Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/ - https://security.netapp.com/advisory/ntap-20230609-0009/ - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845 - http://seclists.org/fulldisclosure/2023/Jul/52 - http://seclists.org/fulldisclosure/2023/Jul/48 - http://seclists.org/fulldisclosure/2023/Jul/47 - https://security.gentoo.org/glsa/202310-12 - https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html
CVE ID: CVE-2023-28322 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2024-08-02T12:38:25.091Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-200 Description: An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously wasused to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The pr
se it to misbehave and either send off the wrong data or use memory after free or similar in the second transfer. The problem exists in the logic for a reused handle when it is (expected to be) changed from a PUT to a POST. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1954658 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F4I75RDGX5ULSSCBE5BF3P5I5SFO7ULQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LIWHWKOVH24COGGBCVOWDXXIUPKOMK/ - https://security.netapp.com/advisory/ntap-20230609-0009/ - https://support.apple.com/kb/HT213843 - https:
WDXXIUPKOMK/ - https://security.netapp.com/advisory/ntap-20230609-0009/ - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845 - http://seclists.org/fulldisclosure/2023/Jul/52 - http://seclists.org/fulldisclosure/2023/Jul/48 - http://seclists.org/fulldisclosure/2023/Jul/47 - https://security.gentoo.org/glsa/202310-12 - https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html
CVE ID: CVE-2023-28323 State: PUBLISHED Published: 2023-06-30T23:40:30.788Z Last Updated: 2025-05-05T16:02:45.196Z Vendors: Ivanti Products: Ivanti Endpoint Manager Description: A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS (Operating System) vulnerabilities to escalate privileges on the machine or be used as a stepping stone to get to other network attached machines. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/SA-2023-06-20-CVE-2023-28323
CVE ID: CVE-2023-28324 State: PUBLISHED Published: 2023-06-30T23:40:19.571Z Last Updated: 2024-09-25T13:11:44.228Z Vendors: Ivanti Products: Ivanti Endpoint Manager Description: A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/SA-2023-06-06-CVE-2023-28324
CVE ID: CVE-2023-28325 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:59:31.005Z Vendors: n/a Products: Rocket.Chat Problem Types: CWE-285 Description: An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to manipulate the rid parameter and change the updateMessage method that only checks whether the user is allowed to edit message in the target room. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1406479
CVE ID: CVE-2023-28326 State: PUBLISHED Published: 2023-03-28T12:36:11.566Z Last Updated: 2024-10-23T15:13:50.704Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: CWE-306 Description: Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0 Description: Attacker can elevate their privileges in any room Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/r9vn12dp5yofn1h3wd5x4h7c3vmmr5d9
CVE ID: CVE-2023-28327 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-03-19T15:35:50.422Z Vendors: n/a Products: Linux Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2177382
CVE ID: CVE-2023-28328 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-03-19T15:34:25.493Z Vendors: n/a Products: Linux Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2177389 - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - http
/bugzilla.redhat.com/show_bug.cgi?id=2177389 - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2023-28329 State: PUBLISHED Published: 2023-03-23T00:00:00 Last Updated: 2024-08-02T12:38:24.625Z Problem Types: CWE-89 Description: Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179406 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/ - https://moodle.org/mod/forum/discuss.php?d=445061
CVE ID: CVE-2023-28330 State: PUBLISHED Published: 2023-03-23T00:00:00 Last Updated: 2024-08-02T12:38:24.640Z Problem Types: CWE-20 Description: Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179412 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/ - https://moodle.org/mod/forum/discuss.php?d=445062
CVE ID: CVE-2023-28331 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T20:20:09.723Z Problem Types: CWE-79 Description: Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179418 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/ - https://moodle.org/mod/forum/discuss.php?d=445063
CVE ID: CVE-2023-28332 State: PUBLISHED Published: 2023-03-23T00:00:00 Last Updated: 2024-08-02T12:38:24.907Z Problem Types: CWE-79 Description: If the algebra filter was enabled but not functional (eg the necessary binaries were missing from the server), it presented an XSS risk. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179419 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/ - https://moodle.org/mod/forum/discuss.php?d=445064
CVE ID: CVE-2023-28333 State: PUBLISHED Published: 2023-03-23T00:00:00 Last Updated: 2024-08-02T12:38:24.955Z Problem Types: CWE-94 Description: The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179422 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/ - https://moodle.org/mod/forum/discuss.php?d=445065
CVE ID: CVE-2023-28334 State: PUBLISHED Published: 2023-03-23T00:00:00 Last Updated: 2024-08-02T12:38:24.953Z Problem Types: CWE-200 Description: Authenticated users were able to enumerate other users' names via the learning plans page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179423 - https://moodle.org/mod/forum/discuss.php?d=445066
CVE ID: CVE-2023-28335 State: PUBLISHED Published: 2023-03-23T00:00:00 Last Updated: 2024-08-02T12:38:24.882Z Problem Types: CWE-352 Description: The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179424 - https://moodle.org/mod/forum/discuss.php?d=445067
CVE ID: CVE-2023-28336 State: PUBLISHED Published: 2023-03-23T00:00:00 Last Updated: 2024-08-02T12:38:25.188Z Problem Types: CWE-200 Description: Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179426 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF/ - https://moodle.org/mod/forum/discuss.php?d=445068
CVE ID: CVE-2023-28337 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:21:15.899Z Vendors: n/a Products: NETGEAR Nighthawk WiFi6 Router (RAX30) Problem Types: Signature Bypass Description: When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drupal9.tenable.com/security/research/tra-2023-12
