Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41107 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-30T17:20:31.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting (XSS)attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-020.txt - https://www.syss.de/pentest-blog/sicherheitsschwachstellen-im-tef-haendlerportal-syss-2023-020/-021
CVE ID: CVE-2023-41108 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-30T17:18:56.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: TEF portal 2023-07-17 is vulnerable to authenticated remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-021.txt - https://www.syss.de/pentest-blog/sicherheitsschwachstellen-im-tef-haendlerportal-syss-2023-020/-021
CVE ID: CVE-2023-41109 State: PUBLISHED Published: 2023-08-28T00:00:00 Last Updated: 2024-08-02T18:54:04.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/ - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-019.txt - http://seclists.org/fulldisclosure/2023/Nov/12 - http://packetstormsecurity.com/files/175945/SmartNode-SN200-3.21.2-23021-OS-Command-Injection.html
CVE ID: CVE-2023-41111 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-17T13:02:06.249Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). Improper handling of a length parameter inconsistency can cause abnormal termination of a mobile phone. This occurs in the RLC task and RLC module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
ccurs in the RLC task and RLC module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-41112 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-04T15:17:47.897Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). A buffer copy, without checking the size of the input, can cause abnormal termination of a mobile phone. This occurs in the RLC task and RLC module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
occurs in the RLC task and RLC module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-41113 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T18:54:02.923Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It allows an authenticated user to to obtain information about whether certain files exist on disk, what errors if any occur when attempting to read them, and some limited information about their contents (regardless of permissions). This can occur when a superuser has configured
me limited information about their contents (regardless of permissions). This can occur when a superuser has configured one or more directories for filesystem access via CREATE DIRECTORY and adopted certain non-default settings for log_line_prefix and log_connections. Additional Analyst Notes: - CVE Program Container: References: - https://www.enterprisedb.com/docs/security/advisories/cve202341113/
CVE ID: CVE-2023-41114 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T18:54:03.878Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the functions get_url_as_text and get_url_as_bytea that are publicly executable, thus permitting an authenticated user to read any file from the local filesystem or remote system regardless of that user's permissions. Additional Analyst Notes: - CVE Program Container:
l filesystem or remote system regardless of that user's permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.enterprisedb.com/docs/security/advisories/cve202341114/
CVE ID: CVE-2023-41115 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-28T17:12:52.165Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. When using UTL_ENCODE, an authenticated user can read any large object, regardless of that user's permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.enterprisedb.com/docs/security/advisories/cve202341115/
CVE ID: CVE-2023-41116 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T18:54:02.990Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It allows an authenticated user to refresh any materialized view, regardless of that user's permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.enterprisedb.com/docs/security/advisories/cve202341116/
CVE ID: CVE-2023-41117 State: PUBLISHED Published: 2023-12-12T00:00:00.000Z Last Updated: 2025-05-27T14:38:38.603Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately secured against search_path attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.enterprisedb.com/docs/security/advis
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.enterprisedb.com/docs/security/advisories/cve202341117/
CVE ID: CVE-2023-41118 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-11-26T17:07:36.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It may allow an authenticated user to bypass authorization requirements and access underlying implementation functions. When a superuser has configured file locations using CREATE DIRECTORY, these functions allow users to take a wide range of actions, including read, write, copy, rename, and delete. Additional Analyst Notes: - CVE Program Container: -
range of actions, including read, write, copy, rename, and delete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.enterprisedb.com/docs/security/advisories/cve202341118/
CVE ID: CVE-2023-41119 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T18:54:03.525Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the function _dbms_aq_move_to_exception_queue that may be used to elevate a user's privileges to superuser. This function accepts the OID of a table, and then accesses that table as the superuser by using SELECT and DML commands. Additional Analyst Notes: - CVE Program C
nd then accesses that table as the superuser by using SELECT and DML commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.enterprisedb.com/docs/security/advisories/cve202341119/
CVE ID: CVE-2023-41120 State: PUBLISHED Published: 2023-12-12T00:00:00 Last Updated: 2024-08-02T18:54:04.516Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It permits an authenticated user to use DBMS_PROFILER to remove all accumulated profiling data on a system-wide basis, regardless of that user's permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.enterprisedb.com/docs/security/advisories/cve2
itional Analyst Notes: - CVE Program Container: References: - https://www.enterprisedb.com/docs/security/advisories/cve202341120/
CVE ID: CVE-2023-41121 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T17:57:16.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Denial_of_Service_ID-144162.pdf - https://semonto.com/tools/website-reachability-check?test=325b4e588e64536b21664d24640f547
CVE ID: CVE-2023-41122 State: REJECTED Published: N/A Last Updated: 2023-08-23T14:54:24.247957Z Description: No description available.
