Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://crbug.com/1410191 - https://www.debian.org/security/2023/dsa-5418 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B6SAST6CB5KKCQKH75ER2UQ3ICYPHCIZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2LE64KGGOISKPKMYROSDT4K6QFVDIRF6/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2930 State: PUBLISHED Published: 2023-05-30T21:31:38.779Z Last Updated: 2025-05-05T15:59:37.662Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1443401 - https://www.debian.org/security/2023/dsa-5418 - https://secu
el-update-for-desktop_30.html - https://crbug.com/1443401 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2931 State: PUBLISHED Published: 2023-05-30T21:31:39.136Z Last Updated: 2025-05-05T15:59:28.401Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1444238 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo
8 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2932 State: PUBLISHED Published: 2023-05-30T21:31:39.288Z Last Updated: 2025-05-05T15:59:17.688Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1444581 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo
1 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2933 State: PUBLISHED Published: 2023-05-30T21:31:39.451Z Last Updated: 2025-05-05T15:59:08.387Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1445426 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo
6 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2934 State: PUBLISHED Published: 2023-05-30T21:31:39.922Z Last Updated: 2025-05-05T15:58:59.664Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1429720 - https://www.debian.org/security/2023/dsa-5418 - http://packetstormsecurity.com/files/173
l - https://crbug.com/1429720 - https://www.debian.org/security/2023/dsa-5418 - http://packetstormsecurity.com/files/173259/Chrome-Mojo-Message-Validation-Bypass.html - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2935 State: PUBLISHED Published: 2023-05-30T21:31:40.249Z Last Updated: 2025-05-05T15:58:49.355Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1440695 - https://www.debian.org/security/2023/dsa-5418 - http://packetstormsecurity.com/files/173196/Chrome-v8-internal-Objec
5 - https://www.debian.org/security/2023/dsa-5418 - http://packetstormsecurity.com/files/173196/Chrome-v8-internal-Object-SetPropertyWithAccessor-Type-Confusion.html - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2936 State: PUBLISHED Published: 2023-05-30T21:31:40.505Z Last Updated: 2025-05-05T15:58:40.404Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1443452 - https://www.debian.org/security/2023/dsa-5418 - http://packetstormsecurity.com/files/173197/Chrome-V8-Type-Confusion
2 - https://www.debian.org/security/2023/dsa-5418 - http://packetstormsecurity.com/files/173197/Chrome-V8-Type-Confusion.html - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2937 State: PUBLISHED Published: 2023-05-30T21:31:40.746Z Last Updated: 2025-03-11T18:05:47.916Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1413813 - https://www.debian.or
ses.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1413813 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2938 State: PUBLISHED Published: 2023-05-30T21:31:40.894Z Last Updated: 2025-03-18T18:20:38.363Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1416350 - https://www.debian.or
ses.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1416350 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2939 State: PUBLISHED Published: 2023-05-30T21:31:41.044Z Last Updated: 2025-05-05T15:58:30.274Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1427431 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.or
desktop_30.html - https://crbug.com/1427431 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2940 State: PUBLISHED Published: 2023-05-30T21:31:41.284Z Last Updated: 2025-03-12T17:57:55.519Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1426807 - https://www.debian.org/security/202
.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1426807 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2941 State: PUBLISHED Published: 2023-05-30T21:31:41.432Z Last Updated: 2025-03-11T16:21:45.658Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1430269 - https://www.debian.org/securi
leblog.com/2023/05/stable-channel-update-for-desktop_30.html - https://crbug.com/1430269 - https://www.debian.org/security/2023/dsa-5418 - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-2942 State: PUBLISHED Published: 2023-05-27T00:00:00 Last Updated: 2025-01-14T18:30:33.749Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-20 Description: Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9 - https://huntr.dev/bounties/dd56e7a0-9dff-48fc-bc59-9a22d91869eb
CVE ID: CVE-2023-2943 State: PUBLISHED Published: 2023-05-27T00:00:00 Last Updated: 2025-01-14T18:30:00.445Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-94 Description: Code Injection in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/4190f944-dc2c-4624-9abf-31479456faa9 - https://github.com/openemr/openemr/commit/c1c0805696ca68577c37bf30e29f90e5f3e0f1a9
CVE ID: CVE-2023-2944 State: PUBLISHED Published: 2023-05-27T00:00:00 Last Updated: 2025-01-14T18:29:29.667Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-284 Description: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0d67dcb1-acc0-4d5d-bb69-a09d1bc9fa1d - https://github.com/openemr/openemr/commit/723ac5d78080d1b8542f47673988cd63e0389d25
CVE ID: CVE-2023-2945 State: PUBLISHED Published: 2023-05-27T00:00:00 Last Updated: 2025-01-14T18:28:12.801Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-862 Description: Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/62de71bd-333d-4593-91a5-534ef7f0c435 - https://github.com/openemr/openemr/commit/3656bc88288957d68ba040cad2e5f9dbd1b607b1
CVE ID: CVE-2023-2946 State: PUBLISHED Published: 2023-05-27T00:00:00 Last Updated: 2025-01-14T18:45:42.238Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-284 Description: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e550f4b0-945c-4886-af7f-ee0dc30b2a08 - https://github.com/openemr/openemr/commit/81832acc14207e577e76c4175967c99ae7e3d3f4
