Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-39928 State: PUBLISHED Published: 2023-10-06T15:17:20.078Z Last Updated: 2025-11-04T19:17:45.371Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Webkit Products: Webkit Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1831 - https://web
- CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1831 - https://webkitgtk.org/security/WSA-2023-0009.html - https://www.debian.org/security/2023/dsa-5527 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/ - https://security.gentoo.org/glsa/202401-33
CVE ID: CVE-2023-39929 State: PUBLISHED Published: 2024-05-16T20:47:35.322Z Last Updated: 2024-09-06T19:47:26.556Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Libva software maintained by Intel(R) Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01012.html
CVE ID: CVE-2023-39930 State: PUBLISHED Published: 2023-10-24T20:54:08.795Z Last Updated: 2024-09-17T14:16:56.734Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ping Identity Products: PingID Radius PCV Problem Types: CWE-288 Description: A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pingidentity.com/en/resources/downloads/pingfederate.html - https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_
ty.com/en/resources/downloads/pingfederate.html - https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_26_rn
CVE ID: CVE-2023-39932 State: PUBLISHED Published: 2024-02-14T13:38:18.644Z Last Updated: 2024-08-14T18:34:09.946Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) SUR for Gameplay Software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01004.html
CVE ID: CVE-2023-39933 State: PUBLISHED Published: 2024-03-18T00:32:49.426Z Last Updated: 2024-11-07T16:51:56.297Z Vendors: A.K.I Software Products: pmc.exe Problem Types: Unrestricted Upload of File with Dangerous Type Description: Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://akisoftware.com/Vulnerability202301.html - https://jvn.jp/
Vulnrichment: - CVE Program Container: References: - https://akisoftware.com/Vulnerability202301.html - https://jvn.jp/en/jp/JVN92720882/
CVE ID: CVE-2023-39935 State: PUBLISHED Published: 2023-09-06T09:22:23.919Z Last Updated: 2024-09-26T20:14:15.235Z Vendors: TP-LINK Products: Archer C5400 Problem Types: OS command injection Description: Archer C5400 firmware versions prior to 'Archer C5400(JP)_V2_230506' allows a network-adjacent authenticated attacker to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-c5400/#Firmware - https://jvn.jp/en/vu/JVNVU99392903/
CVE ID: CVE-2023-39936 State: PUBLISHED Published: 2023-10-26T19:24:48.179Z Last Updated: 2024-09-09T16:11:53.686Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ashlar-Vellum Products: Graphite Problem Types: CWE-125 Description: In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-03
CVE ID: CVE-2023-39938 State: PUBLISHED Published: 2023-09-05T08:38:42.951Z Last Updated: 2024-09-30T17:15:42.112Z Vendors: i-PRO Co., Ltd. Products: VI Web Client Problem Types: Cross-site scripting (XSS) Description: Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://downloadvi.com/downloads/IPServer/v7.9/796232/v796232RN.pdf - https://jvn.jp/en/jp/JVN60140221/
CVE ID: CVE-2023-39939 State: PUBLISHED Published: 2023-08-21T08:14:23.575Z Last Updated: 2024-10-04T17:53:12.775Z Vendors: LuxSoft Products: LuxCal Web Calendar Problem Types: SQL Injection Description: SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated attacker to execute arbitrary queries against the database and obtain or alter the information in it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.luxsoft.eu/ - https://www.luxsoft.eu/?download - https://jvn.jp/en/jp/JVN04876736/
CVE ID: CVE-2023-39941 State: PUBLISHED Published: 2024-02-14T13:38:16.495Z Last Updated: 2024-08-09T18:51:50.165Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) SUR software Problem Types: denial of service, CWE-284 Description: Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00998.html
CVE ID: CVE-2023-39943 State: PUBLISHED Published: 2025-02-04T22:15:45.778Z Last Updated: 2025-02-05T19:40:57.967Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ashlar-Vellum Products: Cobalt, Cobalt Share, Xenon, Argon, Lithium Problem Types: CWE-787 Description: In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov
he context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-03
CVE ID: CVE-2023-39944 State: PUBLISHED Published: 2023-08-18T09:43:35.233Z Last Updated: 2024-10-08T14:37:06.331Z Vendors: ELECOM CO.,LTD. Products: WRC-F1167ACF, WRC-1750GHBK Problem Types: OS command injection Description: OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elecom.co.jp/news/security/20230810-01/ - https://jvn.jp/en/vu/JVNVU91630351/
CVE ID: CVE-2023-39945 State: PUBLISHED Published: 2023-08-11T13:21:53.298Z Last Updated: 2025-02-13T17:03:16.300Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-248 Description: eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.0, 2.10.2, 2.9.2, and 2.6.5, a data submessage sent to PDP port raises unhandled `BadParamException` in fastcdr, which in turn crashes fastdds. Versions 2.11.0, 2.10.2, 2.9.2, and 2.6.5 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
6.5 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-2rq6-8j7x-frr9 - https://bombshell.gtisc.gatech.edu/ddsfuzz/pcap/fastdds-exception-20230509-02.pcap - https://github.com/eProsima/Fast-CDR/blob/v1.0.26/src/cpp/Cdr.cpp#L72-L79 - https://www.debian.org/security/2023/dsa-5481
