Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30944 State: PUBLISHED Published: 2023-05-02T00:00:00 Last Updated: 2024-08-02T14:37:15.570Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Problem Types: CWE-89 Description: The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77187 - https://bugzilla.re
ntainer: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-77187 - https://bugzilla.redhat.com/show_bug.cgi?id=2188606 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54TM5H5PDUDYXOQ7X7PPYWP4AJDAE73I/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZBWRVUJF7HI53XCJPJ3YJZPOV5HBRUY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBFSXRYLT4ICKJVQSRBAOUDMDRVSVBLS/ - https://moodle.org/mod/forum/discuss.php?d=446286
CVE ID: CVE-2023-30945 State: PUBLISHED Published: 2023-06-26T23:00:08.676Z Last Updated: 2024-12-05T14:30:12.082Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/CR:M) Vendors: Palantir Products: com.palantir.gotham:clips2, com.palantir.video:video-history-server, com.palantir.video:video-clip-distributor Problem Types: CWE-287, CWE-22 Description: Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete ar
ng input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=e62e4dad-b39b-48ba-ba30-7b7c83406ad9
CVE ID: CVE-2023-30946 State: PUBLISHED Published: 2023-06-29T18:49:23.694Z Last Updated: 2024-10-28T13:03:50.838Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Palantir Products: com.palantir.issues:issues Problem Types: CWE-420, CWE-288 Description: A security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they did not have access to and consequently could not see, they could query Foundry's Notification API and receive metadata about the issue including the RID of the issue, severity, internal UUID of the author, and the user-defined title of the issue. Additional Analyst Notes: - CVE Program Container: - CISA A
UUID of the author, and the user-defined title of the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=4cf0b6e6-564a-467b-83ae-36fec3a491c3
CVE ID: CVE-2023-30948 State: PUBLISHED Published: 2023-06-06T14:12:59.240Z Last Updated: 2025-01-07T18:15:43.559Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Palantir Products: com.palantir.comments:comments Problem Types: CWE-285 Description: A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content. This defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No fu
t. This defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry environments. No further intervention is required at this time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=101b083b-6389-4261-98f8-23448e133a62
CVE ID: CVE-2023-30949 State: PUBLISHED Published: 2023-07-26T17:35:04.827Z Last Updated: 2024-10-15T15:55:16.477Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Palantir Products: com.palantir.slate:slate Problem Types: CWE-1173 Description: A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=bbc1772c-e10a-45cc-b89f-48cc1a8b2cfc
CVE ID: CVE-2023-30950 State: PUBLISHED Published: 2023-08-03T21:10:15.711Z Last Updated: 2024-10-09T19:49:25.469Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Palantir Products: com.palantir.campaigns:campaigns Problem Types: CWE-290 Description: The foundry campaigns service was found to be vulnerable to an unauthenticated information disclosure in a rest endpoint Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=d839709d-c50f-4a37-8faa-b0c35054418a
CVE ID: CVE-2023-30951 State: PUBLISHED Published: 2023-08-03T21:07:11.189Z Last Updated: 2024-10-09T20:11:00.151Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Palantir Products: com.palantir.magritte:magritte-rest-source-bundle Problem Types: CWE-611 Description: The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack (XXE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=fe021f28-9e25-42c4-acd8-772cd8006ced
CVE ID: CVE-2023-30952 State: PUBLISHED Published: 2023-08-03T21:12:53.803Z Last Updated: 2024-10-09T19:47:12.319Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: Palantir Products: com.palantir.foundry:foundry-frontend Problem Types: CWE-20 Description: A security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=42bdb7fa-9a6d-4462-b89d-cabc62f281f4
CVE ID: CVE-2023-30954 State: PUBLISHED Published: 2023-11-15T19:43:36.051Z Last Updated: 2024-08-29T14:49:41.543Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/CR:H) Vendors: Palantir Products: com.palantir.video:video-application-server Problem Types: CWE-285 Description: The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=d2366a3e-a92c-476e-8a7a-7db60e4be567
CVE ID: CVE-2023-30955 State: PUBLISHED Published: 2023-06-29T18:46:33.710Z Last Updated: 2024-10-28T13:03:28.710Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Palantir Products: com.palantir.workspace:workspace Problem Types: CWE-602 Description: A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fix was deployed with workspace-server 7.7.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
fix was deployed with workspace-server 7.7.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=0c3f6c33-4eb0-48b5-ab87-fe48c46a4170
CVE ID: CVE-2023-30956 State: PUBLISHED Published: 2023-07-10T21:07:31.073Z Last Updated: 2024-10-23T17:30:12.996Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Palantir Products: com.palantir.comments:comments Problem Types: CWE-639 Description: A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=40367943-738c-4e69
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=40367943-738c-4e69-b852-4a503c77478a
CVE ID: CVE-2023-30958 State: PUBLISHED Published: 2023-08-03T21:09:10.026Z Last Updated: 2024-10-09T20:10:39.833Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Palantir Products: com.palantir.foundry:foundry-frontend Problem Types: CWE-83 Description: A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=5764b094-d3c0-4380-90f2-234f36116c9b
CVE ID: CVE-2023-30959 State: PUBLISHED Published: 2023-09-26T17:56:20.817Z Last Updated: 2024-09-24T13:47:53.632Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: Palantir Products: com.palantir.apollo:autopilot Problem Types: CWE-84 Description: In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=4c257f07-58af-4532-892a-bdbe8ab3ec63
CVE ID: CVE-2023-30960 State: PUBLISHED Published: 2023-07-10T21:05:23.372Z Last Updated: 2024-10-23T17:43:12.391Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Palantir Products: com.palantir.foundry.jobtracker:job-tracker Problem Types: CWE-639 Description: A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
further intervention is required. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=115d9bf4-201f-4cfe-b2fc-219e3a2d945b
