Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3751 State: PUBLISHED Published: 2023-07-19T00:00:04.459Z Last Updated: 2024-08-02T07:01:57.553Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Super Store Finder Problem Types: CWE-89 Description: A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component POST Parameter Handler. The manipulation of the argument products leads to sql injection. The attack can be launched remotely. The identifier VDB-234421 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in
1 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234421 - https://vuldb.com/?ctiid.234421
CVE ID: CVE-2023-3752 State: PUBLISHED Published: 2023-07-19T01:31:03.400Z Last Updated: 2024-08-02T07:01:57.592Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Creativeitem Products: Academy LMS Problem Types: CWE-79 Description: A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /home/courses. The manipulation of the argument sort_by leads to cross site scripting. The attack may be launched remotely. VDB-234422 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Not
ility. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234422 - https://vuldb.com/?ctiid.234422
CVE ID: CVE-2023-3753 State: PUBLISHED Published: 2023-07-19T02:00:06.762Z Last Updated: 2024-10-21T15:04:28.582Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Creativeitem Products: Mastery LMS Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Creativeitem Mastery LMS 1.2. This affects an unknown part of the file /browse. The manipulation of the argument search/featured/recommended/skill leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-234423. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analys
VDB-234423. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234423 - https://vuldb.com/?ctiid.234423
CVE ID: CVE-2023-3754 State: PUBLISHED Published: 2023-07-19T03:00:05.454Z Last Updated: 2024-08-02T07:08:48.997Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Creativeitem Products: Ekushey Project Manager CRM Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Creativeitem Ekushey Project Manager CRM 5.0. Affected is an unknown function of the file /index.php/client/message/message_read/xxxxxxxx[random-msg-hash]. The manipulation of the argument message leads to cross site scripting. It is possible to launch the attack remotely. VDB-234426 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early ab
he attack remotely. VDB-234426 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234426 - https://vuldb.com/?ctiid.234426
CVE ID: CVE-2023-3755 State: PUBLISHED Published: 2023-07-19T03:31:03.904Z Last Updated: 2024-08-02T07:08:50.171Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Creativeitem Products: Atlas Business Directory Listing Problem Types: CWE-79 Description: A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /home/filter_listings. The manipulation of the argument price-range leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-234427. NOTE: The vendor was contacted early about this di
otely. The associated identifier of this vulnerability is VDB-234427. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234427 - https://vuldb.com/?ctiid.234427
CVE ID: CVE-2023-3756 State: PUBLISHED Published: 2023-07-19T04:00:04.066Z Last Updated: 2024-10-21T15:04:50.041Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Creativeitem Products: Atlas Business Directory Listing Problem Types: CWE-79 Description: A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this issue is some unknown functionality of the file /home/search. The manipulation of the argument search_string leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-234428. NOTE: The vendor was contacted early about this disclosure but did not respond
ier of this vulnerability is VDB-234428. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234428 - https://vuldb.com/?ctiid.234428
CVE ID: CVE-2023-3757 State: PUBLISHED Published: 2023-07-19T04:31:03.319Z Last Updated: 2024-11-22T15:35:52.575Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: GZ Scripts Products: Car Rental Script Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in GZ Scripts Car Rental Script 1.8. Affected is an unknown function of the file /EventBookingCalendar/load.php?controller=GzFront/action=checkout/cid=1/layout=calendar/show_header=T/local=3. The manipulation of the argument first_name/second_name/phone/address_1/country leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-234
s to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-234432. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234432 - https://vuldb.com/?ctiid.234432
CVE ID: CVE-2023-3758 State: PUBLISHED Published: 2024-04-18T19:06:44.216Z Last Updated: 2025-11-06T22:57:03.881Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-362 Description: A race condition flaw was found in sssd where the GPO policy is not
