Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-44018 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:17:36.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/10/0.md
CVE ID: CVE-2023-44019 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T16:09:07.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/5/0.md
CVE ID: CVE-2023-44020 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:17:14.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/9/0.md
CVE ID: CVE-2023-44021 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:14:16.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/2/0.md
CVE ID: CVE-2023-44022 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:11:22.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/3/0.md
CVE ID: CVE-2023-44023 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:07:53.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aixiao0621/Tenda/blob/main/AC10U/4/0.md
CVE ID: CVE-2023-44024 State: PUBLISHED Published: 2023-10-05T00:00:00 Last Updated: 2024-09-19T18:49:35.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/05/supercheckout.html
CVE ID: CVE-2023-44025 State: PUBLISHED Published: 2023-11-01T00:00:00 Last Updated: 2024-09-12T19:57:43.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.friendsofpresta.org/modules/2023/10/31/addifyfreegifts.html
CVE ID: CVE-2023-44031 State: PUBLISHED Published: 2024-02-03T00:00:00.000Z Last Updated: 2025-11-04T18:17:27.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2024/Jan/43 - https://packetstormsecurity.com/files/176841/Reprise-License-Manager-15.1-Privilege-Escalation-File-Write.html
CVE ID: CVE-2023-44037 State: PUBLISHED Published: 2023-10-14T00:00:00 Last Updated: 2024-09-17T19:46:54.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to obtain sensitive information via the TACACS+ server component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.zpesystems.com/portal/en/kb/articles/security-advisory-zpe-ng-2023-002
CVE ID: CVE-2023-44038 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-11-01T19:45:32.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://veridiumid.com/veridium-id-authentication-platform/ - https://docs.veridiumid.com/docs/v3.5/security-advisory#id-%28v3.52%29SecurityAdvisory-Acknowledgement
CVE ID: CVE-2023-44039 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-21T20:39:03.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollment verifications and is allowed to enroll a FIDO key) to register their FIDO authenticator to a victim’s account and consequently take over the account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://veridiumid.com/veridium-id-authentication-platform/ - https://docs.veridiumid.com/docs/v3.5/security-advisory#id-%28v3.52%29SecurityAdvisory-Acknowledgement
CVE ID: CVE-2023-44040 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-11-05T14:37:35.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: In VeridiumID before 3.5.0, the identity provider page is susceptible to a cross-site scripting (XSS) vulnerability that can be exploited by an internal unauthenticated attacker for JavaScript execution in the context of the user trying to authenticate. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://veridiumid.com/veridium-id-authentication-platform/ - https://docs.veridiumid.com/docs/v3.5/security-advisory#id-%28v3.52%29SecurityAdvisory-Acknowledgement
CVE ID: CVE-2023-44042 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T14:56:44.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Gi0rgi0R/xss_frontend_settings_blackcat_cms_1.4.1
CVE ID: CVE-2023-44043 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T14:56:16.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Gi0rgi0R/xss_installation_blackcat_cms_1.4.1
CVE ID: CVE-2023-44044 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T14:55:35.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TishaManandhar/Superstore-sql-poc/blob/main/SQL
CVE ID: CVE-2023-44047 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:19:29.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xcodeOn1/SQLI-TollTax/blob/main/README.md - https://github.com/xcodeOn1/xcode0x-CVEs/blob/main/CVE/CVE-2023-44047.md
CVE ID: CVE-2023-44048 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:17:49.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xcodeOn1/XSS-Stored-Expense-Tracker-App/tree/main - https://github.com/xcodeOn1/xcode0x-CVEs/blob/main/CVE/CVE-2023-44048.md
CVE ID: CVE-2023-44061 State: PUBLISHED Published: 2023-10-06T00:00:00 Last Updated: 2024-09-19T17:21:11.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/soundarkutty/File-upload-Restriction-bypass/blob/main/poc.md
CVE ID: CVE-2023-44075 State: PUBLISHED Published: 2023-10-04T00:00:00 Last Updated: 2024-09-20T14:03:07.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TheKongV/CVE/blob/main/CVE-2023-44075
CVE ID: CVE-2023-44077 State: PUBLISHED Published: 2024-01-17T00:00:00.000Z Last Updated: 2025-06-17T14:22:29.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.studionetworksolutions.com/hc/en-us/articles/22494658980244-ShareBrowser-v-7-0-Released - https://khronokernel.com/macos/2024/01/18/CVE-2023-44077.html
CVE ID: CVE-2023-44078 State: REJECTED Published: N/A Last Updated: 2023-10-30T13:29:24.282431 Description: No description available.
