Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
a user is highly unlikely, it would not be unheard of. If a malicious user was able to abuse this functionality they would have essentially direct access to the database and the ability to modify data to the level of permissions associated with the database user. A non exhaustive list of actions possible based on database permissions is: Read all data stored in the database, including usernames and password hashes; insert arbitrary data into the database, including modifying existing records; and gain a shell on the underlying server. Version 1.1.1 fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/piccolo-orm/piccol
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/piccolo-orm/piccolo/security/advisories/GHSA-xq59-7jf3-rjc6 - https://github.com/piccolo-orm/piccolo/commit/82679eb8cd1449cf31d87c9914a072e70168b6eb
CVE ID: CVE-2023-47129 State: PUBLISHED Published: 2023-11-10T18:48:03.265Z Last Updated: 2024-09-03T17:24:55.886Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: statamic Products: cms Problem Types: CWE-434 Description: Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded. This only affects forms using the "Forms" feature and not just _any_ arbitrary form. This does not affect the control panel. This issue has been patched in 3.4.13 and 4.33.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP
panel. This issue has been patched in 3.4.13 and 4.33.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/statamic/cms/security/advisories/GHSA-72hg-5wr5-rmfc - https://github.com/statamic/cms/commit/098ef8024d97286ca501273c18ae75b646262d75 - https://github.com/statamic/cms/commit/f6c688154f6bdbd0b67039f8f11dcd98ba061e77
CVE ID: CVE-2023-47130 State: PUBLISHED Published: 2023-11-14T20:30:16.393Z Last Updated: 2024-08-14T19:26:42.011Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: yiisoft Products: yii Problem Types: CWE-502 Description: Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. An attacker may leverage this vulnerability to compromise the host system. A fix has been developed for the 1.1.29 release. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container:
d to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yiisoft/yii/security/advisories/GHSA-mw2w-2hj2-fg8q - https://github.com/yiisoft/yii/commit/37142be4dc5831114a375392e86d6450d4951c06 - https://owasp.org/www-community/vulnerabilities/PHP_Object_Injection
CVE ID: CVE-2023-47131 State: PUBLISHED Published: 2024-02-08T00:00:00 Last Updated: 2024-08-19T16:32:14.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.n-able.com/s/security-advisory/aArHs000000M8CCKA0/cve202347131-passportal-browser-extension-logs-sensitive-data
CVE ID: CVE-2023-47132 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-11T17:06:42.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.n-able.com/s/security-advisory/aArHs000000M8CHKA0/cve202347132-ncentral-api-privilege-escalation
CVE ID: CVE-2023-47140 State: PUBLISHED Published: 2024-01-08T02:08:00.545Z Last Updated: 2024-11-14T17:59:34.137Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: CICS Transaction Gateway Containers Problem Types: CWE-266 Description: IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7105094
CVE ID: CVE-2023-47141 State: PUBLISHED Published: 2024-01-22T20:07:33.489Z Last Updated: 2025-02-13T17:14:46.351Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 270264. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270264 - https
: - https://www.ibm.com/support/pages/node/7105497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270264 - https://security.netapp.com/advisory/ntap-20240307-0001/
CVE ID: CVE-2023-47142 State: PUBLISHED Published: 2024-02-02T13:22:17.080Z Last Updated: 2024-09-20T18:45:56.606Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Tivoli Application Dependency Discovery Manager Problem Types: CWE-863 Description: IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 could allow an attacker on the organization's local network to escalate their privileges due to unauthorized API access. IBM X-Force ID: 270267. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7105139 - https://exchange.xforce.ibmcloud.com/vulnerabi
Container: References: - https://www.ibm.com/support/pages/node/7105139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270267
CVE ID: CVE-2023-47143 State: PUBLISHED Published: 2024-02-02T13:03:30.881Z Last Updated: 2024-08-02T21:01:22.942Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Tivoli Application Dependency Discovery Manager Problem Types: CWE-644 Description: IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 270270. Additional Analyst Notes: - CISA ADP Vulnrichm