erprise Linux 7 Problem Types: CWE-362 Description: A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1919 - https://access.redhat.com/errata/RHSA-2024:1920 - https://access.redhat.com/errata/RHSA-2024:1921 - https://access.redhat.com/errata/RHSA-2024:1922 - https://access.redhat.com/errata/RHSA-2024:2571 - https://access.redhat.com/errata/RHSA-2024:3270 - https://access.redhat.com/security/cve/
at.com/errata/RHSA-2024:2571 - https://access.redhat.com/errata/RHSA-2024:3270 - https://access.redhat.com/security/cve/CVE-2023-3758 - https://bugzilla.redhat.com/show_bug.cgi?id=2223762 - https://github.com/SSSD/sssd/pull/7302
CVE ID: CVE-2023-3759 State: PUBLISHED Published: 2023-07-19T05:00:04.934Z Last Updated: 2024-08-02T07:08:49.668Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Intergard Products: SGS Problem Types: CWE-275 Description: A vulnerability, which was classified as critical, was found in Intergard SGS 8.7.0. Affected is an unknown function. The manipulation leads to permission issues. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-234444. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container:
ontacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234444 - https://vuldb.com/?ctiid.234444 - https://youtu.be/yW4tRnjDjhM
CVE ID: CVE-2023-3760 State: PUBLISHED Published: 2023-07-19T05:31:03.867Z Last Updated: 2024-10-21T18:15:48.440Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Intergard Products: SGS Problem Types: CWE-404 Description: A vulnerability has been found in Intergard SGS 8.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Change Password Handler. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-234445 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disc
used. The identifier VDB-234445 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.234445 - https://vuldb.com/?ctiid.234445 - https://youtu.be/CtOFB-L1rOg
CVE ID: CVE-2023-3761 State: PUBLISHED Published: 2023-07-19T06:00:04.545Z Last Updated: 2024-08-02T07:08:48.998Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Intergard Products: SGS Problem Types: CWE-319 Description: A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-234446
gh. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-234446 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234446 - https://vuldb.com/?ctiid.234446 - https://youtu.be/bMJwSCps0Lc
CVE ID: CVE-2023-3762 State: PUBLISHED Published: 2023-07-19T06:31:03.558Z Last Updated: 2024-08-02T07:08:50.127Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Intergard Products: SGS Problem Types: CWE-316 Description: A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to cleartext storage of sensitive information in memory. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-234447. NOTE: The vendor was contacted early about this disclosure but did not r
identifier of this vulnerability is VDB-234447. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234447 - https://vuldb.com/?ctiid.234447 - https://youtu.be/Ee2KU-T_0pI
CVE ID: CVE-2023-3763 State: PUBLISHED Published: 2023-07-19T07:00:05.033Z Last Updated: 2024-08-02T07:08:48.996Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Intergard Products: SGS Problem Types: CWE-319 Description: A vulnerability was found in Intergard SGS 8.7.0. It has been declared as problematic. This vulnerability affects unknown code of the component SQL Query Handler. The manipulation leads to cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this
loitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-234448. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.234448 - https://vuldb.com/?ctiid.234448 - https://youtu.be/XlRVwWXpv4w
CVE ID: CVE-2023-3764 State: PUBLISHED Published: 2023-08-31T05:33:14.499Z Last Updated: 2025-02-05T19:32:13.343Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: edgarrojas Products: WooCommerce PDF Invoice Builder, Create invoices, packing slips and more Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.90. This is due to missing or incorrect nonce validation on the Save function. This makes it possible for unauthenticated attackers to make changes to invoices via a forged request granted they can tri
is makes it possible for unauthenticated attackers to make changes to invoices via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ebf2e701-9f9b-4a78-a61a-0cf90cdd9755?source=cve - https://plugins.trac.wordpress.org/browser/woo-pdf-invoice-builder/trunk/woocommerce-pdf-invoice-ajax.php?rev=2935371#L894 - https://plugins.trac.wordpress.org/changeset/2951617/woo-pdf-invoice-builder/trunk/woocommerce-pdf-invoice-ajax.php?old=2949518&old_path=woo-pdf-invoice-builder%2Ftrunk%2Fwoocomme
f-invoice-builder/trunk/woocommerce-pdf-invoice-ajax.php?old=2949518&old_path=woo-pdf-invoice-builder%2Ftrunk%2Fwoocommerce-pdf-invoice-ajax.php
