Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41974 State: PUBLISHED Published: 2024-01-10T22:03:23.430Z Last Updated: 2025-11-04T19:21:17.242Z Vendors: Apple Products: iOS and iPadOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938
CVE ID: CVE-2023-41975 State: PUBLISHED Published: 2023-10-25T18:31:44.789Z Last Updated: 2025-02-13T17:09:05.796Z Vendors: Apple Products: macOS Problem Types: A website may be able to access the microphone without the microphone use indicator being shown Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. A website may be able to access the microphone without the microphone use indicator being shown. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us/HT213985 - https://supp
chment: References: - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us/HT213985 - https://support.apple.com/en-us/HT213983 - https://support.apple.com/kb/HT213984 - https://support.apple.com/kb/HT213985 - https://support.apple.com/kb/HT213983 - http://seclists.org/fulldisclosure/2023/Oct/21 - http://seclists.org/fulldisclosure/2023/Oct/24 - http://seclists.org/fulldisclosure/2023/Oct/26
CVE ID: CVE-2023-41976 State: PUBLISHED Published: 2023-10-25T18:32:08.499Z Last Updated: 2025-02-13T17:09:06.362Z Vendors: Apple Products: iOS and iPadOS, Safari, tvOS, macOS, watchOS Problem Types: Processing web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213981 - https://support.apple.com/en-us/HT213986 - https://s
Container: References: - https://support.apple.com/en-us/HT213981 - https://support.apple.com/en-us/HT213986 - https://support.apple.com/en-us/HT213987 - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us/HT213988 - https://support.apple.com/en-us/HT213982 - https://support.apple.com/kb/HT213984 - http://seclists.org/fulldisclosure/2023/Oct/23 - http://seclists.org/fulldisclosure/2023/Oct/22 - http://seclists.org/fulldisclosure/2023/Oct/19 - http://seclists.org/fulldisclosure/2023/Oct/27 - http://seclists.org/fulldisclosure/2023/Oct/24 - http://seclists.org/fulldisclosure/2023/Oct/25
CVE ID: CVE-2023-41977 State: PUBLISHED Published: 2023-10-25T18:31:52.307Z Last Updated: 2025-02-13T17:09:06.984Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: Visiting a malicious website may reveal browsing history Description: The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPadOS 16.7.2. Visiting a malicious website may reveal browsing history. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213981 - https://support.apple.com/en-us/HT213984 - https://support.apple.com/kb/HT213984 - https://support.apple.com/kb/HT213981 - http://se
ort.apple.com/en-us/HT213984 - https://support.apple.com/kb/HT213984 - https://support.apple.com/kb/HT213981 - http://seclists.org/fulldisclosure/2023/Oct/23 - http://seclists.org/fulldisclosure/2023/Oct/24
CVE ID: CVE-2023-41979 State: PUBLISHED Published: 2023-09-26T20:14:37.079Z Last Updated: 2025-11-04T19:21:18.323Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-41980 State: PUBLISHED Published: 2023-09-26T20:14:35.102Z Last Updated: 2025-11-04T19:21:20.841Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to bypass Privacy preferences Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-41981 State: PUBLISHED Published: 2023-09-26T20:14:39.091Z Last Updated: 2025-11-04T19:21:27.383Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
ernel memory mitigations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213927 - https://support.apple.com/en-us/HT213931 - https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - https://support.apple.com/en-us/HT213937 - http://seclists.org/fulldisclosure/2023/Oct/5 - http://seclists.org/fulldisclosure/2023/Oct/10 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/9 - http://seclists.org/fulldisclosure/2023/Oct/3 - http://seclists.org/fulldisclosure/2023/Oct/4
CVE ID: CVE-2023-41982 State: PUBLISHED Published: 2023-10-25T18:31:58.422Z Last Updated: 2025-02-13T17:09:09.209Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213981 - https
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213981 - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us/HT213988 - https://support.apple.com/en-us/HT213982 - https://support.apple.com/kb/HT213982 - https://support.apple.com/kb/HT213984 - https://support.apple.com/kb/HT213988 - https://support.apple.com/kb/HT213981 - http://seclists.org/fulldisclosure/2023/Oct/23 - http://seclists.org/fulldisclosure/2023/Oct/19 - http://seclists.org/fulldisclosure/2023/Oct/24 - http://seclists.org/fulldisclosure/2023/Oct/25
