Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ue to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2e2d54eb-c176-49c4-a4fc-833e17189cad?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3031495%40matomo&new=3031495%40matomo&sfp_email=&sfph_mail=
CVE ID: CVE-2023-6924 State: PUBLISHED Published: 2024-01-11T08:32:29.092Z Last Updated: 2025-06-03T14:10:16.340Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: 10web Products: Photo Gallery by 10Web – Mobile-Friendly Image Gallery Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Photo Gallery by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in versions up to, and including, 1.8.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with administrator-level and
ut escaping on user supplied attributes. This makes it possible for authenticated attackers with administrator-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. It can also be exploited with a contributor-level permission with a page builder plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/21b4d1a1-55fe-4241-820c-203991d724c4?source=cve - https://plugins.trac.wordpress.org/browser/photo-gallery/tags/1.8.18/admin/views/Widget.php#L94 - https://plugins.trac.wordpress.org/browser/photo-gallery/tags/1.8.18/admin
lery/tags/1.8.18/admin/views/Widget.php#L94 - https://plugins.trac.wordpress.org/browser/photo-gallery/tags/1.8.18/admin/views/WidgetSlideshow.php#L64 - https://plugins.trac.wordpress.org/browser/photo-gallery/tags/1.8.18/admin/views/WidgetTags.php#L58 - https://plugins.trac.wordpress.org/changeset/3013021/photo-gallery
CVE ID: CVE-2023-6925 State: PUBLISHED Published: 2024-02-05T21:21:55.601Z Last Updated: 2025-05-15T19:46:23.156Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: unitecms Products: Unlimited Addons for WPBakery Page Builder Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'importZipFile' function in versions up to, and including, 1.0.42. This makes it possible for authenticated attackers with a role that the administrator previously granted access to the plugin (the defaul
sible for authenticated attackers with a role that the administrator previously granted access to the plugin (the default is editor role, but access can also be granted to contributor role), to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a78b76d6-4068-4141-9726-7db439aa6a9f?source=cve - https://plugins.trac.wordpress.org/browser/unlimited-addons-for-wpbakery-page-builder/trunk/inc_php/layouts/unitecreator_layouts_exporter.class.php?rev=2900676#L703
CVE ID: CVE-2023-6926 State: PUBLISHED Published: 2024-01-23T19:23:08.788Z Last Updated: 2024-11-13T15:54:03.385Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Crestron Products: AM-300 Problem Types: CWE-78 Description: There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-023-02
CVE ID: CVE-2023-6927 State: PUBLISHED Published: 2023-12-18T22:59:07.495Z Last Updated: 2025-11-11T15:55:11.670Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat build of Keycloak 22, Red Hat build of Keycloak 22.0.8, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, RHEL-8 based Middleware Containers, Single Sign-On 7.6.6 Problem Types: CWE-601 Description: A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could
steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:0094 - https://access.redhat.com/errata/RHSA-2024:0095 - https://access.redhat.com/errata/RHSA-2024:0096 - https://access.redhat.com/errata/RHSA-2024:0097 - https://access.redhat.com/errata/RHSA-2024:0098 - https://access.redhat.com/errata/RHSA-2024:0100 - https://access.redhat.com/errata/RHSA-2024:0101 - https://access.redhat.com/errata/RHSA-2024:0798 - https://access.redhat.com/errata/RHSA-20
t.com/errata/RHSA-2024:0101 - https://access.redhat.com/errata/RHSA-2024:0798 - https://access.redhat.com/errata/RHSA-2024:0799 - https://access.redhat.com/errata/RHSA-2024:0800 - https://access.redhat.com/errata/RHSA-2024:0801 - https://access.redhat.com/errata/RHSA-2024:0804 - https://access.redhat.com/security/cve/CVE-2023-6927 - https://bugzilla.redhat.com/show_bug.cgi?id=2255027
CVE ID: CVE-2023-6928 State: PUBLISHED Published: 2023-12-19T22:58:50.824Z Last Updated: 2024-08-02T08:42:08.687Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: EuroTel Products: ETL3100 Problem Types: CWE-307 Description: EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05
CVE ID: CVE-2023-6929 State: PUBLISHED Published: 2023-12-19T23:02:08.432Z Last Updated: 2025-05-06T18:49:50.381Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: EuroTel Products: ETL3100 Problem Types: CWE-639 Description: EuroTel ETL3100 versions v01c01 and v01x37 are vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability, attackers can bypass authorization, access the hidden resources on the system, and execute privileged functionalities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://w
ged functionalities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05