CVE ID: CVE-2023-3765 State: PUBLISHED Published: 2023-07-19T00:53:33.969Z Last Updated: 2024-10-24T18:25:35.315Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-36 Description: Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/4be5fd63-8a0a-490d-9ee1-f33dc768ed76 - https://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b
CVE ID: CVE-2023-3766 State: PUBLISHED Published: 2023-08-03T13:49:46.751Z Last Updated: 2024-10-09T20:33:55.971Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Cloudflare Products: odoh-rs Problem Types: CWE-120 Description: A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients and enables an attacker with knowledge of this vulnerability to craft and send specially designed encrypted queries to targeted ODOH servers running with odoh-rs. Upon successful exploitation, the server will crash
ed encrypted queries to targeted ODOH servers running with odoh-rs. Upon successful exploitation, the server will crash abruptly, disrupting its normal operation and rendering the service temporarily unavailable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/odoh-rs/security/advisories/GHSA-gpcv-p28p-fv2p - https://github.com/cloudflare/odoh-rs/pull/28
CVE ID: CVE-2023-3767 State: PUBLISHED Published: 2023-09-26T07:51:36.754Z Last Updated: 2024-09-24T13:31:06.041Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: EasyPHP Products: Webserver Problem Types: CWE-78 Description: An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability could allow an attacker to get full access to the system by sending a specially crafted exploit to the /index.php?zone=settings parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos/inyeccion-de-comandos-os-en-easyphp-
ulnrichment: References: - https://www.incibe.es/incibe-cert/alerta-temprana/avisos/inyeccion-de-comandos-os-en-easyphp-webserver
CVE ID: CVE-2023-3768 State: PUBLISHED Published: 2023-10-02T10:55:39.288Z Last Updated: 2024-09-20T16:49:01.471Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Ingeteam Products: INGEPAC DA3451 Problem Types: CWE-20 Description: Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
system reboot of the device and its services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ingeteam-products
CVE ID: CVE-2023-3769 State: PUBLISHED Published: 2023-10-02T13:01:03.985Z Last Updated: 2024-09-20T14:56:18.313Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Ingeteam Products: INGEPAC FC5066 Problem Types: CWE-20 Description: Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
CVE ID: CVE-2023-3770 State: PUBLISHED Published: 2023-10-02T13:11:05.513Z Last Updated: 2024-09-20T14:54:20.421Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Ingeteam Products: INGEPAC DA3451 Problem Types: CWE-20 Description: Incorrect validation vulnerability of the data entered, allowing an attacker with access to the network on which the affected device is located to use the discovery port protocol (1925/UDP) to obtain device-specific information without the need for authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-
- CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ingeteam-products
CVE ID: CVE-2023-3771 State: PUBLISHED Published: 2024-01-16T15:54:04.782Z Last Updated: 2025-06-20T17:03:38.706Z Vendors: Unknown Products: t1 Problem Types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') Description: The T1 WordPress theme through 19.0 is vulnerable to unauthenticated open redirect with which any attacker and redirect users to arbitrary websites. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7c6fc499-de09-4874-ab96-bdc24d550cfb/
CVE ID: CVE-2023-3772 State: PUBLISHED Published: 2023-07-25T15:47:40.183Z Last Updated: 2025-11-07T13:03:42.167Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-476 Description: A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly
r transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6583 - https://access.redhat.com/errata/RHSA-2023:6901 - https://access.redhat.com/errata/RHSA-2023:7077 - https://access.redhat.com/errata/RHSA-2024:0412 - https://access.redhat.com/errata/RHSA-2024:0575 - https://access.redhat.com/security/cve/CVE-2023-3772 - https://bugzilla.redhat.com/show_bug.cgi?id=2218943
CVE ID: CVE-2023-3773 State: PUBLISHED Published: 2023-07-25T15:47:40.391Z Last Updated: 2025-11-14T14:21:06.184Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-125 Description: A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace. Additional Analys
ESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:6583 - https://access.redhat.com/security/cve/CVE-2023-3773 - https://bugzilla.redhat.com/show_bug.cgi?id=2218944
CVE ID: CVE-2023-3774 State: PUBLISHED Published: 2023-07-28T00:45:04.379Z Last Updated: 2024-10-22T18:22:38.101Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: HashiCorp Products: Vault Enterprise Problem Types: CWE-248 Description: An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service. Fixed in 1.14.1, 1.13.5, and 1.12.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-23-vault-enterprise-namespace-creation-may-lead-to-denial-of-service/56617