CVE ID: CVE-2023-39946 State: PUBLISHED Published: 2023-08-11T13:37:07.478Z Last Updated: 2025-02-13T17:03:16.897Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-122 Description: eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, heap can be overflowed by providing a PID_PROPERTY_LIST parameter that contains a CDR string with length larger than the size of actual content. In `eprosima::fastdds::dds::ParameterPropertyList_t::push_back_helper`, `memcpy` is called to first copy the octet'ized length a
sima::fastdds::dds::ParameterPropertyList_t::push_back_helper`, `memcpy` is called to first copy the octet'ized length and then to copy the data into `properties_.data`. At the second memcpy, both `data` and `size` can be controlled by anyone that sends the CDR string to the discovery multicast port. This can remotely crash any Fast-DDS process. Versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-j297-rg6j-m7hx - https://github.com/eProsima/Fast-DDS/commit/349227005827e8a67a0406b823138b5068cc47dc - https://www.debian.org
g6j-m7hx - https://github.com/eProsima/Fast-DDS/commit/349227005827e8a67a0406b823138b5068cc47dc - https://www.debian.org/security/2023/dsa-5481
CVE ID: CVE-2023-39947 State: PUBLISHED Published: 2023-08-11T13:43:26.484Z Last Updated: 2025-02-13T17:03:17.427Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-122 Description: eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit 3492270, malformed `PID_PROPERTY_LIST` parameters cause heap overflow at a different program counter. This can remotely crash any Fast-DDS process. Versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 contain a patch for this issue. Additional Analyst Not
h any Fast-DDS process. Versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-mf55-5747-c4pv - https://github.com/eProsima/Fast-DDS/commit/349227005827e8a67a0406b823138b5068cc47dc - https://www.debian.org/security/2023/dsa-5481
CVE ID: CVE-2023-39948 State: PUBLISHED Published: 2023-08-11T13:51:38.871Z Last Updated: 2025-02-13T17:03:18.153Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-248 Description: eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eProsi
sue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x9pj-vrgf-f68f - https://github.com/eProsima/Fast-DDS/issues/3422 - https://github.com/eProsima/Fast-DDS/files/11117197/fastdds-assert.pcap.zip - https://www.debian.org/security/2023/dsa-5481
CVE ID: CVE-2023-39949 State: PUBLISHED Published: 2023-08-11T13:55:14.350Z Last Updated: 2025-02-13T17:03:18.750Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: eProsima Products: Fast-DDS Problem Types: CWE-617 Description: eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure. This can remotely crash any Fast-DDS process. Versions 2.9.1 and 2.6.5 contain a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-3jv9-j9x3-95cg - https://github.com/eProsima/Fast-DDS/issues/3236 - https://github.com/eProsima/Fast-DDS/blob/v2.9.0/src/cpp/rtps/messages/MessageReceiver.cpp#L1059 - https://www.debian.org/security/2023/dsa-5481
CVE ID: CVE-2023-39950 State: PUBLISHED Published: 2023-08-14T20:17:29.931Z Last Updated: 2024-10-01T18:24:16.409Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L) Vendors: siemens Products: efibootguard Problem Types: CWE-20 Description: efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and sanitization of input from untrustworthy bootloader environment files can cause crashes and probably also code injections into `bg_setenv`) or programs using `libebgenv`. This is triggered when the affected components try to modify a manipulated environment, in particular its u
`libebgenv`. This is triggered when the affected components try to modify a manipulated environment, in particular its user variables. Furthermore, `bg_printenv` may crash over invalid read accesses or report invalid results. Not affected by this issue is EFI Boot Guard's bootloader EFI binary. EFI Boot Guard release v0.15 contains required patches to sanitize and validate the bootloader environment prior to processing it in userspace. Its library and tools should be updated, so should programs statically linked against it. An update of the bootloader EFI executable is not required. The only way to prevent the issue with an unpatched EFI Boot Guard version is to avoid accesses to user variab
required. The only way to prevent the issue with an unpatched EFI Boot Guard version is to avoid accesses to user variables, specifically modifications to them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/siemens/efibootguard/security/advisories/GHSA-j6pp-7g99-24m7 - https://github.com/siemens/efibootguard/blob/master/docs/API.md - https://github.com/siemens/efibootguard/blob/master/docs/TOOLS.md - https://github.com/siemens/efibootguard/blob/master/docs/TOOLS.md#setting-user-variables - https://github.com/siemens/efibootguard/tags
CVE ID: CVE-2023-39951 State: PUBLISHED Published: 2023-08-08T21:02:36.968Z Last Updated: 2024-10-03T15:53:02.609Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: open-telemetry Products: opentelemetry-java-instrumentation Problem Types: CWE-200 Description: OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. OpenTelemetry Java Instrumentation prior to version 1.28.0 contains an issue related to the instrumentation of Java applications using the AWS SDK v2 with Amazon Simple Email Service (SES) v1 API. When SES POST requests are instrumented, the query parameters of the request are inserted i
