Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32514 State: PUBLISHED Published: 2023-11-18T22:24:56.887Z Last Updated: 2025-06-10T13:54:48.844Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Himanshu Parashar Products: Google Site Verification plugin using Meta Tag Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Himanshu Parashar Google Site Verification plugin using Meta Tag.This issue affects Google Site Verification plugin using Meta Tag: from n/a through 1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/google-site-verification-using-meta-tag/wordpress-g
ichment: References: - https://patchstack.com/database/vulnerability/google-site-verification-using-meta-tag/wordpress-google-site-verification-plugin-using-meta-tag-plugin-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32515 State: PUBLISHED Published: 2023-05-18T09:55:27.074Z Last Updated: 2025-01-09T15:14:08.411Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Matt Gibbs Products: Custom Field Suite Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matt Gibbs Custom Field Suite plugin <= 2.6.2.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/custom-field-suite/wordpress-custom-field-suite-plugin-2-6-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32516 State: PUBLISHED Published: 2023-08-24T11:21:17.401Z Last Updated: 2024-09-24T19:27:02.805Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: GloriaFood Products: Restaurant Menu – Food Ordering System – Table Reservation Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.3.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/menu-ordering-reservations/wordpress-restaurant-menu-food-ordering-system-table-reservation-plug
/database/vulnerability/menu-ordering-reservations/wordpress-restaurant-menu-food-ordering-system-table-reservation-plugin-2-3-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32517 State: PUBLISHED Published: 2023-12-29T10:05:16.661Z Last Updated: 2024-08-02T15:18:37.146Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: PluginOps Products: MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder: from n/a through 4.0.9.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mail
9.3. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mailchimp-subscribe-sm/wordpress-mailchimp-subscribe-forms-plugin-4-0-9-1-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-32518 State: PUBLISHED Published: 2023-08-25T08:23:28.201Z Last Updated: 2025-02-19T21:26:05.800Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ono Oogami Products: WP Chinese Conversion Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ono Oogami WP Chinese Conversion plugin <= 1.1.16 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-chinese-conversion/wordpress-wp-chinese-conversion-plugin-1-1-16-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32519 State: PUBLISHED Published: 2024-12-13T14:23:22.630Z Last Updated: 2024-12-13T18:51:36.957Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Webcodin Products: WCP Contact Form Problem Types: CWE-862 Description: Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wcp-contact-form/vulnerability/wordpress-wcp-contact-form-plugin-3-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32520 State: PUBLISHED Published: 2024-12-13T14:23:23.231Z Last Updated: 2024-12-13T18:49:57.077Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Webcodin Products: WCP Contact Form Problem Types: CWE-862 Description: Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wcp-contact-form/vulnerability/wordpress-wcp-contact-form-plugin-3-1-0-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2023-32521 State: PUBLISHED Published: 2023-06-26T21:52:58.464Z Last Updated: 2024-12-05T14:45:54.617Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.tenable.com/security/research/tra-2023-17
CVE ID: CVE-2023-32522 State: PUBLISHED Published: 2023-06-26T21:53:08.914Z Last Updated: 2024-12-04T17:11:40.884Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://w
CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.tenable.com/security/research/tra-2023-17
CVE ID: CVE-2023-32523 State: PUBLISHED Published: 2023-06-26T21:53:22.785Z Last Updated: 2024-12-05T15:21:04.987Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32524. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
not identical to CVE-2023-32524. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-587/
CVE ID: CVE-2023-32524 State: PUBLISHED Published: 2023-06-26T21:53:33.392Z Last Updated: 2024-12-05T15:20:38.837Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow a remote user to bypass authentication and potentially chain with other vulnerabilities. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32523. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
not identical to CVE-2023-32523. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-588/
CVE ID: CVE-2023-32525 State: PUBLISHED Published: 2023-06-26T21:53:44.335Z Last Updated: 2024-12-05T14:44:11.782Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32526. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.c
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-589/
CVE ID: CVE-2023-32526 State: PUBLISHED Published: 2023-06-26T21:53:56.403Z Last Updated: 2024-12-04T16:50:41.486Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget vulnerabilities that could allow a remote attacker to create arbitrary files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32525. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.c
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-586/
CVE ID: CVE-2023-32527 State: PUBLISHED Published: 2023-06-26T21:54:06.329Z Last Updated: 2024-12-04T16:47:57.157Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32528. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.co
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-590/
