Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
authorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/redis/redis/security/advisories/GHSA-ghmp-889m-7cvx - https://github.com/redis/redis/commit/03345ddc7faf7af079485f2cbe5d17a1611cbce1 - https://lists.debian.org/debian-lts-announce/2023/10/msg00032.html - https://lists.fedoraproject.org/archives
611cbce1 - https://lists.debian.org/debian-lts-announce/2023/10/msg00032.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/464JPNBWE433ZGYXO3KN72VR3KJPWHAW/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BNEK2K4IE7MPKRD6H36JXZMJKYS6I5GQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DZMGTTV5XM4LA66FSIJSETNBBRRPJYOQ/ - https://security.netapp.com/advisory/ntap-20231116-0014/
CVE ID: CVE-2023-45146 State: PUBLISHED Published: 2023-10-18T21:56:55.614Z Last Updated: 2024-08-29T17:09:23.119Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: xuexueli Products: xxl-rpc Problem Types: CWE-502 Description: XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the server and provide malicious serialized objects that, once deserialized, force it to execute arbitrary code. This can be abused to take control of the machine the server is running by way of remote code
to execute arbitrary code. This can be abused to take control of the machine the server is running by way of remote code execution. This issue has not been fixed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2023-052_XXL-RPC/
CVE ID: CVE-2023-45147 State: PUBLISHED Published: 2023-10-16T20:26:25.200Z Last Updated: 2024-09-13T19:00:16.296Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: discourse Products: discourse Problem Types: CWE-200 Description: Discourse is an open source community platform. In affected versions any user can create a topic and add arbitrary custom fields to a topic. The severity of this vulnerability depends on what plugins are installed and how the plugins uses topic custom fields. For a default Discourse installation with the default plugins, this vulnerability has no impact. The problem has been patched in the latest version of Discourse. Users are advis
gins, this vulnerability has no impact. The problem has been patched in the latest version of Discourse. Users are advised to update to version 3.1.1 if they are on the stable branch or 3.2.0.beta2 if they are on the beta branch. Users unable to upgrade should disable any plugins that access topic custom fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-wm89-m359-f9qv
CVE ID: CVE-2023-45148 State: PUBLISHED Published: 2023-10-16T18:51:56.827Z Last Updated: 2024-09-16T14:50:57.166Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-307 Description: Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier than intended. Users are advised to upgrade to versions 25.0.11, 26.0.6 or 27.1.0. Users unable to upgrade should change their config setting `memcache.distributed` to `\OC\Memcache\Redis` and install Redis instead of Memcached. Add
d change their config setting `memcache.distributed` to `\OC\Memcache\Redis` and install Redis instead of Memcached. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xmhp-7vr4-hp63 - https://github.com/nextcloud/server/pull/40293 - https://hackerone.com/reports/2110945
CVE ID: CVE-2023-45149 State: PUBLISHED Published: 2023-10-16T19:03:20.324Z Last Updated: 2024-09-16T14:40:06.105Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-307 Description: Nextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection of public talk conversation passwords can be bypassed, as there was an endpoint validating the conversation password without registering bruteforce attempts. It is recommended that the Nextcloud Talk app is upgraded to 15.0.8, 16.0.6 or 17.1.1. There are no known workarounds for this vulnerability. Additional Analy
alk app is upgraded to 15.0.8, 16.0.6 or 17.1.1. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7rf8-pqmj-rpqv - https://github.com/nextcloud/spreed/pull/10545 - https://hackerone.com/reports/2094473
CVE ID: CVE-2023-45150 State: PUBLISHED Published: 2023-10-16T19:06:03.674Z Last Updated: 2024-09-16T14:31:05.835Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-400 Description: Nextcloud calendar is a calendar app for the Nextcloud server platform. Due to missing precondition checks the server was trying to validate strings of any length as email addresses even when megabytes of data were provided, eventually making the server busy and unresponsive. It is recommended that the Nextcloud Calendar app is upgraded to 4.4.4. The only workaround for users unable to upgrade is to disable the calendar app
tcloud Calendar app is upgraded to 4.4.4. The only workaround for users unable to upgrade is to disable the calendar app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-r936-8gwm-w452 - https://github.com/nextcloud/calendar/pull/5358 - https://hackerone.com/reports/2058337
CVE ID: CVE-2023-45151 State: PUBLISHED Published: 2023-10-16T18:41:28.713Z Last Updated: 2024-09-16T14:57:44.642Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-312 Description: Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gained access to the server to potentially elevate their privilege. This issue has been addressed and users are recommended to upgrade their Nextcloud Server to version 25.0.8, 26.0.3 or 27.0.1. There are no known workarounds for this vulnerability. Additional Analyst Note
