Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
NodeBB/NodeBB/security/advisories/GHSA-4qcv-qf38-5j3j - https://github.com/NodeBB/NodeBB/commit/51096ad2345fb1d1380bec0a447113489ef6c359 - https://github.com/NodeBB/NodeBB/releases/tag/v3.1.3
CVE ID: CVE-2023-2851 State: PUBLISHED Published: 2023-05-25T13:37:23.200Z Last Updated: 2024-08-02T06:33:05.700Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AGT Tech Products: Ceppatron Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection.This issue affects all versions of the sofware also EOS when CVE-ID assigned. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-23-0294
CVE ID: CVE-2023-2852 State: PUBLISHED Published: 2023-07-09T16:37:31.348Z Last Updated: 2024-11-07T15:56:47.830Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Softmed Products: SelfPatron Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQL Injection.This issue affects SelfPatron : before 2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0388
CVE ID: CVE-2023-2853 State: PUBLISHED Published: 2023-07-09T16:39:36.595Z Last Updated: 2024-10-23T19:08:54.301Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Softmed Products: SelfPatron Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softmed SelfPatron allows Reflected XSS.This issue affects SelfPatron : before 2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0388
CVE ID: CVE-2023-2854 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T15:44:03.325Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer over-read in Wireshark Description: BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-17.html - https://gitlab.com/wireshark/wireshark/-/issues/19084 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2854.json - https://ww
reshark/wireshark/-/issues/19084 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2854.json - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-2855 State: PUBLISHED Published: 2023-05-26T00:00:00.000Z Last Updated: 2025-11-03T21:47:39.041Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer over-read in Wireshark Description: Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-12.html - https://gitlab.com/wireshark/wireshark/-/issues/19062 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2855.json - ht
b.com/wireshark/wireshark/-/issues/19062 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2855.json - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-2856 State: PUBLISHED Published: 2023-05-26T00:00:00.000Z Last Updated: 2025-11-03T21:47:40.525Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer over-read in Wireshark Description: VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-16.html - https://gitlab.com/wireshark/wireshark/-/issues/19083 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2856.j
://gitlab.com/wireshark/wireshark/-/issues/19083 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2856.json - https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-2857 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T15:41:45.855Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer over-read in Wireshark Description: BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-13.html - https://gitlab.com/wireshark/wireshark/-/issues/19063 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2857.json - https://ww
reshark/wireshark/-/issues/19063 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2857.json - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-2858 State: PUBLISHED Published: 2023-05-26T00:00:00.000Z Last Updated: 2025-11-03T21:47:41.980Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer over-read in Wireshark Description: NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-15.html - https://gitlab.com/wireshark/wireshark/-/issues/19081 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2858.json -
tlab.com/wireshark/wireshark/-/issues/19081 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2858.json - https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-2859 State: PUBLISHED Published: 2023-05-24T00:00:00.000Z Last Updated: 2025-02-12T17:01:06.883Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: nilsteampassnet Products: nilsteampassnet/teampass Problem Types: CWE-94 Description: Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d7b8ea75-c74a-4721-89bb-12e5c80fb0ba - https://github.com/nilsteampassnet/teampass/commit/1f51482a0c4d152ca876844212b0f8f3cb9387af
CVE ID: CVE-2023-2860 State: PUBLISHED Published: 2023-07-24T15:19:18.473Z Last Updated: 2025-03-05T18:47:56.873Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-125 Description: An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a pr
validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-2860 - https://bugzilla.redhat.com/show_bug.cgi?id=2218122 - https://www.zerodayinitiative.com/advisories/ZDI-CAN-18511
CVE ID: CVE-2023-2861 State: PUBLISHED Published: 2023-12-06T06:19:40.625Z Last Updated: 2024-08-02T06:33:05.791Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Problem Types: CWE-284 Description: A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-2861 - https://bugzilla.redhat.com/show_bug.cgi?id=
