Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-28353 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T20:26:00.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Faronics Insight 10.0.19045 on Windows. An unauthenticated attacker is able to upload any type of file to any location on the Teacher Console's computer, enabling a variety of different exploitation paths including code execution. It is also possible for the attacker to chain this vulnerability with others to cause a deployed DLL file to immediately execute as NT AUTHORITY/SYSTEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/?research=Technical%20advisories - https://research.nccgroup.com/2023/05/30/technical-advisory-multiple-vulnerabilities-in-faronics-insight/
CVE ID: CVE-2023-28354 State: PUBLISHED Published: 2025-01-09T00:00:00 Last Updated: 2025-01-10T17:22:15.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NRPE plugin execution. This allows the attacker to escape NRPE plugin execution and execute commands remotely on the target as NT_AUTHORITY\SYSTEM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sto
e target as NT_AUTHORITY\SYSTEM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/stormfleet/CVE-2023-28354/blob/main/README.md
CVE ID: CVE-2023-28356 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:57:01.216Z Vendors: n/a Products: Rocket.Chat Problem Types: CWE-400 Description: A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can cause the chat to enter a hot loop on one of the processes, consuming ~120% CPU and rendering the service unresponsive. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1461340
CVE ID: CVE-2023-28357 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T17:11:35.726Z Vendors: n/a Products: Rocket.Chat Problem Types: CWE-200 Description: A vulnerability has been identified in Rocket.Chat, where the ACL checks in the Slash Command /mute occur after checking whether a user is a member of a given channel, leaking private channel members to unauthorized users. This allows authenticated users to enumerate whether a username is a member of a channel that they do not have access to. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1445810
CVE ID: CVE-2023-28358 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:55:11.436Z Vendors: n/a Products: Rocket.Chat Problem Types: CWE-79 Description: A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature allows the insertion of malicious tags. This can be exploited on servers with content security policy disabled possible leading to some issues attacks like account takeover. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1781131
CVE ID: CVE-2023-28359 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:52:17.296Z Vendors: n/a Products: Rocket.Chat Problem Types: CWE-89 Description: A NoSQL injection vulnerability has been identified in the listEmojiCustom method call within Rocket.Chat. This can be exploited by unauthenticated users when there is at least one custom emoji uploaded to the Rocket.Chat instance. The vulnerability causes a delay in the server response, with the potential for limited impact. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1757676
CVE ID: CVE-2023-28360 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:49:12.869Z Vendors: n/a Products: https://laptop-updates.brave.com/latest/winx64 Problem Types: CWE-223 Description: An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check dialog presented to the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1848062
CVE ID: CVE-2023-28361 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:44:43.627Z Vendors: n/a Products: UniFi OS Problem Types: CWE-352 Description: A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by persuading a UniFi OS user to visit a malicious webpage.Affected Products:Cloud Key Gen2Cloud Key Gen2 PlusUNVRUNVR ProfessionalUDMUDM ProfessionalUDM SEUDRMitigation:Update affected products to UniFi OS 3.0.13 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Adv
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-030-030/f9de9e65-585f-4c66-81e9-5d8f54ba66dd
CVE ID: CVE-2023-28362 State: PUBLISHED Published: 2025-01-09T00:33:47.730Z Last Updated: 2025-05-02T23:02:56.188Z Vendors: Rails Products: Action Pack Description: The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132 - https://github.com/advisories/GHSA-4g8v-vg43-wpgf - https://githu
le-xss-via-user-supplied-values-to-redirect-to/83132 - https://github.com/advisories/GHSA-4g8v-vg43-wpgf - https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441 - https://github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5
