Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b28150e7-214b-4bcd-85c0-e819c4223484
CVE ID: CVE-2023-0097 State: PUBLISHED Published: 2023-01-30T20:31:47.957Z Last Updated: 2025-03-27T19:22:58.992Z Vendors: Unknown Products: Post Grid, Post Carousel, & List Category Posts Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Post Grid, Post Carousel, & List Category Posts WordPress plugin before 2.4.19 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/19379f08-d6
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/19379f08-d667-4b1e-a774-0f4a17ad7bff
CVE ID: CVE-2023-0098 State: PUBLISHED Published: 2023-02-13T14:32:15.988Z Last Updated: 2025-03-21T19:29:51.689Z Vendors: Unknown Products: Simple URLs Problem Types: CWE-89 SQL Injection Description: The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/db0b3275-40df-404e-aa8d-53558f0122d8
CVE ID: CVE-2023-0099 State: PUBLISHED Published: 2023-02-13T14:32:05.647Z Last Updated: 2025-02-13T16:38:42.562Z Vendors: Unknown Products: Simple URLs Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fd50f2d6-e420-4220-b485-73f33227e8f8 - http://packetstormsecurity.com/files/176983/WordPress-Simple-URLs-Cross-Site-Scriptin
f2d6-e420-4220-b485-73f33227e8f8 - http://packetstormsecurity.com/files/176983/WordPress-Simple-URLs-Cross-Site-Scripting.html
CVE ID: CVE-2023-0100 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:47:48.964Z Vendors: The Eclipse Foundation Products: Eclipse BIRT (Business Intelligence Reporting Tool) Problem Types: CWE-20 Description: In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the __report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in th
However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.eclipse.org/bugs/show_bug.cgi?id=580391
CVE ID: CVE-2023-0101 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-02T14:39:20.322Z Vendors: n/a Products: Nessus Problem Types: Privilege Escalation Description: A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2023-01 - https://www.tenable.com/security/tns-2023-02
CVE ID: CVE-2023-0102 State: PUBLISHED Published: 2023-02-15T17:20:48.504Z Last Updated: 2025-01-16T21:57:08.084Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: LS Electric Products: XBC-DN32U Problem Types: CWE-306 Description: LS ELECTRIC XBC-DN32U with operating system version 01.80 is missing authentication for its deletion command. This could allow an attacker to delete arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02
CVE ID: CVE-2023-0103 State: PUBLISHED Published: 2023-02-15T17:22:35.371Z Last Updated: 2025-01-16T21:56:59.978Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: LS Electric Products: XBC-DN32U Problem Types: CWE-788 Description: If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer, the device stops operating. This could allow an attacker to cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-02
CVE ID: CVE-2023-0104 State: PUBLISHED Published: 2023-02-22T20:25:04.680Z Last Updated: 2025-01-16T21:55:59.469Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H) Vendors: Weintek Products: EasyBuilder Pro cMT Problem Types: CWE-29 Description: The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-045-01
CVE ID: CVE-2023-0105 State: PUBLISHED Published: 2023-01-11T20:46:51.617Z Last Updated: 2025-04-09T13:47:22.306Z Vendors: redhat.com Products: Keycloak Problem Types: n/a Description: A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-0105
CVE ID: CVE-2023-0106 State: PUBLISHED Published: 2023-01-07T00:00:00.000Z Last Updated: 2025-04-09T15:37:19.942Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/5c0809cb-f4ff-4447-bed6-b5625fb374bb - https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7
CVE ID: CVE-2023-0107 State: PUBLISHED Published: 2023-01-07T00:00:00.000Z Last Updated: 2025-04-09T15:38:27.611Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7 - https://huntr.dev/bounties/0b28fa57-acb0-47c8-ac48-962ff3898156
CVE ID: CVE-2023-0108 State: PUBLISHED Published: 2023-01-07T00:00:00.000Z Last Updated: 2025-04-09T15:39:06.593Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c - https://huntr.dev/bounties/f66d33df-6588-4ab4-80a0-847451517944
CVE ID: CVE-2023-0109 State: PUBLISHED Published: 2024-11-15T10:57:21.900Z Last Updated: 2024-11-15T20:56:59.319Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has bee
e theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/1899ffb2-ce1e-4dc0-af96-972612190f6e - https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c
CVE ID: CVE-2023-0110 State: PUBLISHED Published: 2023-01-07T00:00:00.000Z Last Updated: 2025-04-09T15:39:42.209Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c - https://huntr.dev/bounties/6e4a1961-dbca-46f6-ae21-c25a621e54a7
CVE ID: CVE-2023-0111 State: PUBLISHED Published: 2023-01-07T00:00:00.000Z Last Updated: 2025-04-09T15:40:10.708Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c - https://huntr.dev/bounties/70da256c-977a-487e-8a6a-9ae22caedbe3
CVE ID: CVE-2023-0112 State: PUBLISHED Published: 2023-01-07T00:00:00.000Z Last Updated: 2025-04-09T15:40:34.303Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: usememos Products: usememos/memos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/ec2a29dc-79a3-44bd-a58b-15f676934af6 - https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c
CVE ID: CVE-2023-0113 State: PUBLISHED Published: 2023-01-07T08:22:36.918Z Last Updated: 2024-08-02T05:02:44.061Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Netis Products: Netcore Router Problem Types: CWE-200 Description: A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-217591. Additional Analyst Notes: - CVE Program Container: References: - htt
ted identifier of this vulnerability is VDB-217591. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217591 - https://vuldb.com/?ctiid.217591
CVE ID: CVE-2023-0114 State: PUBLISHED Published: 2023-01-07T08:24:17.736Z Last Updated: 2024-08-02T05:02:43.663Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Netis Products: Netcore Router Problem Types: CWE-313 Description: A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The identifier of this vulnerability is VDB-217592. Additional Analyst Notes: - CVE Program Container: References: - https://v
entifier of this vulnerability is VDB-217592. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217592 - https://vuldb.com/?ctiid.217592
CVE ID: CVE-2023-0115 State: REJECTED Published: N/A Last Updated: 2023-02-01T06:23:48.375Z Description: No description available.