scripting, cache poisoning or session hijacking. IBM X-Force ID: 270270. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7105139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270270
CVE ID: CVE-2023-47144 State: PUBLISHED Published: 2024-02-02T13:04:56.709Z Last Updated: 2024-08-02T21:01:22.911Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Tivoli Application Dependency Discovery Manager Problem Types: CWE-79 Description: IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.10 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 270271. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contain
thin a trusted session. IBM X-Force ID: 270271. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7105139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270271
CVE ID: CVE-2023-47145 State: PUBLISHED Published: 2024-01-07T18:58:06.166Z Last Updated: 2025-06-11T16:31:21.692Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Db2 Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270402 - https://s
https://www.ibm.com/support/pages/node/7105500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270402 - https://security.netapp.com/advisory/ntap-20240307-0003/
CVE ID: CVE-2023-47146 State: PUBLISHED Published: 2023-12-19T22:04:07.166Z Last Updated: 2024-08-02T21:01:22.831Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-200 Description: IBM Qradar SIEM 7.5 could allow a privileged user to obtain sensitive domain information due to data being misidentified. IBM X-Force ID: 270372. Additional Analyst Notes: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/7099297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270372
CVE ID: CVE-2023-47147 State: PUBLISHED Published: 2024-03-15T15:09:59.091Z Last Updated: 2024-08-02T21:01:22.807Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Secure Proxy Problem Types: CWE-73 Description: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow an attacker to overwrite a log message under specific conditions. IBM X-Force ID: 270598. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7142038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270598
CVE ID: CVE-2023-47148 State: PUBLISHED Published: 2024-02-02T12:51:55.566Z Last Updated: 2024-08-02T21:01:22.679Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Storage Protect Plus Server Problem Types: CWE-862 Description: IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7096482 - https://exchange.xfo
lnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7096482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270599
CVE ID: CVE-2023-47150 State: PUBLISHED Published: 2024-03-26T14:01:26.765Z Last Updated: 2024-08-05T16:16:46.601Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Common Cryptographic Architecture Problem Types: CWE-400 Description: IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 could allow a remote user to cause a denial of service due to incorrect data handling for certain types of AES operations. IBM X-Force ID: 270602. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7145168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270602
CVE ID: CVE-2023-47152 State: PUBLISHED Published: 2024-01-22T20:03:52.428Z Last Updated: 2025-05-30T14:22:05.789Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-209 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in stack trace under exceptional conditions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105605 - https://security.netapp.com/advisory/ntap-20240307-0001/
CVE ID: CVE-2023-47158 State: PUBLISHED Published: 2024-01-22T20:05:46.155Z Last Updated: 2025-05-30T14:21:58.388Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1 and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 270750. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
nt: References: - https://www.ibm.com/support/pages/node/7105496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270750 - https://security.netapp.com/advisory/ntap-20240307-0002/
CVE ID: CVE-2023-47159 State: PUBLISHED Published: 2025-01-27T16:04:51.207Z Last Updated: 2025-01-27T17:57:38.806Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Sterling File Gateway Problem Types: CWE-204 Description: IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7176083
CVE ID: CVE-2023-47160 State: PUBLISHED Published: 2025-02-19T16:20:09.058Z Last Updated: 2025-08-17T00:10:00.333Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: IBM Products: Cognos Controller, Controller Problem Types: CWE-611 Description: IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7183597
CVE ID: CVE-2023-47161 State: PUBLISHED Published: 2023-12-19T23:52:20.948Z Last Updated: 2024-08-02T21:01:22.687Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: UrbanCode Deploy Problem Types: CWE-20 Description: IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion. IBM X-Force ID: 270799. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7096552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270799
