Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 258349. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/258349
CVE ID: CVE-2023-35029 State: PUBLISHED Published: 2023-06-15T03:59:44.155Z Last Updated: 2024-10-22T15:41:49.018Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Liferay Products: Portal, DXP Problem Types: CWE-601 Description: Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to redirect users to arbitrary external URLs via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/kn
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-35029
CVE ID: CVE-2023-35030 State: PUBLISHED Published: 2023-06-15T04:06:36.864Z Last Updated: 2024-10-22T15:51:16.440Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Liferay Products: Portal, DXP Problem Types: CWE-352 Description: Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lifera
URL` parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-35030
CVE ID: CVE-2023-35031 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-06T17:31:45.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-24036. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-un
echnik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/
CVE ID: CVE-2023-35032 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-06T17:24:05.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/
CVE ID: CVE-2023-35033 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-06T17:22:03.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-un
CVE ID: CVE-2023-35034 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-06T17:16:12.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/
CVE ID: CVE-2023-35035 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:27:17.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-01.pdf - https://www.news.de/technik/856882353/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-un
CVE ID: CVE-2023-35036 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T18:41:17.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL injection vulnerabilities have been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content. Additional Analyst Notes: - CVE Program Contai
t could result in modification and disclosure of MOVEit database content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://archive.is/58ty7 - https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-CVE-2023-35036-June-9-2023
CVE ID: CVE-2023-35037 State: PUBLISHED Published: 2024-12-13T14:23:38.299Z Last Updated: 2024-12-13T18:41:27.173Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: Surfer Products: Surfer Problem Types: CWE-862 Description: Missing Authorization vulnerability in Surfer Surfer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.3.2.357. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/surferseo/vulnerability/wordpress-surfer-plugin-1-1-2-298-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-35038 State: PUBLISHED Published: 2023-07-17T13:26:20.162Z Last Updated: 2024-10-07T15:12:39.345Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: wpexperts.io Products: WP PDF Generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in wpexperts.Io WP PDF Generator plugin <= 1.2.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-pdf-generator/wordpress-wp-pdf-generator-plugin-1-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-35039 State: PUBLISHED Published: 2023-12-07T11:27:16.116Z Last Updated: 2024-08-02T16:17:04.210Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Be Devious Web Development Products: Password Reset with Code for WordPress REST API Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts vulnerability in Be Devious Web Development Password Reset with Code for WordPress REST API allows Authentication Abuse.This issue affects Password Reset with Code for WordPress REST API: from n/a through 0.0.15. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerabilit
gh 0.0.15. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bdvs-password-reset/wordpress-password-reset-with-code-for-wordpress-rest-api-plugin-0-0-15-privilege-escalation-due-to-weak-pin-generation-vulnerability?_s_id=cve
CVE ID: CVE-2023-35040 State: PUBLISHED Published: 2024-06-13T23:51:45.497Z Last Updated: 2024-08-02T16:17:04.505Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: SendPress Products: SendPress Newsletters Problem Types: CWE-862 Description: Missing Authorization vulnerability in SendPress SendPress Newsletters.This issue affects SendPress Newsletters: from n/a through 1.23.11.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/sendpress/wordpress-sendpress-newsletters-plugin-1-22-3-31-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-35041 State: PUBLISHED Published: 2023-11-13T02:12:18.580Z Last Updated: 2024-09-03T18:57:09.988Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Webpushr Web Push Notifications Products: Web Push Notifications – Webpushr Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability leading to Local File Inclusion (LF) in Webpushr Web Push Notifications Web Push Notifications – Webpushr plugin <= 4.34.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/webpushr-web-push-notifications/wordpress-web-push-notifications-webpushr-pl
tps://patchstack.com/database/vulnerability/webpushr-web-push-notifications/wordpress-web-push-notifications-webpushr-plugin-4-34-0-csrf-leading-to-lfi-vulnerability?_s_id=cve
CVE ID: CVE-2023-35042 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2024-11-27T15:06:46.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://isc.sans.edu/diary/29936 - https://docs.geoserver.org/stable/en/user/services/wps/operations.html#execute
CVE ID: CVE-2023-35043 State: PUBLISHED Published: 2023-07-25T12:57:09.248Z Last Updated: 2024-09-25T16:59:32.818Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Neha Goel Products: Recent Posts Slider Problem Types: CWE-79 Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/recent-posts-slider/wordpress-recent-posts-slider-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-35044 State: PUBLISHED Published: 2023-07-11T12:13:03.501Z Last Updated: 2024-10-07T17:31:28.700Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Drew Phillips Products: Securimage-WP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Drew Phillips Securimage-WP plugin <= 3.6.16 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/securimage-wp/wordpress-securimage-wp-plugin-3-6-16-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-35045 State: PUBLISHED Published: 2024-06-13T23:50:33.822Z Last Updated: 2024-08-02T16:17:04.232Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Fat Rat Products: Fat Rat Collect Problem Types: CWE-862 Description: Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/fat-rat-collect/wordpress-fat-rat-collect-plugin-2-6-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-35046 State: PUBLISHED Published: 2024-12-13T14:23:38.832Z Last Updated: 2024-12-13T18:40:37.037Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dynamic.ooo Products: Dynamic Visibility for Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in Dynamic.ooo Dynamic Visibility for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Visibility for Elementor: from n/a through 5.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dynamic-visibility-for-elementor/vulnerability/wordpress-dynamic-