CVE ID: CVE-2023-28364 State: PUBLISHED Published: 2023-06-30T23:20:12.719Z Last Updated: 2024-11-26T19:47:59.748Z Vendors: Brave Software Products: Brave Browser Android Description: An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned URLs automatically without showing the URL first. Now the user must manually navigate to the URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1946534
CVE ID: CVE-2023-28365 State: PUBLISHED Published: 2023-06-30T23:40:13.388Z Last Updated: 2024-11-27T17:23:23.036Z Vendors: Ubiquiti Inc. Products: UniFi Network application Description: A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-031-031/8c85fc64-e9a8-4082-9ec4-56b14effd545
CVE ID: CVE-2023-28366 State: PUBLISHED Published: 2023-09-01T00:00:00.000Z Last Updated: 2025-06-26T13:59:02.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because of mishandling of EAGAIN from the libc send function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eclipse/mosquitto/compare/v2.0.15...v2.0.16 - https://www.compass-security.com/fileadmin/Research/Advisories/2023_02_CSNC-20
pse/mosquitto/compare/v2.0.15...v2.0.16 - https://www.compass-security.com/fileadmin/Research/Advisories/2023_02_CSNC-2023-001_Eclipse_Mosquitto_Memory_Leak.txt - https://mosquitto.org/blog/2023/08/version-2-0-16-released/ - https://github.com/eclipse/mosquitto/commit/6113eac95a9df634fbc858be542c4a0456bfe7b9 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJ2FMBGVVQEQWTTQB7YLKTAHMX2UM66X/ - https://www.debian.org/security/2023/dsa-5511 - https://security.gentoo.org/glsa/202401-09
CVE ID: CVE-2023-28367 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T18:18:23.799Z Vendors: Vektor,Inc. Products: VK All in One Expansion Unit Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vektor-inc.co.jp/product-update/vk-blocks-exunit-xss/ - https://jvn.jp/en/jp/JVN95792402/
CVE ID: CVE-2023-28368 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-10T20:54:23.215Z Vendors: TP-Link Corporation Limited Products: T2600G-28SQ Problem Types: Use of weak credentials Description: TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential information for the affected device may be obtained. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/en/suppor
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/en/support/download/t2600g-28sq/#Firmware - https://jvn.jp/en/jp/JVN62420378/
CVE ID: CVE-2023-28369 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2025-01-22T16:31:20.241Z Vendors: BROTHER INDUSTRIES, LTD. Products: Brother iPrint&Scan Problem Types: Improper access control Description: Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on the victim user's Android device, which may lead to displaying the settings and/or log information of the affected app as a print preview. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100794_000 - https://fa
ADP Vulnrichment: References: - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100794_000 - https://faq.brother.co.jp/app/answers/detail/a_id/13468 - https://play.google.com/store/apps/details?id=com.brother.mfc.brprint - https://jvn.jp/en/vu/JVNVU97891206/
CVE ID: CVE-2023-28370 State: PUBLISHED Published: 2023-05-25T00:00:00.000Z Last Updated: 2025-11-03T21:47:34.583Z Vendors: tornadoweb Products: Tornado Problem Types: Open redirect Description: Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tornadoweb/tornado/releases/tag/v6.3.2 - https://jvn.jp/en/jp/JVN45127776/
CVE ID: CVE-2023-28371 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T20:25:46.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Stellarium/stellarium/commit/1261f74dc4aa6bbd01ab514343424097f8cf46b7 - https://github.com/Stellarium/stellarium/commit/eba61df3b38605befcb43687a4c0a159dbc0c5cb - https://github.com/Stellarium/stellarium/commit/787a894897b7872ae96e6f5804a182210edd5c78 - https://list
c0a159dbc0c5cb - https://github.com/Stellarium/stellarium/commit/787a894897b7872ae96e6f5804a182210edd5c78 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KG6UNRAOYZJSMIUELY3MMJ5J6LIUZXLT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/REDZB5J7WDN2P3NYWFO2NNJXSTOFUUKM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQ4ZGY5MDDHBEOQTD4IIA2RFID3ATPXA/
CVE ID: CVE-2023-28372 State: PUBLISHED Published: 2023-10-02T22:20:21.550Z Last Updated: 2024-09-20T14:50:53.883Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Pure Storage Products: FlashBlade Description: A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_FlashBlade_Object_Store_Privileged_Access_Vulnerability_CVE-2023-28372
CVE ID: CVE-2023-28373 State: PUBLISHED Published: 2023-10-02T23:02:31.591Z Last Updated: 2024-09-23T13:43:23.214Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Pure Storage Products: FlashArray Purity Description: A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.purestorage.com/Employee_Handbooks/Technical_Services/PSIRT/Security_Bulletin_for_FlashArray_SafeMode_Immutable_Vulnerability_CVE-2023-28373