CVE ID: CVE-2023-32528 State: PUBLISHED Published: 2023-06-26T21:54:13.506Z Last Updated: 2024-12-04T16:41:15.502Z Vendors: Trend Micro, Inc. Products: Trend Micro Moibile Security for Enterprise Description: Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote attacker to execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32527. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.co
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293106?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-591/
CVE ID: CVE-2023-32529 State: PUBLISHED Published: 2023-06-26T21:54:23.502Z Last Updated: 2024-12-04T16:39:31.909Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32530. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/0002
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-652/
CVE ID: CVE-2023-32530 State: PUBLISHED Published: 2023-06-26T21:54:34.814Z Last Updated: 2024-12-04T16:36:39.921Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code execution. Please note: an attacker must first obtain authentication on the target system in order to exploit these vulnerabilities. This is similar to, but not identical to CVE-2023-32529. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/0002
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-654/
CVE ID: CVE-2023-32531 State: PUBLISHED Published: 2023-06-26T21:54:44.284Z Last Updated: 2024-10-21T21:12:30.477Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32532 through 32535. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-724/
CVE ID: CVE-2023-32532 State: PUBLISHED Published: 2023-06-26T21:54:53.585Z Last Updated: 2024-10-21T21:12:23.691Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-723/
CVE ID: CVE-2023-32533 State: PUBLISHED Published: 2023-06-26T21:55:02.411Z Last Updated: 2024-10-21T21:12:14.351Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-726/
CVE ID: CVE-2023-32534 State: PUBLISHED Published: 2023-06-26T21:55:09.605Z Last Updated: 2024-10-21T21:12:08.711Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32535. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-725/
CVE ID: CVE-2023-32535 State: PUBLISHED Published: 2023-06-26T21:55:24.726Z Last Updated: 2024-10-21T21:12:01.712Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (XSS) attacks that may allow an attacker to achieve remote code execution on affected servers. This is similar to, but not identical to CVE-2023-32531 through 32534. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-857/
CVE ID: CVE-2023-32536 State: PUBLISHED Published: 2023-06-26T21:55:34.961Z Last Updated: 2024-10-21T21:11:51.501Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32537. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293107?language=en_US
CVE ID: CVE-2023-32537 State: PUBLISHED Published: 2023-06-26T21:55:43.951Z Last Updated: 2024-10-21T21:11:44.863Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex Central Description: Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected cross-site scripting (XSS) attacks due to user input validation and sanitization issues. Please note: an attacker must first obtain authentication to Apex Central on the target system in order to exploit this vulnerability. This is similar to, but not identical to CVE-2023-32536. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/
CVE ID: CVE-2023-32538 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-23T21:27:50.622Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: TELLUS and TELLUS Lite Problem Types: Stack-based Buffer Overflow Description: Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32273 and CVE-2023-32201. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.ph
CVE ID: CVE-2023-32539 State: PUBLISHED Published: 2023-06-06T15:11:19.755Z Last Updated: 2025-01-07T16:35:27.882Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Cscape, Cscape EnvisionRV Problem Types: CWE-787 Description: Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e3c04. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.g
nt process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE ID: CVE-2023-32540 State: PUBLISHED Published: 2023-06-05T23:16:28.045Z Last Updated: 2025-01-08T14:22:14.896Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Advantech Products: WebAccess/SCADA Problem Types: CWE-94 Description: In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the operating system (including system files), inject code into an XLS file, and modify the file extension, which could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-152-01
CVE ID: CVE-2023-32541 State: PUBLISHED Published: 2023-09-26T14:02:28.222Z Last Updated: 2025-11-04T19:16:19.120Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hancom Products: Hancom Office 2020 Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-after-free. An attacker can trick a user into opening a malformed file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1759
CVE ID: CVE-2023-32542 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-12T19:10:10.487Z Vendors: FUJI ELECTRIC CO., LTD. Products: TELLUS and TELLUS Lite Problem Types: Out-of-bounds read Description: Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php - https://jvn.jp/en/vu/JVNVU98818508/
CVE ID: CVE-2023-32543 State: PUBLISHED Published: 2023-08-11T02:37:34.041Z Last Updated: 2024-10-10T15:00:21.807Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) ITS sofware Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00938.html
CVE ID: CVE-2023-32544 State: PUBLISHED Published: 2024-01-19T20:03:13.298Z Last Updated: 2025-06-17T21:19:22.988Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H) Vendors: n/a Products: Intel HotKey Services for Windows 10 for Intel NUC P14E Laptop Element software installers Problem Types: denial of service, CWE-284 Description: Improper access control in some Intel HotKey Services for Windows 10 for Intel NUC P14E Laptop Element software installers before version 1.1.45 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.co