Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-26575 State: PUBLISHED Published: 2023-10-25T09:37:36.185Z Last Updated: 2024-10-15T18:31:50.587Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-306 Description: Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student and teacher data by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26575
CVE ID: CVE-2023-26576 State: PUBLISHED Published: 2023-10-25T09:38:17.809Z Last Updated: 2024-10-15T17:57:55.312Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-306 Description: Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26576
CVE ID: CVE-2023-26577 State: PUBLISHED Published: 2023-10-25T09:40:39.230Z Last Updated: 2024-09-17T14:08:52.498Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-79 Description: Stored cross-site scripting in the IDAttend’s IDWeb application 3.1.052 and earlier allows attackers to hijack the browsing session of the logged in user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26577
CVE ID: CVE-2023-26578 State: PUBLISHED Published: 2023-10-25T09:43:54.725Z Last Updated: 2024-09-10T20:33:27.301Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-22, CWE-434 Description: Arbitrary file upload to web root in the IDAttend’s IDWeb application 3.1.013 allows authenticated attackers to upload dangerous files to web root such as ASP or ASPX, gaining command execution on the affected server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26578
CVE ID: CVE-2023-26579 State: PUBLISHED Published: 2023-10-25T09:46:09.248Z Last Updated: 2024-09-11T13:13:43.059Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-306 Description: Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff information by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26579
CVE ID: CVE-2023-26580 State: PUBLISHED Published: 2023-10-25T09:49:13.906Z Last Updated: 2024-09-11T13:13:19.807Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-306, CWE-552 Description: Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26580
CVE ID: CVE-2023-26581 State: PUBLISHED Published: 2023-10-25T10:00:53.011Z Last Updated: 2024-09-10T20:32:08.562Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-89 Description: Unauthenticated SQL injection in the GetVisitors method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26581
CVE ID: CVE-2023-26582 State: PUBLISHED Published: 2023-10-25T10:01:44.701Z Last Updated: 2024-09-11T13:51:10.980Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-89 Description: Unauthenticated SQL injection in the GetExcursionDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26582
CVE ID: CVE-2023-26583 State: PUBLISHED Published: 2023-10-25T10:02:08.029Z Last Updated: 2024-09-11T13:50:30.744Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-89 Description: Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26583
CVE ID: CVE-2023-26584 State: PUBLISHED Published: 2023-10-25T10:02:42.450Z Last Updated: 2024-09-10T20:32:37.181Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IDAttend Pty Ltd Products: IDWeb Problem Types: CWE-89 Description: Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.themissinglink.com.au/security-advisories/cve-2023-26584
CVE ID: CVE-2023-26585 State: PUBLISHED Published: 2024-02-14T13:37:44.514Z Last Updated: 2024-08-16T19:47:29.545Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: denial of service, CWE-284 Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-26586 State: PUBLISHED Published: 2024-02-14T13:37:59.856Z Last Updated: 2024-08-14T19:55:19.101Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software Problem Types: denial of service, CWE-248 Description: Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-
ontainer: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE ID: CVE-2023-26587 State: PUBLISHED Published: 2023-08-11T02:37:11.988Z Last Updated: 2024-10-10T18:15:04.264Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Easy Streaming Wizard software Problem Types: escalation of privilege, CWE-20 Description: Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00859.html
CVE ID: CVE-2023-26588 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T21:06:06.586Z Vendors: BUFFALO INC. Products: BS-GSL and BS-GS series Problem Types: Use of hard-coded credentials Description: Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier,
er. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20230310-01.html - https://jvn.jp/en/vu/JVNVU96824262/
CVE ID: CVE-2023-26589 State: PUBLISHED Published: 2023-11-14T19:04:51.170Z Last Updated: 2024-08-30T15:22:29.533Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Aptio* V UEFI Firmware Integrator Tools Problem Types: denial of service, CWE-416 Description: Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2023-26590 State: PUBLISHED Published: 2023-07-10T17:14:14.297Z Last Updated: 2024-10-01T15:55:31.776Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: sox, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Fedora, Extra Packages for Enterprise Linux Problem Types: CWE-1077 Description: A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-26590 - https://bugzilla.redh
er: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-26590 - https://bugzilla.redhat.com/show_bug.cgi?id=2212279
CVE ID: CVE-2023-26591 State: PUBLISHED Published: 2024-02-14T13:37:49.450Z Last Updated: 2024-08-07T18:33:16.843Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: denial of service, CWE-252 Description: Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable denial of service via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-26592 State: PUBLISHED Published: 2024-02-14T13:37:47.762Z Last Updated: 2024-08-08T13:39:31.707Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: denial of service, CWE-502 Description: Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-26593 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-10T18:54:49.778Z Vendors: Yokogawa Electric Corporation Products: CENTUM series Problem Types: Cleartext storage of sensitive information Description: CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access the computer where the affected product is installed tampers the password file stored in the computer, the user privilege which CENTUM managed may be escalated. As a result, the control system may be operated with the escalated user privilege. To exploit this vulnerability, the following prere