CVE ID: CVE-2023-44080 State: PUBLISHED Published: 2023-09-27T00:00:00 Last Updated: 2024-09-24T14:16:55.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/one-pyy/330548f740415dff49f59d56e14b4219
CVE ID: CVE-2023-44081 State: PUBLISHED Published: 2023-10-10T10:21:31.775Z Last Updated: 2025-02-27T20:45:48.194Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the
ed buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-524778.pdf
CVE ID: CVE-2023-44082 State: PUBLISHED Published: 2023-10-10T10:21:32.863Z Last Updated: 2025-02-27T20:45:39.822Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the
CVE ID: CVE-2023-44083 State: PUBLISHED Published: 2023-10-10T10:21:34.659Z Last Updated: 2025-02-27T20:45:31.959Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-787 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the
CVE ID: CVE-2023-44084 State: PUBLISHED Published: 2023-10-10T10:21:36.220Z Last Updated: 2025-02-27T20:45:25.711Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-125 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of th
d structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-524778.pdf
CVE ID: CVE-2023-44085 State: PUBLISHED Published: 2023-10-10T10:21:38.664Z Last Updated: 2025-02-27T20:45:19.821Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-125 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of th
CVE ID: CVE-2023-44086 State: PUBLISHED Published: 2023-10-10T10:21:39.731Z Last Updated: 2025-02-27T20:45:12.805Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-125 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of th
CVE ID: CVE-2023-44087 State: PUBLISHED Published: 2023-10-10T10:21:40.787Z Last Updated: 2025-02-27T20:45:06.731Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Tecnomatix Plant Simulation V2201, Tecnomatix Plant Simulation V2302 Problem Types: CWE-125 Description: A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of th
CVE ID: CVE-2023-44088 State: PUBLISHED Published: 2023-12-29T11:48:12.417Z Last Updated: 2025-04-17T20:18:40.276Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora FMS: from 700 through 774. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-44089 State: PUBLISHED Published: 2023-12-29T11:50:00.511Z Last Updated: 2024-09-17T13:01:07.471Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). It was possible to execute malicious JS code on Visual Consoles. This issue affects Pandora FMS: from 700 through 774. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposur
Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-44090 State: PUBLISHED Published: 2024-03-19T16:26:12.225Z Last Updated: 2024-08-02T19:52:12.017Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows CVE-2008-5817. This vulnerability allowed SQL changes to be made to several files in the Grafana module. This issue affects Pandora FMS: from 700 through <776. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilitie
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-44091 State: PUBLISHED Published: 2024-03-19T16:31:38.932Z Last Updated: 2024-08-02T19:52:11.930Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pandora FMS on all allows SQL Injection. This ulnerability allowed SQL injections to be made even if authentication failed.This issue affects Pandora FMS: from 700 through <776. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-expo
Vulnrichment: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-44092 State: PUBLISHED Published: 2024-03-19T16:32:54.633Z Last Updated: 2024-08-02T19:59:50.235Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Pandora FMS Products: Pandora FMS Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Pandora FMS on all allows OS Command Injection. This vulnerability allowed to create a reverse shell and execute commands in the OS. This issue affects Pandora FMS: from 700 through <776. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerab
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-44093 State: PUBLISHED Published: 2023-10-11T10:36:21.500Z Last Updated: 2024-09-18T15:54:59.613Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Missing Critical Step in Authentication Description: Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44094 State: PUBLISHED Published: 2023-10-11T10:43:24.196Z Last Updated: 2024-09-18T15:33:23.135Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-843 Description: Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44095 State: PUBLISHED Published: 2023-10-11T11:44:10.955Z Last Updated: 2024-09-18T15:31:50.182Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-416 Description: Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44096 State: PUBLISHED Published: 2023-10-11T10:37:38.290Z Last Updated: 2024-09-18T15:36:12.855Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-287 Description: Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44097 State: PUBLISHED Published: 2023-10-11T11:46:30.245Z Last Updated: 2024-09-18T15:30:16.188Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540