Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32250 - https://bugzilla.redhat.com/show_bug.cgi?id=2208849 - https://www.zerodayinitiative.com/advisories/ZDI-23-698/ - https://security.netapp.com/advisory/ntap-20230824-0004/
CVE ID: CVE-2023-32251 State: PUBLISHED Published: 2025-07-31T20:44:02.968Z Last Updated: 2025-11-21T05:56:23.390Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-307 Description: A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-b
during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32251 - https://bugzilla.redhat.com/show_bug.cgi?id=2385852 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b096d97f47326b1e2dbdef1c91fab69ffda54d17 - https://www.zerodayinitiative.com/advisories/ZDI-23-699/
CVE ID: CVE-2023-32252 State: PUBLISHED Published: 2023-07-24T15:19:26.515Z Last Updated: 2024-08-02T15:10:24.250Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-476 Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of
proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-32252 - https://bugzilla.redhat.com/show_bug.cgi?id=2219815 - https://security.netapp.com/advisory/ntap-20231124-0001/ - https://www.zerodayinitiative.com/advisories/ZDI-CAN-20590/
CVE ID: CVE-2023-32253 State: PUBLISHED Published: 2025-08-02T22:26:05.080Z Last Updated: 2025-11-20T17:27:44.376Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-413 Description: A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32253 - https://bugz
alyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32253 - https://bugzilla.redhat.com/show_bug.cgi?id=2385886
CVE ID: CVE-2023-32254 State: PUBLISHED Published: 2023-07-10T15:11:25.707Z Last Updated: 2025-02-13T16:50:28.958Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-362 Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to e
rom the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-32254 - https://bugzilla.redhat.com/show_bug.cgi?id=2191658 - https://www.zerodayinitiative.com/advisories/ZDI-23-702/ - https://security.netapp.com/advisory/ntap-20230824-0004/
CVE ID: CVE-2023-32255 State: PUBLISHED Published: 2025-08-02T22:25:45.342Z Last Updated: 2025-11-20T17:27:46.670Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-772 Description: A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/C
ce exhaustion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32255 - https://bugzilla.redhat.com/show_bug.cgi?id=2385884 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d7cb549c2ca20e1f07593f15e936fd54b763028 - https://www.zerodayinitiative.com/advisories/ZDI-23-703/
CVE ID: CVE-2023-32256 State: PUBLISHED Published: 2025-08-01T17:37:15.603Z Last Updated: 2025-11-20T07:01:56.800Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-421 Description: A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32256 - https://b
Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32256 - https://bugzilla.redhat.com/show_bug.cgi?id=2385885 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abcc506a9a71976a8b4c9bf3ee6efd13229c1e19 - https://www.zerodayinitiative.com/advisories/ZDI-23-704/
CVE ID: CVE-2023-32257 State: PUBLISHED Published: 2023-07-24T15:19:26.923Z Last Updated: 2025-07-29T13:38:44.217Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-362 Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and SMB2_LOGOFF commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerab
results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32257 - https://bugzilla.redhat.com/show_bug.cgi?id=2219806 - https://security.netapp.com/advisory/ntap-20230915-0011/ - https://www.zerodayinitiative.com/advisories/ZDI-CAN-20596/
CVE ID: CVE-2023-32258 State: PUBLISHED Published: 2023-07-24T15:19:26.475Z Last Updated: 2025-03-05T18:47:42.142Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-362 Description: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to
from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32258 - https://bugzilla.redhat.com/show_bug.cgi?id=2219809 - https://security.netapp.com/advisory/ntap-20230915-0011/ - https://www.zerodayinitiative.com/advisories/ZDI-CAN-20796/
CVE ID: CVE-2023-32259 State: PUBLISHED Published: 2024-03-19T15:54:11.630Z Last Updated: 2024-08-02T15:10:23.989Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: OpenText™ Products: Service Management Automation X (SMAX), Asset Management X (AMX) Problem Types: CWE-1220 Description: Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Service Management Automation X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11; and Asset Manage
tion X (SMAX) versions 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11; and Asset Management X (AMX) versions 2021.08, 2021.11, 2022.05, 2022.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000018803?language=en_US
CVE ID: CVE-2023-32260 State: PUBLISHED Published: 2024-03-19T15:54:23.508Z Last Updated: 2024-08-02T15:10:24.228Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: OpenText™ Products: Service Management Automation X (SMAX), Asset Management X (AMX), Hybrid Cloud Management X (HCMX) Problem Types: CWE-115 Description: Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and OpenText™ Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 202
manipulation.This issue affects Service Management Automation X (SMAX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; Asset Management X (AMX) versions: 2021.08, 2021.11, 2022.05, 2022.11, 2023.05; and Hybrid Cloud Management X (HCMX) versions: 2020.05, 2020.08, 2020.11, 2021.02, 2021.05, 2021.08, 2021.11, 2022.05, 2022.11, 2023.05. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000018804?language=en_US
CVE ID: CVE-2023-32261 State: PUBLISHED Published: 2023-07-19T15:56:25.049Z Last Updated: 2024-10-29T19:28:56.246Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Micro Focus Products: Dimensions CM Description: A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. See the following Jenkins security advisory for details: * https://www.jenkins.io/security/advisory/2023-06-14/ https://www.jenkins.io/security/advisory/2023-06-14/ Additional Analyst Notes: - CVE Program Container: - CISA ADP V
14/ https://www.jenkins.io/security/advisory/2023-06-14/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-06-14/ - https://plugins.jenkins.io/dimensionsscm/ - https://portal.microfocus.com/s/article/KM000019297
