Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-5969 State: PUBLISHED Published: 2023-11-06T15:48:23.590Z Last Updated: 2024-09-17T13:07:28.847Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: Mattermost fails to properly sanitize the request to /api/v4/redirect_location allowing an attacker, sending a specially crafted request to /api/v4/redirect_location, to fill up the memory due to caching large items. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-5970 State: PUBLISHED Published: 2023-12-05T20:20:01.534Z Last Updated: 2024-08-02T08:14:25.142Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-287 Description: Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018
CVE ID: CVE-2023-5971 State: PUBLISHED Published: 2024-05-09T06:00:02.319Z Last Updated: 2024-08-12T19:37:42.596Z Vendors: Unknown Products: Save as PDF Plugin by Pdfcrowd Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Save as PDF Plugin by Pdfcrowd WordPress plugin before 3.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/03a201d2-535e-4574-afac-791dcf23e6e1/
CVE ID: CVE-2023-5972 State: PUBLISHED Published: 2023-11-23T17:21:20.589Z Last Updated: 2024-08-02T08:14:25.196Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-476 Description: A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/C
on the system. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-5972 - https://bugzilla.redhat.com/show_bug.cgi?id=2248189 - https://github.com/torvalds/linux/commit/505ce0630ad5d31185695f8a29dde8d29f28faa7 - https://github.com/torvalds/linux/commit/52177bbf19e6e9398375a148d2e13ed492b40b80
CVE ID: CVE-2023-5973 State: PUBLISHED Published: 2024-04-05T02:33:46.116Z Last Updated: 2025-02-13T17:25:59.081Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Brocade Products: Fabric OS Problem Types: CWE-346 Description: Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23214 - https:/
CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/23214 - https://security.netapp.com/advisory/ntap-20240628-0005/
CVE ID: CVE-2023-5974 State: PUBLISHED Published: 2023-11-27T16:22:02.863Z Last Updated: 2024-11-21T19:18:37.335Z Vendors: Unknown Products: wpb-show-core Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c0136057-f420-4fe7-a147-ecbec7e7a9b5
CVE ID: CVE-2023-5975 State: PUBLISHED Published: 2023-11-07T11:01:44.989Z Last Updated: 2025-02-05T18:50:59.625Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: spikefinned Products: ImageMapper Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The ImageMapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6. This is due to missing or incorrect nonce validation on multiple functions. This makes it possible for unauthenticated attackers to update the plugin settings via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.
via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a128018b-f19b-4b18-a53c-cf1310d3d0e7?source=cve - https://plugins.trac.wordpress.org/browser/imagemapper/tags/1.2.6/imagemapper.php#L904 - https://plugins.trac.wordpress.org/browser/imagemapper/tags/1.2.6/imagemapper.php#L916 - https://plugins.trac.wordpress.org/browser/imagemapper/tags/1.2.6/imagemapper.php#L939 - https://plugins.trac.wordpress.org/browser/imagemapper/tags/1.2.6/imagemapper.php#L958
CVE ID: CVE-2023-5976 State: PUBLISHED Published: 2023-11-07T00:00:32.825Z Last Updated: 2024-09-04T19:06:15.150Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-284 Description: Improper Access Control in GitHub repository microweber/microweber prior to 2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/2004e4a9-c5f6-406a-89b0-571f808882fa - https://github.com/microweber/microweber/commit/bc537ebe235bf9924c6557a46114f5f9557cd16a
CVE ID: CVE-2023-5977 State: REJECTED Published: N/A Last Updated: 2023-11-13T23:42:23.793Z Description: No description available.
