Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
arameter is passed to the `reports_get_branch_select` function without any validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-gj95-7xr8-9p7g - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-
sts.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/
CVE ID: CVE-2023-39359 State: PUBLISHED Published: 2023-09-05T20:59:37.881Z Last Updated: 2025-02-13T17:02:58.169Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cacti Products: cacti Problem Types: CWE-89 Description: Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `graphs.php` file. When dealing with the cases of ajax_hosts and ajax_hosts_noany, if the `site_id` parameter is greater than 0, it is directly reflected in the WHERE clause of the SQL
ajax_hosts_noany, if the `site_id` parameter is greater than 0, it is directly reflected in the WHERE clause of the SQL statement. This creates an SQL injection vulnerability. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-q4wh-3f9w-836h - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/
WWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/ - https://www.debian.org/security/2023/dsa-5550
CVE ID: CVE-2023-39360 State: PUBLISHED Published: 2023-09-05T20:43:13.193Z Last Updated: 2025-02-13T17:02:58.760Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Cacti Products: cacti Problem Types: CWE-79 Description: Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data. The vulnerability is found in `graphs_new.php`. Several validations are performed, but the `returnto` parameter is directly passed to `form_save_button`. In order to bypass this validation, returnto must contain `host.php`. This vulnerabili
tly passed to `form_save_button`. In order to bypass this validation, returnto must contain `host.php`. This vulnerability has been addressed in version 1.2.25. Users are advised to upgrade. Users unable to update should manually filter HTML output. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-gx8c-xvjh-9qh4 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/pack
e@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html
CVE ID: CVE-2023-39361 State: PUBLISHED Published: 2023-09-05T20:58:00.188Z Last Updated: 2025-02-13T17:02:59.388Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cacti Products: cacti Problem Types: CWE-89 Description: Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are being utilized in an enabled state, there could be the potential for significant damage. Attackers may exploit this vulnerability, and there may be possibilities for actions such as the us
significant damage. Attackers may exploit this vulnerability, and there may be possibilities for actions such as the usurpation of administrative privileges or remote code execution. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-6r43-q2fw-5wrg - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMAR
MGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/ - https://www.debian.org/security/2023/dsa-5550 - https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html
CVE ID: CVE-2023-39362 State: PUBLISHED Published: 2023-09-05T21:16:30.127Z Last Updated: 2025-02-27T21:01:03.563Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Cacti Products: cacti Problem Types: CWE-78 Description: Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlying server. The `lib/snmp.php` file has a set of functions, with similar behavior, that accept in input some variables and place them into an `exec` call
le has a set of functions, with similar behavior, that accept in input some variables and place them into an `exec` call without a proper escape or validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-g6ff-58cj-x3cp - http://packetstormsecurity.com/files/175029/Cacti-1.2.24-Command-Injection.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.or
list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/ - https://www.debian.org/security/2023/dsa-5550 - https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html
CVE ID: CVE-2023-39363 State: PUBLISHED Published: 2023-08-07T18:40:25.615Z Last Updated: 2024-10-11T14:05:03.824Z Vendors: vyperlang Products: vyper Problem Types: CWE-863 Description: Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are allocated incorrectly. Each function using a named re-entrancy lock gets a unique lock regardless of the key, allowing cross-function re-entrancy in contracts compiled with the susceptible versions. A specific set of conditions is required to result in misbehavior of affected contracts, specifically: a `.vy` contract compiled with `vyper` versions `0.2.15`, `0.2
