Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230124_en.pdf - https://jvn.jp/en/vu/JVNVU97195023/
CVE ID: CVE-2023-22325 State: PUBLISHED Published: 2023-10-12T15:27:54.526Z Last Updated: 2024-08-02T10:07:06.113Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SoftEther VPN Products: SoftEther VPN Problem Types: CWE-835 Description: A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerabilit
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736 - https://www.softether.org/9-about/News/904-SEVPN202301
CVE ID: CVE-2023-22326 State: PUBLISHED Published: 2023-02-01T17:53:45.327Z Last Updated: 2025-03-26T15:59:43.461Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: BIG-IP, BIG-IQ Centralized Management Problem Types: CWE-732 Description: In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iControl REST and TMOS shell (tmsh) dig command which may allow an authenticated attacker with resource administrator or administrator role privileges to view sensitive i
ich may allow an authenticated attacker with resource administrator or administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K83284425
CVE ID: CVE-2023-22327 State: PUBLISHED Published: 2023-11-14T19:04:53.449Z Last Updated: 2024-10-15T17:53:51.634Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) FPGA products Problem Types: information disclosure, CWE-787 Description: Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00957.html
CVE ID: CVE-2023-22329 State: PUBLISHED Published: 2023-11-14T19:05:07.366Z Last Updated: 2025-02-13T16:43:50.489Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) Processors Problem Types: denial of service, CWE-20 Description: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00924.html - https://security.netapp.com/advisory/ntap-20231221-0008/
CVE ID: CVE-2023-22330 State: PUBLISHED Published: 2023-08-11T02:37:31.296Z Last Updated: 2024-10-02T14:48:26.138Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) NUC BIOS firmware Problem Types: information disclosure, CWE-908 Description: Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html
CVE ID: CVE-2023-22331 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:58:46.888Z Vendors: Contec Co., Ltd. Products: CONPROSYS HMI System (CHS) Problem Types: Use of default credentials Description: Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://www.contec.com/api/downloadlogger?download=/-/
97aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf - https://jvn.jp/en/vu/JVNVU96873821 - https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03
CVE ID: CVE-2023-22332 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-11-03T21:47:15.461Z Vendors: PgPool Global Development Group Products: Pgpool-II Problem Types: Information Disclosure Description: Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user's authentication information may be obtained by another database user. As a result, the information
ecific database user's authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pgpool.net/mediawiki/index.php/Main_Page#News - https://jvn.jp/en/jp/JVN72418815/
CVE ID: CVE-2023-22333 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-03-28T15:37:54.890Z Vendors: First Net Japan Inc. Products: EasyMail Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EasyMail 2.00.130 and earlier allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mubag.com/download/ - https://jvn.jp/en/jp/JVN05288621/
CVE ID: CVE-2023-22334 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:18:44.743Z Vendors: Contec Co., Ltd. Products: CONPROSYS HMI System (CHS) Problem Types: Use of password hash instead of password for authentication Description: Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user credentials information via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditem
ferences: - https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf - https://jvn.jp/en/vu/JVNVU96873821 - https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03
CVE ID: CVE-2023-22335 State: PUBLISHED Published: 2023-03-05T00:00:00.000Z Last Updated: 2025-03-06T16:10:23.955Z Vendors: DOS Co., Ltd. Products: SS1 and Rakuraku PC Cloud Problem Types: Improper access control Description: Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directory where the product runs. As a result of exploiting this vulnerability with CVE-2023-22336 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted scr
r, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dos-osaka.co.jp/news/2023/03/230301.html - https://jvn.jp/en/jp/JVN57224029/
CVE ID: CVE-2023-22336 State: PUBLISHED Published: 2023-03-05T00:00:00.000Z Last Updated: 2025-03-06T16:08:05.029Z Vendors: DOS Co., Ltd. Products: SS1 and Rakuraku PC Cloud Problem Types: Path traversal Description: Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device. Additional Analyst Notes: - C
code with SYSTEM privileges by sending a specially crafted script to the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dos-osaka.co.jp/news/2023/03/230301.html - https://jvn.jp/en/jp/JVN57224029/
CVE ID: CVE-2023-22337 State: PUBLISHED Published: 2023-11-14T19:04:26.578Z Last Updated: 2024-08-30T17:55:25.012Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel Unison software Problem Types: denial of service, CWE-20 Description: Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2023-22338 State: PUBLISHED Published: 2023-08-11T02:37:03.161Z Last Updated: 2025-02-13T16:43:51.062Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: n/a Products: Intel(R) oneVPL GPU software Problem Types: information disclosure, CWE-125 Description: Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00818.html - https://lists.fedoraproject.org/archives/list/packa
com/content/www/us/en/security-center/advisory/intel-sa-00818.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J7RNFPWOSFII2JE2KDRHPLJANZC3YATW/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TULYSWHC3X76AIGGMUSLBTWOXNND6IEV/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L27GRS7E45IOCZ44VQX2NJ33GVRBWHBS/
