Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0350 State: PUBLISHED Published: 2023-03-13T20:22:53.970Z Last Updated: 2025-01-16T21:54:51.702Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Akuvox Products: E11 Problem Types: CWE-646 Reliance on File Name or Extension of Externally-supplied File Description: Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01
CVE ID: CVE-2023-0351 State: PUBLISHED Published: 2023-03-13T20:22:01.322Z Last Updated: 2025-01-16T21:54:58.830Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Akuvox Products: E11 Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01
CVE ID: CVE-2023-0352 State: PUBLISHED Published: 2023-03-13T20:15:51.389Z Last Updated: 2025-01-16T21:55:06.773Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Akuvox Products: E11 Problem Types: CWE-640 Weak Password Recovery Mechanism for Forgotten Password Description: The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01
CVE ID: CVE-2023-0353 State: PUBLISHED Published: 2023-03-13T20:07:22.716Z Last Updated: 2025-01-16T21:45:17.644Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Akuvox Products: E11 Problem Types: CWE-257 Storing Passwords in a Recoverable Format Description: Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01
CVE ID: CVE-2023-0354 State: PUBLISHED Published: 2023-03-13T20:04:43.540Z Last Updated: 2025-01-16T21:45:36.907Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Akuvox Products: E11 Problem Types: CWE-306 Missing Authentication for Critical Function Description: The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01
CVE ID: CVE-2023-0355 State: PUBLISHED Published: 2023-03-13T19:57:47.690Z Last Updated: 2025-01-16T21:46:04.846Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Akuvok Products: E11 Problem Types: CWE-321 Use of Hard-Coded Cryptographic Key Description: Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01
CVE ID: CVE-2023-0356 State: PUBLISHED Published: 2023-01-24T18:40:13.224Z Last Updated: 2025-01-16T21:59:10.866Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: SOCOMEC Products: MODULYS GP Problem Types: CWE-261 Description: SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-024-02
CVE ID: CVE-2023-0357 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-13T16:20:19.701Z Vendors: n/a Products: Helpy Problem Types: Stored cross-site scripting (XSS) Description: Helpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the application. This is possible because the application does not correctly validate the attachments sent by customers in the ticket. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/quayle/ - https://github.com/helpyio/helpy/
CVE ID: CVE-2023-0358 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-03T19:30:42.220Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: gpac Products: gpac/gpac Problem Types: CWE-416 Description: Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/93e128ed-253f-4c42-81ff-fbac7fd8f355 - https://github.com/gpac/gpac/commit/9971fb125cf91cefd081a080c417b90bbe4a467b
CVE ID: CVE-2023-0359 State: PUBLISHED Published: 2023-07-10T04:21:21.203Z Last Updated: 2024-11-12T14:21:00.476Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-20 Description: A missing nullptr-check in handle_ra_input can cause a nullptr-deref. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c7fq-vqm6-v5pf
CVE ID: CVE-2023-0360 State: PUBLISHED Published: 2023-02-13T14:32:33.325Z Last Updated: 2025-03-20T20:48:17.781Z Vendors: Unknown Products: Location Weather Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ba653457-415f-4ab3-a792-42640b59302b
CVE ID: CVE-2023-0361 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T17:45:36.732Z Vendors: n/a Products: gnutls Problem Types: side-channel Description: A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that c
