Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-2805 State: PUBLISHED Published: 2023-06-19T10:52:54.332Z Last Updated: 2024-12-09T21:17:44.825Z Vendors: Unknown Products: SupportCandy Problem Types: CWE-89 SQL Injection Description: The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the agents[] parameter in the set_add_agent_leaves AJAX function before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/bdb75c8c-87e2-4358-ad3b-f4236e9a43c0
CVE ID: CVE-2023-2806 State: PUBLISHED Published: 2023-05-19T08:31:02.728Z Last Updated: 2024-11-22T19:48:00.155Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Weaver Products: e-cology Problem Types: CWE-611 Description: A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this vulnerability is VDB-229411. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
ly about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.229411 - https://vuldb.com/?ctiid.229411 - https://github.com/Strangenees/e-cology/blob/main/main.md
CVE ID: CVE-2023-2807 State: PUBLISHED Published: 2023-06-13T11:10:59.966Z Last Updated: 2025-01-03T15:22:20.936Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-290 Description: Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabiliti
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-2808 State: PUBLISHED Published: 2023-05-29T09:07:34.768Z Last Updated: 2024-12-06T23:04:02.110Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-20 Description: Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates/
CVE ID: CVE-2023-2809 State: PUBLISHED Published: 2023-10-04T10:49:56.429Z Last Updated: 2024-08-02T06:33:05.522Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Sage Products: Sage 200 Spain Problem Types: CWE-312 Description: Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obtain remote execution of MS SQL commands and escalate privileges on Windows systems because the credentials are stored in plaintext. Additional Analyst Notes: - CVE Program Container
es on Windows systems because the credentials are stored in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/use-cleartext-credentials-sage-200
CVE ID: CVE-2023-2811 State: PUBLISHED Published: 2023-06-19T10:52:41.241Z Last Updated: 2024-12-11T16:37:52.886Z Vendors: Unknown Products: AI ChatBot Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/82a81721-0435-45a6-bd5b-dc90186cf803
CVE ID: CVE-2023-2812 State: PUBLISHED Published: 2023-06-19T10:52:55.173Z Last Updated: 2024-12-09T21:13:34.711Z Vendors: Unknown Products: Ultimate Dashboard Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Ultimate Dashboard WordPress plugin before 3.7.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7de4c313-359e-4450-85f5-d29f3c2f046a
CVE ID: CVE-2023-2813 State: PUBLISHED Published: 2023-09-04T11:27:00.276Z Last Updated: 2024-08-02T06:33:05.593Z Vendors: Unknown Products: Aapna, Anand, Anfaust, Arendelle, Atlast Business, Bazaar Lite, Brain Power, BunnyPressLite, Cafe Bistro, College, Connections Reloaded, Counterpoint, Digitally, Directory, Drop, Everse, Fashionable Store, Fullbase, Ilex, Js O3 Lite, Js Paper, Kata, Kata App, Kata Business, Looki Lite, moseter, Nokke, Nothing Personal, Offset Writing, Opor Ayam, Pinzolo, Plato, Polka Dots, Purity Of Soul, Restaurant PT, Saul, Sean Lite, Tantyyellow, TIJAJI, Tiki Time, Tuaug4, Tydskrif, UltraLight, Venice Lite, Viala, viburno, Wedding Bride, Wlow Problem Types: CWE-79 Cr
JAJI, Tiki Time, Tuaug4, Tydskrif, UltraLight, Venice Lite, Viala, viburno, Wedding Bride, Wlow Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme th
nnections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Perso
e WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme thr
me through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5
CVE ID: CVE-2023-2814 State: PUBLISHED Published: 2023-05-19T16:00:03.907Z Last Updated: 2024-08-02T06:33:05.558Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Class Scheduling System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/save_teacher.php of the component POST Parameter Handler. The manipulation of the argument Academic_Rank leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-
ack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229428. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229428 - https://vuldb.com/?ctiid.229428 - https://github.com/jiy2020/bugReport/blob/main/XSS.md
CVE ID: CVE-2023-2815 State: PUBLISHED Published: 2023-05-19T16:31:03.368Z Last Updated: 2024-08-02T06:33:05.795Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Jewelry Store Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229429 was assigned to this vulnerability. A
xploit has been disclosed to the public and may be used. The identifier VDB-229429 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229429 - https://vuldb.com/?ctiid.229429 - https://github.com/raozhir/CVERequest/blob/main/SQL.md
CVE ID: CVE-2023-2816 State: PUBLISHED Published: 2023-06-02T22:43:34.553Z Last Updated: 2024-10-07T20:12:01.627Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: HashiCorp Products: Consul, Consul Enterprise Problem Types: CWE-266 Description: Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.hashi
proxies. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2023-16-consul-envoy-extension-downstream-proxy-configuration-by-upstream-service-owner/54525
CVE ID: CVE-2023-2817 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T15:48:32.510Z Vendors: n/a Products: Craft CMS Problem Types: Stored Cross-Site Scripting Description: A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions <= 4.4.11. HTML, including script tags can be injected into field names which, when the field is added to a category or section, will trigger when users visit the Categories or Entries pages respectively. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-20%2C - https://github.com/craftcms/cms/commit/7655e1009ba6cdbf
es: - https://www.tenable.com/security/research/tra-2023-20%2C - https://github.com/craftcms/cms/commit/7655e1009ba6cdbfb230e6bb138b775b69fc7bcb
CVE ID: CVE-2023-2818 State: PUBLISHED Published: 2023-06-27T14:29:49.258Z Last Updated: 2024-11-07T17:06:01.258Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Proofpoint Products: Insider Threat Management Problem Types: CWE-281 Description: An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions prior to 7.14.3 are affected. Agents for MacOS and Linux and Cloud are unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-005
