Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-794653.pdf
CVE ID: CVE-2023-51745 State: PUBLISHED Published: 2024-01-09T10:00:17.032Z Last Updated: 2025-06-03T14:31:19.908Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V13.3, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3 Problem Types: CWE-121 Description: A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.
.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain a stack overflow vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-794653.pdf
CVE ID: CVE-2023-51746 State: PUBLISHED Published: 2024-01-09T10:00:18.333Z Last Updated: 2024-09-04T15:14:05.889Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V13.3, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3 Problem Types: CWE-121 Description: A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.
CVE ID: CVE-2023-51747 State: PUBLISHED Published: 2024-02-27T13:08:01.807Z Last Updated: 2025-02-13T17:19:50.944Z Vendors: Apache Software Foundation Products: Apache James server Problem Types: CWE-20 Description: Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to bypass SPF checks. The patch implies enforcement of CRLF as a line delimiter as part of the DATA transaction. We recommend James users to upgrade to non vulnerable versions. Additional Ana
elimiter as part of the DATA transaction. We recommend James users to upgrade to non vulnerable versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/ - https://postfix.org/smtp-smuggling.html - https://lists.apache.org/thread/rxkwbkh9vgbl9rzx1fkllyk3krhgydko - http://www.openwall.com/lists/oss-security/2024/02/27/4
CVE ID: CVE-2023-51748 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-20T16:18:22.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59 - https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18eb
ion-4752dfa2dc59 - https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6 - https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent
CVE ID: CVE-2023-51749 State: PUBLISHED Published: 2024-01-11T00:00:00 Last Updated: 2024-08-02T22:48:11.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a tooltip. NOTE: the vendor's position is "Not vulnerable if the default Windows device profile configuration is used which utilizes modern management with website allow-listing rules." Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59 - https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-byp
kiosk-mode-bypass-scalefusion-4752dfa2dc59 - https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6 - https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent
CVE ID: CVE-2023-51750 State: PUBLISHED Published: 2024-01-11T00:00:00 Last Updated: 2024-08-02T22:48:11.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur. NOTE: the vendor's position is "Not vulnerable if the default Windows device profile configuration is used which utilizes modern management with website allow-listing rules." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59 - https://medium.com/nestedif/vulnerability-disclosure-browser-
ty-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59 - https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6 - https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent
CVE ID: CVE-2023-51751 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-16T18:56:23.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/nestedif/vulnerability-disclosure-kiosk-mode-bypass-scalefusion-4752dfa2dc59 - https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6 - https:
2dc59 - https://medium.com/nestedif/vulnerability-disclosure-browser-mode-kiosk-bypass-scalefusion-832f5a18ebb6 - https://help.scalefusion.com/docs/security-advisory-for-windows-mdm-agent
CVE ID: CVE-2023-51753 State: REJECTED Published: N/A Last Updated: 2025-05-28T21:32:36.291Z Description: No description available.
CVE ID: CVE-2023-51754 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:19:52.083Z Description: No description available.
CVE ID: CVE-2023-51755 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:19:52.648Z Description: No description available.
CVE ID: CVE-2023-51756 State: REJECTED Published: N/A Last Updated: 2025-05-28T21:32:37.356Z Description: No description available.