CVE ID: CVE-2023-28374 State: PUBLISHED Published: 2024-02-14T13:37:54.759Z Last Updated: 2024-08-15T19:10:34.778Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software Problem Types: denial of service, CWE-20 Description: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/
gram Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.html
CVE ID: CVE-2023-28375 State: PUBLISHED Published: 2023-03-28T20:02:00.775Z Last Updated: 2025-01-16T21:38:35.314Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ProPump and Controls, Inc. Products: Osprey Pump Controller Problem Types: CWE-598 Use of GET Request Method With Sensitive Query Strings Description: Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-adviso
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06
CVE ID: CVE-2023-28376 State: PUBLISHED Published: 2023-11-14T19:04:54.586Z Last Updated: 2025-02-13T16:48:39.768Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) E810 Ethernet Controllers and Adapters Problem Types: denial of service, CWE-125 Description: Out-of-bounds read in the firmware for some Intel(R) E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00869.html - https://security.netapp.co
ces: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00869.html - https://security.netapp.com/advisory/ntap-20231221-0007/
CVE ID: CVE-2023-28377 State: PUBLISHED Published: 2023-11-14T19:04:48.989Z Last Updated: 2024-08-30T16:25:56.601Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Kit NUC11PH USB firmware installation software Problem Types: escalation of privilege, CWE-287 Description: Improper authentication in some Intel(R) NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/adv
VE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2023-28378 State: PUBLISHED Published: 2023-11-14T19:05:13.226Z Last Updated: 2024-08-02T12:38:24.961Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QAT drivers for Windows - HW Version 2.0 Problem Types: escalation of privilege, CWE-285 Description: Improper authorization in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.html
CVE ID: CVE-2023-28379 State: PUBLISHED Published: 2023-11-14T09:14:52.070Z Last Updated: 2025-11-04T19:15:49.289Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Silicon Labs, Weston Embedded Products: Gecko Platform, Cesium NET, uC-HTTP Problem Types: CWE-119 Description: A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerabilit
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1738
CVE ID: CVE-2023-28380 State: PUBLISHED Published: 2023-08-11T02:37:15.835Z Last Updated: 2024-10-15T17:53:58.100Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) AI Hackathon software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00877.html
CVE ID: CVE-2023-28381 State: PUBLISHED Published: 2023-10-11T15:16:57.415Z Last Updated: 2025-11-04T19:15:50.371Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Peplink Products: Surf SOHO HW1 Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1779
CVE ID: CVE-2023-28382 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T15:49:42.252Z Vendors: Encourage Technologies Co.,Ltd. Products: ESS REC Agent Server Edition series Problem Types: Directory traversal Description: Directory traversal vulnerability in ESS REC Agent Server Edition series allows an authenticated attacker to view or alter an arbitrary file on the server. Affected products and versions are as follows: ESS REC Agent Server Edition for Linux V1.0.0 to V1.4.3, ESS REC Agent Server Edition for Solaris V1.1.0 to V1.4.0, ESS REC Agent Server Edition for HP-UX V1.1.0 to V1.4.0, and ESS REC Agent Server Edition for AIX V1.2.0 to V1.4.1 Additional Analyst No
rver Edition for HP-UX V1.1.0 to V1.4.0, and ESS REC Agent Server Edition for AIX V1.2.0 to V1.4.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://customer.et-x.jp/app/answers/detail/a_id/2260 - https://jvn.jp/en/jp/JVN19243534/
CVE ID: CVE-2023-28383 State: PUBLISHED Published: 2024-05-16T20:47:48.811Z Last Updated: 2024-08-21T16:24:22.324Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N) Vendors: n/a Products: Intel(R) BIOS PPAM firmware Problem Types: escalation of privilege, CWE-92 Description: Improper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html
CVE ID: CVE-2023-28384 State: PUBLISHED Published: 2023-04-27T22:09:56.434Z Last Updated: 2025-01-17T17:05:57.647Z Vendors: mySCADA Technologies Products: mySCADA myPRO Problem Types: CWE-78 OS Command Injection Description: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06
CVE ID: CVE-2023-28385 State: PUBLISHED Published: 2023-08-11T02:37:13.090Z Last Updated: 2024-10-10T18:05:41.662Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC Pro Software Suite for Windows Problem Types: escalation of privilage, CWE-285 Description: Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00868.html