Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4055 State: PUBLISHED Published: 2023-08-01T15:01:20.220Z Last Updated: 2025-02-13T17:08:29.774Z Vendors: Mozilla Products: Firefox, Firefox ESR Problem Types: Cookie jar overflow caused unexpected cookie jar state Description: When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1782561 - https://www.mozilla.org/security/advisories/mfsa2023-29/ - https://www.mozilla.org/security/advisories/mfsa2023-30/ - https://www.mozilla.org/security/advisories/mfsa2023-31/ - https://www.debian.org/security/2023/dsa-5464 - https://www.debian.org/security/2023/dsa-5469 - https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html
CVE ID: CVE-2023-4056 State: PUBLISHED Published: 2023-08-01T15:01:39.855Z Last Updated: 2025-02-13T17:08:30.394Z Vendors: Mozilla Products: Firefox, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 Description: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1. Additional Analy
rbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1820587%2C1824634%2C1839235%2C1842325%2C1843847 - https://www.mozilla.org/security/advisories/mfsa2023-29/ - https://www.mozilla.org/security/advisories/mfsa2023-30/ - https://www.mozilla.org/security/advisories/mfsa2023-31/ - https://www.debian.org/security/2023/dsa-5464 - https://www.debian.org/security/2023/dsa-5469 - https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html
CVE ID: CVE-2023-4057 State: PUBLISHED Published: 2023-08-01T15:01:52.916Z Last Updated: 2024-10-22T14:24:10.840Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 Description: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
R < 115.1, and Thunderbird < 115.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1841682 - https://www.mozilla.org/security/advisories/mfsa2023-29/ - https://www.mozilla.org/security/advisories/mfsa2023-31/ - https://www.mozilla.org/security/advisories/mfsa2023-33/
CVE ID: CVE-2023-4058 State: PUBLISHED Published: 2023-08-01T15:02:02.544Z Last Updated: 2025-02-13T17:08:34.872Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 116 Description: Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1819160%2C1828024 - https://www.mozilla.org/security/advisories/mfsa2023-29/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-4059 State: PUBLISHED Published: 2023-09-04T11:26:55.285Z Last Updated: 2025-03-06T16:06:23.944Z Vendors: Unknown Products: Profile Builder Problem Types: CWE-862 Missing Authorization, CWE-352 Cross-Site Request Forgery (CSRF) Description: The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fc719d12-2f58-4d1f-b696-0f937e706842
CVE ID: CVE-2023-4060 State: PUBLISHED Published: 2023-09-11T19:46:08.218Z Last Updated: 2025-04-23T16:16:41.816Z Vendors: Unknown Products: WP Adminify Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Adminify WordPress plugin before 3.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/88745c9b-1c20-4004-89f6-d9ee223651f2
CVE ID: CVE-2023-4061 State: PUBLISHED Published: 2023-11-08T00:56:05.124Z Last Updated: 2025-11-07T10:37:04.606Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat JBoss Enterprise Application Platform 8 Problem Types: CWE-200 Description: A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system
ser could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:5484 - https://access.redhat.com/errata/RHSA-2023:5485 - https://access.redhat.com/errata/RHSA-2023:5486 - https://access.redhat.com/errata/RHSA-2023:5488 - https://access.redhat.com/security/cve/CVE-2023-4061 - https://bugzilla.redhat.com/show_bug.cgi?id=2228608
CVE ID: CVE-2023-4063 State: PUBLISHED Published: 2024-03-22T17:27:31.269Z Last Updated: 2025-03-28T19:34:36.021Z Vendors: HP Inc. Products: Certain HP OfficeJet Pro Printers Description: Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_10321463-10321488-16/hpsbpi03927
CVE ID: CVE-2023-4065 State: PUBLISHED Published: 2023-09-26T13:25:23.092Z Last Updated: 2025-11-20T19:52:24.900Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: RHEL-8 based Middleware Containers, Red Hat AMQ Broker 7 Problem Types: CWE-117 Description: A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:4
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:4720 - https://access.redhat.com/security/cve/CVE-2023-4065 - https://bugzilla.redhat.com/show_bug.cgi?id=2224630
CVE ID: CVE-2023-4066 State: PUBLISHED Published: 2023-09-27T20:54:42.212Z Last Updated: 2025-11-20T19:52:23.622Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: RHEL-8 based Middleware Containers, Red Hat AMQ Broker 7 Problem Types: CWE-313 Description: A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:4720 - https://acce
ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:4720 - https://access.redhat.com/security/cve/CVE-2023-4066 - https://bugzilla.redhat.com/show_bug.cgi?id=2224677
CVE ID: CVE-2023-4067 State: PUBLISHED Published: 2023-08-02T08:35:29.439Z Last Updated: 2025-02-05T19:38:06.944Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: magepeopleteam Products: Bus Ticket Booking with Seat Reservation Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_date' and 'tab_date_r' parameters in versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to i
