVE-2023-25928 State: PUBLISHED Published: 2023-02-21T13:51:33.769Z Last Updated: 2025-03-12T15:15:10.507Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 247646. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6956598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247646
CVE ID: CVE-2023-25929 State: PUBLISHED Published: 2023-07-22T01:45:13.409Z Last Updated: 2025-02-13T16:44:40.288Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-79 Description: IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 247861. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7012621 - https:
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7012621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247861 - https://security.netapp.com/advisory/ntap-20230814-0005/
CVE ID: CVE-2023-25930 State: PUBLISHED Published: 2023-04-28T17:35:43.607Z Last Updated: 2025-01-30T19:23:32.414Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally. IBM X-Force ID: 247862. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6985677 - https://exchange.xforce.ibmcloud.c
CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6985677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/247862 - https://security.netapp.com/advisory/ntap-20230511-0010/
CVE ID: CVE-2023-25931 State: PUBLISHED Published: 2023-03-01T18:56:30.093Z Last Updated: 2025-03-07T21:34:37.484Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Medtronic Products: InsterStim Applications Problem Types: CWE-620 Description: Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulnerability that requires a security update to fix. Not updating could potentially result in unauthorized control of the clinician therapy application, which has greater control over therapy parameters than the patient app. Changes still cannot be made outside of the established therap
ter control over therapy parameters than the patient app. Changes still cannot be made outside of the established therapy parameters of the programmer. For unauthorized access to occur, an individual would need physical access to the Smart Programmer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/pelvic-health-interstim-micro.html
CVE ID: CVE-2023-25933 State: PUBLISHED Published: 2023-05-18T21:24:58.365Z Last Updated: 2025-01-21T20:20:00.366Z Vendors: Facebook Products: Hermes Problem Types: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') Description: A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to execute arbitrary code via untrusted JavaScript. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.facebo
t affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2023-25933 - https://github.com/facebook/hermes/commit/e6ed9c1a4b02dc219de1648f44cd808a56171b81
CVE ID: CVE-2023-25934 State: PUBLISHED Published: 2023-05-04T06:58:21.714Z Last Updated: 2025-01-29T16:52:22.465Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Dell Products: ECS Problem Types: CWE-347 Description: DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. A network attacker with an ability to intercept the request could potentially exploit this vulnerability to modify the body data of the request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000212970/dsa-2023-109-dell-ecs-security-update-for-multiple-vulnerabi
ences: - https://www.dell.com/support/kbdoc/en-us/000212970/dsa-2023-109-dell-ecs-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-25936 State: PUBLISHED Published: 2023-06-23T08:56:50.839Z Last Updated: 2024-11-08T16:10:16.632Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabi
ort/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabilities
CVE ID: CVE-2023-25937 State: PUBLISHED Published: 2023-06-23T09:40:06.788Z Last Updated: 2024-11-08T14:06:17.238Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabi
CVE ID: CVE-2023-25938 State: PUBLISHED Published: 2023-06-23T10:13:31.571Z Last Updated: 2024-11-07T21:31:46.930Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000212204/dsa-2023-099-dell-client-bios-security-update-for-multiple-improper-input-validation-vulnerabi
CVE ID: CVE-2023-25940 State: PUBLISHED Published: 2023-04-04T10:14:28.339Z Last Updated: 2025-02-11T17:04:23.847Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-59 Description: Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info. A high privileged local attacker could potentially exploit this vulnerability, leading to system takeover and it breaks the compliance mode guarantees. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscal
Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security
CVE ID: CVE-2023-25941 State: PUBLISHED Published: 2023-04-04T10:22:14.383Z Last Updated: 2025-02-11T15:35:10.497Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-276 Description: Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security
CVE ID: CVE-2023-25942 State: PUBLISHED Published: 2023-04-04T10:28:04.862Z Last Updated: 2025-02-11T15:34:48.022Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-664 Description: Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security
CVE ID: CVE-2023-25944 State: PUBLISHED Published: 2023-08-11T02:37:09.754Z Last Updated: 2024-10-10T15:18:17.481Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) VCUST Tool software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00844.html
CVE ID: CVE-2023-25945 State: PUBLISHED Published: 2024-02-14T13:37:52.637Z Last Updated: 2024-11-07T19:04:43.190Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) OFU software Problem Types: escalation of privilege, CWE-693 Description: Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00927.html
CVE ID: CVE-2023-25946 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T13:51:01.741Z Vendors: Qrio, inc. Products: Qrio Lock (Q-SL2) Problem Types: Authentication bypass by capture-replay Description: Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier allows a network-adjacent attacker to analyze the product's communication data and conduct an arbitrary operation under certain conditions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://qrio.me/article/announce/2023/4140/ - https://jvn.jp/en/jp/JVN48687031/
CVE ID: CVE-2023-25947 State: PUBLISHED Published: 2023-03-10T10:45:30.665Z Last Updated: 2025-03-03T20:50:14.292Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-20 Description: The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md
CVE ID: CVE-2023-25948 State: PUBLISHED Published: 2023-07-13T11:09:30.893Z Last Updated: 2025-03-05T18:50:14.570Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Honeywell Products: Experion Server, Experion Station, Engineering Station, Direct Station Problem Types: CWE-394 Description: Server information leak of configuration data when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process.honeywell.com
CVE ID: CVE-2023-25949 State: PUBLISHED Published: 2023-11-14T19:04:52.332Z Last Updated: 2024-08-30T15:21:08.395Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Aptio* V UEFI Firmware Integrator Tools Problem Types: denial of service, CWE-400 Description: Uncontrolled resource consumption in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html