ainer: References: - https://access.redhat.com/security/cve/CVE-2023-2861 - https://bugzilla.redhat.com/show_bug.cgi?id=2219266 - https://lists.debian.org/debian-lts-announce/2024/03/msg00012.html - https://security.netapp.com/advisory/ntap-20240125-0005/ - https://security.netapp.com/advisory/ntap-20240229-0002/
CVE ID: CVE-2023-2862 State: PUBLISHED Published: 2023-05-24T09:31:03.789Z Last Updated: 2024-08-02T06:33:05.675Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SiteServer Products: CMS Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-229818 is the identifier assigned to this vulnerability. Additi
t is recommended to apply a patch to fix this issue. VDB-229818 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229818 - https://vuldb.com/?ctiid.229818 - https://gitee.com/siteserver/cms/issues/I71WJ4
CVE ID: CVE-2023-2863 State: PUBLISHED Published: 2023-05-24T10:00:04.517Z Last Updated: 2025-01-16T15:41:49.473Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Simple Design Products: Daily Journal Problem Types: CWE-313 Description: A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerab
the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229819. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.229819 - https://vuldb.com/?ctiid.229819 - https://www.youtube.com/watch?v=V0u9C5RVSic
CVE ID: CVE-2023-2864 State: PUBLISHED Published: 2023-05-24T10:31:03.723Z Last Updated: 2024-08-02T06:33:05.643Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Jewelry Store Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Online Jewelry Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file customer.php of the component POST Parameter Handler. The manipulation of the argument Custid leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229820. Addit
The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229820. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229820 - https://vuldb.com/?ctiid.229820 - https://github.com/XIAONIGM/CVEReport/blob/main/XSS.md
CVE ID: CVE-2023-2865 State: PUBLISHED Published: 2023-05-24T10:31:04.666Z Last Updated: 2024-08-02T06:33:05.658Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Theme Park Ticketing System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Theme Park Ticketing System 1.0. It has been classified as critical. This affects an unknown part of the file print_ticket.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229821 was assigned to this vulnerabi
. The exploit has been disclosed to the public and may be used. The identifier VDB-229821 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229821 - https://vuldb.com/?ctiid.229821 - https://github.com/XIAONIGM/CVEReport/blob/main/SQL.md
CVE ID: CVE-2023-2866 State: PUBLISHED Published: 2023-06-07T20:12:46.824Z Last Updated: 2025-01-16T21:32:10.686Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Advantech Products: WebAccess/SCADA Problem Types: CWE-351 Description: If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-150-01
CVE ID: CVE-2023-2868 State: PUBLISHED Published: 2023-05-24T18:00:52.360Z Last Updated: 2025-10-21T23:05:47.195Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: Barracuda Products: Barracuda Email Security Gateway Problem Types: CWE-20 Description: A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file (tape archives). The vulnerability stems from incomplete input validation of a user-supplied .tar file as it pertains to the names of the files contain
ity stems from incomplete input validation of a user-supplied .tar file as it pertains to the names of the files contained within the archive. As a consequence, a remote attacker can specifically format these file names in a particular manner that will result in remotely executing a system command through Perl's qx operator with the privileges of the Email Security Gateway product. This issue was fixed as part of BNSF-36456 patch. This patch was automatically applied to all customer appliances. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.barracuda.com/company/legal/esg-vulnerability - https://status.barracuda.com/incidents/34kx82j5n4q
rences: - https://www.barracuda.com/company/legal/esg-vulnerability - https://status.barracuda.com/incidents/34kx82j5n4q9
CVE ID: CVE-2023-2869 State: PUBLISHED Published: 2023-07-12T04:38:48.717Z Last Updated: 2024-10-23T14:48:54.890Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: cbutlerjr Products: WP-Members Membership Plugin Problem Types: CWE-862 Missing Authorization Description: The WP-Members Membership plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the do_field_reorder function in versions up to, and including, 3.4.7.3. This makes it possible for authenticated attackers with subscriber-level access to reorder form elements on login forms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