CVE ID: CVE-2023-41123 State: REJECTED Published: N/A Last Updated: 2023-08-23T14:56:58.411477Z Description: No description available.
CVE ID: CVE-2023-41124 State: REJECTED Published: N/A Last Updated: 2023-08-23T14:57:01.767899Z Description: No description available.
CVE ID: CVE-2023-41125 State: REJECTED Published: N/A Last Updated: 2023-08-23T14:57:04.379658Z Description: No description available.
CVE ID: CVE-2023-41126 State: REJECTED Published: N/A Last Updated: 2023-08-23T14:57:06.938138Z Description: No description available.
CVE ID: CVE-2023-41127 State: PUBLISHED Published: 2023-11-30T12:19:01.852Z Last Updated: 2024-08-02T18:54:04.004Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Evergreen Content Poster Products: Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Evergreen Content Poster Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media allows Stored XSS.This issue affects Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media: from n/a through
This issue affects Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media: from n/a through 1.3.6.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/evergreen-content-poster/wordpress-evergreen-content-poster-plugin-1-3-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41128 State: PUBLISHED Published: 2023-11-30T12:16:07.692Z Last Updated: 2025-06-05T13:22:05.372Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Iqonic Design Products: WP Roadmap – Product Feedback Board Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design WP Roadmap – Product Feedback Board allows Stored XSS.This issue affects WP Roadmap – Product Feedback Board: from n/a through 1.0.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-roadmap/wordpress-w
m Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-roadmap/wordpress-wp-roadmap-plugin-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41129 State: PUBLISHED Published: 2023-11-18T22:16:15.050Z Last Updated: 2024-11-20T21:11:30.308Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Patreon Products: Patreon WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/patreon-connect/wordpress-patreon-wordpress-plugin-1-8-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41130 State: PUBLISHED Published: 2024-12-13T14:24:09.320Z Last Updated: 2024-12-13T17:59:10.386Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Premmerce Products: Premmerce User Roles Problem Types: CWE-862 Description: Missing Authorization vulnerability in Premmerce Premmerce User Roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through 1.0.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/premmerce-user-roles/vulnerability/wordpress-premmerce-user-roles-plugin-1-0-12-broken-access-control-vuln
dpress/plugin/premmerce-user-roles/vulnerability/wordpress-premmerce-user-roles-plugin-1-0-12-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41131 State: PUBLISHED Published: 2023-10-12T14:26:20.652Z Last Updated: 2025-02-19T21:21:09.957Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Jonk @ Follow me Darling Products: Sp*tify Play Button for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.10 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/spotify-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-10-cross-site-request-forgery-csrf-vulne
-play-button-for-wordpress/wordpress-sp-tify-play-button-for-wordpress-plugin-2-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-41132 State: PUBLISHED Published: 2024-12-13T14:24:09.830Z Last Updated: 2024-12-13T17:56:31.201Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ShapedPlugin LLC Products: Category Slider for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in ShapedPlugin LLC Category Slider for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Category Slider for WooCommerce: from n/a through 1.4.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-category-slider-grid/vulnerability/wordpress-category
References: - https://patchstack.com/database/wordpress/plugin/woo-category-slider-grid/vulnerability/wordpress-category-slider-for-woocommerce-plugin-1-4-15-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-41133 State: PUBLISHED Published: 2024-12-13T14:24:10.426Z Last Updated: 2024-12-13T17:53:51.137Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Michal Novák Products: Secure Admin IP Problem Types: CWE-290 Description: Authentication Bypass by Spoofing vulnerability in Michal Novák Secure Admin IP allows Functionality Bypass.This issue affects Secure Admin IP: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/secure-admin-ip/vulnerability/wordpress-secure-admin-ip-plugin-2-0-ip-spoofing-vulnerability?_s_id=cve
