Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-48350 State: PUBLISHED Published: 2024-01-18T02:44:52.068Z Last Updated: 2025-06-20T18:04:57.878Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48351 State: PUBLISHED Published: 2024-01-18T02:44:52.310Z Last Updated: 2025-06-20T18:05:39.693Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48352 State: PUBLISHED Published: 2024-01-18T02:44:52.558Z Last Updated: 2025-06-20T18:06:20.132Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In phasecheckserver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48353 State: PUBLISHED Published: 2024-01-18T02:44:52.799Z Last Updated: 2025-06-20T18:08:20.629Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48354 State: PUBLISHED Published: 2024-01-18T02:44:53.084Z Last Updated: 2025-06-20T18:09:11.813Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In telephone service, there is a possible improper input validation. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48355 State: PUBLISHED Published: 2024-01-18T02:44:53.324Z Last Updated: 2025-06-20T18:09:53.924Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48356 State: PUBLISHED Published: 2024-01-18T02:44:53.563Z Last Updated: 2025-06-20T18:10:34.797Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48357 State: PUBLISHED Published: 2024-01-18T02:44:53.807Z Last Updated: 2025-06-20T18:11:19.541Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In vsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48358 State: PUBLISHED Published: 2024-01-18T02:44:54.074Z Last Updated: 2025-06-20T18:11:58.847Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In drm driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48359 State: PUBLISHED Published: 2024-01-18T02:44:54.312Z Last Updated: 2025-06-20T18:12:40.890Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In autotest driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545
CVE ID: CVE-2023-48360 State: PUBLISHED Published: 2024-01-02T07:24:11.968Z Last Updated: 2025-06-17T20:29:05.789Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-416 Description: in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-01.md
CVE ID: CVE-2023-48361 State: PUBLISHED Published: 2024-08-14T13:45:41.346Z Last Updated: 2025-11-03T21:50:06.940Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) CSME Problem Types: information disclosure, CWE-665 Description: Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html
CVE ID: CVE-2023-48362 State: PUBLISHED Published: 2024-07-24T07:45:43.686Z Last Updated: 2025-02-13T17:18:17.319Z Vendors: Apache Software Foundation Products: Apache Drill Problem Types: CWE-611 Description: XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/9tt0q4bdjwgw0dz0l9knqxjnpb5y6zsl - http://www.openwall.com/lists/oss-security/2024/07/24/3
CVE ID: CVE-2023-48363 State: PUBLISHED Published: 2024-02-13T08:59:55.432Z Last Updated: 2024-09-10T09:36:22.958Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: OpenPCS 7 V9.1, SIMATIC BATCH V9.1, SIMATIC PCS 7 V9.1, SIMATIC Route Control V9.1, SIMATIC WinCC Runtime Professional V18, SIMATIC WinCC Runtime Professional V19, SIMATIC WinCC V7.4, SIMATIC WinCC V7.5, SIMATIC WinCC V8.0 Problem Types: CWE-476 Description: A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9
C BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions < V8.0 Update 4). The implementation of the RPC (Remote Procedure call) communication protocol in the affected products do not properly handle certain unorganized RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server. Addit
d RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-753746.html
CVE ID: CVE-2023-48364 State: PUBLISHED Published: 2024-02-13T08:59:56.648Z Last Updated: 2024-09-10T09:36:24.190Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: OpenPCS 7 V9.1, SIMATIC BATCH V9.1, SIMATIC PCS 7 V9.1, SIMATIC Route Control V9.1, SIMATIC WinCC Runtime Professional V18, SIMATIC WinCC Runtime Professional V19, SIMATIC WinCC V7.4, SIMATIC WinCC V7.5, SIMATIC WinCC V8.0 Problem Types: CWE-476 Description: A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9
C BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions < V8.0 Update 4). The implementation of the RPC (Remote Procedure call) communication protocol in the affected products do not properly handle certain malformed RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server. Additio
RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-753746.html
CVE ID: CVE-2023-48365 State: PUBLISHED Published: 2023-11-15T00:00:00.000Z Last Updated: 2025-10-21T23:05:32.191Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch
y application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/tac-p/2120510
CVE ID: CVE-2023-48366 State: PUBLISHED Published: 2025-02-12T21:20:15.785Z Last Updated: 2025-02-18T19:54:55.312Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) System Security Report and System Resources Defense firmware Problem Types: Information Disclosure, CWE-362 Description: Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01203.html