CVE ID: CVE-2023-47162 State: PUBLISHED Published: 2024-03-15T15:06:29.746Z Last Updated: 2024-08-02T21:01:22.681Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Secure Proxy Problem Types: CWE-79 Description: IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 270973. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7142038 - htt
es: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7142038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/270973
CVE ID: CVE-2023-47163 State: PUBLISHED Published: 2023-11-13T02:26:42.658Z Last Updated: 2025-01-08T21:35:11.153Z Vendors: Remarshal-project Products: Remarshal Problem Types: Uncontrolled Recursion Description: Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/remarshal-project/remarshal/releases/tag/v0.17.1 - https://github.com/remarshal-project/remarshal/commit/fd6ac799a02f533c3fc243b49cdd6d21aa7ee494 - https://jvn.jp/en/jp/JVN861563
/github.com/remarshal-project/remarshal/commit/fd6ac799a02f533c3fc243b49cdd6d21aa7ee494 - https://jvn.jp/en/jp/JVN86156389/
CVE ID: CVE-2023-47164 State: PUBLISHED Published: 2023-11-10T08:59:13.640Z Last Updated: 2024-09-03T17:39:01.910Z Vendors: DigitalDruid.Net Products: HOTELDRUID Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hoteldruid.com/ - https://www.hoteldruid.com/en/download.html - https://jvn.jp/en/jp/JVN99177549/
CVE ID: CVE-2023-47165 State: PUBLISHED Published: 2024-05-16T20:47:13.299Z Last Updated: 2024-09-03T18:15:10.060Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Data Center GPU Max Series 1100 and 1550 products Problem Types: denial of service, CWE-92 Description: Improper conditions check in the Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow an privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01041.html
CVE ID: CVE-2023-47166 State: PUBLISHED Published: 2024-05-01T15:31:02.072Z Last Updated: 2025-11-04T17:12:52.905Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-285 Description: A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A specially crafted network request can lead to arbitrary firmware update. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1852
CVE ID: CVE-2023-47167 State: PUBLISHED Published: 2024-02-06T16:20:14.536Z Last Updated: 2025-11-04T18:18:59.988Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Tp-Link Products: ER7206 Omada Gigabit VPN Router Problem Types: CWE-78 Description: A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
ger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1855
CVE ID: CVE-2023-47168 State: PUBLISHED Published: 2023-11-27T09:12:52.781Z Last Updated: 2024-12-02T19:32:41.338Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-601 Description: Mattermost fails to properly check a redirect URL parameter allowing for an open redirect was possible when the user clicked "Back to Mattermost" after providing a invalid custom url scheme in /oauth/{service}/mobile_login?redirect_to= Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-47169 State: PUBLISHED Published: 2024-05-16T20:47:43.178Z Last Updated: 2024-08-02T21:01:22.691Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) Media SDK software Problem Types: denial of service, CWE-92 Description: Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE ID: CVE-2023-47170 State: REJECTED Published: N/A Last Updated: 2024-02-05T04:13:54.193Z Description: No description available.
CVE ID: CVE-2023-47171 State: PUBLISHED Published: 2024-01-10T15:48:13.019Z Last Updated: 2025-11-04T18:19:01.413Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WWBN Products: AVideo Problem Types: CWE-73 Description: An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1869
CVE ID: CVE-2023-47172 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-02T21:01:22.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories/cve-2023-47172
CVE ID: CVE-2023-47174 State: PUBLISHED Published: 2023-10-31T00:00:00 Last Updated: 2024-09-05T18:01:25.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pivotal, a related issue to CVE-2016-1000027. Also, within the specific context of Thorn SFTP gateway, this leads to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.thorntech.com/docs/sftp-gateway-gcp-3.0/gcp-java-deserialization-rce/
CVE ID: CVE-2023-47175 State: PUBLISHED Published: 2023-11-20T04:47:17.899Z Last Updated: 2024-08-29T13:42:55.072Z Vendors: LuxSoft Products: LuxCal Web Calendar Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.luxsoft.eu/ - https://www.luxsoft.eu/?download - https://www.luxsoft.eu/lcforum/viewtopic.php?id=476
ces: - https://www.luxsoft.eu/ - https://www.luxsoft.eu/?download - https://www.luxsoft.eu/lcforum/viewtopic.php?id=476 - https://jvn.jp/en/jp/JVN15005948/