Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-22814 State: PUBLISHED Published: 2023-06-30T23:05:43.130Z Last Updated: 2024-11-26T16:09:14.746Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Western Digital Products: My Cloud OS 5 Problem Types: CWE-290 Description: An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack. This issue affects My Cloud OS 5 devices: before 5.26.202. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-23006-my-cloud-firmware-version-5-26-202
CVE ID: CVE-2023-22815 State: PUBLISHED Published: 2023-06-30T21:07:36.424Z Last Updated: 2024-11-06T19:48:30.851Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H) Vendors: Western Digital Products: My Cloud OS 5 Problem Types: CWE-78 Description: Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an attacker to execute code in the context of the root user on vulnerable CGI files. This vulnerability can only be exploited over the network and the attacker must already have admin/root privileges to carry out the exploit. An authentication bypass is required for this exploit, thereby making it more complex
ivileges to carry out the exploit. An authentication bypass is required for this exploit, thereby making it more complex. The attack may not require user interaction. Since an attacker must already be authenticated, the confidentiality impact is low while the integrity and availability impact is high. This issue affects My Cloud OS 5 devices: before 5.26.300. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-23010-my-cloud-firmware-version-5-26-300
CVE ID: CVE-2023-22816 State: PUBLISHED Published: 2023-06-30T21:01:16.209Z Last Updated: 2024-09-09T14:39:16.112Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H) Vendors: Western Digital Products: My Cloud OS 5 Problem Types: CWE-78 Description: A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and execute larger payloads. This issue affects My Cloud OS 5 devices: before 5.26.300. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-23010-my-cloud-fi
er: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-23010-my-cloud-firmware-version-5-26-300
CVE ID: CVE-2023-22817 State: PUBLISHED Published: 2024-02-05T21:26:42.020Z Last Updated: 2024-08-02T10:20:31.069Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Western Digital, SanDisk Products: My Cloud OS 5, My Cloud Home & Duo, ibi Problem Types: CWE-918 Description: Server-side request forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter. This could then allow the URL to exploit other vulnerabilities on the local server. This was addressed by fixing DNS addresses that refer to loopback. This issue affects My Cloud OS 5 devices before 5.27.161
s was addressed by fixing DNS addresses that refer to loopback. This issue affects My Cloud OS 5 devices before 5.27.161, My Cloud Home, My Cloud Home Duo and SanDisk ibi devices before 9.5.1-104. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.westerndigital.com/support/product-security/wdc-24001-western-digital-my-cloud-os-5-my-cloud-home-duo-and-sandisk-ibi-firmware-update
CVE ID: CVE-2023-22818 State: PUBLISHED Published: 2023-11-15T20:03:57.085Z Last Updated: 2024-08-29T17:35:18.339Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: SanDisk Products: SanDisk Security Installer for Windows Problem Types: CWE-427 Description: Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code with the privileges of the vulnerable application or obtain a certain level of persistence on the compromised host
code with the privileges of the vulnerable application or obtain a certain level of persistence on the compromised host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.westerndigital.com/support/product-security/wdc-23013-sandisk-security-installer-for-windows-1-0-0-25
CVE ID: CVE-2023-22819 State: PUBLISHED Published: 2024-02-05T21:26:53.171Z Last Updated: 2024-09-05T22:47:28.039Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Western Digital, SanDisk Products: My Cloud OS 5, My Cloud Home & Duo, ibi Problem Types: CWE-770 Description: An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi and Western Digital My Cloud OS 5 devices. This issue requires the attacker to already have root
d Home Duo, SanDisk ibi and Western Digital My Cloud OS 5 devices. This issue requires the attacker to already have root privileges in order to exploit this vulnerability. This issue affects My Cloud Home and My Cloud Home Duo: before 9.5.1-104; ibi: before 9.5.1-104; My Cloud OS 5: before 5.27.161. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.westerndigital.com/support/product-security/wdc-24001-western-digital-my-cloud-os-5-my-cloud-home-duo-and-sandisk-ibi-firmware-update
