Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-52307 State: PUBLISHED Published: 2024-01-03T08:14:03.111Z Last Updated: 2025-06-16T18:14:18.776Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-120 Description: Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-016.md
CVE ID: CVE-2023-52308 State: PUBLISHED Published: 2024-01-03T08:14:13.460Z Last Updated: 2025-05-09T19:36:12.600Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-369 Description: FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-017.md
CVE ID: CVE-2023-52309 State: PUBLISHED Published: 2024-01-03T08:14:27.142Z Last Updated: 2024-09-06T17:24:27.392Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-120 Description: Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-018.md
CVE ID: CVE-2023-52310 State: PUBLISHED Published: 2024-01-03T08:14:55.842Z Last Updated: 2025-04-17T18:25:07.284Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-78 Description: PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-019.md
CVE ID: CVE-2023-52311 State: PUBLISHED Published: 2024-01-03T08:15:04.927Z Last Updated: 2025-06-17T20:29:07.918Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-78 Description: PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-020.md
CVE ID: CVE-2023-52312 State: PUBLISHED Published: 2024-01-03T08:15:13.401Z Last Updated: 2025-06-03T14:43:44.550Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-476 Description: Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-021.md
CVE ID: CVE-2023-52313 State: PUBLISHED Published: 2024-01-03T08:15:20.819Z Last Updated: 2025-06-17T20:29:08.057Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-369 Description: FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-022.md
CVE ID: CVE-2023-52314 State: PUBLISHED Published: 2024-01-03T08:15:52.057Z Last Updated: 2024-11-14T18:25:24.577Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-78 Description: PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-023.md
CVE ID: CVE-2023-52315 State: REJECTED Published: N/A Last Updated: 2025-03-17T14:29:50.219Z Description: No description available.
CVE ID: CVE-2023-52316 State: REJECTED Published: N/A Last Updated: 2025-03-17T14:37:18.262Z Description: No description available.
CVE ID: CVE-2023-52317 State: REJECTED Published: N/A Last Updated: 2025-03-17T14:37:47.993Z Description: No description available.
CVE ID: CVE-2023-52318 State: REJECTED Published: N/A Last Updated: 2025-03-17T14:37:00.179Z Description: No description available.
CVE ID: CVE-2023-52319 State: REJECTED Published: N/A Last Updated: 2025-03-17T14:37:19.639Z Description: No description available.
CVE ID: CVE-2023-52320 State: REJECTED Published: N/A Last Updated: 2025-03-17T14:37:44.485Z Description: No description available.
CVE ID: CVE-2023-52321 State: REJECTED Published: N/A Last Updated: 2025-03-17T14:43:08.005Z Description: No description available.
CVE ID: CVE-2023-52322 State: PUBLISHED Published: 2024-01-04T00:00:00.000Z Last Updated: 2025-06-03T14:42:57.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not restricted to safe characters such as alphanumerics. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.spip.net/spip/spip/commit/e90f5344b8c82711053053e778d38a35e42b7bcb - https://blog.spip.net/Mise-a-jour-de-maintenance-et-securite-sortie-de-SPIP-4-2-7-SPIP-4-1-13.html?lang=fr - https://lists.debian.org/debian-lts-announce/2024/03/msg00014.html
CVE ID: CVE-2023-52323 State: PUBLISHED Published: 2024-01-05T00:00:00.000Z Last Updated: 2025-06-03T14:41:53.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst - https://pypi.org/project/pycryptodomex/#history
CVE ID: CVE-2023-52324 State: PUBLISHED Published: 2024-01-23T20:41:10.369Z Last Updated: 2025-05-30T14:18:27.074Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any valid set of credentials. Also, this vulnerability could be potentially used in combination with another vulnerability to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
ith another vulnerability to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-077/
CVE ID: CVE-2023-52325 State: PUBLISHED Published: 2024-01-23T20:41:25.754Z Last Updated: 2025-06-11T16:54:38.294Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker must first obtain a valid set of credentials on target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.tren
rability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-024/
CVE ID: CVE-2023-52326 State: PUBLISHED Published: 2024-01-23T20:41:39.424Z Last Updated: 2025-06-20T18:57:06.709Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52327. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-023/
CVE ID: CVE-2023-52327 State: PUBLISHED Published: 2024-01-23T20:41:50.167Z Last Updated: 2025-06-10T16:03:07.531Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52328. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-022/
CVE ID: CVE-2023-52328 State: PUBLISHED Published: 2024-01-23T20:42:01.780Z Last Updated: 2025-05-30T14:18:21.016Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52329. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-021/
CVE ID: CVE-2023-52329 State: PUBLISHED Published: 2024-01-23T20:42:13.269Z Last Updated: 2025-06-17T15:15:17.060Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. Please note this vulnerability is similar, but not identical to CVE-2023-52326. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-074/
CVE ID: CVE-2023-52330 State: PUBLISHED Published: 2024-01-23T20:42:34.678Z Last Updated: 2025-06-20T18:57:57.906Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code on affected installations of Trend Micro Apex Central. Please note: user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiat
hment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-051/
CVE ID: CVE-2023-52331 State: PUBLISHED Published: 2024-01-23T20:42:46.349Z Last Updated: 2025-06-20T18:59:02.805Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayiniti
ichment: References: - https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-052/
CVE ID: CVE-2023-52332 State: PUBLISHED Published: 2024-11-22T20:05:12.032Z Last Updated: 2024-11-25T16:40:16.446Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Allegra Products: Allegra Problem Types: CWE-22 Description: Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the serveMathJaxLibraries method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations
ethod. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-22532. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-100/ - https://www.trackplus.com/en/service/release-notes-reader/7-5-1-release-notes-2.html
CVE ID: CVE-2023-52333 State: PUBLISHED Published: 2024-11-22T20:05:12.977Z Last Updated: 2024-11-25T16:39:04.735Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Allegra Products: Allegra Problem Types: CWE-22 Description: Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The specific flaw exists within the saveFile method. The issue results from the
user with a sufficient privilege level. The specific flaw exists within the saveFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of LOCAL SERVICE. Was ZDI-CAN-22548. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-104/ - https://www.trackplus.com/en/service/release-notes-reader/7-5-1-release-notes-2.html
CVE ID: CVE-2023-52334 State: PUBLISHED Published: 2024-11-22T20:05:14.057Z Last Updated: 2024-11-25T16:34:24.154Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Allegra Products: Allegra Problem Types: CWE-22 Description: Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The specific flaw exists within the downloadAttachmentGlob
n be used to create a user with a sufficient privilege level. The specific flaw exists within the downloadAttachmentGlobal action. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-22507. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-112/ - https://www.trackplus.com/en/service/release-notes-reader/7-5-1-release-notes-2.html
CVE ID: CVE-2023-52335 State: PUBLISHED Published: 2024-11-22T20:05:15.175Z Last Updated: 2024-12-05T19:32:34.015Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Advantech Products: iView Problem Types: CWE-89 Description: Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ConfigurationServlet servlet, which listens on TCP port 8080 by default. When parsing the column_value element, the process does not p
ervlet servlet, which listens on TCP port 8080 by default. When parsing the column_value element, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-17863. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-610/ - https://www.advantech.com/zh-tw/support/details/firmware?id=1-HIPU-183
CVE ID: CVE-2023-52337 State: PUBLISHED Published: 2024-01-23T20:42:58.280Z Last Updated: 2025-06-20T19:00:09.613Z Vendors: Trend Micro, Inc. Products: Trend Micro Deep Security Agent Description: An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/0
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000296337?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-075/
CVE ID: CVE-2023-52338 State: PUBLISHED Published: 2024-01-23T20:43:13.069Z Last Updated: 2024-08-02T22:55:41.363Z Vendors: Trend Micro, Inc. Products: Trend Micro Deep Security Agent Description: A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/0002963
s: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000296337?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-24-076/
CVE ID: CVE-2023-52339 State: PUBLISHED Published: 2024-01-12T00:00:00.000Z Last Updated: 2025-11-04T22:05:33.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Matroska-Org/libebml/issues/147 - https://github.com/Matroska-Org/libebml/pull/148 - https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md - https://github.com/Matroska-Org/libebml/compare/release-1.4.4...release-1.4.5 - https://lists.fedoraproject.org/archives/list/package-an
om/Matroska-Org/libebml/compare/release-1.4.4...release-1.4.5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJUXVOIRWPP7OFYUKQZDNJTSLWCPIZBH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNANFT4P6KL4WDQ3TV6QQ44NSC7WKLAB/
CVE ID: CVE-2023-52340 State: PUBLISHED Published: 2024-07-05T00:00:00.000Z Last Updated: 2025-11-04T17:14:06.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily, e.g., leading to a denial of service (network is unreachable errors) when IPv6 packets are sent in a loop via a raw socket. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=af6d10345ca76670c1b7c37799f0d5576ccef277 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3
CVE ID: CVE-2023-52341 State: PUBLISHED Published: 2024-04-08T02:21:14.660Z Last Updated: 2024-08-02T22:55:41.648Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313
CVE ID: CVE-2023-52342 State: PUBLISHED Published: 2024-04-08T02:21:14.949Z Last Updated: 2025-03-13T17:53:54.605Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313
CVE ID: CVE-2023-52343 State: PUBLISHED Published: 2024-04-08T02:21:15.217Z Last Updated: 2024-11-04T16:19:04.655Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote information disclosure no additional execution privileges needed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313
CVE ID: CVE-2023-52344 State: PUBLISHED Published: 2024-04-08T02:21:15.497Z Last Updated: 2024-11-08T21:12:45.190Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1777143682512781313