CVE ID: CVE-2023-0116 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T16:11:57.198Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2023-0117 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T21:14:43.039Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Input Validation Description: The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may affect availability of features,such as MeeTime. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2023-0118 State: PUBLISHED Published: 2023-09-20T13:39:27.756Z Last Updated: 2024-09-17T13:51:28.373Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Satellite 6.11 for RHEL 7, Red Hat Satellite 6.11 for RHEL 8, Red Hat Satellite 6.12 for RHEL 8, Red Hat Satellite 6.13 for RHEL 8, Red Hat Satellite 6.14 for RHEL 8 Problem Types: CWE-78 Description: An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
derlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:4466 - https://access.redhat.com/errata/RHSA-2023:5979 - https://access.redhat.com/errata/RHSA-2023:5980 - https://access.redhat.com/errata/RHSA-2023:6818 - https://access.redhat.com/security/cve/CVE-2023-0118 - https://bugzilla.redhat.com/show_bug.cgi?id=2159291
CVE ID: CVE-2023-0119 State: PUBLISHED Published: 2023-09-12T15:14:29.533Z Last Updated: 2024-08-02T05:02:43.579Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Satellite 6.13 for RHEL 8, Red Hat Satellite 6.14 for RHEL 8 Problem Types: CWE-79 Description: A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
e requests on behalf of the user, and obtain user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:3387 - https://access.redhat.com/errata/RHSA-2023:6818 - https://access.redhat.com/security/cve/CVE-2023-0119 - https://bugzilla.redhat.com/show_bug.cgi?id=2159104 - https://projects.theforeman.org/issues/35977
CVE ID: CVE-2023-0120 State: PUBLISHED Published: 2023-09-01T10:01:51.685Z Last Updated: 2025-11-20T04:05:58.275Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to edit labels description by an unauthorised user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/387531 - https:
A ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/387531 - https://hackerone.com/reports/1818425
CVE ID: CVE-2023-0121 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T17:00:17.563Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2 which allows an attacker to cause high resource consumption using malicious test report artifacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/38
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/387549 - https://hackerone.com/reports/1774688 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0121.json
CVE ID: CVE-2023-0122 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T18:50:52.615Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=da0342a3aa0357795224e6283df86444e1117168 - http://www.openwall.com/lists/oss-security/2023/01/18
ds/linux.git/commit/?id=da0342a3aa0357795224e6283df86444e1117168 - http://www.openwall.com/lists/oss-security/2023/01/18/1 - https://security.netapp.com/advisory/ntap-20230302-0002/
CVE ID: CVE-2023-0123 State: PUBLISHED Published: 2023-02-02T22:57:48.508Z Last Updated: 2025-01-16T21:58:05.233Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Industrial Automation Products: DOPSoft Problem Types: CWE-121 Description: Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-031-01
CVE ID: CVE-2023-0124 State: PUBLISHED Published: 2023-02-02T22:59:15.110Z Last Updated: 2025-01-16T21:57:57.817Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Industrial Automation Products: DOPSoft Problem Types: CWE-787 Description: Delta Electronics DOPSoft versions 4.00.16.22 and prior are vulnerable to an out-of-bounds write, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced to the software. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-031-01
CVE ID: CVE-2023-0125 State: PUBLISHED Published: 2023-01-09T20:51:06.425Z Last Updated: 2024-08-02T05:02:43.778Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Control iD Products: Gerencia Web Problem Types: CWE-79 Description: A vulnerability was found in Control iD Gerencia Web 1.30. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation of the argument Nome leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-217717 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
c and may be used. The identifier VDB-217717 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217717 - https://vuldb.com/?ctiid.217717 - https://www.notion.so/ControlID-XSS-7ab891644a794103b582a59360f071a5
CVE ID: CVE-2023-0126 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T19:57:28.170Z Vendors: SonicWall Products: SonicWall SMA1000 Problem Types: CWE-22 Description: Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0001
CVE ID: CVE-2023-0127 State: PUBLISHED Published: 2023-02-11T00:00:00.000Z Last Updated: 2025-03-24T14:37:35.483Z Vendors: n/a Products: D-Link DWL-2600AP with firmware v4.2.0.17 Problem Types: Command Injection Description: A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2023-1
CVE ID: CVE-2023-0128 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-05T16:10:58.406Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1353208 - https://security.gentoo.org/glsa/202
og.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1353208 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0129 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-05T16:10:48.639Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1382033 - https://security.gen
eleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1382033 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11