Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-23530 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-18T15:02:34.492Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213606 - https://support.apple.com/en-us/HT213605
CVE ID: CVE-2023-23531 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T16:21:20.815Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213606 - https://support.apple.com/en-us/HT213605
CVE ID: CVE-2023-23532 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T16:00:30.066Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: An app may be able to break out of its sandbox Description: This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6. An app may be able to break out of its sandbox. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213765
CVE ID: CVE-2023-23533 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:59:32.354Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677
CVE ID: CVE-2023-23534 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:58:15.800Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5. Processing a maliciously crafted image may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-23535 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:45:57.138Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.6, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.a
cess memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213759 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-23536 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:54:35.553Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS, tvOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - http
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213674 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-23537 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:53:51.071Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS Problem Types: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/H
ner: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-23538 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:42:03.498Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677
CVE ID: CVE-2023-23539 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T17:10:36.023Z Vendors: Apple Products: macOS Problem Types: Mounting a maliciously crafted Samba network share may lead to arbitrary code execution Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213605
CVE ID: CVE-2023-23540 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:39:35.799Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.4, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.ap
: References: - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675 - https://support.apple.com/en-us/HT213842
CVE ID: CVE-2023-23541 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:36:39.811Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s contacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-23542 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:34:36.926Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213677 - https://support.apple.com/en-us/HT213675
CVE ID: CVE-2023-23543 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:29:51.610Z Vendors: Apple Products: macOS, iOS and iPadOS, watchOS Problem Types: A sandboxed app may be able to determine which app is currently using the camera Description: The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - http
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/en-us/HT213676 - https://support.apple.com/en-us/HT213678 - https://support.apple.com/en-us/HT213673
CVE ID: CVE-2023-23545 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-31T13:49:05.424Z Vendors: T&D Corporation and ESPEC MIC CORP. Products: T&D Corporation and ESPEC MIC CORP. data logger products Problem Types: Missing authentication for critical function Description: Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may allow a remote unauthenticated attacker to alter the product settings without authentication. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3
data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tandd.com/news/detail.html?id=780 - https://www.monitoring.especmic.co.jp/post/VulnerabilityInRT-12N_RS-12N_RT-22BNandTEU-12N - https://jvn.jp/en/jp/JVN14778242/
CVE ID: CVE-2023-23546 State: PUBLISHED Published: 2023-07-06T14:53:30.850Z Last Updated: 2024-08-02T10:35:33.191Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Milesight Products: UR32L Problem Types: CWE-295 Description: A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-crafted man-in-the-middle attack can lead to increased privileges. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1705
CVE ID: CVE-2023-23547 State: PUBLISHED Published: 2023-07-06T14:53:35.141Z Last Updated: 2024-10-24T14:35:43.057Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Milesight Products: UR32L Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1695
CVE ID: CVE-2023-23548 State: PUBLISHED Published: 2023-08-01T09:42:58.428Z Last Updated: 2024-09-27T21:58:16.665Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-80 Description: Reflected XSS in business intelligence in Checkmk <2.2.0p8, <2.1.0p32, <2.0.0p38, <=1.6.0p30. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/15691
CVE ID: CVE-2023-23549 State: PUBLISHED Published: 2023-11-15T11:07:28.671Z Last Updated: 2024-08-28T20:25:01.313Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-1284 Description: Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/16219
CVE ID: CVE-2023-23550 State: PUBLISHED Published: 2023-07-06T14:53:35.622Z Last Updated: 2024-08-02T10:35:32.712Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-77 Description: An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1694
CVE ID: CVE-2023-23551 State: PUBLISHED Published: 2023-02-13T17:02:21.252Z Last Updated: 2025-01-16T21:57:22.829Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Control By Web Products: X-600M devices Problem Types: CWE-94 Description: Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01
CVE ID: CVE-2023-23552 State: PUBLISHED Published: 2023-02-01T17:56:47.576Z Last Updated: 2025-03-25T19:23:00.904Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-400 Description: On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP Advanced WAF or BIG-IP ASM security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - C
h have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K17542533
CVE ID: CVE-2023-23553 State: PUBLISHED Published: 2023-02-13T17:03:44.076Z Last Updated: 2025-01-16T21:57:15.152Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Control By Web Products: X-400 devices Problem Types: CWE-79 Description: Control By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-01
CVE ID: CVE-2023-23554 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-06T16:48:50.808Z Vendors: IVM Development Group Products: pg_ivm Problem Types: Uncontrolled search path element Description: Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's privilege. If this vulnerability is exploited, an unexpected function provided by an attacker may be executed with the privilege of the materialized view owner. Additional Analyst No
unction provided by an attacker may be executed with the privilege of the materialized view owner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sraoss/pg_ivm - https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1 - https://jvn.jp/en/jp/JVN19872280/
CVE ID: CVE-2023-23555 State: PUBLISHED Published: 2023-02-01T17:57:02.731Z Last Updated: 2025-03-26T15:59:59.546Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP, BIG-IP SPK Problem Types: CWE-665 Description: On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before 14.1.5.3, and BIG-IP SPK beginning in 1.5.0 to before 1.6.0, when FastL4 profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Note
e. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K24572686
CVE ID: CVE-2023-23556 State: PUBLISHED Published: 2023-05-18T21:16:43.874Z Last Updated: 2025-01-31T13:49:25.972Z Vendors: Facebook Products: Hermes Problem Types: CWE-787: Out-of-bounds Write Description: An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/adv
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2023-23556 - https://github.com/facebook/hermes/commit/a6dcafe6ded8e61658b40f5699878cd19a481f80
CVE ID: CVE-2023-23557 State: PUBLISHED Published: 2023-05-18T21:19:41.668Z Last Updated: 2025-01-21T21:20:13.134Z Vendors: Facebook Products: Hermes Problem Types: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') Description: An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a malicious attacker to execute arbitrary code via type confusion. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
ations are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.facebook.com/security/advisories/cve-2023-23557 - https://github.com/facebook/hermes/commit/a00d237346894c6067a594983be6634f4168c9ad
CVE ID: CVE-2023-23558 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T15:34:43.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive information from that file, or modify the information in that file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MisterTea/EternalTerminal - https://bugzilla.suse.com/show_bug.cgi?id=1207126 - http://www.openwall.com/lists/os
hub.com/MisterTea/EternalTerminal - https://bugzilla.suse.com/show_bug.cgi?id=1207126 - http://www.openwall.com/lists/oss-security/2023/02/16/1
CVE ID: CVE-2023-23559 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-05-05T16:05:27.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchwork.kernel.org/project/linux-wireless/patch/20230110173007.57110-1-szymon.heidrich%40gmail.com/ - https://security.netapp.com/advisory/ntap-20230302-0003/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg0000
ists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b870e73a56c4cccbec33224233eaf295839f228c
CVE ID: CVE-2023-23560 State: PUBLISHED Published: 2023-01-23T00:00:00.000Z Last Updated: 2025-04-02T15:30:59.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lexmark.com/alerts/ - https://publications.lexmark.com/publications/security-alerts/CVE-2023-23560.pdf
CVE ID: CVE-2023-23561 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T16:49:59.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2023-001/
CVE ID: CVE-2023-23562 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T16:28:06.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2023-002/