CVE ID: CVE-2023-22832 State: PUBLISHED Published: 2023-02-10T07:45:36.964Z Last Updated: 2025-03-24T16:31:38.479Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: CWE-611 Description: The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations and disallows XML External Entity resolution in the ExtractCCDAAttributes Processor. Additional Analyst Notes: - CVE Program Conta
ows XML External Entity resolution in the ExtractCCDAAttributes Processor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nifi.apache.org/security.html#CVE-2023-22832 - https://lists.apache.org/thread/b51qs6y7b7r58vovddkv6wc16g2xbl3w
CVE ID: CVE-2023-22833 State: PUBLISHED Published: 2023-06-06T18:55:06.549Z Last Updated: 2025-01-07T16:24:09.439Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Palantir Products: com.palantir.lime:lime2 Problem Types: CWE-304 Description: Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=7f1fd834-805d-4679-85d0-9d779fa064ae
CVE ID: CVE-2023-22834 State: PUBLISHED Published: 2023-06-26T23:06:00.892Z Last Updated: 2024-11-07T18:29:04.974Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/AR:L) Vendors: Palantir Products: com.palantir.contour:contour-dispatch Problem Types: CWE-425 Description: The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=14874400-e9c9-4ac4-a8a6-9
Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=14874400-e9c9-4ac4-a8a6-9f4c48a56ff8
CVE ID: CVE-2023-22835 State: PUBLISHED Published: 2023-07-10T20:58:14.697Z Last Updated: 2024-10-29T13:43:59.721Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Palantir Products: com.palantir.foundry:foundry-frontend, com.palantir.issues:issues Problem Types: CWE-20 Description: A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitting malformed data in an Issue that caused loss of frontend functionality to all issue participants. This defect was resolved with the release of Foundry Issues 2.510.0 and Foundry Frontend 6.228.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
Foundry Issues 2.510.0 and Foundry Frontend 6.228.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=0e2e79bd-cc03-42a8-92c2-c0e68a1ea53d
CVE ID: CVE-2023-22836 State: PUBLISHED Published: 2024-01-29T18:50:37.543Z Last Updated: 2025-06-17T21:29:16.652Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/CR:H/IR:H/AR:H) Vendors: Palantir Products: com.palantir.skywise:guardian Problem Types: CWE-862 Description: In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from the default value, the renamed value may be visible to the rest of the stack’s tenants. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=f9bf67ef-be15-4f87-a526-bf6064e8f682
CVE ID: CVE-2023-22838 State: PUBLISHED Published: 2023-03-05T00:00:00.000Z Last Updated: 2025-03-06T16:02:05.314Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE 4 series Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ec-cube.net/info/weakness/20230214/ - https://jvn.jp/en/jp/JVN04785663/
CVE ID: CVE-2023-22839 State: PUBLISHED Published: 2023-02-01T17:56:26.064Z Last Updated: 2025-03-26T17:48:26.847Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-476 Description: On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
okernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K37708118
CVE ID: CVE-2023-22840 State: PUBLISHED Published: 2023-08-11T02:37:03.750Z Last Updated: 2025-02-13T16:44:05.602Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) oneVPL GPU software Problem Types: denial of service, CWE-86 Description: Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00818.html - https://lists.fedoraproject.org/archives/list/pa
el.com/content/www/us/en/security-center/advisory/intel-sa-00818.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J7RNFPWOSFII2JE2KDRHPLJANZC3YATW/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TULYSWHC3X76AIGGMUSLBTWOXNND6IEV/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L27GRS7E45IOCZ44VQX2NJ33GVRBWHBS/
CVE ID: CVE-2023-22841 State: PUBLISHED Published: 2023-08-11T02:37:06.486Z Last Updated: 2024-10-10T15:32:17.302Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset Problem Types: escalation of privilege, CWE-428 Description: Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via l
) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00830.html
CVE ID: CVE-2023-22842 State: PUBLISHED Published: 2023-02-01T17:56:36.634Z Last Updated: 2025-03-26T17:47:52.262Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-121 Description: On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K08182564
CVE ID: CVE-2023-22843 State: PUBLISHED Published: 2023-08-09T08:46:31.804Z Last Updated: 2024-09-20T12:04:39.840Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Nozomi Networks Products: Guardian, CMC Problem Types: CWE-79 Description: An authenticated attacker with administrative access to the web management interface can inject malicious JavaScript code inside the definition of a Threat Intelligence rule, that will be stored and can later be executed by another legitimate user viewing the details of such a rule. Via stored Cross-Site Scripting (XSS), an attacker may be able to perform unauthorized actions on behalf of legitimate users and/or gather sensi
