Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32880 State: PUBLISHED Published: 2024-01-02T02:49:49.038Z Last Updated: 2025-06-16T18:32:33.105Z Vendors: MediaTek, Inc. Products: MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT6983, MT8167, MT8168, MT8188, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 Problem Types: Information Disclosure Description: In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308076. Additional Analyst Notes: - CVE Program Container: - CISA AD
ploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308076. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32881 State: PUBLISHED Published: 2024-01-02T02:49:50.823Z Last Updated: 2025-06-18T15:01:34.232Z Vendors: MediaTek, Inc. Products: MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT6983, MT8167, MT8168, MT8188, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 Problem Types: Information Disclosure Description: In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308080. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
itation. Patch ID: ALPS08308070; Issue ID: ALPS08308080. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32882 State: PUBLISHED Published: 2024-01-02T02:49:52.632Z Last Updated: 2025-06-18T15:02:25.395Z Vendors: MediaTek, Inc. Products: MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT6983, MT8167, MT8168, MT8188, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08308070; Issue ID: ALPS08308616. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vu
tation. Patch ID: ALPS08308070; Issue ID: ALPS08308616. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32883 State: PUBLISHED Published: 2024-01-02T02:49:54.424Z Last Updated: 2025-06-03T14:46:48.134Z Vendors: MediaTek, Inc. Products: MT2713, MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8188, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In Engineer Mode, there is a possible out of boun
91T, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08282249; Issue ID: ALPS08282249. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32884 State: PUBLISHED Published: 2024-01-02T02:49:56.354Z Last Updated: 2025-06-03T14:46:42.267Z Vendors: MediaTek, Inc. Products: MT2713, MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8188, MT8192, MT8195, MT8195Z, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8696, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8795T, MT8797, MT8798, MT8871 Problem Types: Information Disclosure Description: In netdagent, there is a
91, MT8791T, MT8795T, MT8797, MT8798, MT8871 Problem Types: Information Disclosure Description: In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944011; Issue ID: ALPS07944011. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32885 State: PUBLISHED Published: 2024-01-02T02:49:58.321Z Last Updated: 2025-04-17T18:52:16.226Z Vendors: MediaTek, Inc. Products: MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8168, MT8188, MT8195, MT8766, MT8768, MT8781, MT8789, MT8791T, MT8798 Problem Types: Elevation of Privilege Description: In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780685; Issu
e with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780685; Issue ID: ALPS07780685. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32886 State: PUBLISHED Published: 2024-01-02T02:50:00.224Z Last Updated: 2025-06-03T14:46:37.758Z Vendors: MediaTek, Inc. Products: MT2735, MT6813, MT6833, MT6833P, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6877T, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT6980D, MT6983T, MT6983W, MT6983Z, MT6985, MT6985T, MT6989, MT6990, MT8673, MT8675, MT8676, MT8791, MT8791T, MT8792, MT8796, MT8797, MT8798 Problem Types: Denial of Service Description: In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no
re is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00730807; Issue ID: MOLY00730807. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32887 State: PUBLISHED Published: 2024-01-02T02:50:02.182Z Last Updated: 2025-06-16T19:47:35.356Z Vendors: MediaTek, Inc. Products: MT2735, MT6813, MT6833, MT6833P, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6877T, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT6980D, MT6983T, MT6983W, MT6983Z, MT6985, MT6985T, MT6989, MT6990 Problem Types: Denial of Service Description: In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploi
ad to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161837; Issue ID: MOLY01161837 (MSV-892). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32888 State: PUBLISHED Published: 2024-01-02T02:50:03.942Z Last Updated: 2025-05-16T17:38:33.524Z Vendors: MediaTek, Inc. Products: MT2735, MT6813, MT6833, MT6833P, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6877T, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT6980D, MT6983T, MT6983W, MT6983Z, MT6985, MT6985T, MT6989, MT6990 Problem Types: Denial of Service Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed f
could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161830; Issue ID: MOLY01161830 (MSV-894). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32889 State: PUBLISHED Published: 2024-01-02T02:50:05.797Z Last Updated: 2025-06-18T15:03:13.062Z Vendors: MediaTek, Inc. Products: MT2735, MT6813, MT6833, MT6833P, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6877T, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT6980D, MT6983T, MT6983W, MT6983Z, MT6985, MT6985T, MT6989, MT6990 Problem Types: Denial of Service Description: In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed f
could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID: MOLY01161825 (MSV-895). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32890 State: PUBLISHED Published: 2024-01-02T02:50:07.545Z Last Updated: 2024-08-02T15:32:46.533Z Vendors: MediaTek, Inc. Products: MT2731, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT8666, MT8667, MT8765, MT8766, MT8768, MT8786, MT8788 Problem Types: Denial of Service Description: In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01183647; Issue ID: MOLY01183647 (MSV-963). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/prod
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/April-2024
CVE ID: CVE-2023-32891 State: PUBLISHED Published: 2024-01-02T02:50:11.129Z Last Updated: 2025-06-18T15:03:58.976Z Vendors: MediaTek, Inc. Products: MT2713, MT6739, MT6761, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6983, MT6985, MT6989, MT8167, MT8167S, MT8173, MT8175, MT8188, MT8195, MT8321, MT8365, MT8370, MT8385, MT8390, MT8395, MT8765, MT8766, MT8768, MT8786, MT8797, MT8798 Problem Types: Elevation of Privilege Description: In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege wi
is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07933038; Issue ID: MSV-559. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://corp.mediatek.com/product-security-bulletin/January-2024
CVE ID: CVE-2023-32955 State: PUBLISHED Published: 2023-05-16T07:15:16.105Z Last Updated: 2025-01-22T21:14:13.039Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client Functionality in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Pro
s man-in-the-middle attackers to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_22_25
CVE ID: CVE-2023-32956 State: PUBLISHED Published: 2023-05-16T07:16:09.640Z Last Updated: 2025-01-22T20:51:04.091Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Synology Router Manager (SRM) Problem Types: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA
attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_22_25
CVE ID: CVE-2023-32957 State: PUBLISHED Published: 2023-11-16T19:52:37.040Z Last Updated: 2024-08-02T15:32:46.593Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Dazzlersoft Products: Team Members Showcase Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dazzlersoft Team Members Showcase plugin <= 1.3.4 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/dazzlersoft-teams/wordpress-team-members-showcase-plugin-1-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32958 State: PUBLISHED Published: 2023-05-28T17:04:19.914Z Last Updated: 2024-10-10T17:31:01.042Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Nose Graze Products: Novelist Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nose Graze Novelist plugin <= 1.2.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/novelist/wordpress-novelist-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32960 State: PUBLISHED Published: 2023-06-22T12:51:41.876Z Last Updated: 2024-08-02T15:32:46.378Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: UpdraftPlus.Com, DavidAnderson Products: UpdraftPlus WordPress Backup Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sitewide Cross-Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/updraftplus/wordpress-updraftplus-plugin-1-23-3-csrf-lead-to-wp-admin-site-wide-xss-vulnerability?