CVE ID: CVE-2023-5978 State: PUBLISHED Published: 2023-11-08T08:52:46.920Z Last Updated: 2025-02-13T17:25:59.631Z Vendors: FreeBSD Products: FreeBSD Problem Types: CWE-269 Description: In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly subsets of the active constraints. When only a list of resolvable domain names was specified without setting any other limitations, an application could submit a new list of domains including include entries not previously listed. This could permit the application to resolve domain names that were previously restricted. Additional Analy
usly listed. This could permit the application to resolve domain names that were previously restricted. Additional Analyst Notes: - CVE Program Container: References: - https://security.freebsd.org/advisories/FreeBSD-SA-23:16.cap_net.asc - https://security.netapp.com/advisory/ntap-20231214-0003/
CVE ID: CVE-2023-5979 State: PUBLISHED Published: 2023-12-04T21:27:37.654Z Last Updated: 2024-08-02T08:14:25.132Z Vendors: Unknown Products: eCommerce Product Catalog Plugin for WordPress Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/936934c3-5bfe-416e-b6aa-47bed4db05c4
CVE ID: CVE-2023-5980 State: PUBLISHED Published: 2023-12-26T18:33:13.444Z Last Updated: 2025-04-17T20:35:38.347Z Vendors: Unknown Products: BSK Forms Blacklist Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b621261b-ae18-4853-9ace-7b773810529a
CVE ID: CVE-2023-5981 State: PUBLISHED Published: 2023-11-28T11:49:50.138Z Last Updated: 2025-11-06T21:44:57.204Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, RHODF-4.15-RHEL-9, RHOL-5.8-RHEL-9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-203 Description: A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphert
ound that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:0155 - https://access.redhat.com/errata/RHSA-2024:0319 - https://access.redhat.com/errata/RHSA-2024:0399 - https://access.redhat.com/errata/RHSA-2024:0451 - https://access.redhat.com/errata/RHSA-2024:0533 - https://access.redhat.com/errata/RHSA-2024:1383 - https://access.redhat.com/errata/RHSA-2024:2094 - https://access.redhat.com/security/cve/CVE-2023-5981 - https://bugzilla.redhat.com/show_bug.cgi?id=2248445 - https://gnutls.or
//access.redhat.com/security/cve/CVE-2023-5981 - https://bugzilla.redhat.com/show_bug.cgi?id=2248445 - https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23
CVE ID: CVE-2023-5982 State: PUBLISHED Published: 2023-11-07T20:31:56.550Z Last Updated: 2025-02-05T18:48:39.787Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: davidanderson Products: UpdraftPlus: WordPress Backup & Migration Plugin Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23.10. This is due to a lack of nonce validation and insufficient validation of the instance_id on the 'updraftmethod-googledrive-auth' action used to update Google Drive remote storage location. This ma
instance_id on the 'updraftmethod-googledrive-auth' action used to update Google Drive remote storage location. This makes it possible for unauthenticated attackers to modify the Google Drive location that backups are sent to via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This can make it possible for attackers to receive backups for a site which may contain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e1be11c5-0a44-4816-b6bf-d330cb51dbf3?source=cve - https://plugins.trac.wordpress.org/changeset/
intel/vulnerabilities/id/e1be11c5-0a44-4816-b6bf-d330cb51dbf3?source=cve - https://plugins.trac.wordpress.org/changeset/2989669/updraftplus/tags/1.23.11/class-updraftplus.php
CVE ID: CVE-2023-5983 State: PUBLISHED Published: 2023-11-22T11:54:04.318Z Last Updated: 2024-10-15T18:31:29.832Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Botanik Software Products: Pharmacy Automation Problem Types: CWE-359 Description: Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation allows Retrieve Embedded Sensitive Data.This issue affects Pharmacy Automation: before 2.1.133.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0652
CVE ID: CVE-2023-5984 State: PUBLISHED Published: 2023-11-15T03:30:09.897Z Last Updated: 2025-09-30T14:33:42.586Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: ION8650, ION8800 Problem Types: CWE-494 Description: A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+a
nrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf
CVE ID: CVE-2023-5985 State: PUBLISHED Published: 2023-11-15T03:35:17.617Z Last Updated: 2024-08-29T15:18:46.931Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Schneider Electric Products: ION8650, ION8800 Problem Types: CWE-79 Description: A CWE-79 Improper Neutralization of Input During Web Page Generation vulnerability exists that could cause compromise of a user’s browser when an attacker with admin privileges has modified system values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD
download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-01.pdf
CVE ID: CVE-2023-5986 State: PUBLISHED Published: 2023-11-15T03:47:17.684Z Last Updated: 2024-12-02T21:11:40.870Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: Schneider Electric Products: EcoStruxure Power Monitoring Expert (PME), EcoStruxure Power Operation (EPO) – Advanced Reporting and Dashboards Module, EcoStruxure Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module Problem Types: CWE-601 Description: A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability leading to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application
