Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43543 State: PUBLISHED Published: 2024-06-03T10:05:17.132Z Last Updated: 2024-08-02T19:44:43.789Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html
CVE ID: CVE-2023-43544 State: PUBLISHED Published: 2024-06-03T10:05:18.375Z Last Updated: 2024-08-02T19:44:43.639Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption when IPC callback handle is used after it has been released during register callback by another thread. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html
CVE ID: CVE-2023-43545 State: PUBLISHED Published: 2024-06-03T10:05:19.696Z Last Updated: 2024-08-02T19:44:43.816Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption when more scan frequency list or channels are sent from the user space. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html
CVE ID: CVE-2023-43546 State: PUBLISHED Published: 2024-03-04T10:48:50.734Z Last Updated: 2024-08-26T20:50:56.397Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while invoking HGSL IOCTL context create. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43547 State: PUBLISHED Published: 2024-03-04T10:48:52.133Z Last Updated: 2024-08-08T19:22:22.619Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while invoking IOCTLs calls in Automotive Multimedia. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43548 State: PUBLISHED Published: 2024-03-04T10:48:53.494Z Last Updated: 2024-08-02T19:44:43.762Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while parsing qcp clip with invalid chunk data size. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43549 State: PUBLISHED Published: 2024-03-04T10:48:54.886Z Last Updated: 2024-08-12T18:20:07.549Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-121 Description: Memory corruption while processing TPC target power table in FTM TPC. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43550 State: PUBLISHED Published: 2024-03-04T10:48:56.248Z Last Updated: 2024-08-26T20:51:47.415Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43551 State: PUBLISHED Published: 2024-06-03T10:05:21.301Z Last Updated: 2024-08-02T19:44:43.781Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-287 Description: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html
CVE ID: CVE-2023-43552 State: PUBLISHED Published: 2024-03-04T10:48:57.598Z Last Updated: 2024-08-02T19:44:43.808Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing MBSSID beacon containing several subelement IE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43553 State: PUBLISHED Published: 2024-03-04T10:48:59.001Z Last Updated: 2024-08-02T19:44:43.819Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-43554 State: PUBLISHED Published: 2024-07-01T14:17:03.207Z Last Updated: 2024-08-02T19:44:42.916Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-119 Description: Memory corruption while processing IOCTL handler in FastRPC. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html
CVE ID: CVE-2023-43555 State: PUBLISHED Published: 2024-06-03T10:05:22.819Z Last Updated: 2024-08-02T19:44:43.706Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure in Video while parsing mp2 clip with invalid section length. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html
CVE ID: CVE-2023-43556 State: PUBLISHED Published: 2024-06-03T10:05:24.097Z Last Updated: 2024-08-02T19:44:43.798Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption in Hypervisor when platform information mentioned is not aligned. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html
CVE ID: CVE-2023-43566 State: PUBLISHED Published: 2023-09-19T16:57:29.792Z Last Updated: 2024-09-24T20:33:31.538Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-79 Description: In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2023-43567 State: PUBLISHED Published: 2023-11-08T22:04:47.676Z Last Updated: 2024-09-12T13:27:56.896Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43568 State: PUBLISHED Published: 2023-11-08T22:05:53.826Z Last Updated: 2024-09-03T20:41:29.132Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-126 Description: A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43569 State: PUBLISHED Published: 2023-11-08T22:06:52.623Z Last Updated: 2024-09-12T13:19:41.547Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43570 State: PUBLISHED Published: 2023-11-08T22:07:32.645Z Last Updated: 2024-09-12T18:58:37.515Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-20 Description: A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43571 State: PUBLISHED Published: 2023-11-08T22:18:31.018Z Last Updated: 2024-09-04T19:13:47.746Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43572 State: PUBLISHED Published: 2023-11-08T22:33:42.317Z Last Updated: 2024-09-03T20:41:08.509Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-126 Description: A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43573 State: PUBLISHED Published: 2023-11-08T22:34:34.124Z Last Updated: 