atabase/vulnerability/updraftplus/wordpress-updraftplus-plugin-1-23-3-csrf-lead-to-wp-admin-site-wide-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32961 State: PUBLISHED Published: 2023-06-12T14:19:44.140Z Last Updated: 2024-10-10T17:28:54.346Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Katie Seaborn Products: Zotpress Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/zotpress/wordpress-zotpress-plugin-7-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve - https://lourcode.kr/posts/CVE-2023-32961-Analysis/
CVE ID: CVE-2023-32962 State: PUBLISHED Published: 2023-08-30T11:56:06.381Z Last Updated: 2024-09-24T19:23:35.931Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: HasTheme Products: WishSuite – Wishlist for WooCommerce Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin <= 1.3.4 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wishsuite/wordpress-wishsuite-wishlist-for-woocommerce-plugin-1-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32963 State: PUBLISHED Published: 2024-12-13T14:23:28.245Z Last Updated: 2024-12-13T18:45:26.809Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: a3rev Software Products: WooCommerce Predictive Search Problem Types: CWE-862 Description: Missing Authorization vulnerability in a3rev Software WooCommerce Predictive Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Predictive Search: from n/a through 5.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-predictive-search/vulnerability/wordpress-predictive-sea
- https://patchstack.com/database/wordpress/plugin/woocommerce-predictive-search/vulnerability/wordpress-predictive-search-for-woocommerce-plugin-5-8-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-32964 State: PUBLISHED Published: 2023-05-26T14:34:18.428Z Last Updated: 2024-11-01T15:08:13.465Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Made with Fuel Products: Better Notifications for WP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Made with Fuel Better Notifications for WP plugin <= 1.9.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bnfw/wordpress-better-notifications-for-wp-plugin-1-9-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32965 State: PUBLISHED Published: 2023-07-18T13:24:59.534Z Last Updated: 2024-09-26T15:11:34.073Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CRUDLab Products: Jazz Popups Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CRUDLab Jazz Popups plugin <= 1.8.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/jazz-popups/wordpress-jazz-popups-plugin-1-8-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-32966 State: PUBLISHED Published: 2023-11-07T17:29:17.334Z Last Updated: 2024-09-04T16:00:47.899Z Vendors: CRUDLab Products: Jazz Popups Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/jazz-popups/wordpress-jazz-popups-plugin-1-8-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-32967 State: PUBLISHED Published: 2024-02-02T16:02:21.048Z Last Updated: 2024-08-02T15:32:46.547Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: QuTScloud, QTS, QuTS hero Problem Types: CWE-863, CWE-285 Description: An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. QTS 5.x, QuTS hero are not affected. We have already fixed the vulnerability in the following versions: QuTScloud c5.1.5.2651 and later QTS 4.5.4.2627 build 20231225 and later Add
the vulnerability in the following versions: QuTScloud c5.1.5.2651 and later QTS 4.5.4.2627 build 20231225 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-01
CVE ID: CVE-2023-32968 State: PUBLISHED Published: 2023-12-08T16:07:14.915Z Last Updated: 2024-08-02T15:32:46.126Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-120 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build 20230906 and later QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.0.1.2515 build 20230907 and later
0.1.2514 build 20230906 and later QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.2.2534 build 20230927 and later Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-23-07
CVE ID: CVE-2023-32969 State: PUBLISHED Published: 2024-03-08T16:17:19.645Z Last Updated: 2024-08-02T15:32:46.225Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: QNAP Systems Inc. Products: QuTScloud, QTS, QuTS hero Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuTScloud c5.1.5.2651 and later QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later Additional Analyst
2651 and later QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-11
CVE ID: CVE-2023-32970 State: PUBLISHED Published: 2023-10-13T19:16:18.592Z Last Updated: 2024-09-16T20:29:45.599Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: QNAP Systems Inc. Products: QuTS hero, QuTScloud, QTS Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network. QES is not affected. We have already fixed the vulnerability in the following versions: QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.0.2453 build 20230708 a
ability in the following versions: QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.0.2453 build 20230708 and later QuTS hero h4.5.4.2476 build 20230728 and later QuTScloud c5.1.0.2498 and later QTS 5.1.0.2444 build 20230629 and later QTS 4.5.4.2467 build 20230718 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-41