rver to version 25.0.8, 26.0.3 or 27.0.1. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hhgv-jcg9-p4m9 - https://github.com/nextcloud/server/pull/38398 - https://hackerone.com/reports/1994324
CVE ID: CVE-2023-45152 State: PUBLISHED Published: 2023-10-16T23:34:28.735Z Last Updated: 2024-09-13T20:11:31.632Z Severity: LOW (CVSS 2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: engelsystem Products: engelsystem Problem Types: CWE-918 Description: Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a port scan against the local environment. This vulnerability has been fixed in commit ee7d30b33. If a patch cannot be deployed, operators should ensure that no HTTP(s) services listen on localhost and/or systems only reachable from the host running the engelsystem software. If such services are nec
sten on localhost and/or systems only reachable from the host running the engelsystem software. If such services are necessary, they should utilize additional authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/engelsystem/engelsystem/security/advisories/GHSA-jj9g-75wf-6ppf - https://github.com/engelsystem/engelsystem/commit/ee7d30b33935ea001705f438fec8ffd05734f295
CVE ID: CVE-2023-45158 State: PUBLISHED Published: 2023-10-16T07:53:52.134Z Last Updated: 2024-09-18T14:02:11.090Z Vendors: web2py Products: web2py Problem Types: OS command injection Description: An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://web2py.com/ - http://web2py.com/init/default/download - https://github.com/web2py/web2py/commit/936e2260b0c34c44e2f3674a893e96d2a7fad0a
ttp://web2py.com/init/default/download - https://github.com/web2py/web2py/commit/936e2260b0c34c44e2f3674a893e96d2a7fad0a3 - https://jvn.jp/en/jp/JVN80476432/
CVE ID: CVE-2023-45159 State: PUBLISHED Published: 2023-10-05T10:11:20.065Z Last Updated: 2025-06-18T18:40:58.223Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: 1E Products: 1E Client Problem Types: CWE-59 Description: 1E Client installer can perform arbitrary file deletion on protected files. A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. A hotfix is available from the 1E support portal that forces the 1E Client to check for a symbolic link or junction and if it finds one refuses to use that path and instead creates a path invo
nt to check for a symbolic link or junction and if it finds one refuses to use that path and instead creates a path involving a random GUID. for v8.1 use hotfix Q23097 for v8.4 use hotfix Q23105 for v9.0 use hotfix Q23115 for SaaS customers, use 1EClient v23.7 plus hotfix Q23121 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2001/
CVE ID: CVE-2023-45160 State: PUBLISHED Published: 2023-10-05T15:12:20.743Z Last Updated: 2025-06-18T18:41:01.614Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: 1E Products: 1E Client Problem Types: CWE-552 Description: In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmful script. by replacing a resource script file created by an instruction at run time with a malicious script. The 1E Client's temporary directory is now locked down in the released patch. Resolution: This has been fixed in patch Q23094 This issue has also been fixed in the Mac Client in updated versions of
Resolution: This has been fixed in patch Q23094 This issue has also been fixed in the Mac Client in updated versions of Non-Windows release v8.1.2.62 - please re-download from the 1E Support site. Customers with Mac Client versions higher than v8.1 will need to upgrade to v23.11 to remediate this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2002/
CVE ID: CVE-2023-45161 State: PUBLISHED Published: 2023-11-06T12:13:09.083Z Last Updated: 2025-06-18T18:41:05.819Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: 1E Products: Platform Problem Types: CWE-20 Description: The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on Windows clients. To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-URLResponseTime ins
this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-URLResponseTime instruction to v20.1 by uploading it through the 1E Platform instruction upload UI Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2003/ - https://exchange.1e.com/product-packs/network/
CVE ID: CVE-2023-45162 State: PUBLISHED Published: 2023-10-13T12:48:01.359Z Last Updated: 2025-06-18T18:41:07.315Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: 1E Products: 1E Platform Problem Types: CWE-89 Description: Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution. Application of the relevant hotfix remediates this issue. for v8.1.2 apply hotfix Q23166 for v8.4.1 apply hotfix Q23164 for v9.0.1 apply hotfix Q23169 SaaS implementations on v23.7.1 will automatically have hotfix Q23173 applied. Customers with SaaS versions below this are urged to upgrade urgently - please contact 1E to arra
hotfix Q23173 applied. Customers with SaaS versions below this are urged to upgrade urgently - please contact 1E to arrange this Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2004/
CVE ID: CVE-2023-45163 State: PUBLISHED Published: 2023-11-06T12:19:20.662Z Last Updated: 2025-06-18T18:41:08.905Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: 1E Products: Platform Problem Types: CWE-20 Description: The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on Windows clients. To remediate this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-CommandLinePing i
e this issue download the updated Network product pack from the 1E Exchange and update the 1E-Exchange-CommandLinePing instruction to v18.1 by uploading it through the 1E Platform instruction upload UI Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2005/ - https://exchange.1e.com/product-packs/network/