2024-09-04T17:11:17.485Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43574 State: PUBLISHED Published: 2023-11-08T22:35:35.999Z Last Updated: 2024-09-03T20:34:05.696Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-126 Description: A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43575 State: PUBLISHED Published: 2023-11-08T22:37:04.075Z Last Updated: 2024-09-04T15:56:01.147Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43576 State: PUBLISHED Published: 2023-11-08T22:37:43.945Z Last Updated: 2024-08-02T19:44:43.777Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43577 State: PUBLISHED Published: 2023-11-08T22:38:22.292Z Last Updated: 2024-08-02T19:44:43.751Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43578 State: PUBLISHED Published: 2023-11-08T22:21:21.705Z Last Updated: 2024-09-04T19:08:31.990Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43579 State: PUBLISHED Published: 2023-11-08T22:23:54.660Z Last Updated: 2024-09-04T18:57:18.103Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43580 State: PUBLISHED Published: 2023-11-08T22:24:39.492Z Last Updated: 2024-09-04T18:54:10.701Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43581 State: PUBLISHED Published: 2023-11-08T22:25:28.020Z Last Updated: 2024-09-04T18:02:07.985Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Desktop BIOS Problem Types: CWE-120 Description: A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-141775
CVE ID: CVE-2023-43582 State: PUBLISHED Published: 2023-11-14T23:12:32.799Z Last Updated: 2024-09-19T13:52:36.217Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-939 Description: Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-43583 State: PUBLISHED Published: 2023-12-13T22:08:42.326Z Last Updated: 2024-09-19T13:55:21.591Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Mobile App for Android, Zoom Mobile App for iOS and Zoom SDK Problem Types: CWE-798 Description: Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosure of information via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-23056/
CVE ID: CVE-2023-43585 State: PUBLISHED Published: 2023-12-13T22:15:58.457Z Last Updated: 2024-09-27T19:16:27.688Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Mobile App for iOS and SDKs for iOS Problem Types: CWE-449 Description: Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-23058/
CVE ID: CVE-2023-43586 State: PUBLISHED Published: 2023-12-13T22:17:48.264Z Last Updated: 2024-08-02T19:44:43.849Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows Problem Types: CWE-426 Description: Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: References: - https://www.zoom.com/en/trust/security-bulletin/ZSB-23059/
CVE ID: CVE-2023-43588 State: PUBLISHED Published: 2023-11-14T23:11:18.161Z Last Updated: 2024-09-20T14:58:08.976Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-449 Description: Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-43590 State: PUBLISHED Published: 2023-11-14T23:15:12.437Z Last Updated: 2024-08-29T17:23:41.033Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms for macOS Problem Types: CWE-59 Description: Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-43591 State: PUBLISHED Published: 2023-11-14T23:16:55.146Z Last Updated: 2025-06-11T14:19:18.235Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms for macOS Problem Types: CWE-280 Description: Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-43608 State: PUBLISHED Published: 2023-12-05T11:30:10.151Z Last Updated: 2025-11-04T19:25:10.555Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Buildroot Products: Buildroot Problem Types: CWE-494 Description: A data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1845 - http://www.openwall.com/lists/oss-security/2023/12/11/1
CVE ID: CVE-2023-43609 State: PUBLISHED Published: 2024-02-09T03:52:03.096Z Last Updated: 2025-06-10T18:52:01.605Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H) Vendors: Emerson Products: Rosemount GC370XA, Rosemount GC700XA, Rosemount GC1500XA Problem Types: CWE-863 Description: In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01 - https://www.emerson.com/documents/automation/s
ences: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01 - https://www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf
CVE ID: CVE-2023-43610 State: PUBLISHED Published: 2023-09-26T08:19:11.405Z Last Updated: 2024-09-24T14:28:26.043Z Vendors: Collne Inc. Products: Welcart e-Commerce Problem Types: SQL Injection Description: SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.welcart.com/archives/20106.html - https://jvn.jp/en/jp/JVN97197972/
CVE ID: CVE-2023-43611 State: PUBLISHED Published: 2023-10-10T12:34:29.102Z Last Updated: 2024-09-19T13:33:37.548Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Edge Client Problem Types: CWE-347 Description: The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. This vulnerability is due to an incomplete fix for CVE-2023-38418. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000136185