ret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-0361 - https://github.com/tlsfuzzer/tlsfuzzer/pull/679 - https://gitlab.com/gnutls/gnutls/-/issues/1050 - https://lists.debian.org/debian-lts-announce/2023/02/msg00015.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFIA3X4IZ3CW7SRQ2UHNHNPMRIAWF2FI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z634YBXAJ5VLDI62IOPBVP5K6Y
ps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z634YBXAJ5VLDI62IOPBVP5K6YFHAWCY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS4KVDOG6QTALWHC2QE4Y7VPDRMLTRWQ/ - https://security.netapp.com/advisory/ntap-20230324-0005/ - https://security.netapp.com/advisory/ntap-20230725-0005/
CVE ID: CVE-2023-0362 State: PUBLISHED Published: 2023-02-13T14:32:01.690Z Last Updated: 2025-03-21T17:54:01.950Z Vendors: Unknown Products: Themify Portfolio Post Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/95ee3257-cfda-480d-b3f7-28235564cf6d
CVE ID: CVE-2023-0363 State: PUBLISHED Published: 2023-04-10T13:17:52.212Z Last Updated: 2025-02-11T15:18:37.845Z Vendors: Unknown Products: Scheduled Announcements Widget Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6d332a47-e96c-455b-9e8f-db6dbb59b518
CVE ID: CVE-2023-0364 State: PUBLISHED Published: 2023-03-20T15:52:14.304Z Last Updated: 2025-02-26T14:34:29.321Z Vendors: Unknown Products: real.Kit Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The real.Kit WordPress plugin before 5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e56759ae-7530-467a-b9ba-e9a404afb872
CVE ID: CVE-2023-0365 State: PUBLISHED Published: 2023-03-20T15:52:09.937Z Last Updated: 2025-02-26T14:47:31.564Z Vendors: Unknown Products: React Webcam Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The React Webcam WordPress plugin through 1.2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d268d7a3-82fd-4444-bc0e-27c7cc279b5a
CVE ID: CVE-2023-0366 State: PUBLISHED Published: 2023-02-21T08:50:59.725Z Last Updated: 2025-03-12T20:52:27.532Z Vendors: Unknown Products: Loan Comparison Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7d68b0df-7169-46b2-b8e3-4d0c2aa8d605
CVE ID: CVE-2023-0367 State: PUBLISHED Published: 2023-04-17T12:17:44.774Z Last Updated: 2025-03-03T19:25:35.814Z Vendors: Unknown Products: Pricing Tables For WPBakery Page Builder (formerly Visual Composer) Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
red Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d7685af2-6034-49ea-93ef-4debe72689bc
CVE ID: CVE-2023-0368 State: PUBLISHED Published: 2023-06-19T10:52:48.139Z Last Updated: 2024-12-12T16:43:31.640Z Vendors: Unknown Products: Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b41e5c09-1034-48a7-ac0f-d4db6e7a3b3e
CVE ID: CVE-2023-0369 State: PUBLISHED Published: 2023-03-20T15:52:11.669Z Last Updated: 2025-02-26T14:41:57.819Z Vendors: Unknown Products: GoToWP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The GoToWP WordPress plugin through 5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/351f31e0-cd13-4079-8fd1-447f319133c9
CVE ID: CVE-2023-0370 State: PUBLISHED Published: 2023-03-20T15:52:19.368Z Last Updated: 2025-02-26T19:02:39.171Z Vendors: Unknown Products: WPB Advanced FAQ Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WPB Advanced FAQ WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4f5597f9-ab27-42d2-847c-14455b7d0849
CVE ID: CVE-2023-0371 State: PUBLISHED Published: 2023-02-21T08:50:52.506Z Last Updated: 2025-03-13T20:02:26.271Z Vendors: Unknown Products: EmbedSocial Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/0b6381cd-fa31-4cc7-8b42-063a4c545577
CVE ID: CVE-2023-0372 State: PUBLISHED Published: 2023-02-21T08:50:49.266Z Last Updated: 2025-03-14T14:25:10.980Z Vendors: Unknown Products: EmbedStories Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The EmbedStories WordPress plugin before 0.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9cf90ad8-4aa4-466c-a33e-4f2706815765
CVE ID: CVE-2023-0373 State: PUBLISHED Published: 2023-02-13T14:32:09.595Z Last Updated: 2025-03-21T16:18:34.433Z Vendors: Unknown Products: Lightweight Accordion Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Lightweight Accordion WordPress plugin before 1.5.15 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fe60ea83-b584-465a-8128-b7358d8da3af