CVE ID: CVE-2023-22339 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:03:53.564Z Vendors: Contec Co., Ltd. Products: CONPROSYS HMI System (CHS) Problem Types: Improper access control Description: Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df
ownload/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230110_en.pdf - https://jvn.jp/en/vu/JVNVU96873821 - https://www.cisa.gov/uscert/ics/advisories/icsa-22-347-03
CVE ID: CVE-2023-22340 State: PUBLISHED Published: 2023-02-01T17:54:06.566Z Last Updated: 2025-03-26T18:03:01.098Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-476 Description: On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/
ted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K34525368
CVE ID: CVE-2023-22341 State: PUBLISHED Published: 2023-02-01T17:54:17.997Z Last Updated: 2025-03-26T18:02:34.827Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-476 Description: On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate: * An OAuth Server that references an OAuth Provider * An OAuth profile with the Authorization Endpoint set to '/' * An access profile that references the above OAuth profile and is associated with an HTTPS virtual server Note:
to '/' * An access profile that references the above OAuth profile and is associated with an HTTPS virtual server Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K20717585
CVE ID: CVE-2023-22342 State: PUBLISHED Published: 2024-02-14T13:37:40.161Z Last Updated: 2025-05-12T14:59:00.494Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-22344 State: PUBLISHED Published: 2023-03-05T00:00:00.000Z Last Updated: 2025-03-06T16:06:53.313Z Vendors: DOS Co., Ltd. Products: SS1 and Rakuraku PC Cloud Problem Types: Use of hard-coded credentials Description: Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device. Addi
r to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dos-osaka.co.jp/news/2023/03/230301.html - https://jvn.jp/en/jp/JVN57224029/
CVE ID: CVE-2023-22345 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:31:44.642Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Screen Creator Advance 2 Problem Types: Out-of-bound write Description: Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process when out of specification errors are detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202302035233/ - https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/ - https://jvn.jp/en/vu/JVNVU98917488/
CVE ID: CVE-2023-22346 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:30:49.450Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Screen Creator Advance 2 Problem Types: Out-of-bound read Description: Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing template information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topic
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202302035233/ - https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/ - https://jvn.jp/en/vu/JVNVU98917488/
CVE ID: CVE-2023-22347 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:29:37.525Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Screen Creator Advance 2 Problem Types: Out-of-bound read Description: Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing file structure information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en
CVE ID: CVE-2023-22348 State: PUBLISHED Published: 2023-05-17T15:51:54.376Z Last Updated: 2025-01-22T16:47:31.132Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-285 Description: Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/13982
CVE ID: CVE-2023-22349 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T14:51:41.693Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Screen Creator Advance 2 Problem Types: Out-of-bound read Description: Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing screen management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202302035233/ - https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/ - https://jvn.jp/en/vu/JVNVU98917488/
CVE ID: CVE-2023-22350 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:28:22.530Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Screen Creator Advance 2 Problem Types: Out-of-bound read Description: Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing parts management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202302035233/ - https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/ - https://jvn.jp/en/vu/JVNVU98917488/
CVE ID: CVE-2023-22351 State: PUBLISHED Published: 2024-09-16T16:38:45.783Z Last Updated: 2025-11-03T21:47:16.914Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L) Vendors: n/a Products: UEFI firmware for some Intel(R) Processors Problem Types: escalation of privilege, CWE-787 Description: Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
CVE ID: CVE-2023-22353 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:26:59.806Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Screen Creator Advance 2 Problem Types: Out-of-bound read Description: Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing control management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.j
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202302035233/ - https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/ - https://jvn.jp/en/vu/JVNVU98917488/
CVE ID: CVE-2023-22354 State: PUBLISHED Published: 2023-04-20T18:13:50.042Z Last Updated: 2025-01-16T21:35:58.720Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Datakit Products: CrossCAD/Ware_x64 library 0 Problem Types: CWE-125 Description: Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14
CVE ID: CVE-2023-22355 State: PUBLISHED Published: 2023-05-10T13:17:14.480Z Last Updated: 2025-01-24T17:36:46.630Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Toolkit and component software installers Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/int
m Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html