CVE ID: CVE-2023-51761 State: PUBLISHED Published: 2024-02-09T03:41:37.457Z Last Updated: 2025-06-10T18:52:34.491Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Emerson Products: Rosemount GC370XA, Rosemount GC700XA, Rosemount GC1500XA Problem Types: CWE-863 Description: In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-030-01 - https://www.emerson.com/documents/automation/security-notification-emerso
ov/news-events/ics-advisories/icsa-24-030-01 - https://www.emerson.com/documents/automation/security-notification-emerson-gas-chromatographs-cyber-security-notification-icsa-24-030-01-en-10103910.pdf
CVE ID: CVE-2023-51763 State: PUBLISHED Published: 2023-12-24T00:00:00 Last Updated: 2024-08-02T22:48:11.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/activeadmin/activeadmin/commit/697be2b183491beadc8f0b7d8b5bfb44f2387909 - https://github.com/activeadmin/activeadmin/pull/8161 - https://github.com/activeadmin/activeadmin/releases/tag/v3.2.0
CVE ID: CVE-2023-51764 State: PUBLISHED Published: 2023-12-24T00:00:00.000Z Last Updated: 2025-11-04T22:05:26.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Postfix supports <LF>.<CR><LF> but some other popular e-mail servers do not. To prevent attack variants (by always disallow
tfix supports <LF>.<CR><LF> but some other popular e-mail servers do not. To prevent attack variants (by always disallowing <LF> without <CR>), a different solution is required, such as the smtpd_forbid_bare_newline=yes option with a Postfix minimum version of 3.5.23, 3.6.13, 3.7.9, 3.8.4, or 3.9. Additional Analyst Notes: - CVE Program Container: References: - https://www.postfix.org/smtp-smuggling.html - https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/ - http://www.openwall.com/lists/oss-security/2023/12/24/1 - http://www.openwall.com/lists/oss-security/2023/12/25/1 - https://bugzilla.redhat.com/show_bug.cgi?id=2255563 - https://access.redhat.com/security/cve/
ss-security/2023/12/25/1 - https://bugzilla.redhat.com/show_bug.cgi?id=2255563 - https://access.redhat.com/security/cve/CVE-2023-51764 - https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html - https://github.com/eeenvik1/CVE-2023-51764 - https://github.com/duy-31/CVE-2023-51764 - https://www.youtube.com/watch?v=V8KPV96g1To - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRLF5SOS7TP5N7FQSEK2NFNB44ISVTZC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQ5WXFCW2N6G2PH3JXDTYW5PH5EBQEGO/ - https://lwn.net/Articles/956533/ - https://www.openwall.com/lists/oss-security/2024/01/22
FCW2N6G2PH3JXDTYW5PH5EBQEGO/ - https://lwn.net/Articles/956533/ - https://www.openwall.com/lists/oss-security/2024/01/22/1 - https://www.postfix.org/announcements/postfix-3.8.5.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00020.html - http://www.openwall.com/lists/oss-security/2024/05/09/3
CVE ID: CVE-2023-51765 State: PUBLISHED Published: 2023-12-24T00:00:00 Last Updated: 2024-08-02T22:48:11.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports <LF>.<CR><LF> but some other popular e-mail servers do not. This is resolved in 8.18 and later versions with 'o' in srv_features. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/blog/detail/smtp-smuggling-spoofi
ditional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/ - https://www.openwall.com/lists/oss-security/2023/12/22/7 - https://www.openwall.com/lists/oss-security/2023/12/21/7 - https://github.com/freebsd/freebsd-src/commit/5dd76dd0cc19450133aa379ce0ce4a68ae07fb39#diff-afdf514b32ac88004952c11660c57bc96c3d8b2234007c1cbd8d7ed7fd7935cc - http://www.openwall.com/lists/oss-security/2023/12/24/1 - http://www.openwall.com/lists/oss-security/2023/12/25/1 - https://bugzilla.suse.com/show_bug.cgi?id=1218351 - https://bugzilla.redhat.com/show_bug.cgi?id=2255869 - https://access.redhat.com/security/cve/CVE-2023-51765 - h
218351 - https://bugzilla.redhat.com/show_bug.cgi?id=2255869 - https://access.redhat.com/security/cve/CVE-2023-51765 - https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html - http://www.openwall.com/lists/oss-security/2023/12/26/5 - http://www.openwall.com/lists/oss-security/2023/12/29/5 - http://www.openwall.com/lists/oss-security/2023/12/30/3 - http://www.openwall.com/lists/oss-security/2023/12/30/1 - https://www.youtube.com/watch?v=V8KPV96g1To - https://lwn.net/Articles/956533/ - https://lists.debian.org/debian-lts-announce/2024/06/msg00004.html
CVE ID: CVE-2023-51766 State: PUBLISHED Published: 2023-12-24T00:00:00.000Z Last Updated: 2025-11-04T18:21:35.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/ - https://exim.org/static/doc/se
ences: - https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/ - https://exim.org/static/doc/security/CVE-2023-51766.txt - https://bugs.exim.org/show_bug.cgi?id=3063 - https://www.openwall.com/lists/oss-security/2023/12/23/2 - http://www.openwall.com/lists/oss-security/2023/12/24/1 - http://www.openwall.com/lists/oss-security/2023/12/25/1 - https://git.exim.org/exim.git/commit/5bb786d5ad568a88d50d15452aacc8404047e5ca - https://git.exim.org/exim.git/commit/cf1376206284f2a4f11e32d931d4aade34c206c5 - https://bugzilla.redhat.com/show_bug.cgi?id=2255852 - https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html - http://www.openwall.com/lists/oss-security/2
