Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32615 State: PUBLISHED Published: 2023-09-05T16:15:04.609Z Last Updated: 2025-02-13T16:54:51.439Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-73 Description: A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligenc
lity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1771 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1771
CVE ID: CVE-2023-32616 State: PUBLISHED Published: 2023-11-27T15:25:09.602Z Last Updated: 2025-11-04T19:16:21.332Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a s
e user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1837
CVE ID: CVE-2023-32617 State: PUBLISHED Published: 2023-08-11T02:37:27.420Z Last Updated: 2024-08-02T15:25:35.693Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-
yst Notes: - CVE Program Container: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html
CVE ID: CVE-2023-32618 State: PUBLISHED Published: 2024-02-14T13:38:06.034Z Last Updated: 2024-08-07T20:33:20.352Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Toolkit and component software installers Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-s
ntainer: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00956.html
CVE ID: CVE-2023-32619 State: PUBLISHED Published: 2023-09-06T09:27:44.114Z Last Updated: 2024-09-26T20:19:58.978Z Vendors: TP-LINK Products: Archer C50, Archer C55 Problem Types: Use of Hard-coded Credentials Description: Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-c50/v3/#Firmware - https://www.tp-link.com/jp/
ichment: References: - https://www.tp-link.com/jp/support/download/archer-c50/v3/#Firmware - https://www.tp-link.com/jp/support/download/archer-c55/#Firmware - https://jvn.jp/en/vu/JVNVU99392903/
CVE ID: CVE-2023-32620 State: PUBLISHED Published: 2023-06-30T04:02:54.431Z Last Updated: 2024-12-04T16:06:17.957Z Vendors: WAVLINK TECHNOLOGY Ltd. Products: WL-WN531AX2 Problem Types: Improper authentication Description: Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wavlink.com/en_us/firmware/details/932108ffc5.html - https://jvn.jp/en/jp/JVN78634340/
CVE ID: CVE-2023-32621 State: PUBLISHED Published: 2023-06-30T04:03:36.732Z Last Updated: 2024-12-04T16:04:07.341Z Vendors: WAVLINK TECHNOLOGY Ltd. Products: WL-WN531AX2 Problem Types: Unrestricted Upload of File with Dangerous Type Description: WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wavlink.com/en_us/firmware/details/932108ffc5.html - https://jvn.jp/en/jp/JVN78634340/
CVE ID: CVE-2023-32622 State: PUBLISHED Published: 2023-06-30T04:04:04.451Z Last Updated: 2024-12-04T16:01:56.804Z Vendors: WAVLINK TECHNOLOGY Ltd. Products: WL-WN531AX2 Problem Types: Improper neutralization of special elements in output used by a downstream component ('Injection') Description: Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wavlink.com/en_us/firmware/details/932108ffc5.html - https://jvn.jp/en/jp/JVN78634340/
CVE ID: CVE-2023-32623 State: PUBLISHED Published: 2023-06-28T04:16:55.984Z Last Updated: 2024-11-27T14:45:55.485Z Vendors: Monkey Wrench Inc. Products: Snow Monkey Forms Problem Types: Directory traversal Description: Directory traversal vulnerability in Snow Monkey Forms v5.1.1 and earlier allows a remote unauthenticated attacker to delete arbitrary files on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://snow-monkey.2inc.org/2023/07/14/snow-monkey-forms-v5-1-2/ - https://jvn.jp/en/jp/JVN97127032/
CVE ID: CVE-2023-32624 State: PUBLISHED Published: 2023-07-21T00:48:57.451Z Last Updated: 2024-10-24T14:37:45.810Z Vendors: SAKURA internet Inc. Products: TS Webfonts for SAKURA Problem Types: Cross-site scripting (XSS) Description: Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ja.wordpress.org/plugins/ts-webfonts-for-sakura/#developers - https://jvn.jp/en/jp/JVN90560760/
CVE ID: CVE-2023-32625 State: PUBLISHED Published: 2023-07-21T00:49:24.773Z Last Updated: 2024-10-24T14:34:45.133Z Vendors: SAKURA internet Inc. Products: TS Webfonts for SAKURA Problem Types: Cross-site request forgery (CSRF) Description: Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthenticated attacker to hijack the authentication of a user and to change settings by having a user view a malicious page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ja.wordpress.org/plugins/ts-webfonts-for-sakura/#developers - https://jvn.jp/en/jp/JVN90560760/
CVE ID: CVE-2023-32626 State: PUBLISHED Published: 2023-08-18T09:36:26.714Z Last Updated: 2024-10-08T15:05:09.195Z Vendors: LOGITEC CORPORATION Products: LAN-W300N/RS, LAN-W300N/PR5 Problem Types: Hidden Functionality Description: Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230810-01/ - https://jvn.jp/en/vu/JVNVU91630351/
CVE ID: CVE-2023-32627 State: PUBLISHED Published: 2023-07-10T17:15:42.063Z Last Updated: 2025-02-13T16:54:52.041Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: sox, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Extra Packages for Enterprise Linux, Fedora Problem Types: CWE-1077 Description: A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This flaw can lead to a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32627 - https://bugzilla.redhat.com/
ISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-32627 - https://bugzilla.redhat.com/show_bug.cgi?id=2212282 - https://lists.debian.org/debian-lts-announce/2023/08/msg00015.html
CVE ID: CVE-2023-32628 State: PUBLISHED Published: 2023-06-05T23:14:00.388Z Last Updated: 2025-01-08T14:22:34.205Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Advantech Products: WebAccess/SCADA Problem Types: CWE-434 Description: In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of a certificate file to ASP when uploading it, which can lead to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-152-01
CVE ID: CVE-2023-32629 State: PUBLISHED Published: 2023-07-26T01:59:47.061Z Last Updated: 2025-02-13T16:54:52.620Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Canonical Products: Ubuntu Kernel Problem Types: CWE-863 Description: Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-6250-1 - https://lists.ubuntu.com/archives/kernel-team/2023-July/140920.html - https://wiz.io/blog/ubuntu-overlayfs-vulnerability - https:
ists.ubuntu.com/archives/kernel-team/2023-July/140920.html - https://wiz.io/blog/ubuntu-overlayfs-vulnerability - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32629 - http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html