level access to reorder form elements on login forms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bf05a79a-0375-4c9d-bbf0-a87484327b87?source=cve - https://plugins.trac.wordpress.org/browser/wp-members/trunk/includes/admin/tabs/class-wp-members-admin-tab-fields.php?rev=2895180#L799 - https://plugins.trac.wordpress.org/changeset/2920897/wp-members/trunk/includes/admin/tabs/class-wp-members-admin-tab-fields.php
CVE ID: CVE-2023-2870 State: PUBLISHED Published: 2023-05-24T17:31:02.965Z Last Updated: 2024-08-02T06:33:05.751Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: EnTech Products: Monitor Asset Manager Problem Types: CWE-404 Description: A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier VDB-229849 was assigned to this vulnerability. NOTE: The
s been disclosed to the public and may be used. The identifier VDB-229849 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229849 - https://vuldb.com/?ctiid.229849 - https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2870 - https://drive.google.com/file/d/1ehTYhcdeTiB4rQ38n5FqhQZgVqcvvPE_/view?usp=sharing
CVE ID: CVE-2023-2871 State: PUBLISHED Published: 2023-05-24T17:31:03.915Z Last Updated: 2024-11-22T18:06:22.020Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: FabulaTech Products: USB for Remote Desktop Problem Types: CWE-476 Description: A vulnerability was found in FabulaTech USB for Remote Desktop 6.1.0.0. It has been rated as problematic. Affected by this issue is the function 0x220448/0x220420/0x22040c/0x220408 of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-229850 is the identifier assigned to this vul
locally. The exploit has been disclosed to the public and may be used. VDB-229850 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.229850 - https://vuldb.com/?ctiid.229850 - https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2871 - https://drive.google.com/file/d/1Y8e5f0AjddrozLv155r9cNhkXwwwZbYE/view?usp=sharing
CVE ID: CVE-2023-2872 State: PUBLISHED Published: 2023-05-24T18:00:04.078Z Last Updated: 2024-08-02T06:33:06.150Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: FlexiHub Problem Types: CWE-476 Description: A vulnerability classified as problematic has been found in FlexiHub 5.5.14691.0. This affects the function 0x220088 in the library fusbhub.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229851. NOTE: The vendor was contacted early about t
may be used. The associated identifier of this vulnerability is VDB-229851. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229851 - https://vuldb.com/?ctiid.229851 - https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2872 - https://drive.google.com/file/d/1h-7fnmb31bkEW4FoLNDlneftDqS4TQHT/view?usp=sharing
CVE ID: CVE-2023-2873 State: PUBLISHED Published: 2023-05-24T18:00:05.170Z Last Updated: 2024-08-02T06:33:05.531Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Twister Products: Antivirus Problem Types: CWE-119 Description: A vulnerability classified as critical was found in Twister Antivirus 8. This vulnerability affects the function 0x804f2143/0x804f217f/0x804f214b/0x80800043 in the library filppd.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229852. NOTE: Th
e exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229852. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229852 - https://vuldb.com/?ctiid.229852 - https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2873 - https://drive.google.com/file/d/1ABRMxr6Ek02P_WAXjyYLGQ4sHYMVQTka/view?usp=sharing
CVE ID: CVE-2023-2874 State: PUBLISHED Published: 2023-05-24T18:31:03.531Z Last Updated: 2024-08-02T06:33:06.075Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Twister Products: Antivirus Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, has been found in Twister Antivirus 8. This issue affects the function 0x804f2158/0x804f2154/0x804f2150/0x804f215c/0x804f2160/0x80800040/0x804f214c/0x804f2148/0x804f2144/0x801120e4/0x804f213c/0x804f2140 in the library filppd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to th
r. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-229853 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229853 - https://vuldb.com/?ctiid.229853 - https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2874 - https://drive.google.com/file/d/1hcj4tdRveydUv84J5IEQFmjF1XxUvxGy/view?usp=sharing
CVE ID: CVE-2023-2875 State: PUBLISHED Published: 2023-05-24T19:00:04.741Z Last Updated: 2024-08-02T06:33:05.834Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: eScan Products: Antivirus Problem Types: CWE-476 Description: A vulnerability, which was classified as problematic, was found in eScan Antivirus 22.0.1400.2443. Affected is the function 0x22E008u in the library PROCOBSRVESX.SYS of the component IoControlCode Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-229854 is the identifier assigned to this vulnerability. NOTE:
it has been disclosed to the public and may be used. VDB-229854 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229854 - https://vuldb.com/?ctiid.229854 - https://github.com/zeze-zeze/WindowsKernelVuln/blob/master/CVE-2023-2875 - https://drive.google.com/file/d/1fvlP0d9HmApjWhYDjgsdco7g7FPsbn0V/view?usp=sharing