CVE ID: CVE-2023-41983 State: PUBLISHED Published: 2023-10-25T18:32:02.613Z Last Updated: 2025-02-13T17:09:09.758Z Vendors: Apple Products: iOS and iPadOS, Safari, macOS Problem Types: Processing web content may lead to a denial-of-service Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213981 - https://support.apple.com/en-us/HT213986 - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us
- https://support.apple.com/en-us/HT213986 - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us/HT213982 - https://support.apple.com/kb/HT213984 - http://seclists.org/fulldisclosure/2023/Oct/23 - http://seclists.org/fulldisclosure/2023/Oct/19 - http://seclists.org/fulldisclosure/2023/Oct/27 - http://seclists.org/fulldisclosure/2023/Oct/24 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTCZGQPRDAOPP6NK4CIDJKIPMBWD5J7K/ - http://www.openwall.com/lists/oss-security/2023/11/15/1 - https://www.debian.org/security/2023/dsa-5557 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/
security/2023/dsa-5557 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RPPMOWFYZODONTA3RLZOKSGNR4DELGG2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S3O7ITSBZDHLBM5OG22K6RZAHRRTGECM/ - https://security.gentoo.org/glsa/202401-33
CVE ID: CVE-2023-41984 State: PUBLISHED Published: 2023-09-26T20:14:56.129Z Last Updated: 2025-11-04T19:21:34.039Z Vendors: Apple Products: iOS and iPadOS, macOS, tvOS, watchOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.appl
rogram Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213932 - https://support.apple.com/en-us/HT213927 - https://support.apple.com/en-us/HT213931 - https://support.apple.com/en-us/HT213936 - https://support.apple.com/en-us/HT213940 - https://support.apple.com/en-us/HT213937 - http://seclists.org/fulldisclosure/2023/Oct/5 - http://seclists.org/fulldisclosure/2023/Oct/10 - http://seclists.org/fulldisclosure/2023/Oct/6 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/3 - http://seclists.org/fulldisclosure/2023/Oct/4
CVE ID: CVE-2023-41986 State: PUBLISHED Published: 2023-09-26T20:12:01.498Z Last Updated: 2025-11-04T19:21:36.205Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to modify protected parts of the file system Description: The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-41987 State: PUBLISHED Published: 2024-01-10T22:03:19.135Z Last Updated: 2025-11-04T19:21:37.286Z Vendors: Apple Products: macOS Problem Types: An app may be able to access sensitive user data Description: This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access sensitive user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940
CVE ID: CVE-2023-41988 State: PUBLISHED Published: 2023-10-25T18:32:14.376Z Last Updated: 2025-02-13T17:09:11.709Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS Problem Types: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us/HT2
r: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us/HT213988 - https://support.apple.com/en-us/HT213982 - https://support.apple.com/kb/HT213982 - https://support.apple.com/kb/HT213984 - https://support.apple.com/kb/HT213988 - http://seclists.org/fulldisclosure/2023/Oct/19 - http://seclists.org/fulldisclosure/2023/Oct/24 - http://seclists.org/fulldisclosure/2023/Oct/25
CVE ID: CVE-2023-41989 State: PUBLISHED Published: 2023-10-25T18:32:17.820Z Last Updated: 2025-02-13T17:09:12.250Z Vendors: Apple Products: macOS Problem Types: An attacker may be able to execute arbitrary code as root from the Lock Screen Description: The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT213984 - https://support.apple.com/kb/HT213984 - http://seclists.org/fulldisclosure/2023/Oct/24 - https://support.apple.com/kb
- https://support.apple.com/kb/HT213984 - http://seclists.org/fulldisclosure/2023/Oct/24 - https://support.apple.com/kb/HT214038 - https://support.apple.com/kb/HT214037
CVE ID: CVE-2023-41990 State: PUBLISHED Published: 2023-09-11T23:29:26.660Z Last Updated: 2025-10-21T23:05:38.586Z Vendors: Apple Products: iOS and iPadOS, tvOS, macOS, watchOS Problem Types: Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. Description: The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a
5.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213606 - https://support.apple.com/en-us/HT213601 - https://support.apple.com/en-us/HT213842 - https://support.apple.com/en-us/HT213845 - https://support.apple.com/en-us/HT213605 - https://support.apple.com/en-us/HT213844 - https://support.apple.com/en-us/HT213599
CVE ID: CVE-2023-41991 State: PUBLISHED Published: 2023-09-21T18:23:48.974Z Last Updated: 2025-11-04T19:21:39.550Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Additional Analyst Notes: - CVE Program C