CVE ID: CVE-2023-0374 State: PUBLISHED Published: 2023-04-17T12:17:38.355Z Last Updated: 2025-02-06T16:25:48.981Z Vendors: Unknown Products: W4 Post List Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The W4 Post List WordPress plugin before 2.4.6 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/ddb10f2e-73b8-444c-90b2-5c84cdf6de5c
CVE ID: CVE-2023-0375 State: PUBLISHED Published: 2023-02-21T08:50:38.098Z Last Updated: 2025-03-12T20:32:20.521Z Vendors: Unknown Products: Easy Affiliate Links Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Affiliate Links WordPress plugin before 3.7.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embedded, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/915d6add-d3e2-4ced-969e-9523981ac886
CVE ID: CVE-2023-0376 State: PUBLISHED Published: 2024-01-16T15:55:51.086Z Last Updated: 2025-06-02T15:09:50.638Z Vendors: Unknown Products: Qubely Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Qubely WordPress plugin before 1.8.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b1aa6f32-c1d5-4fc6-9a4e-d4c5fae78389/
CVE ID: CVE-2023-0377 State: PUBLISHED Published: 2023-03-06T13:34:05.264Z Last Updated: 2025-03-06T15:01:27.491Z Vendors: Unknown Products: Scriptless Social Sharing Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Scriptless Social Sharing WordPress plugin before 3.2.2 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5b1aacd1-3f75-4a6f-8146-cbb98a713724
CVE ID: CVE-2023-0378 State: PUBLISHED Published: 2023-02-21T08:50:43.727Z Last Updated: 2025-03-12T20:30:26.024Z Vendors: Unknown Products: Greenshift Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Greenshift WordPress plugin before 5.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3313cc05-2267-4d93-a8a8-2c0701c21f66
CVE ID: CVE-2023-0379 State: PUBLISHED Published: 2023-02-13T14:31:59.320Z Last Updated: 2025-03-21T14:46:02.769Z Vendors: Unknown Products: Spotlight Social Feeds [Block, Shortcode, and Widget] Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Spotlight Social Feeds WordPress plugin before 1.4.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/14b4f0c5-c7b1-4ac4-8c9c-f8c35ca5
gram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/14b4f0c5-c7b1-4ac4-8c9c-f8c35ca5de4a
CVE ID: CVE-2023-0380 State: PUBLISHED Published: 2023-02-21T08:50:35.659Z Last Updated: 2025-03-14T18:20:50.555Z Vendors: Unknown Products: Easy Digital Downloads Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3256e090-1131-459d-ade5-f052cd5d189f
CVE ID: CVE-2023-0381 State: PUBLISHED Published: 2023-02-27T15:24:32.174Z Last Updated: 2025-03-18T15:04:17.928Z Vendors: Unknown Products: GigPress Problem Types: CWE-89 SQL Injection Description: The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/39c964fa-6d8d-404d-ac38-72f6f88d203c
CVE ID: CVE-2023-0382 State: PUBLISHED Published: 2023-04-05T06:13:59.289Z Last Updated: 2024-08-28T19:36:12.260Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: M-Files Products: M-Files Server Problem Types: CWE-770 Description: User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/cve-2023-0382/
CVE ID: CVE-2023-0383 State: PUBLISHED Published: 2023-04-20T08:00:31.910Z Last Updated: 2024-08-28T19:35:46.841Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: M-Files Products: M-Files Server Problem Types: CWE-770 Description: User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/cve-2023-0383/
CVE ID: CVE-2023-0384 State: PUBLISHED Published: 2023-04-20T08:02:10.554Z Last Updated: 2024-08-28T19:28:36.098Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: M-Files Products: M-Files Server Problem Types: CWE-400 Description: User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled job. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://product.m-files.com/security-advisories/cve-2023-0384/