Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30400 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T16:21:35.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network configuration script within the MCU's operating system allows attackers to perform arbitrary command execution via a crafted wifi SSID or password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Nemobi/ak3918ev300v18 - https://arxiv.org/abs/2306.00610
CVE ID: CVE-2023-30402 State: PUBLISHED Published: 2023-04-25T00:00:00 Last Updated: 2024-08-02T14:21:44.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: YASM v1.3.0 was discovered to contain a heap overflow via the function handle_dot_label at /nasm/nasm-token.re. Note: This has been disputed by third parties who argue this is a bug and not a security issue because yasm is a standalone program not designed to run untrusted code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/206
CVE ID: CVE-2023-30403 State: PUBLISHED Published: 2023-05-02T00:00:00.000Z Last Updated: 2025-01-30T16:23:55.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to bypass login by connecting to the web app after a successful attempt by a legitimate user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mandomat.github.io/2023-04-13-testing-a-cheap-wifi-repeater/ - https://dl.packetstormsecurity.net/2305-exploits/aigitalwnr-bypass.txt
CVE ID: CVE-2023-30404 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-03T17:24:00.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability via the sysCmd parameter in the formSysCmd function. This vulnerability is exploited via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://aigital.com - https://mandomat.github.io/2023-04-13-testing-a-cheap-wifi-repeater/
CVE ID: CVE-2023-30405 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T20:36:47.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the wl_ssid parameter at /boafrm/formHomeWlanSetup. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/172057/Aigital-Wireless-N-Repeater-Mini_Router.0.131229-Cross-Site-Scripting.html
CVE ID: CVE-2023-30406 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-05T15:57:09.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecma_find_named_property at /base/ecma-helpers.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5058
CVE ID: CVE-2023-30408 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-05T15:54:28.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5057
CVE ID: CVE-2023-30410 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-05T15:19:15.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5052
CVE ID: CVE-2023-30414 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:02:21.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm_loop at /jerry-core/vm/vm.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jerryscript-project/jerryscript/issues/5051
CVE ID: CVE-2023-30415 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-24T13:12:20.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/view_inquiry.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/174758/Packers-And-Movers-Management-System-1.0-SQL-Injection.html - https://robsware.github.io/2023/09/01/firstcve
CVE ID: CVE-2023-30417 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-03T17:21:25.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/pear-admin/Pear-Admin-Boot/issues/I6SXHX
CVE ID: CVE-2023-30421 State: PUBLISHED Published: 2025-04-19T00:00:00.000Z Last Updated: 2025-04-21T14:22:34.344Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: mjson project Products: mjson Problem Types: CWE-407 Description: mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/boofish/json_bugs/blob/main/mjson - https://github.com/cesanta/mjson/releases
CVE ID: CVE-2023-30428 State: PUBLISHED Published: 2023-07-12T09:10:03.369Z Last Updated: 2024-10-04T13:43:04.819Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Apache Software Foundation Products: Apache Pulsar Broker Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Broker's Rest Producer allows authenticated user with a custom HTTP header to produce a message to any topic using the broker's admin role. This issue affects Apache Pulsar Brokers: from 2.9.0 through 2.9.5, from 2.10.0 before 2.10.4, 2.11.0. The vulnerability is exploitable when an attacker can connect directly to the Pulsar B
rom 2.10.0 before 2.10.4, 2.11.0. The vulnerability is exploitable when an attacker can connect directly to the Pulsar Broker. If an attacker is connecting through the Pulsar Proxy, there is no known way to exploit this authorization vulnerability. There are two known risks for affected users. First, an attacker could produce garbage messages to any topic in the cluster. Second, an attacker could produce messages to the topic level policies topic for other tenants and influence topic settings that could lead to exfiltration and/or deletion of messages for other tenants. 2.8 Pulsar Broker users and earlier are unaffected. 2.9 Pulsar Broker users should upgrade to one of the patched versions.