es: - https://patchstack.com/database/wordpress/plugin/dynamic-visibility-for-elementor/vulnerability/wordpress-dynamic-visibility-for-elementor-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-35047 State: PUBLISHED Published: 2023-07-11T11:14:45.579Z Last Updated: 2024-10-07T17:32:25.078Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: AREOI Products: All Bootstrap Blocks Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AREOI All Bootstrap Blocks plugin <= 1.3.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/all-bootstrap-blocks/wordpress-all-bootstrap-blocks-plugin-1-3-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-35048 State: PUBLISHED Published: 2023-06-23T11:50:32.959Z Last Updated: 2024-10-10T17:14:18.323Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: MagePeople Team Products: Booking and Rental Manager for Bike Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin <= 1.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/booking-and-rental-manager-for-woocommerce/wordpress-booking-and-rental-manager-plugin-1-2-1-cross-site-scripting-xss-vulnerab
g-and-rental-manager-for-woocommerce/wordpress-booking-and-rental-manager-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-35049 State: PUBLISHED Published: 2024-06-19T12:26:52.965Z Last Updated: 2024-08-02T16:17:04.207Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: WooCommerce Products: WooCommerce Stripe Payment Gateway Problem Types: CWE-862 Description: Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-payment-gateway-plugin-7-4-0-unauthenticated-broken-acc
rability/woocommerce-gateway-stripe/wordpress-woocommerce-stripe-payment-gateway-plugin-7-4-0-unauthenticated-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-35050 State: PUBLISHED Published: 2024-06-19T12:28:01.532Z Last Updated: 2024-08-02T16:17:04.348Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Elementor Products: Elementor Pro Problem Types: CWE-862 Description: Missing Authorization vulnerability in Elementor Elementor Pro.This issue affects Elementor Pro: from n/a through 3.13.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/elementor-pro/wordpress-elementor-pro-plugin-3-13-0-subscriber-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-35051 State: PUBLISHED Published: 2024-12-13T14:23:39.351Z Last Updated: 2024-12-13T18:39:44.891Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Cimatti Consulting Products: Contact Forms by Cimatti Problem Types: CWE-862 Description: Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through 1.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-forms/vulnerability/wordpress-contact-forms-by-cimatti-plugin-1-5-7
s://patchstack.com/database/wordpress/plugin/contact-forms/vulnerability/wordpress-contact-forms-by-cimatti-plugin-1-5-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-35052 State: PUBLISHED Published: 2024-12-13T14:23:39.917Z Last Updated: 2024-12-13T18:38:50.252Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: wpWax - WP Business Directory Plugin and Classified Listings Directory Products: Directorist Problem Types: CWE-862 Description: Missing Authorization vulnerability in wpWax - WP Business Directory Plugin and Classified Listings Directory Directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through 7.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/directoris
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/directorist/vulnerability/wordpress-directorist-plugin-7-5-4-arbitrary-content-deletion?_s_id=cve
CVE ID: CVE-2023-35053 State: PUBLISHED Published: 2023-06-12T15:46:04.269Z Last Updated: 2025-01-03T21:15:22.565Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: JetBrains Products: YouTrack Problem Types: CWE-400 Description: In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2023-35054 State: PUBLISHED Published: 2023-06-12T15:46:04.704Z Last Updated: 2025-01-03T21:14:36.023Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-79 Description: In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2023-35055 State: PUBLISHED Published: 2023-10-11T15:14:31.751Z Last Updated: 2025-11-04T19:16:52.939Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Yifan Products: YF325 Problem Types: CWE-121 Description: A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the gozila_cgi function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulner
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1761
CVE ID: CVE-2023-35056 State: PUBLISHED Published: 2023-10-11T15:14:31.853Z Last Updated: 2025-11-04T19:16:54.045Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Yifan Products: YF325 Problem Types: CWE-121 Description: A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the cgi_handler function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulne
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1761
CVE ID: CVE-2023-35057 State: PUBLISHED Published: 2024-01-08T14:47:42.619Z Last Updated: 2025-11-04T18:14:45.154Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-190 Description: An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1821 - https://lists.debi
ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1821 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE ID: CVE-2023-35060 State: PUBLISHED Published: 2024-02-14T13:38:12.660Z Last Updated: 2024-08-14T18:36:06.370Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Battery Life Diagnostic Tool software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00987.html
CVE ID: CVE-2023-35061 State: PUBLISHED Published: 2024-02-14T13:37:57.673Z Last Updated: 2024-08-14T13:45:40.791Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software Problem Types: information disclosure, CWE-665 Description: Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable information disclosure via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/a
CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html