ripting (XSS), an attacker may be able to perform unauthorized actions on behalf of legitimate users and/or gather sensitive information. JavaScript injection was possible in the contents for Yara rules, while limited HTML injection has been proven for packet and STYX rules. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.nozominetworks.com/NN-2023:4-01
CVE ID: CVE-2023-22844 State: PUBLISHED Published: 2023-07-06T14:53:33.273Z Last Updated: 2025-03-05T18:54:30.930Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Milesight Products: MilesightVPN Problem Types: CWE-321 Description: An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1700
CVE ID: CVE-2023-22845 State: PUBLISHED Published: 2023-03-30T15:47:40.603Z Last Updated: 2024-08-02T10:20:30.734Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1
ogram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708
CVE ID: CVE-2023-22846 State: PUBLISHED Published: 2023-04-20T18:15:19.219Z Last Updated: 2025-01-16T21:35:52.079Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Datakit Products: CrossCAD/Ware_x64 library 0 Problem Types: CWE-125 Description: Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14
CVE ID: CVE-2023-22847 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-06T16:57:41.724Z Vendors: IVM Development Group Products: pg_ivm Problem Types: Exposure of sensitive information to an unauthorized actor Description: Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View (IMMV) created by pg_ivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by Row-Level Security may be retrieved by a user who is not authorized to access it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
by a user who is not authorized to access it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sraoss/pg_ivm - https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1 - https://jvn.jp/en/jp/JVN19872280/
CVE ID: CVE-2023-22848 State: PUBLISHED Published: 2024-02-14T13:37:43.471Z Last Updated: 2024-08-16T19:47:52.822Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: denial of service, CWE-284 Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-22849 State: PUBLISHED Published: 2023-02-04T20:37:05.831Z Last Updated: 2025-03-25T18:51:46.346Z Vendors: Apache Software Foundation Products: Apache Sling App CMS Problem Types: CWE-79 Description: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in multiple features. Upgrade to Apache Sling App CMS >= 1.1.6 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sling.apache.org/news.html
CVE ID: CVE-2023-22850 State: PUBLISHED Published: 2023-01-14T00:00:00.000Z Last Updated: 2025-04-07T18:26:13.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tiki.org/articles - https://karmainsecurity.com/KIS-2023-03
CVE ID: CVE-2023-22851 State: PUBLISHED Published: 2023-01-14T00:00:00.000Z Last Updated: 2025-04-04T14:38:40.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an unserialize call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tiki.org/articles - https://karmainsecurity.com/KIS-2023-04
CVE ID: CVE-2023-22852 State: PUBLISHED Published: 2023-01-14T00:00:00.000Z Last Updated: 2025-04-07T18:21:49.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki through 25.0 allows CSRF attacks that are related to tiki-importer.php and tiki-import_sheet.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tiki.org/articles - https://karmainsecurity.com/KIS-2023-01
CVE ID: CVE-2023-22853 State: PUBLISHED Published: 2023-01-14T00:00:00.000Z Last Updated: 2025-04-07T18:15:14.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP Object Injection because of an eval. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tiki.org/articles - https://karmainsecurity.com/KIS-2023-02
CVE ID: CVE-2023-22854 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:32:34.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL parameters. A successful exploit could allow access to sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0001
CVE ID: CVE-2023-22855 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:11:09.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
.NET templating engine mono/t4, which can execute code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/patrickhener/CVE-2023-22855/blob/main/advisory/advisory.md - http://seclists.org/fulldisclosure/2023/Feb/10 - http://packetstormsecurity.com/files/171046/Kardex-Mlog-MCC-5.7.12-0-a203c2a213-master-File-Inclusion-Remote-Code-Execution.html - http://packetstormsecurity.com/files/171689/Kardex-Mlog-MCC-5.7.12-Remote-Code-Execution.html - https://www.exploit-db.com/exploits/51239