CVE ID: CVE-2023-41134 State: PUBLISHED Published: 2024-06-04T07:23:37.365Z Last Updated: 2024-08-02T18:54:03.949Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: pluginkollektiv Products: Antispam Bee Problem Types: CWE-290 Description: Authentication Bypass by Spoofing vulnerability in pluginkollektiv Antispam Bee allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Antispam Bee: from n/a through 2.11.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/antispam-bee/wordpress-antispam-bee-plugin-2-11-3-country-ip-restriction-bypass-vulnerabil
ck.com/database/vulnerability/antispam-bee/wordpress-antispam-bee-plugin-2-11-3-country-ip-restriction-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2023-41136 State: PUBLISHED Published: 2023-11-30T12:13:02.773Z Last Updated: 2024-08-02T18:54:03.775Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Laurence/OhMyBox.info Products: Simple Long Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laurence/OhMyBox.Info Simple Long Form allows Stored XSS.This issue affects Simple Long Form: from n/a through 2.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/simple-long-form/wordpress-simple-long-form-plugin-2-2-2-cross-site-scripting-xss-vulner
tack.com/database/vulnerability/simple-long-form/wordpress-simple-long-form-plugin-2-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-41137 State: PUBLISHED Published: 2023-11-09T15:07:51.211Z Last Updated: 2024-10-28T20:48:57.519Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AppsAnywhere Products: AppsAnywhere Client Problem Types: CWE-321 Description: Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.appsanywhere.com/appsanywhere/3.1/2023-11-security-advisory
CVE ID: CVE-2023-41138 State: PUBLISHED Published: 2023-11-09T15:05:24.035Z Last Updated: 2024-09-04T13:38:11.911Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AppsAnywhere Products: AppsAnywhere Client Problem Types: CWE-226 Description: The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.appsanywhere.com/appsanywhere/3.1/2023-11-security-advisory
CVE ID: CVE-2023-41139 State: PUBLISHED Published: 2023-11-23T03:53:09.761Z Last Updated: 2024-08-02T18:54:03.927Z Vendors: Autodesk Products: AutoCAD, Advance Steel and Civil 3D Problem Types: CWE-822 Description: A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018
CVE ID: CVE-2023-41140 State: PUBLISHED Published: 2023-11-23T03:56:11.372Z Last Updated: 2024-08-02T18:54:04.017Z Vendors: Autodesk Products: AutoCAD, Advance Steel and Civil 3D Problem Types: CWE-122 Description: A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018
CVE ID: CVE-2023-41145 State: PUBLISHED Published: 2023-11-22T06:50:57.783Z Last Updated: 2024-08-02T18:54:04.358Z Vendors: Autodesk Products: Customer Portal Description: Autodesk users who no longer have an active license for an account can still access cases for that account. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0020
CVE ID: CVE-2023-41146 State: PUBLISHED Published: 2023-11-22T06:53:36.211Z Last Updated: 2024-08-02T18:54:03.789Z Vendors: Autodesk Products: Customer Portal Description: Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on the same account. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0020
CVE ID: CVE-2023-41149 State: PUBLISHED Published: 2023-09-06T12:35:22.757Z Last Updated: 2024-09-26T20:40:04.712Z Vendors: Thinkingreed Inc. Products: F-RevoCRM Problem Types: OS command injection Description: F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://f-revocrm.jp/2023/08/9394/ - http://jvn.jp/en/jp/JVN78113802/
CVE ID: CVE-2023-41150 State: PUBLISHED Published: 2023-09-06T12:35:41.294Z Last Updated: 2024-09-26T19:46:35.198Z Vendors: Thinkingreed Inc. Products: F-RevoCRM Problem Types: Cross-site scripting (XSS) Description: F-RevoCRM 7.3 series prior to version7.3.8 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://f-revocrm.jp/2023/08/9394/ - http://jvn.jp/en/jp/JVN78113802/
CVE ID: CVE-2023-41151 State: PUBLISHED Published: 2023-12-14T00:00:00.000Z Last Updated: 2025-05-22T17:56:46.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the application to crash when the server wants to send an error packet, while socket is blocked on writing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://industrial.softing.com/fileadmin/psirt/downloads/2023/syt-2023-3.html