.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ff2855cb-e4a8-4412-af24-4cee03ae2d43?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2945247%40bus-ticket-booking-with-seat-reservation&new=2945247%40bus-ticket-booking-with-seat-reservation&sfp_email=&sfph_mail=
CVE ID: CVE-2023-4068 State: PUBLISHED Published: 2023-08-03T00:27:46.212Z Last Updated: 2025-02-13T17:08:37.919Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1466183 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EG
y/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4069 State: PUBLISHED Published: 2023-08-03T00:27:46.544Z Last Updated: 2025-02-13T17:08:39.200Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1465326 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/
security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4070 State: PUBLISHED Published: 2023-08-03T00:27:46.683Z Last Updated: 2025-02-13T17:08:40.396Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1462951 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EG
CVE ID: CVE-2023-4071 State: PUBLISHED Published: 2023-08-03T00:27:46.864Z Last Updated: 2025-02-13T17:08:40.991Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1458819 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorapro
//www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4072 State: PUBLISHED Published: 2023-08-03T00:27:47.058Z Last Updated: 2025-02-13T17:08:41.521Z Vendors: Google Products: Chrome Problem Types: Out of bounds read and write Description: Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1464038 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@l
64038 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4073 State: PUBLISHED Published: 2023-08-03T00:27:47.197Z Last Updated: 2025-02-13T17:08:42.154Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1456243 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-annou
om/1456243 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4074 State: PUBLISHED Published: 2023-08-03T00:27:47.344Z Last Updated: 2025-02-13T17:08:43.161Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1464113 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorap
s://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4075 State: PUBLISHED Published: 2023-08-03T00:27:47.485Z Last Updated: 2025-02-13T17:08:44.278Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1457757 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/messag
g/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4076 State: PUBLISHED Published: 2023-08-03T00:27:47.625Z Last Updated: 2025-02-13T17:08:44.809Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1459124 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
bian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4077 State: PUBLISHED Published: 2023-08-03T00:27:47.743Z Last Updated: 2025-02-13T17:08:45.354Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1451146 - https://www.debian.org/security/2023/dsa
om/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1451146 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4078 State: PUBLISHED Published: 2023-08-03T00:27:47.863Z Last Updated: 2025-02-13T17:08:45.960Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1461895 - https://www.debian.org/security/2023/dsa
om/2023/08/stable-channel-update-for-desktop.html - https://crbug.com/1461895 - https://www.debian.org/security/2023/dsa-5467 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-4088 State: PUBLISHED Published: 2023-09-20T02:26:43.901Z Last Updated: 2024-09-24T18:27:11.655Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Mitsubishi Electric Corporation Products: GX Works3, AL-PCS/WIN-E, CPU Module Logging Configuration Tool, EZSocket, FR Configurator2, FX Configurator-EN, FX Configurator-EN-L, FX Configurator-FP, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GT SoftGOT1000 Version3, GT SoftGOT2000 Version1, GX LogViewer, GX Works2, MELSOFT FieldDeviceConfigurator, MELSOFT iQ AppPortal, MELSOFT MaiLab, MELSOFT Navigator, MELSOFT Update Manager, MX Component, MX Sheet, PX Developer, RT ToolBox3, RT
Portal, MELSOFT MaiLab, MELSOFT Navigator, MELSOFT Update Manager, MX Component, MX Sheet, PX Developer, RT ToolBox3, RT VisualBox, Data Transfer, Data Transfer Classic Problem Types: CWE-276 Description: Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation multiple FA engineering software products allows a malicious local attacker to execute a malicious code, resulting in information disclosure, tampering with and deletion, or a denial-of-service (DoS) condition, if the product is installed in a folder other than the default installation folder. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-010_en.pdf - https://jvn.jp/vu/JVNVU96447193/index.html - https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-03
CVE ID: CVE-2023-4089 State: PUBLISHED Published: 2023-10-17T06:00:28.908Z Last Updated: 2025-02-27T20:40:32.064Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: WAGO Products: Compact Controller CC100, Edge Controller, PFC100, PFC200, Touch Panel 600 Advanced Line, Touch Panel 600 Marine Line, Touch Panel 600 Standard Line Problem Types: CWE-610 Description: On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
logged in a different log file than expected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-046/