- https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html - http://www.openwall.com/lists/oss-security/2023/12/29/2 - https://github.com/Exim/exim/blob/master/doc/doc-txt/cve-2023-51766 - http://www.openwall.com/lists/oss-security/2024/01/01/1 - http://www.openwall.com/lists/oss-security/2024/01/01/2 - http://www.openwall.com/lists/oss-security/2024/01/01/3 - https://www.youtube.com/watch?v=V8KPV96g1To - https://lists.debian.org/debian-lts-announce/2024/01/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
g/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORN7OKEQPPBKUHYRQ6LR5PSNBQVDHAWB/ - https://lwn.net/Articles/956533/
CVE ID: CVE-2023-51767 State: PUBLISHED Published: 2023-12-24T00:00:00.000Z Last Updated: 2025-11-18T22:03:38.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses." Additiona
o not consider it to be the application's responsibility to defend against platform architectural weaknesses." Additional Analyst Notes: - CVE Program Container: References: - https://arxiv.org/abs/2309.02545 - https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878 - https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77 - https://bugzilla.redhat.com/show_bug.cgi?id=2255850 - https://access.redhat.com/security/cve/CVE-2023-51767 - https://ubuntu.com/security/CVE-2023-51767 - https://security.netapp.com/advisory/ntap-20240125-0006/ - https://www.openwall.com/lists/oss-security/2025/09/22/1
CVE ID: CVE-2023-51770 State: PUBLISHED Published: 2024-02-20T10:02:12.991Z Last Updated: 2025-03-27T16:50:01.449Z Vendors: Apache Software Foundation Products: Apache DolphinScheduler Problem Types: CWE-94 Description: Arbitrary File Read Vulnerability in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/dolphinscheduler/pull/15433 - https://lists.apache.org/thread/4t8bdjqnfhldh73gy9p0whlgvnnbtn7g - https://lists.apache.org/thread/gpks573kn00ofxn7n9gk
https://lists.apache.org/thread/4t8bdjqnfhldh73gy9p0whlgvnnbtn7g - https://lists.apache.org/thread/gpks573kn00ofxn7n9gkg6o47d03p5rw - http://www.openwall.com/lists/oss-security/2024/02/20/2
CVE ID: CVE-2023-51771 State: PUBLISHED Published: 2023-12-25T00:00:00.000Z Last Updated: 2025-04-23T16:15:19.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/starnight/MicroHttpServer/issues/8 - https://github.com/starnight/MicroHttpServer/tree/a8ab029c9a26a4c9f26b9d8a2757b8299aaff120
CVE ID: CVE-2023-51772 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-09-09T19:54:45.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: wait for a session timeout, click on the Help icon, observe that there is a browser window for the One Identity website, navigate to any website that offers file upload, navigate to cmd.exe from the file explorer window, and launch cmd.exe as NT
gate to any website that offers file upload, navigate to cmd.exe from the file explorer window, and launch cmd.exe as NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oneidentity.com/products/password-manager/ - https://sec-consult.com/vulnerability-lab/advisory/kiosk-escape-privilege-escalation-one-identity-password-manager-secure-password-extension/
CVE ID: CVE-2023-51773 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T22:48:11.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://sourceforge.net/p/bacnet/bugs/85/ - https://github.com/bacnet-stack/bacnet-stack/pull/546 - https://github.com/bacnet-stack/bacnet-stack/pull/546/commits/c465412a076ca6c9ddf649612f2b4e1874d8dcb8 - https://github.com/bacnet-stack/bacnet-stack/blob/master/CHANGELOG.md - https://github.com/bacnet-stack/bacnet-stack/co
https://github.com/bacnet-stack/bacnet-stack/blob/master/CHANGELOG.md - https://github.com/bacnet-stack/bacnet-stack/compare/bacnet-stack-1.3.1...bacnet-stack-1.3.2
CVE ID: CVE-2023-51774 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-26T20:08:16.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/P3ngu1nW/CVE_Request/blob/main/novjson-jwt.md
CVE ID: CVE-2023-51775 State: PUBLISHED Published: 2023-12-25T00:00:00.000Z Last Updated: 2025-11-03T21:50:19.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bitbucket.org/b_c/jose4j/issues/212
CVE ID: CVE-2023-51776 State: PUBLISHED Published: 2024-07-02T00:00:00.000Z Last Updated: 2025-03-13T19:09:16.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges and execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2023-51777 State: PUBLISHED Published: 2024-07-02T00:00:00 Last Updated: 2024-10-28T01:36:09.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2023-51778 State: PUBLISHED Published: 2024-07-02T00:00:00.000Z Last Updated: 2025-03-13T18:32:58.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jungo.com/windriver/versions/ - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04
CVE ID: CVE-2023-51779 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-29T18:54:00.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/2e07e8348ea454615e268222ae3fc240421be768 - https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html