CVE ID: CVE-2023-2947 State: PUBLISHED Published: 2023-05-27T00:00:00 Last Updated: 2025-01-14T18:45:05.373Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/52534def-acab-4200-a79a-89ef4ce6a0b0 - https://github.com/openemr/openemr/commit/8d2d601ac40aca75bcd2c3cf193f59c8e56d8425
CVE ID: CVE-2023-2948 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2025-01-14T16:34:53.363Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/commit/af1ecf78d1342519791bda9d3079e88f7d859015 - https://huntr.dev/bounties/2393e4d9-9e9f-455f-bf50-f20f77b0a64d
CVE ID: CVE-2023-2949 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2025-01-14T16:24:44.879Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: openemr Products: openemr/openemr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/3842486f-38b1-4150-9f78-b81d0ae580c4 - https://github.com/openemr/openemr/commit/af1ecf78d1342519791bda9d3079e88f7d859015
CVE ID: CVE-2023-2950 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2025-01-14T16:22:28.716Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N) Vendors: openemr Products: openemr/openemr Problem Types: CWE-285 Description: Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/612d13cf-2ef9-44ea-b8fb-e797948a9a86 - https://github.com/openemr/openemr/commit/abee8d2606c706176818de25eb88a2d08b8f7fa4
CVE ID: CVE-2023-2951 State: PUBLISHED Published: 2023-05-28T06:00:05.101Z Last Updated: 2024-08-02T06:41:03.594Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Bus Dispatch and Information System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Bus Dispatch and Information System 1.0. Affected is an unknown function of the file delete_bus.php. The manipulation of the argument busid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230112. Additional Analyst Notes: - CVE Pro
d to the public and may be used. The identifier of this vulnerability is VDB-230112. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230112 - https://vuldb.com/?ctiid.230112 - https://github.com/F1owerSugarzzz/Commit-Vulnerability-Cve/blob/main/Bus%20Dispatch%20and%20Information%20System%20in%20delete_bus%20has%20Sql%20injection%20vulnerabilities.pdf
CVE ID: CVE-2023-2952 State: PUBLISHED Published: 2023-05-30T00:00:00.000Z Last Updated: 2025-11-03T21:47:56.615Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Loop with unreachable exit condition ('infinite loop') in Wireshark Description: XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-20.html - https://gitlab.com/wireshark/wireshark/-/issues/19100 - https://gitlab.c
.wireshark.org/security/wnpa-sec-2023-20.html - https://gitlab.com/wireshark/wireshark/-/issues/19100 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2952.json - https://lists.debian.org/debian-lts-announce/2023/06/msg00004.html - https://www.debian.org/security/2023/dsa-5429 - https://security.gentoo.org/glsa/202309-02
CVE ID: CVE-2023-2953 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-10T21:28:27.261Z Vendors: n/a Products: openldap Problem Types: CWE-476 Description: A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.openldap.org/show_bug.cgi?id=9904 - https://access.redhat.com/security/cve/CVE-2023-2953 - https://security.netapp.com/advisory/ntap-20230703-0005/ - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845 - http://seclists.org/fulldisc
/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845 - http://seclists.org/fulldisclosure/2023/Jul/52 - http://seclists.org/fulldisclosure/2023/Jul/48 - http://seclists.org/fulldisclosure/2023/Jul/47
CVE ID: CVE-2023-2954 State: PUBLISHED Published: 2023-05-29T00:00:00 Last Updated: 2025-01-13T21:02:16.160Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: liangliangyy Products: liangliangyy/djangoblog Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository liangliangyy/djangoblog prior to master. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/47f08086-aaae-4ca7-b0ca-24c616d3ad7d - https://github.com/liangliangyy/djangoblog/commit/c2bfdb18c5f32b13ea4b50aa689b8ea4beb38719
CVE ID: CVE-2023-2955 State: PUBLISHED Published: 2023-05-29T07:00:03.704Z Last Updated: 2024-08-02T06:41:04.145Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Students Online Internship Timesheet System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file rendered_report.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230142 is the id
ssible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230142 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230142 - https://vuldb.com/?ctiid.230142 - https://github.com/MiserablefaithL/CVERequestReport/blob/main/SQL.md
CVE ID: CVE-2023-2957 State: PUBLISHED Published: 2023-07-13T07:47:41.216Z Last Updated: 2024-10-30T16:07:06.461Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Lisa Software Products: Florist Site Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisa Software Florist Site allows SQL Injection.This issue affects Florist Site: before 3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0403
CVE ID: CVE-2023-2958 State: PUBLISHED Published: 2023-07-17T14:16:26.447Z Last Updated: 2024-10-30T13:55:47.770Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Origin Software Products: ATS Pro Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Origin Software ATS Pro allows Authentication Abuse, Authentication Bypass.This issue affects ATS Pro: before 20230714. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0410
CVE ID: CVE-2023-2959 State: PUBLISHED Published: 2023-07-17T13:25:14.769Z Last Updated: 2024-10-30T14:50:44.022Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Oliva Expertise Products: Oliva Expertise EKS Problem Types: CWE-305 Description: Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users.This issue affects Oliva Expertise EKS: before 1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0409
CVE ID: CVE-2023-2960 State: PUBLISHED Published: 2023-07-17T13:30:24.617Z Last Updated: 2024-10-21T19:56:09.422Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Oliva Expertise Products: Oliva Expertise EKS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting (XSS).This issue affects Oliva Expertise EKS: before 1.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0409
CVE ID: CVE-2023-2961 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-07T21:25:01.713Z Vendors: n/a Products: advancecomp Problem Types: CWE-20 Description: A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2210768