CVE ID: CVE-2023-30961 State: PUBLISHED Published: 2023-09-26T18:01:07.257Z Last Updated: 2024-09-24T13:45:46.122Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Palantir Products: com.palantir.acme:gotham-fe-bundle, com.palantir.acme:titanium-browser-app-bundle Problem Types: CWE-710 Description: Palantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classification to a newly created property or link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=2755c49f-2c30-459e-8bdf-f95ef3692da4
CVE ID: CVE-2023-30962 State: PUBLISHED Published: 2023-09-12T18:29:42.065Z Last Updated: 2024-09-25T15:23:04.176Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Palantir Products: com.palantir.acme.cerberus:cerberus Problem Types: CWE-434 Description: The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=92dd599a-07e2-43a8-956
VE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=92dd599a-07e2-43a8-956a-9c9566794be0
CVE ID: CVE-2023-30963 State: PUBLISHED Published: 2023-07-10T21:04:08.584Z Last Updated: 2024-10-21T21:10:50.301Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Palantir Products: com.palantir.foundry:foundry-frontend Problem Types: CWE-82 Description: A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further intervention is required. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
er intervention is required. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=3c6b63b7-fb67-4202-a94a-9c83515efb8a
CVE ID: CVE-2023-30967 State: PUBLISHED Published: 2023-10-25T23:18:23.681Z Last Updated: 2024-09-10T16:39:11.458Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Palantir Products: com.palantir.meta:orbital-simulator Problem Types: CWE-22, CWE-287 Description: Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=8fd5809f-26f8-406e-b36f-4a6596a19d79
CVE ID: CVE-2023-30968 State: PUBLISHED Published: 2024-03-12T19:39:24.226Z Last Updated: 2024-08-21T15:33:34.678Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Palantir Products: com.palantir.acme.gaia:gaia Problem Types: CWE-434 Description: One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=01589957-ed41-4c74-90a0-3f09f7aee1cb
CVE ID: CVE-2023-30969 State: PUBLISHED Published: 2023-10-25T23:16:06.131Z Last Updated: 2024-09-10T16:40:49.878Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Palantir Products: com.palantir.tiles:tiles Problem Types: CWE-284 Description: The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorization on all the endpoints. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=afcbc9b2-de62-44b9-b28b-2ebf0684fbf7
CVE ID: CVE-2023-30970 State: PUBLISHED Published: 2024-01-29T18:27:26.850Z Last Updated: 2025-05-29T15:08:34.104Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Palantir Products: com.palantir.gotham:blackbird-witchcraft Problem Types: CWE-36 Description: Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://palantir.safebase.us/?tcuUid=69be99ef-ad24-4339-9017-c8bf70789c72
CVE ID: CVE-2023-30985 State: PUBLISHED Published: 2023-05-09T11:51:38.608Z Last Updated: 2025-01-28T16:46:48.235Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426) Additional Analyst Notes: - CVE Program Container:
allow an attacker to disclose sensitive information. (ZDI-CAN-19426) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-932528.pdf
CVE ID: CVE-2023-30986 State: PUBLISHED Published: 2023-05-09T11:51:39.689Z Last Updated: 2025-01-28T17:32:32.110Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2023 Problem Types: CWE-119 Description: A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain a memory corruption vulnerability while parsing specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19561) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
he context of the current process. (ZDI-CAN-19561) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-932528.pdf
CVE ID: CVE-2023-30987 State: PUBLISHED Published: 2023-10-16T20:48:07.845Z Last Updated: 2025-02-13T16:49:39.707Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7047560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253440 - https://security.netapp.com/advisory/ntap-20231
/7047560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253440 - https://security.netapp.com/advisory/ntap-20231116-0006/
CVE ID: CVE-2023-30988 State: PUBLISHED Published: 2023-07-16T22:37:18.693Z Last Updated: 2024-10-30T18:08:30.069Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-269 Description: The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 254016. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7012355 - https://exchange.xforce.ibm
ner: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7012355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254016
CVE ID: CVE-2023-30989 State: PUBLISHED Published: 2023-07-16T22:40:06.019Z Last Updated: 2024-10-30T18:04:29.631Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-269 Description: IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7012353 - https://exchange.xforce.ibmcloud.co
ISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7012353 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254017
CVE ID: CVE-2023-30990 State: PUBLISHED Published: 2023-07-03T23:14:25.528Z Last Updated: 2024-11-25T16:59:47.900Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: IBM Products: i Problem Types: CWE-94 Description: IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7008573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254036
CVE ID: CVE-2023-30991 State: PUBLISHED Published: 2023-10-16T22:53:03.651Z Last Updated: 2025-02-13T16:49:40.705Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 254037. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7047499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254037 - https://security.netapp.com/advisory/ntap-20231116-0005/
CVE ID: CVE-2023-30993 State: PUBLISHED Published: 2023-06-27T19:25:24.382Z Last Updated: 2024-11-06T18:53:34.333Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: Cloud Pak for Security Problem Types: CWE-200 Description: IBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to access data from another tenant's account. IBM X-Force ID: 254136. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6995221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254136
CVE ID: CVE-2023-30994 State: PUBLISHED Published: 2023-10-14T16:48:57.927Z Last Updated: 2024-09-16T19:20:26.275Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: QRadar SIEM Problem Types: CWE-327 Description: IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7049133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254138
CVE ID: CVE-2023-30995 State: PUBLISHED Published: 2023-09-08T20:56:37.103Z Last Updated: 2024-09-26T14:38:33.682Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Aspera Faspex Problem Types: 284 Improper Access Control Description: IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254268 - https://www.ibm.com/support/page
port/pages/node/7029681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254268 - https://www.ibm.com/support/pages/node/7048851