ng to a cross site scripting attack. By providing a URL-encoded input attackers can cause the software’s web application to redirect to the chosen domain after a successful login is performed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-02.pdf
CVE ID: CVE-2023-5987 State: PUBLISHED Published: 2023-11-15T03:48:50.993Z Last Updated: 2024-08-02T08:14:25.122Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Schneider Electric Products: EcoStruxure Power Monitoring Expert (PME), EcoStruxure Power Operation (EPO) – Advanced Reporting and Dashboards Module, EcoStruxure Power SCADA Operation (PSO) - Advanced Reporting and Dashboards Module Problem Types: CWE-79 Description: A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbit
cause a vulnerability leading to a cross site scripting condition where attackers can have a victim’s browser run arbitrary JavaScript when they visit a page containing the injected payload. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-318-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-318-02.pdf
CVE ID: CVE-2023-5988 State: PUBLISHED Published: 2023-12-21T09:40:25.554Z Last Updated: 2024-08-27T15:04:24.024Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Uyumsoft Information System and Technologies Products: LioXERP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS.This issue affects LioXERP: before v.146. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0721
CVE ID: CVE-2023-5989 State: PUBLISHED Published: 2023-12-21T09:45:37.933Z Last Updated: 2025-09-12T06:32:53.441Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Uyumsoft Information System and Technologies Products: LioXERP Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0721
CVE ID: CVE-2023-5990 State: PUBLISHED Published: 2023-12-04T21:29:10.777Z Last Updated: 2024-08-02T08:14:25.132Z Vendors: Unknown Products: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2 does not have CSRF checks on some of its form actions such as deletion and duplication, which could allow attackers to make logged in admin perform such actions via CSRF attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0a615ce3-93da-459d-a33f-a
itional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0a615ce3-93da-459d-a33f-a2a6e74a2f94
CVE ID: CVE-2023-5991 State: PUBLISHED Published: 2023-12-26T18:33:14.275Z Last Updated: 2024-08-02T08:14:25.157Z Vendors: Unknown Products: Hotel Booking Lite Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-352 Cross-Site Request Forgery (CSRF) Description: The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as does not have proper CSRF and authorisation checks, allowing unauthenticated users to download and delete arbitrary files on the server Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e9d35e36-1e60-4483-b8b3-5cbf08f
l Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e9d35e36-1e60-4483-b8b3-5cbf08fcd49e
CVE ID: CVE-2023-5992 State: PUBLISHED Published: 2024-01-31T14:05:07.630Z Last Updated: 2025-11-06T21:45:02.698Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7 Problem Types: CWE-203 Description: A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the potential leak of private data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:0966 - https://access.redhat.com/errata/RHSA-2024:0
Container: References: - https://access.redhat.com/errata/RHSA-2024:0966 - https://access.redhat.com/errata/RHSA-2024:0967 - https://access.redhat.com/security/cve/CVE-2023-5992 - https://bugzilla.redhat.com/show_bug.cgi?id=2248685 - https://github.com/OpenSC/OpenSC/wiki/CVE-2023-5992 - https://www.usenix.org/system/files/usenixsecurity24-shagam.pdf
CVE ID: CVE-2023-5993 State: PUBLISHED Published: 2024-02-27T10:42:08.287Z Last Updated: 2024-08-08T19:28:36.205Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Thales Products: SafeNet Authentication Client Problem Types: CWE-269 Description: A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportportal.thalesgroup.com
CVE ID: CVE-2023-5995 State: PUBLISHED Published: 2023-12-01T07:01:28.253Z Last Updated: 2025-11-20T04:11:03.258Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the policy bot to gain access to internal projects. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/425361 - https://hackerone.com/reports/2138880
CVE ID: CVE-2023-5996 State: PUBLISHED Published: 2023-11-08T19:18:30.927Z Last Updated: 2025-02-13T17:26:00.179Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop.html - https://crbug.com/1497859 - https://www.debian.org/security/2023/dsa-5551 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/me
n.org/security/2023/dsa-5551 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5997 State: PUBLISHED Published: 2023-11-15T17:19:43.599Z Last Updated: 2025-02-13T17:26:00.750Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_14.html - https://crbug.com/1497997 - https://www.debian.org/security/2023/dsa-5556 - https://lists.fedoraproject.org/archives/list/packa
/crbug.com/1497997 - https://www.debian.org/security/2023/dsa-5556 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWHRLW3GDNFBFSBHDD4QOPUPX7ORTUEC/ - https://security.gentoo.org/glsa/202311-11 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JHUI5HW7QXT3U74MJMTLUMF5REDO5HD5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MN3JQGEC4EFQP3WTI33YBD3CLC3I7P4X/ - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34