Pulsar Broker users and earlier are unaffected. 2.9 Pulsar Broker users should upgrade to one of the patched versions. 2.10 Pulsar Broker users should upgrade to at least 2.10.4. 2.11 Pulsar Broker users should upgrade to at least 2.11.1. 3.0 Pulsar Broker users are unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/v39hqtgrmyxr85rmofwvgrktnflbq3q5
CVE ID: CVE-2023-30429 State: PUBLISHED Published: 2023-07-12T09:08:23.703Z Last Updated: 2024-10-03T20:43:48.694Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Apache Software Foundation Products: Apache Pulsar Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar. This issue affects Apache Pulsar: before 2.10.4, and 2.11.0. When a client connects to the Pulsar Function Worker via the Pulsar Proxy where the Pulsar Proxy uses mTLS authentication to authenticate with the Pulsar Function Worker, the Pulsar Function Worker incorrectly performs authorization by using the Proxy's role for authori
sar Function Worker, the Pulsar Function Worker incorrectly performs authorization by using the Proxy's role for authorization instead of the client's role, which can lead to privilege escalation, especially if the proxy is configured with a superuser role. The recommended mitigation for impacted users is to upgrade the Pulsar Function Worker to a patched version. 2.10 Pulsar Function Worker users should upgrade to at least 2.10.4. 2.11 Pulsar Function Worker users should upgrade to at least 2.11.1. 3.0 Pulsar Function Worker users are unaffected. Any users running the Pulsar Function Worker for 2.9.* and earlier should upgrade to one of the above patched versions. Additional Analyst Notes:
ar Function Worker for 2.9.* and earlier should upgrade to one of the above patched versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/v0gcvvxswr830314q4b1kybsfmcf3jf8
CVE ID: CVE-2023-30430 State: PUBLISHED Published: 2024-06-27T15:53:23.648Z Last Updated: 2024-08-24T10:44:17.483Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Access Problem Types: CWE-532 Description: IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace logs. IBM X-Force ID: 252183. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/252183
CVE ID: CVE-2023-30431 State: PUBLISHED Published: 2023-07-09T23:58:32.882Z Last Updated: 2025-02-13T16:49:25.348Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-119 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010565 - https://exchange.xforce.ibmc
er: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/252184 - https://security.netapp.com/advisory/ntap-20230731-0007/
CVE ID: CVE-2023-30433 State: PUBLISHED Published: 2023-07-19T00:42:26.332Z Last Updated: 2024-10-21T14:08:20.369Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: IBM Products: Security Verify Access Docker Problem Types: CWE-601 Description: IBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct furth
e that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 252186. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7012613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/252186
CVE ID: CVE-2023-30434 State: PUBLISHED Published: 2023-05-05T14:03:16.921Z Last Updated: 2025-01-29T15:56:31.707Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Elastic Storage System, Spectrum Scale Problem Types: CWE-20 Description: IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6988363 - https://www.ibm.com/support/pages
CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6988363 - https://www.ibm.com/support/pages/node/6988365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/252187
CVE ID: CVE-2023-30435 State: PUBLISHED Published: 2023-08-27T22:18:31.330Z Last Updated: 2024-10-01T20:05:35.475Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: IBM Products: Security Guardium Problem Types: CWE-79 Description: IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252291. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/70
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/252291
CVE ID: CVE-2023-30436 State: PUBLISHED Published: 2023-08-27T22:21:30.209Z Last Updated: 2024-09-30T17:51:56.290Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: IBM Products: Security Guardium Problem Types: CWE-79 Description: IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252292. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028506
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/252292
CVE ID: CVE-2023-30437 State: PUBLISHED Published: 2023-08-27T22:24:41.341Z Last Updated: 2024-10-01T20:15:13.717Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Guardium Problem Types: 204 Response Discrepancy Information Exposure Description: IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/252293
CVE ID: CVE-2023-30438 State: PUBLISHED Published: 2023-05-17T12:48:37.240Z Last Updated: 2025-01-22T16:48:02.322Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: PowerVM Hypervisor Problem Types: 264 Permissions, Privileges, Access Controls Description: An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706. Addition
he execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6993021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/252706
CVE ID: CVE-2023-30440 State: PUBLISHED Published: 2023-05-23T13:20:41.163Z Last Updated: 2025-01-17T17:46:27.182Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H) Vendors: IBM Products: PowerVM Hypervisor Problem Types: CWE-20 Description: IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has been assigned SRIOV virtual function (VF) to cause a denial of service to a peer partition or arbitrary data corruption. IBM X-Force ID: 253175. Additional Analyst Notes: - CVE Program Container: - CISA AD
ition or arbitrary data corruption. IBM X-Force ID: 253175. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6997133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253175
CVE ID: CVE-2023-30441 State: PUBLISHED Published: 2023-04-29T14:40:40.263Z Last Updated: 2025-01-30T17:01:26.113Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Java Problem Types: CWE-327 Description: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6985011 - https://www.ibm.com/support/pages/node/6987167 - https://www.ibm.com/support/pages/node/6986637 -
/pages/node/6985011 - https://www.ibm.com/support/pages/node/6987167 - https://www.ibm.com/support/pages/node/6986637 - https://www.ibm.com/support/pages/node/6986617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253188
CVE ID: CVE-2023-30442 State: PUBLISHED Published: 2023-07-10T00:01:47.971Z Last Updated: 2025-02-13T16:49:25.955Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. IBM X-Force ID: 253202. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010561 - https://exchange.xforce.ibmcloud.com/vu
ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253202 - https://security.netapp.com/advisory/ntap-20230731-0007/
CVE ID: CVE-2023-30443 State: PUBLISHED Published: 2024-12-19T01:04:07.275Z Last Updated: 2024-12-19T16:38:43.360Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-770 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010557
CVE ID: CVE-2023-30444 State: PUBLISHED Published: 2023-04-27T12:52:10.336Z Last Updated: 2025-01-30T20:59:51.762Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: IBM Products: Watson Machine Learning on Cloud Pak for Data Problem Types: CWE-918 Description: IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 253350. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.co
ID: 253350. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6985859 - https://www.ibm.com/support/pages/node/6985859
CVE ID: CVE-2023-30445 State: PUBLISHED Published: 2023-07-08T18:28:41.779Z Last Updated: 2025-02-13T16:49:26.459Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253357 - https://security.netapp.com
m/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253357 - https://security.netapp.com/advisory/ntap-20230731-0007/
CVE ID: CVE-2023-30446 State: PUBLISHED Published: 2023-07-08T18:09:52.072Z Last Updated: 2025-02-13T16:49:27.028Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253361 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253361 - https://security.netapp.
.com/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253361 - https://security.netapp.com/advisory/ntap-20230731-0007/
CVE ID: CVE-2023-30447 State: PUBLISHED Published: 2023-07-08T18:07:15.751Z Last Updated: 2025-02-13T16:49:27.519Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253436 - https://security.netapp.c
com/support/pages/node/7010557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253436 - https://security.netapp.com/advisory/ntap-20230731-0007/