Email Service (SES) v1 API. When SES POST requests are instrumented, the query parameters of the request are inserted into the trace `url.path` field. This behavior leads to the http body, containing the email subject and message, to be present in the trace request url metadata. Any user using a version before 1.28.0 of OpenTelemetry Java Instrumentation to instrument AWS SDK v2 call to SES’s v1 SendEmail API is affected. The e-mail content sent to SES may end up in telemetry backend. This exposes the e-mail content to unintended audiences. The issue can be mitigated by updating OpenTelemetry Java Instrumentation to version 1.28.0 or later. Additional Analyst Notes: - CVE Program Container:
dating OpenTelemetry Java Instrumentation to version 1.28.0 or later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-hghr-r469-gfq6 - https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/8956 - https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/8931
CVE ID: CVE-2023-39952 State: PUBLISHED Published: 2023-08-10T13:50:50.528Z Last Updated: 2024-10-08T14:48:25.374Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-284 Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1, a user can access files inside a subfolder of a groupfolder accessible to them, even if advanced permissions would block access to the subfolder. Nextcloud Server versions 25.0.8, 26.0.3, and 27.0.1 and Nextcloud Enterprise Server
uld block access to the subfolder. Nextcloud Server versions 25.0.8, 26.0.3, and 27.0.1 and Nextcloud Enterprise Server versions 22.2.10.13, 23.0.12.8, 24.0.12.4, 25.0.8, 26.0.3, and 27.0.1 contain a patch for this issue. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-cq8w-v4fh-4rjq - https://github.com/nextcloud/groupfolders/issues/1906 - https://github.com/nextcloud/server/pull/38890 - https://hackerone.com/reports/1808079
CVE ID: CVE-2023-39953 State: PUBLISHED Published: 2023-08-10T13:55:19.957Z Last Updated: 2024-10-03T15:11:48.536Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-303 Description: user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, missing verification of the issuer would have allowed an attacker to perform a man-in-the-middle attack returning corrupted or known token they also have access to. user_oidc 1.3.3 contains a patch. No known workarounds are available. Additional Analyst Notes: - CVE Program Con
ss to. user_oidc 1.3.3 contains a patch. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xx3h-v363-q36j - https://github.com/nextcloud/user_oidc/pull/642 - https://hackerone.com/reports/2021684
CVE ID: CVE-2023-39954 State: PUBLISHED Published: 2023-08-10T14:32:27.032Z Last Updated: 2024-10-03T15:08:09.372Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-311 Description: user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform. Starting in version 1.0.0 and prior to version 1.3.3, an attacker that obtained at least read access to a snapshot of the database can impersonate the Nextcloud server towards linked servers. user_oidc 1.3.3 contains a patch. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
s a patch. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3f92-5c8p-f6gq - https://github.com/nextcloud/user_oidc/pull/636 - https://hackerone.com/reports/1994328
CVE ID: CVE-2023-39955 State: PUBLISHED Published: 2023-08-10T14:53:42.626Z Last Updated: 2024-10-04T18:23:55.573Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: nextcloud Products: security-advisories Problem Types: CWE-79 Description: Notes is a note-taking app for Nextcloud, an open-source cloud platform. Starting in version 4.4.0 and prior to version 4.8.0, when creating a note file with HTML, the content is rendered in the preview instead of the file being offered to download. Nextcloud Notes app version 4.8.0 contains a patch for the issue. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
sue. No known workarounds are available. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6g88-37x7-4vw6 - https://github.com/nextcloud/notes/pull/1031 - https://hackerone.com/reports/1924355
CVE ID: CVE-2023-39956 State: PUBLISHED Published: 2023-09-06T20:09:33.185Z Last Updated: 2024-09-26T15:17:59.795Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: electron Products: electron Problem Types: CWE-94 Description: Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps that are launched as command line executables are impacted. Specifically this issue can only be exploited if the following conditions are met: 1. The app is launched with an attacker-controlled working directory and 2. The attacker has the ability to write files to that working directory. This makes the risk qui
working directory and 2. The attacker has the ability to write files to that working directory. This makes the risk quite low, in fact normally issues of this kind are considered outside of our threat model as similar to Chromium we exclude Physically Local Attacks but given the ability for this issue to bypass certain protections like ASAR Integrity it is being treated with higher importance. This issue has been fixed in versions:`26.0.0-beta.13`, `25.4.1`, `24.7.1`, `23.3.13`, and `22.3.19`. There are no app side workarounds, users must update to a patched version of Electron. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/elec
ctron. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/electron/electron/security/advisories/GHSA-7x97-j373-85x5