CVE ID: CVE-2023-6930 State: PUBLISHED Published: 2023-12-19T23:04:49.947Z Last Updated: 2024-11-21T20:11:12.459Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H) Vendors: EuroTel Products: ETL3100 Problem Types: CWE-284 Description: EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05
CVE ID: CVE-2023-6931 State: PUBLISHED Published: 2023-12-19T14:09:14.085Z Last Updated: 2025-02-13T17:26:59.664Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-787 Description: A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group(). We recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/
c2d8db0afc795a1b. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b - https://kernel.dance/382c27f4ed28f803b1f1473ac2d8db0afc795a1b - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE ID: CVE-2023-6932 State: PUBLISHED Published: 2023-12-19T14:09:15.662Z Last Updated: 2025-02-13T17:27:00.208Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/
aaabc719d0a496f1. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=e2b706c691905fe78468c361aaabc719d0a496f1 - https://kernel.dance/e2b706c691905fe78468c361aaabc719d0a496f1 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html - http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html
CVE ID: CVE-2023-6933 State: PUBLISHED Published: 2024-02-05T21:21:53.045Z Last Updated: 2024-08-22T16:01:42.781Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wpengine Products: Better Search Replace Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it
n the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/895f2db1-a2ed-4a17-a4f6-cd13ee8f84af?source=cve - https://plugins.trac.wordpress.org/browser/better-search-replace/trunk/includes/class-bsr-db.php#L334 - https://plugins.trac.wordpress.org/changeset/3023674/better-search-replace/trunk/includes/class-bsr-db.php
CVE ID: CVE-2023-6934 State: PUBLISHED Published: 2024-01-11T08:32:46.884Z Last Updated: 2025-06-17T21:09:14.911Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpchefgadget Products: Limit Login Attempts Reloaded Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Limit Login Attempts Reloaded plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.25.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor
ion and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/906049c0-4710-47aa-bf44-cdf29032dc1f?source=cve - https://plugins.svn.wordpress.org/limit-login-attempts-reloaded/trunk/core/Shortcodes.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3012447%40limit-login-attempts-reloaded%2Ftrunk&old=2995934%40limit-login-atte
geset?sfp_email=&sfph_mail=&reponame=&new=3012447%40limit-login-attempts-reloaded%2Ftrunk&old=2995934%40limit-login-attempts-reloaded%2Ftrunk&sfp_email=&sfph_mail=#file2
CVE ID: CVE-2023-6935 State: PUBLISHED Published: 2024-02-09T22:25:04.663Z Last Updated: 2024-08-02T08:42:08.533Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: wolfSSL Products: wolfSSL Problem Types: CWE-203 Description: wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure: --enable-all CFLAGS="-DWOLFSSL_STATIC_RSA" The define “WOLFSSL_STATIC_RSA” enables static RSA cipher suites, which is not recommended, and has been disabled by default since wolfSSL 3.6.6. Therefore the default build since 3.6.6, even with "--enable-all", is n
as been disabled by default since wolfSSL 3.6.6. Therefore the default build since 3.6.6, even with "--enable-all", is not vulnerable to the Marvin Attack. The vulnerability is specific to static RSA cipher suites, and expected to be padding-independent. The vulnerability allows an attacker to decrypt ciphertexts and forge signatures after probing with a large number of test observations. However the server’s private key is not exposed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://people.redhat.com/~hkario/marvin/ - https://www.wolfssl.com/docs/security-vulnerabilities/
CVE ID: CVE-2023-6936 State: PUBLISHED Published: 2024-02-20T21:52:02.441Z Last Updated: 2025-03-26T16:28:30.322Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wolfSSL Products: wolfSSL Description: In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/pull/6949/ - https://www.wolfssl.com/docs/security-vulnerabilities/
CVE ID: CVE-2023-6937 State: PUBLISHED Published: 2024-02-15T17:21:44.342Z Last Updated: 2025-04-24T15:13:34.315Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wolfSSL Products: wolfSSL Problem Types: CWE-20 Description: wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was possible to combine (D)TLS messages using different keys into one (D)TLS record. The most extreme edge case is that, in (D)TLS 1.3, it was possible that an unencrypted (D)TLS 1.3 record from the server containing first a ServerHello message and then the rest of the first server flight would be accepted by a wolfSSL client