CVE ID: CVE-2023-32262 State: PUBLISHED Published: 2023-07-19T15:56:32.548Z Last Updated: 2024-10-21T13:05:07.646Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Micro Focus Products: Dimensions CM Description: A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Item/Configure permission to access and capture credentials they are not entitled to. See the following Jenkins security advisory for details: * https://www.jenkins.io/security/advisory/2023-06-14/ https://www.jenkins.io/security/advisory/2023-06-14/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
4/ https://www.jenkins.io/security/advisory/2023-06-14/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-06-14/ - https://plugins.jenkins.io/dimensionsscm/ - https://portal.microfocus.com/s/article/KM000019298
CVE ID: CVE-2023-32263 State: PUBLISHED Published: 2023-07-19T15:56:46.710Z Last Updated: 2024-10-21T13:05:36.364Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Micro Focus Products: Dimensions CM Description: A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. This vulnerability only applies when the Jenkins plugin is configured to use login certificate credentials. https://www.jenkins.io/security/advisory/2023-06-14/ Additional Analyst Notes: - CVE Progra
gin certificate credentials. https://www.jenkins.io/security/advisory/2023-06-14/ Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://plugins.jenkins.io/dimensionsscm/ - https://portal.microfocus.com/s/article/KM000019293
CVE ID: CVE-2023-32264 State: PUBLISHED Published: 2024-03-08T20:48:07.941Z Last Updated: 2024-08-12T20:05:05.527Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: OpenText Products: Documentum D2 Problem Types: CWE-1385 Description: CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upload arbitrary code and execute it on the client's computer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0799355
CVE ID: CVE-2023-32265 State: PUBLISHED Published: 2023-07-20T13:01:38.269Z Last Updated: 2024-10-21T13:05:58.689Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Micro Focus Products: Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, COBOL Server Description: A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server. An attacker would need to be authenticated into ESCWA to attempt to exploit this vulnerability. As described in the hardening guide in the product do
authenticated into ESCWA to attempt to exploit this vulnerability. As described in the hardening guide in the product documentation, other mitigations including restricting network access to ESCWA and restricting usersâ€™ permissions in the Micro Focus Directory Server also reduce the exposure to this issue. Given the right conditions this vulnerability could be exploited to expose a service account password. The account corresponding to the exposed credentials usually has limited privileges and, in many cases would only be useful for extracting details of other user accounts and similar information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
ts and similar information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000019323?language=en_US
CVE ID: CVE-2023-32266 State: PUBLISHED Published: 2024-10-16T16:28:39.168Z Last Updated: 2024-10-16T19:05:48.577Z Vendors: OpenText™ Products: Application Lifecycle Management (ALM),Quality Center Problem Types: CWE-426 Description: Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation. This issue affects Application Lifecycle Management (ALM),Quality Center: 15.00, 15.01, 15.01 P1, 15.01 P2, 15.01 P3, 15.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1. Additional Analyst Notes: - CISA ADP Vulnrichme
5.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000024386?language=en_US
CVE ID: CVE-2023-32267 State: PUBLISHED Published: 2023-08-11T13:36:42.069Z Last Updated: 2024-10-09T18:52:47.297Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: ArcSight Products: Management Center Problem Types: Remote Vulnerability Description: A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000020296?language=en_US
CVE ID: CVE-2023-32268 State: PUBLISHED Published: 2023-12-06T13:29:03.979Z Last Updated: 2024-08-02T15:10:24.373Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenText Products: Filr Problem Types: CWE-522 Description: Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credentials of proxy administrators. Additional Analyst Notes: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000020081?language=en_US
CVE ID: CVE-2023-32269 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-05-05T15:57:51.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/611792920925fb088ddccbe2783c7f92fdfb6b64 - https://
Vulnrichment: References: - https://github.com/torvalds/linux/commit/611792920925fb088ddccbe2783c7f92fdfb6b64 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.11
CVE ID: CVE-2023-32270 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-23T21:32:40.260Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: TELLUS and TELLUS Lite Problem Types: Access of memory location after end of buffer Description: Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php - https://jvn.jp/en/vu/JVNVU98818508/
CVE ID: CVE-2023-32271 State: PUBLISHED Published: 2023-09-05T16:15:03.252Z Last Updated: 2025-02-13T16:50:29.502Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-200 Description: An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to a disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1774 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1774
CVE ID: CVE-2023-32272 State: PUBLISHED Published: 2024-01-19T20:03:12.623Z Last Updated: 2025-06-17T21:19:22.856Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel NUC Pro Software Suite Configuration Tool software installers Problem Types: denial of service, CWE-427 Description: Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory
ogram Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html
CVE ID: CVE-2023-32273 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-23T21:30:35.359Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: TELLUS and TELLUS Lite Problem Types: Stack-based Buffer Overflow Description: Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32201. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.ph
CVE ID: CVE-2023-32274 State: PUBLISHED Published: 2023-06-20T19:38:42.467Z Last Updated: 2024-12-06T21:34:38.813Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Enphase Products: Enphase Installer Toolkit Problem Types: CWE-798 Description: Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-171-02
CVE ID: CVE-2023-32275 State: PUBLISHED Published: 2023-10-12T15:27:52.706Z Last Updated: 2025-11-04T19:16:04.891Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SoftEther VPN Products: SoftEther VPN Problem Types: CWE-201 Description: An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1753