esult in misbehavior of affected contracts, specifically: a `.vy` contract compiled with `vyper` versions `0.2.15`, `0.2.16`, or `0.3.0`; a primary function that utilizes the `@nonreentrant` decorator with a specific `key` and does not strictly follow the check-effects-interaction pattern (i.e. contains an external call to an untrusted party before storage updates); and a secondary function that utilizes the same `key` and would be affected by the improper state caused by the primary function. Version 0.3.1 contains a fix for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vyperlang/vyper/security/advisories/GHSA-5824-c
ram Container: - CISA ADP Vulnrichment: References: - https://github.com/vyperlang/vyper/security/advisories/GHSA-5824-cm3x-3c38 - https://github.com/vyperlang/vyper/pull/2439 - https://github.com/vyperlang/vyper/pull/2514 - https://hackmd.io/@LlamaRisk/BJzSKHNjn - https://hackmd.io/@vyperlang/HJUgNMhs2
CVE ID: CVE-2023-39364 State: PUBLISHED Published: 2023-09-05T21:13:17.827Z Last Updated: 2025-02-13T17:03:00.687Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Cacti Products: cacti Problem Types: CWE-601 Description: Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbitrary website after a change password performed via a specifically crafted URL. The `auth_changepassword.php` file accepts `ref` as a URL parameter and reflects it in the form used to perform the change password. It's value is used to perform a redirect via `header` PHP function. A user can be tri
ed to perform the change password. It's value is used to perform a redirect via `header` PHP function. A user can be tricked in performing the change password operation, e.g., via a phishing message, and then interacting with the malicious website where the redirection has been performed, e.g., downloading malwares, providing credentials, etc. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-4pjv-rmrp-r59x - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject
rity/advisories/GHSA-4pjv-rmrp-r59x - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/ - https://www.debian.org/security/2023/dsa-5550 - https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html
CVE ID: CVE-2023-39365 State: PUBLISHED Published: 2023-09-05T21:03:56.237Z Last Updated: 2025-02-13T17:03:01.261Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L) Vendors: Cacti Products: cacti Problem Types: CWE-89 Description: Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression validation combined with the external links feature can lead to limited SQL Injections and subsequent data leakage. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
own workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-v5w7-hww7-2f22 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/ - https://www.debian.org/security/2023/dsa-5550 - https://lists.debian.org/debian-lts-announce/2024/03/msg
U73QXWPXTCKH/ - https://www.debian.org/security/2023/dsa-5550 - https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html
CVE ID: CVE-2023-39366 State: PUBLISHED Published: 2023-09-05T20:42:12.716Z Last Updated: 2025-02-13T17:03:01.901Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Cacti Products: cacti Problem Types: CWE-79 Description: Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data stored in the _cacti_'s database. These data will be viewed by administrative _cacti_ accounts and execute JavaScript code in the victim's browser at view-time. The `data_sources.php` script displays the data source management information (
de in the victim's browser at view-time. The `data_sources.php` script displays the data source management information (e.g. data source path, polling configuration etc.) for different data visualizations of the _cacti_ app. CENSUS found that an adversary that is able to configure a malicious Device name, can deploy a stored XSS attack against any user of the same (or broader) privileges. A user that possesses the _General Administration>Sites/Devices/Data_ permissions can configure the device names in _cacti_. This configuration occurs through `http://<HOST>/cacti/host.php`, while the rendered malicious payload is exhibited at `http://<HOST>/cacti/data_sources.php`. This vulnerability has b
`, while the rendered malicious payload is exhibited at `http://<HOST>/cacti/data_sources.php`. This vulnerability has been addressed in version 1.2.25. Users are advised to upgrade. Users unable to update should manually filter HTML output. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cacti/cacti/security/advisories/GHSA-rwhh-xxm6-vcrv - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WZGB2UXJEUYWWA6IWVFQ3ZTP22FIHMGN/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/a
t/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/ - https://www.debian.org/security/2023/dsa-5550
CVE ID: CVE-2023-39367 State: PUBLISHED Published: 2024-04-17T12:55:47.790Z Last Updated: 2025-11-04T18:16:28.588Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Peplink Products: Smart Reader Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 (in QEMU). A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-
CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1867 - https://forum.peplink.com/t/peplink-security-advisory-smart-reader-firmware-1-2-0-cve-2023-43491-cve-2023-45209-cve-2023-39367-cve-2023-45744-cve-2023-40146/47256
CVE ID: CVE-2023-39368 State: PUBLISHED Published: 2024-03-14T16:45:46.050Z Last Updated: 2025-02-13T17:03:02.468Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: denial of service, CWE-693 Description: Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00972.html - https://security.netapp.com/advisory/ntap-20240405-0007/ - http
www/us/en/security-center/advisory/intel-sa-00972.html - https://security.netapp.com/advisory/ntap-20240405-0007/ - https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html
CVE ID: CVE-2023-39369 State: PUBLISHED Published: 2023-09-03T14:26:05.184Z Last Updated: 2024-09-27T15:46:33.179Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H) Vendors: StarTrinity Products: Softswitch Problem Types: CWE-79 Description: StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS (CWE-79) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39370 State: PUBLISHED Published: 2023-09-03T14:27:30.899Z Last Updated: 2024-09-27T15:46:11.282Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H) Vendors: StarTrinity Products: Softswitch Problem Types: CWE-79 Description: StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39371 State: PUBLISHED Published: 2023-09-03T14:33:28.057Z Last Updated: 2024-09-27T15:45:49.444Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H) Vendors: StarTrinity Products: Softswitch Problem Types: CWE-601 Description: StarTrinity Softswitch version 2023-02-16 - Open Redirect (CWE-601) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39372 State: PUBLISHED Published: 2023-09-03T14:40:38.807Z Last Updated: 2024-09-27T15:43:42.860Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: StarTrinity Products: Softswitch Problem Types: CWE-352 Description: StarTrinity Softswitch version 2023-02-16 - Multiple CSRF (CWE-352) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39373 State: PUBLISHED Published: 2023-09-03T14:45:13.160Z Last Updated: 2024-09-27T15:37:25.930Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Hyundai Products: model (2017) Problem Types: CWE-294 Description: A Hyundai model (2017) - CWE-294: Authentication Bypass by Capture-replay. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39374 State: PUBLISHED Published: 2023-09-03T14:48:58.280Z Last Updated: 2024-10-01T14:21:15.498Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ForeScout Products: NAC SecureConnector Problem Types: CWE-427 Description: ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39375 State: PUBLISHED Published: 2023-09-26T09:15:01.807Z Last Updated: 2024-09-24T13:24:36.817Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: SiberianCMS Products: SiberianCMS Problem Types: CWE-274 Description: SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39376 State: PUBLISHED Published: 2023-09-26T09:19:55.559Z Last Updated: 2024-09-24T13:23:06.327Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: SiberianCMS Products: SiberianCMS Problem Types: CWE-284 Description: SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39377 State: PUBLISHED Published: 2023-09-26T09:22:26.246Z Last Updated: 2024-09-24T13:22:03.046Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: SiberianCMS Products: SiberianCMS Problem Types: CWE-434 Description: SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39378 State: PUBLISHED Published: 2023-09-26T09:23:48.455Z Last Updated: 2024-09-24T17:42:01.496Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SiberianCMS Products: SiberianCMS Problem Types: CWE-89 Description: SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-39379 State: PUBLISHED Published: 2023-08-04T09:43:32.360Z Last Updated: 2024-10-21T19:29:32.915Z Vendors: Fujitsu Limited Products: Fujitsu Software Infrastructure Manager Advanced Edition, Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX, Fujitsu Software Infrastructure Manager Essential Edition Problem Types: Cleartext storage of sensitive information Description: Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As a result, the password for the proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Softwar
proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Software Infrastructure Manager Advanced Edition V2.8.0.060, Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX V2.8.0.060, and Fujitsu Software Infrastructure Manager Essential Edition V2.8.0.060. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.ts.fujitsu.com/IndexProdSecurity.asp?lng=en - https://jvn.jp/en/jp/JVN38847224/
CVE ID: CVE-2023-39380 State: PUBLISHED Published: 2023-08-13T11:39:45.292Z Last Updated: 2024-10-10T14:24:16.891Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/8/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725