CVE ID: CVE-2023-32632 State: PUBLISHED Published: 2023-10-11T15:14:29.038Z Last Updated: 2025-11-04T19:16:22.419Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Yifan Products: YF325 Problem Types: CWE-284 Description: A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1767
CVE ID: CVE-2023-32633 State: PUBLISHED Published: 2024-03-14T16:45:49.120Z Last Updated: 2025-11-04T16:10:12.791Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) CSME installer software Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00923.html
CVE ID: CVE-2023-32634 State: PUBLISHED Published: 2023-10-12T15:27:51.751Z Last Updated: 2025-11-04T19:16:23.506Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SoftEther VPN Products: SoftEther VPN Problem Types: CWE-300 Description: An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755 - https://www.softether.org/9-about/News/904-SEVPN2
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755 - https://www.softether.org/9-about/News/904-SEVPN202301
CVE ID: CVE-2023-32635 State: PUBLISHED Published: 2023-07-19T05:54:29.352Z Last Updated: 2024-10-28T15:02:48.513Z Vendors: Financial Services Agency Products: XBRL data create application Problem Types: XML external entities (XXE) Description: XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://submit2.edinet-fsa.go.jp/ - https://jvn.jp/en/jp/JVN44726469/
CVE ID: CVE-2023-32636 State: PUBLISHED Published: 2023-09-14T19:19:21.874Z Last Updated: 2025-02-13T16:54:53.206Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: glib Products: glib Problem Types: CWE-400 Description: A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499. Additional Analyst Notes: - CVE Program Co
e guidance of glib developers to backport the initial fix for CVE-2023-29499. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.gnome.org/GNOME/glib/-/issues/2841 - https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835 - https://security.netapp.com/advisory/ntap-20231110-0002/
CVE ID: CVE-2023-32637 State: PUBLISHED Published: 2023-07-25T05:01:48.955Z Last Updated: 2024-10-23T19:13:27.167Z Vendors: Generic Model Organism Database Project Products: GBrowse Problem Types: Unrestricted Upload of File with Dangerous Type Description: GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://gmod.org/wiki/GBrowse - https://jbrowse.org/jb2/ - https://jvn.jp/en/jp/JVN35897618/
CVE ID: CVE-2023-32638 State: PUBLISHED Published: 2023-11-14T19:04:19.014Z Last Updated: 2024-08-30T18:29:43.801Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel Arc RGB Controller software Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00952.html
CVE ID: CVE-2023-32639 State: PUBLISHED Published: 2023-07-25T03:32:37.911Z Last Updated: 2024-10-23T19:14:30.185Z Vendors: The Ministry of Justice Products: Applicant Programme Problem Types: XML external entities (XXE) Description: Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.moj.go.jp/MINJI/minji06_00002.html - https://jvn.jp/en/jp/JVN37857022/
CVE ID: CVE-2023-32641 State: PUBLISHED Published: 2023-11-14T19:04:54.038Z Last Updated: 2024-08-30T15:16:47.679Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) QAT Problem Types: escalation of privilege, denial of service, CWE-20 Description: Improper input validation in firmware for Intel(R) QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00945.html
CVE ID: CVE-2023-32642 State: PUBLISHED Published: 2024-02-14T13:37:56.450Z Last Updated: 2024-08-16T19:46:15.081Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software Problem Types: denial of service, CWE-1076 Description: Insufficient adherence to expected conventions for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/se
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE ID: CVE-2023-32643 State: PUBLISHED Published: 2023-09-14T19:14:56.761Z Last Updated: 2025-02-13T16:54:53.774Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: glib Products: glib Problem Types: CWE-122 Description: A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gl
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/glib/-/issues/2840 - https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835 - https://security.netapp.com/advisory/ntap-20240426-0005/
CVE ID: CVE-2023-32644 State: PUBLISHED Published: 2024-02-14T13:37:59.194Z Last Updated: 2024-08-14T19:51:38.201Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software Problem Types: denial of service, CWE-693 Description: Protection mechanism failure for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advis
Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE ID: CVE-2023-32645 State: PUBLISHED Published: 2023-10-11T15:14:32.925Z Last Updated: 2025-11-04T19:16:24.591Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Yifan Products: YF325 Problem Types: CWE-489 Description: A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1752
CVE ID: CVE-2023-32646 State: PUBLISHED Published: 2024-02-14T13:38:02.184Z Last Updated: 2024-08-15T15:54:49.575Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) VROC software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html
CVE ID: CVE-2023-32647 State: PUBLISHED Published: 2024-02-14T13:38:04.425Z Last Updated: 2024-08-14T17:52:41.804Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: n/a Products: Intel(R) XTU software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00955.html
CVE ID: CVE-2023-32649 State: PUBLISHED Published: 2023-09-19T10:06:15.601Z Last Updated: 2025-02-27T20:49:35.570Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Nozomi Networks Products: Guardian, CMC Problem Types: CWE-1286 Description: A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets. During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed. Addition
he (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.nozominetworks.com/NN-2023:10-01
CVE ID: CVE-2023-32650 State: PUBLISHED Published: 2024-01-08T14:48:02.204Z Last Updated: 2025-11-04T18:14:37.877Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GTKWave Products: GTKWave Problem Types: CWE-190 Description: An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1777 - ht
ntainer: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1777 - https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html