CVE ID: CVE-2023-2819 State: PUBLISHED Published: 2023-06-14T21:14:38.212Z Last Updated: 2024-12-30T14:55:42.337Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Proofpoint Products: Threat Response Auto Pull Problem Types: CWE-79 Description: A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (PTR/TRAP) could allow an authenticated administrator on an adjacent network to replace the image file with an arbitrary MIME type. This could result in arbitrary javascript code execution in an admin context. All versions prior to 5.10.0 are affected. Additional Analyst Notes: - CVE Program Container:
ution in an admin context. All versions prior to 5.10.0 are affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0002
CVE ID: CVE-2023-2820 State: PUBLISHED Published: 2023-06-14T21:26:31.248Z Last Updated: 2024-12-27T16:53:34.487Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Proofpoint Products: Threat Response Auto Pull Problem Types: CWE-200 Description: An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker on an adjacent network to obtain credentials to integrated services via a man-in-the-middle position or cryptanalysis of the session traffic. An attacker could use these credentials to impersonate PTR/TRAP to these services. All versions prior to 5.10.0 are affe
An attacker could use these credentials to impersonate PTR/TRAP to these services. All versions prior to 5.10.0 are affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/security/security-advisories/pfpt-sa-2023-0003
CVE ID: CVE-2023-2822 State: PUBLISHED Published: 2023-05-20T07:00:04.836Z Last Updated: 2025-02-12T16:33:40.655Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Ellucian Products: Ethos Identity Problem Types: CWE-79 Description: A vulnerability was found in Ellucian Ethos Identity up to 5.10.5. It has been classified as problematic. Affected is an unknown function of the file /cas/logout. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.10.6 is able to address this issue. It is recommended to upgrade the affected component. The ide
Upgrading to version 5.10.6 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-229596. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.229596 - https://vuldb.com/?ctiid.229596 - https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb - https://medium.com/@cyberninja717/685bb1675dfb
CVE ID: CVE-2023-2823 State: PUBLISHED Published: 2023-05-20T07:31:04.549Z Last Updated: 2024-08-02T06:33:05.577Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Class Scheduling System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Class Scheduling System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_subject.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229597 was assigned t
aunched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229597 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229597 - https://vuldb.com/?ctiid.229597 - https://github.com/zhulielie/CVEReport/blob/main/SQL.md
CVE ID: CVE-2023-2824 State: PUBLISHED Published: 2023-05-20T08:00:05.761Z Last Updated: 2024-08-02T06:33:05.797Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Dental Clinic Appointment Reservation System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/service.php of the component POST Parameter Handler. The manipulation of the argument service leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used
cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-229598 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.229598 - https://vuldb.com/?ctiid.229598 - https://github.com/daxian2022/CVE/blob/main/XSS.md
CVE ID: CVE-2023-2825 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T15:45:18.054Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper limitation of a pathname to a restricted directory ('path traversal') in GitLab Description: An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
at least five groups. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/412371 - https://hackerone.com/reports/1994725 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2825.json
CVE ID: CVE-2023-2826 State: PUBLISHED Published: 2023-05-21T07:31:03.746Z Last Updated: 2025-02-12T16:44:10.079Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Class Scheduling System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_teacher_result.php of the component POST Parameter Handler. The manipulation of the argument teacher leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-
ted remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229612. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.229612 - https://vuldb.com/?ctiid.229612 - https://github.com/joicygiore/ApplyForCVE/blob/main/XSS.md
CVE ID: CVE-2023-2827 State: PUBLISHED Published: 2023-06-13T02:36:18.158Z Last Updated: 2025-01-03T02:07:52.209Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: SAP_SE Products: SAP Plant Connectivity Problem Types: CWE-306 Description: SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of the JSON Web Token (JWT) in the HTTP request sent from SAP Digital Manufacturing. Therefore, unauthorized callers from the internal network could send service requests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digi
equests to PCo or the Production Connector, which could have an impact on the integrity of the integration with SAP Digital Manufacturing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3301942 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-2828 State: PUBLISHED Published: 2023-06-21T16:26:07.096Z Last Updated: 2025-02-13T16:48:38.124Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Description: Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to re
ble on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit. It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1. Additional Analyst Note
.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kb.isc.org/docs/cve-2023-2828 - http://www.openwall.com/lists/oss-security/2023/06/21/6 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2/ - https://www.debian.org/security/2023/dsa-5439 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEFCEVCTYEMKTWA7V7EYPI5YQQ4JWDLI/ - https://security.netapp.com/advisory/ntap-20230703-0010/ - https://lists.debian.org/debian-lts-announce/2
I5YQQ4JWDLI/ - https://security.netapp.com/advisory/ntap-20230703-0010/ - https://lists.debian.org/debian-lts-announce/2023/07/msg00021.html