CVE ID: CVE-2023-48368 State: PUBLISHED Published: 2024-05-16T20:47:40.238Z Last Updated: 2024-08-02T21:30:34.498Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Media SDK software Problem Types: denial of service, CWE-20 Description: Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE ID: CVE-2023-48369 State: PUBLISHED Published: 2023-11-27T09:10:21.484Z Last Updated: 2024-08-02T21:30:33.816Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-400 Description: Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow the log. Additional Analyst Notes: - CVE Program Container: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-48371 State: PUBLISHED Published: 2023-12-15T04:11:24.574Z Last Updated: 2024-08-02T21:30:35.296Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ITPison Products: OMICARD EDM 's SMS Problem Types: CWE-434 Description: ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7590-55002-1.html
CVE ID: CVE-2023-48372 State: PUBLISHED Published: 2023-12-15T04:18:31.142Z Last Updated: 2024-08-02T21:30:34.603Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ITPison Products: OMICARD EDM 's SMS Problem Types: CWE-89 Description: ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7591-07c51-1.html
CVE ID: CVE-2023-48373 State: PUBLISHED Published: 2023-12-15T04:27:26.842Z Last Updated: 2025-05-21T14:27:59.912Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ITPison Products: OMICARD EDM 's SMS Problem Types: CWE-22 Description: ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7592-998bf-1.html
CVE ID: CVE-2023-48374 State: PUBLISHED Published: 2023-12-15T07:39:47.814Z Last Updated: 2024-08-02T21:30:34.432Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: SmartStar Software Products: CWS Web-Base Problem Types: CWE-798 Description: SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low privilege. An unauthenticated remote attacker can exploit this vulnerability to run partial processes and obtain partial information, but can't disrupt service or obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp
sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7593-d3e5b-1.html
CVE ID: CVE-2023-48375 State: PUBLISHED Published: 2023-12-15T07:46:16.462Z Last Updated: 2024-08-02T21:30:34.755Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SmartStar Software Products: CWS Web-Base Problem Types: CWE-862 Description: SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege, resulting in performing arbitrary system operations or disrupting service. Additional Analyst Notes: - CVE Program Container: Re
g in performing arbitrary system operations or disrupting service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7594-dac20-1.html
CVE ID: CVE-2023-48376 State: PUBLISHED Published: 2023-12-15T07:52:31.168Z Last Updated: 2024-08-02T21:30:34.630Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SmartStar Software Products: CWS Web-Base Problem Types: CWE-434 Description: SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7595-d58b1-1.html
CVE ID: CVE-2023-48378 State: PUBLISHED Published: 2023-12-15T08:01:09.434Z Last Updated: 2024-10-08T14:16:25.159Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Softnext Products: Mail SQR Expert Problem Types: CWE-22 Description: Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7596-648f3-1.html
CVE ID: CVE-2023-48379 State: PUBLISHED Published: 2023-12-15T08:05:29.108Z Last Updated: 2024-08-02T21:30:34.462Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Softnext Products: Mail SQR Expert Problem Types: CWE-918 Description: Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7597-fff54-1.html
CVE ID: CVE-2023-48380 State: PUBLISHED Published: 2023-12-15T08:12:44.486Z Last Updated: 2025-05-21T14:26:40.553Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Softnext Products: Mail SQR Expert Problem Types: CWE-78 Description: Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twc
srupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7598-37b03-1.html
CVE ID: CVE-2023-48381 State: PUBLISHED Published: 2023-12-15T08:19:57.794Z Last Updated: 2024-08-02T21:30:34.536Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Softnext Products: Mail SQR Expert Problem Types: CWE-22 Description: Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability. Additional Analyst Notes: - CVE Program Container: References: - ht
nformation but does not affect service availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7599-461d5-1.html
CVE ID: CVE-2023-48382 State: PUBLISHED Published: 2023-12-15T08:24:59.011Z Last Updated: 2024-08-02T21:30:35.087Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Softnext Products: Mail SQR Expert Problem Types: CWE-22 Description: Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail deliver-related URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability. Additional Analyst Notes: - CVE Program Container: Ref
tial system information but does not affect service availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7600-dd072-1.html
CVE ID: CVE-2023-48383 State: PUBLISHED Published: 2024-01-15T02:37:58.921Z Last Updated: 2025-06-17T21:09:22.864Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NetVision Information Products: airPASS Problem Types: CWE-22 Description: NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7631-c6be3-1.html
CVE ID: CVE-2023-48384 State: PUBLISHED Published: 2023-12-15T08:30:29.753Z Last Updated: 2024-08-02T21:30:34.497Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ArmorX Global Technology Corporation Products: ArmorX Spam Problem Types: CWE-89 Description: ArmorX Global Technology Corporation ArmorX Spam has insufficient validation for user input within a special function. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-7601-71c94-1.html