CVE ID: CVE-2023-45165 State: PUBLISHED Published: 2023-12-22T15:51:40.490Z Last Updated: 2025-04-17T20:29:20.544Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. IBM X-Force ID: 267963. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7100970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267963
CVE ID: CVE-2023-45166 State: PUBLISHED Published: 2023-12-13T23:01:25.905Z Last Updated: 2024-08-02T20:14:19.981Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: AIX Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to obtain elevated privileges. IBM X-Force ID: 267964. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7095022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267964
CVE ID: CVE-2023-45167 State: PUBLISHED Published: 2023-11-10T03:52:10.595Z Last Updated: 2024-09-03T17:42:37.442Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX's 7.3 Python implementation could allow a non-privileged local user to exploit a vulnerability to cause a denial of service. IBM X-Force ID: 267965. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7068084 - https://aix.software.ibm.com/aix/efixes/security/python_advisory6.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/267965
CVE ID: CVE-2023-45168 State: PUBLISHED Published: 2023-12-01T14:10:24.508Z Last Updated: 2024-08-02T20:14:19.863Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: AIX Problem Types: CWE-119 Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 267966. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7086090 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267966
CVE ID: CVE-2023-45169 State: PUBLISHED Published: 2024-01-11T02:03:17.669Z Last Updated: 2025-06-17T21:09:12.071Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the pmsvcs kernel extension to cause a denial of service. IBM X-Force ID: 267967. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267967
CVE ID: CVE-2023-45170 State: PUBLISHED Published: 2023-12-13T23:05:51.491Z Last Updated: 2025-05-22T18:02:53.093Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: AIX Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piobe command to escalate privileges or cause a denial of service. IBM X-Force ID: 267968. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7095022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267968
CVE ID: CVE-2023-45171 State: PUBLISHED Published: 2024-01-11T02:07:18.677Z Last Updated: 2025-06-17T21:09:12.209Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to cause a denial of service. IBM X-Force ID: 267969. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267969
CVE ID: CVE-2023-45172 State: PUBLISHED Published: 2023-12-19T22:12:21.055Z Last Updated: 2024-08-02T20:14:19.728Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to cause a denial of service. IBM X-Force ID: 267970. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7099314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267970
CVE ID: CVE-2023-45173 State: PUBLISHED Published: 2024-01-11T01:59:38.562Z Last Updated: 2025-06-17T21:09:12.350Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial of service. IBM X-Force ID: 267971. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267971
CVE ID: CVE-2023-45174 State: PUBLISHED Published: 2023-12-13T23:04:25.351Z Last Updated: 2024-08-02T20:14:19.804Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: AIX Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the qdaemon command to escalate privileges or cause a denial of service. IBM X-Force ID: 267972. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7095022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267972
CVE ID: CVE-2023-45175 State: PUBLISHED Published: 2024-01-11T01:57:12.466Z Last Updated: 2025-06-17T21:09:12.550Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: AIX Problem Types: CWE-20 Description: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 267973. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7105282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267973
CVE ID: CVE-2023-45176 State: PUBLISHED Published: 2023-10-14T15:35:21.138Z Last Updated: 2024-09-16T18:34:37.866Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: App Connect Enterprise, Integration Bus Problem Types: CWE-20 Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for integration nodes on Windows. IBM X-Force ID: 247998. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7051448 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ment: References: - https://www.ibm.com/support/pages/node/7051448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267998
CVE ID: CVE-2023-45177 State: PUBLISHED Published: 2024-03-20T17:29:59.398Z Last Updated: 2024-08-02T20:14:19.779Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ Problem Types: CWE-20 Description: IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due to an error within the MQ clustering logic. IBM X-Force ID: 268066. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7063661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268066
CVE ID: CVE-2023-45178 State: PUBLISHED Published: 2023-12-03T17:29:29.053Z Last Updated: 2025-02-13T17:13:51.347Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7087207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/268073 - https://security.netapp.com/advisory/ntap-20240112-0004/