Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-26309 State: PUBLISHED Published: 2023-08-10T08:34:12.390Z Last Updated: 2024-10-08T14:50:47.252Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: OPPO Products: OnePlus Store Problem Types: Remote Code Execution Description: A remote code execution vulnerability in the webview component of OnePlus Store app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1689464826201645056
CVE ID: CVE-2023-26310 State: PUBLISHED Published: 2023-08-09T06:13:22.055Z Last Updated: 2024-10-09T10:15:15.657Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: OPPO Products: OPPO Find X3 Problem Types: CWE-88 Description: There is a command injection problem in the old version of the mobile phone backup app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1684402464721477632
CVE ID: CVE-2023-26311 State: PUBLISHED Published: 2023-08-10T10:32:31.287Z Last Updated: 2024-10-08T14:50:29.967Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: OPPO Products: OPPO Store Problem Types: Remote Code Execution Description: A remote code execution vulnerability in the webview component of OPPO Store app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1689584995217448960
CVE ID: CVE-2023-26314 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-18T16:24:08.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type is associated with an un-sandboxed Mono CLR interpreter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2023/01/05/1 - https://bugs.debian.org/972146 - https://lists.debian.org/debian-lts-announce/2023/02/msg00037.html
CVE ID: CVE-2023-26315 State: PUBLISHED Published: 2024-08-26T11:47:17.867Z Last Updated: 2024-10-08T09:49:35.915Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Xiaomi Products: Router AX9000 Problem Types: CWE-78 Description: The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an attacker to exploit it to obtain root access to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=546
CVE ID: CVE-2023-26316 State: PUBLISHED Published: 2023-08-02T00:00:00 Last Updated: 2024-09-27T21:58:10.819Z Vendors: n/a Products: Xiaomi cloud service Application Problem Types: XSS Description: A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whitelist checking function allowing javascript protocol to be loaded and can be exploited by attackers to steal Xiaomi cloud service account's cookies. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=322
CVE ID: CVE-2023-26317 State: PUBLISHED Published: 2023-08-02T00:00:00 Last Updated: 2024-10-16T20:07:44.750Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Xiaomi Products: Xiaomi router Problem Types: CWE-78 Description: Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interfaces. Attackers can exploit this vulnerability to gain access to the router by hijacking the ISP or upper-layer routing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=529
CVE ID: CVE-2023-26318 State: PUBLISHED Published: 2023-10-11T06:42:16.620Z Last Updated: 2024-09-18T18:07:54.806Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Xiaomi Products: Xiaomi Router Problem Types: CWE-120 Description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trust.mi.com/misrc/bulletins/advisory?cveId=539
CVE ID: CVE-2023-26319 State: PUBLISHED Published: 2023-10-11T06:45:07.195Z Last Updated: 2024-10-08T09:15:37.726Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Xiaomi Products: Xiaomi Router Problem Types: CWE-120 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trust.mi.com/misrc/bulletins/advisory?cveId=536
CVE ID: CVE-2023-26320 State: PUBLISHED Published: 2023-10-11T06:49:50.375Z Last Updated: 2024-10-08T09:14:15.410Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Xiaomi Products: Xiaomi Router Problem Types: CWE-120 Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trust.mi.com/misrc/bulletins/advisory?cveId=540
CVE ID: CVE-2023-26321 State: PUBLISHED Published: 2024-08-28T07:51:28.809Z Last Updated: 2025-03-25T15:57:26.688Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Xiaomi Products: Xiaomi File Manager App International Version Problem Types: A path traversal vulnerability exists Description: A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://trust.mi.com/misrc/bulletins/advisory?cveId=541
CVE ID: CVE-2023-26322 State: PUBLISHED Published: 2024-08-28T07:59:26.998Z Last Updated: 2024-08-28T13:39:52.719Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Xiaomi Products: GetApps application Description: A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://trust.mi.com/misrc/bulletins/advisory?cveId=542
CVE ID: CVE-2023-26323 State: PUBLISHED Published: 2024-08-28T07:53:42.801Z Last Updated: 2025-03-27T16:00:59.099Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L) Vendors: Xiaomi Products: App Market Problem Types: a code execution vulnerability in Xiaomi App Store Description: A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://trust.mi.com/misrc/bulletins/advisory?cveId=543
CVE ID: CVE-2023-26324 State: PUBLISHED Published: 2024-08-28T07:28:35.809Z Last Updated: 2024-08-28T13:47:11.451Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Xiaomi Products: GetApps application Problem Types: A code execution vulnerability exists Description: A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://trust.mi.com/misrc/bulletins/advisory?cveId=544
CVE ID: CVE-2023-26325 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:23:05.312Z Vendors: n/a Products: ReviewX WordPress Plugin Problem Types: Authenticated SQL Injection Description: The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValue' and 'selectedColumns' parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-2
CVE ID: CVE-2023-26326 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:21:39.655Z Vendors: n/a Products: BuddyForms WordPress Plugin Problem Types: Deserialization of Untrusted Data Description: The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. An unauthenticated attacker could leverage this issue to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
chain is also present. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-7
CVE ID: CVE-2023-26327 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:15:38.066Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/se
le. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.html
CVE ID: CVE-2023-26328 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:15:28.104Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-787 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.html
CVE ID: CVE-2023-26329 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:15:20.892Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/se
CVE ID: CVE-2023-26330 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:15:10.844Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-787 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.html
CVE ID: CVE-2023-26331 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:15:04.105Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/se
CVE ID: CVE-2023-26332 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:14:52.525Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/se
CVE ID: CVE-2023-26333 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:14:38.564Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Contai
CVE ID: CVE-2023-26334 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:14:26.576Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-824 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.ht
ogram Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.html
CVE ID: CVE-2023-26335 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:14:20.005Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Contai
CVE ID: CVE-2023-26336 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:14:10.246Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-416 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.html
CVE ID: CVE-2023-26337 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:14:00.976Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-121 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.html
CVE ID: CVE-2023-26338 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:13:47.883Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/
file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.html
CVE ID: CVE-2023-26339 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:13:36.581Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/
CVE ID: CVE-2023-26340 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:13:19.522Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/
CVE ID: CVE-2023-26341 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:13:10.790Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/
CVE ID: CVE-2023-26342 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:13:01.919Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/
CVE ID: CVE-2023-26343 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:12:52.146Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/
CVE ID: CVE-2023-26344 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:12:42.302Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-824 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hel
a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb23-20.html
CVE ID: CVE-2023-26345 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:12:32.884Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/
CVE ID: CVE-2023-26346 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-03-05T19:12:22.783Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/