ontaining first a ServerHello message and then the rest of the first server flight would be accepted by a wolfSSL client. In (D)TLS 1.3 the handshake is encrypted after the ServerHello but a wolfSSL client would accept an unencrypted flight from the server. This does not compromise key negotiation and authentication so it is assigned a low severity rating. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/pull/7029 - https://www.wolfssl.com/docs/security-vulnerabilities/
CVE ID: CVE-2023-6938 State: PUBLISHED Published: 2024-01-11T14:32:23.606Z Last Updated: 2025-06-17T21:09:15.080Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Oxygen Builder Products: Oxygen Builder Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions up to, and including, 4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that
ible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: Version 4.8.1 of the Oxygen Builder plugin for WordPress addresses this vulnerability by implementing an optional filter to provide output escaping for dynamic data. Please see https://oxygenbuilder.com/documentation/other/security/#filtering-dynamic-data for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ee069cb3-370e-48ea-aa35-c30fe83c2498?source=cve - https://oxygenbuilder.com/oxygen-4-8-1-now-av
intel/vulnerabilities/id/ee069cb3-370e-48ea-aa35-c30fe83c2498?source=cve - https://oxygenbuilder.com/oxygen-4-8-1-now-available/
CVE ID: CVE-2023-6939 State: PUBLISHED Published: 2023-12-29T03:23:59.852Z Last Updated: 2024-08-02T08:42:08.569Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Honor Products: Magic UI Description: Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.hihonor.com/global/security/cve-2023-6939/
CVE ID: CVE-2023-6940 State: PUBLISHED Published: 2023-12-19T01:41:12.560Z Last Updated: 2025-05-07T20:26:08.729Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: mlflow Products: mlflow/mlflow Problem Types: CWE-77 Description: with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/c6f59480-ce47-4f78-a3dc-4bd8ca15029c - https://github.com/mlflow/mlflow/commit/5139b1087d686fa52e2b087e09da66aff86297b1
CVE ID: CVE-2023-6941 State: PUBLISHED Published: 2024-01-15T15:10:38.764Z Last Updated: 2025-06-20T16:53:21.668Z Vendors: Unknown Products: Keap Official Opt-in Forms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Keap Official Opt-in Forms WordPress plugin through 1.0.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/58f7c9aa-5e59-468f-aba9-b15e7942fd37/
CVE ID: CVE-2023-6942 State: PUBLISHED Published: 2024-01-30T09:06:27.941Z Last Updated: 2025-09-19T02:12:33.171Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Mitsubishi Electric Corporation Products: EZSocket, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, MX OPC Server DA/UA Problem Types: CWE-306 Description: Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to
OT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.106L and prior, MELSOFT Navigator versions 1.04E to 2.102G, MT Works2 versions 1.190Y and prior, MX Component versions 4.00A to 5.007H and MX OPC Server DA/UA all versions allows a remote unauthenticated attacker to bypass authentication by sending specially crafted packets and connect to the products illegally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-020_en.pdf - https://jvn.jp/vu/JVNVU95103362 - https://www.cisa.gov/news-events
tric.com/en/psirt/vulnerability/pdf/2023-020_en.pdf - https://jvn.jp/vu/JVNVU95103362 - https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-02
CVE ID: CVE-2023-6943 State: PUBLISHED Published: 2024-01-30T09:09:29.248Z Last Updated: 2025-09-19T02:13:47.115Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mitsubishi Electric Corporation Products: EZSocket, GT Designer3 Version1(GOT1000), GT Designer3 Version1(GOT2000), GX Works2, GX Works3, MELSOFT Navigator, MT Works2, MX Component, MX OPC Server DA/UA Problem Types: CWE-470 Description: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.3
sions 3.0 to 5.92, GT Designer3 Version1(GOT1000) versions 1.325P and prior, GT Designer3 Version1(GOT2000) versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.106L and prior, MELSOFT Navigator versions 1.04E to 2.102G, MT Works2 versions 1.190Y and prior, MX Component versions 4.00A to 5.007H and MX OPC Server DA/UA all versions allows a remote unauthenticated attacker to execute a malicious code by RPC with a path to a malicious library while connected to the products. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-020_en.pdf - https://jvn.jp/vu/JVNV
nt: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2023-020_en.pdf - https://jvn.jp/vu/JVNVU95103362 - https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-02
CVE ID: CVE-2023-6944 State: PUBLISHED Published: 2024-01-04T10:02:38.088Z Last Updated: 2025-11-20T18:07:14.520Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: RHDH-1.1-RHEL-9 Problem Types: CWE-209 Description: A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, re
s token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHBA-2024:5869 - https://access.redhat.com/security/cve/CVE-2023-6944 - https://bugzilla.redhat.com/show_bug.cgi?id=2255204