CVE ID: CVE-2023-28338 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:20:22.028Z Vendors: n/a Products: NETGEAR Nighthawk WiFi6 Router (RAX30) Problem Types: Denial of Service Description: Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting in the device becoming unusable until it is rebooted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drupal9.tenable.com/securi
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drupal9.tenable.com/security/research/tra-2023-12
CVE ID: CVE-2023-28339 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T19:38:37.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Duncaen/OpenDoas/issues/106
CVE ID: CVE-2023-28340 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-10T20:57:23.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://manageengine.com - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-28340.html
CVE ID: CVE-2023-28341 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-10T20:56:00.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://manageengine.com - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2023-28341.html
CVE ID: CVE-2023-28342 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-13T16:00:12.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://manageengine.com - https://www.manageengine.com/products/self-service-password/advisory/CVE-2023-28342.html
CVE ID: CVE-2023-28343 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T15:13:32.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ahmedalroky/Disclosures/blob/main/apesystems/os_command_injection.md - https://apsystems.com - http://packetstormsecurity.com/files/171775/Altenergy-Power-Control-Software-C1.2.5-Command-Injection.html
CVE ID: CVE-2023-28344 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T16:25:35.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops and to submit falsified screenshots on behalf of students. Attackers are able to view screenshots of student desktops without their consent. These screenshots may potentially contain sensitive/personal data. Attackers can also rapidly submit falsified images, hiding the actual contents of student desktops from the Teacher Console.
ckers can also rapidly submit falsified images, hiding the actual contents of student desktops from the Teacher Console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28345 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T14:37:38.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the teacher's Console password in cleartext via an API endpoint accessible from localhost. Attackers with physical access to the Teacher Console can open a web browser, navigate to the affected endpoint and obtain the teacher's password. This enables them to log into the Teacher Console and begin trivially attacking student machines. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
n trivially attacking student machines. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28346 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-14T14:30:13.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate with the private API endpoints exposed at /login, /consoleSettings, /console, etc. despite Virtual Host Routing being used to block this access. Remote attackers can interact with private pages on the web server, enabling them to perform privileged actions such as logging into the console and changing console settings if they have valid credentials. Additional Analyst Notes: - CVE Program Container: - CISA AD
d changing console settings if they have valid credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28347 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T21:20:23.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a proof-of-concept script that functions similarly to a Student Console, providing unauthenticated attackers with the ability to exploit XSS vulnerabilities within the Teacher Console application and achieve remote code execution as NT AUTHORITY/SYSTEM on all connected Student Consoles and the Teacher Console in a Zero Click manner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
Console in a Zero Click manner. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28348 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T21:19:08.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-in-the-middle attack on either a connected student or teacher, enabling them to intercept student keystrokes or modify executable files being sent from teachers to students. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities
/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28349 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T21:17:52.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a crafted program that functions similarly to the Teacher Console. This can compel Student Consoles to connect and put themselves at risk automatically. Connected Student Consoles can be compelled to write arbitrary files to arbitrary locations on disk with NT AUTHORITY/SYSTEM level permissions, enabling remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
ng remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28350 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T20:44:08.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. Attacker-supplied input is not validated/sanitized before being rendered in both the Teacher and Student Console applications, enabling an attacker to execute JavaScript in these applications. Due to the rich and highly privileged functionality offered by the Teacher Console, the ability to silently exploit Cross Site Scripting (XSS) on the Teacher Machine enables remote code execution on any connected student machine (and the teacher's machine). Additional An
eacher Machine enables remote code execution on any connected student machine (and the teacher's machine). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28351 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T20:38:48.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with the Student application installed is logged to a world-readable directory. A local attacker can trivially extract these cleartext keystrokes, potentially enabling them to obtain PII and/or to compromise personal accounts owned by the victim. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://researc
- CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28352 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T20:27:28.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/