ssue may have been actively exploited against versions of iOS before iOS 16.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213927 - https://support.apple.com/en-us/HT213931
CVE ID: CVE-2023-41992 State: PUBLISHED Published: 2023-09-21T18:23:49.779Z Last Updated: 2025-11-04T19:21:41.728Z Vendors: Apple Products: macOS, iOS and iPadOS Problem Types: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Additional Analyst Notes
eport that this issue may have been actively exploited against versions of iOS before iOS 16.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213932 - https://support.apple.com/en-us/HT213927 - https://support.apple.com/en-us/HT213931
CVE ID: CVE-2023-41993 State: PUBLISHED Published: 2023-09-21T18:23:52.197Z Last Updated: 2025-11-04T19:21:43.904Z Vendors: Apple Products: macOS Problem Types: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
st versions of iOS before iOS 16.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/HT213940 - https://security.gentoo.org/glsa/202401-33 - https://security.netapp.com/advisory/ntap-20240426-0004/
CVE ID: CVE-2023-41994 State: PUBLISHED Published: 2024-01-10T22:03:31.108Z Last Updated: 2025-11-04T19:21:44.978Z Vendors: Apple Products: macOS Problem Types: A camera extension may be able to access the camera view from apps other than the app for which it was granted permission Description: A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14. A camera extension may be able to access the camera view from apps other than the app for which it was granted permission. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940
CVE ID: CVE-2023-41995 State: PUBLISHED Published: 2023-09-26T20:14:49.645Z Last Updated: 2025-11-04T19:21:47.151Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213938 - https://support.apple.com/en-us/HT213940 - https://support.apple.com/kb/HT213841 - http://seclists.org/fulldisclosure/2023/Oct/8 - ht
rt.apple.com/en-us/HT213940 - https://support.apple.com/kb/HT213841 - http://seclists.org/fulldisclosure/2023/Oct/8 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-41996 State: PUBLISHED Published: 2023-09-26T20:14:36.584Z Last Updated: 2025-11-04T19:21:48.241Z Vendors: Apple Products: macOS Problem Types: Apps that fail verification checks may still launch Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps that fail verification checks may still launch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213931 - https://support.apple.com/kb/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/5
CVE ID: CVE-2023-41997 State: PUBLISHED Published: 2023-10-25T18:31:47.934Z Last Updated: 2025-02-13T17:09:14.790Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: An attacker with physical access may be able to use Siri to access sensitive user data Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to use Siri to access sensitive user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213981 - https
CVE ID: CVE-2023-41998 State: PUBLISHED Published: 2023-11-27T16:50:48.279Z Last Updated: 2024-08-02T19:16:49.339Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Arcserve Products: Arcserve UDP Problem Types: CWE-434 Description: Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2023-37
CVE ID: CVE-2023-41999 State: PUBLISHED Published: 2023-11-27T16:54:15.422Z Last Updated: 2024-08-02T19:16:49.522Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Arcserve Products: Arcserve UDP Problem Types: CWE-287 Description: An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that allows them to authenticate to the management console and perform tasks that require authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2023-37
CVE ID: CVE-2023-42000 State: PUBLISHED Published: 2023-11-27T16:55:39.466Z Last Updated: 2024-08-02T19:16:49.527Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Arcserve Products: Arcserve UDP Problem Types: CWE-22 Description: Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2023-37
CVE ID: CVE-2023-42004 State: PUBLISHED Published: 2023-11-28T10:52:43.709Z Last Updated: 2024-11-21T18:58:19.794Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Guardium Problem Types: CWE-1236 Description: IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents. IBM X-Force ID: 265262. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7069241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/265262
CVE ID: CVE-2023-42005 State: PUBLISHED Published: 2024-05-29T12:53:04.315Z Last Updated: 2024-08-02T19:16:49.464Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Db2 on Cloud Pak for Data Problem Types: CWE-264 Description: IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7155078 - https://exchange.xforce.ibmcloud.com/vulnerabil