the control system may be operated with the escalated user privilege. To exploit this vulnerability, the following prerequisites must be met: (1)An attacker has obtained user credentials where the affected product is installed, (2)CENTUM Authentication Mode is used for user authentication when CENTUM VP is used. The affected products and versions are as follows: CENTUM CS 1000, CENTUM CS 3000 (Including CENTUM CS 3000 Entry Class) R2.01.00 to R3.09.50, CENTUM VP (Including CENTUM VP Entry Class) R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, and R6.01.00 and later, B/M9000 CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R7.04.51 and R8.01.01 and later Additional Analyst Notes: - CVE Program
R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R7.04.51 and R8.01.01 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yokogawa.com/library/resources/white-papers/yokogawa-security-advisory-report-list/ - https://jvn.jp/en/vu/JVNVU98775218/
CVE ID: CVE-2023-26595 State: PUBLISHED Published: 2023-05-23T00:00:00.000Z Last Updated: 2025-01-28T18:56:21.221Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Denial-of-service (DoS) Description: Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cs.cybozu.co.jp/2023/007698.html - https://jvn.jp/en/jp/JVN41694426/
CVE ID: CVE-2023-26596 State: PUBLISHED Published: 2024-02-14T13:37:48.889Z Last Updated: 2024-08-15T19:12:01.342Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: denial of service, CWE-284 Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-26597 State: PUBLISHED Published: 2023-07-13T11:04:55.153Z Last Updated: 2025-03-05T18:50:22.725Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Honeywell Products: C300 Problem Types: CWE-400 Description: Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Honeywell Security Notification for recommendations on upgrading and versioning. See Honeywell Security Notification for recommendations on upgrading and versioning. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process.honeywell.com
CVE ID: CVE-2023-26599 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T16:30:33.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tripleplay.tv - https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-26599-Summary.pdf
CVE ID: CVE-2023-26600 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T15:23:20.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and Asset Explorer through 6987 allow privilege escalation via query reports. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://manageengine.com - https://www.manageengine.com/products/service-desk/CVE-2023-26600.html
CVE ID: CVE-2023-26601 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T15:21:03.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow Denial-of-Service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://manageengine.com - https://www.manageengine.com/products/service-desk/CVE-2023-26601.html
CVE ID: CVE-2023-26602 State: PUBLISHED Published: 2023-02-26T00:00:00.000Z Last Updated: 2025-03-11T18:18:49.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nwsec.de/NWSSA-002-2023.txt - http://packetstormsecurity.com/files/171137/ASUS-ASMB8-iKVM-1.14.51-SNMP-Remote-Root.html - http://seclists.org/fulldisclosure/2023/Feb/15
CVE ID: CVE-2023-26603 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T11:53:53.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.jumpcloud.com/t5/jumpcloud-product-news/bd-p/releases - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2024/MNDT-2024-0003.md
CVE ID: CVE-2023-26604 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T18:16:47.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output. Additional Analyst Notes: - CVE Program C
oot when the terminal size is too small to show the complete systemctl output. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7 - https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340 - https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/ - https://lists.debian.org/debian-lts-announce/2023/03/msg00032.html - https://security.netapp.com/advisory/ntap-20230505-0009/ - http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html
CVE ID: CVE-2023-26605 State: PUBLISHED Published: 2023-02-26T00:00:00.000Z Last Updated: 2025-05-05T16:04:13.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lkml.org/lkml/2023/2/22/3 - https://security.netapp.com/advisory/ntap-20230316-0010/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4e3c51f4e805291b057d12f5dda5aeb50a538dc4
CVE ID: CVE-2023-26606 State: PUBLISHED Published: 2023-02-26T00:00:00.000Z Last Updated: 2025-05-05T16:04:03.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lkml.org/lkml/2023/2/20/860 - https://security.netapp.com/advisory/ntap-20230316-0010/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=557d19675a470bb0a98beccec38c5dc3735c20fa
CVE ID: CVE-2023-26607 State: PUBLISHED Published: 2023-02-26T00:00:00.000Z Last Updated: 2025-05-05T16:03:55.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lkml.org/lkml/2023/2/21/1353 - https://security.netapp.com/advisory/ntap-20230316-0010/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36a4d82dddbbd421d2b8e79e1cab68c8126d5075 - https://bugzilla.suse.com/show_bug.cgi?id=1208703
CVE ID: CVE-2023-26608 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:33:02.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOLDR (System of Orchestration, Lifecycle control, Detection and Response) 1.1.0 allows stored XSS via the module editor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vxcontrol/soldr/compare/v1.1.0...v1.2.0 - https://github.com/vxcontrol/soldr/issues/89
CVE ID: CVE-2023-26609 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-05-05T16:03:46.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nwsec.de/NWSSA-001-2023.txt - http://packetstormsecurity.com/files/171136/ABUS-Security-Camera-TVIP-20000-21150-LFI-Remote-Code-Execution.html - http://seclists.org/fulldisclosure/2023/Feb/16
CVE ID: CVE-2023-26612 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T14:27:45.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/HNAP1/SetParentsControlInfo
CVE ID: CVE-2023-26613 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T15:54:29.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCU_SHELL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/726232111/VulIoT/tree/main/D-Link/DIR823G%20V1.0.2B05/excu_shell