Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-43054 State: PUBLISHED Published: 2024-03-03T12:15:07.703Z Last Updated: 2024-08-02T19:37:23.119Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Engineering Test Management Problem Types: CWE-79 Description: IBM Engineering Test Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267459. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/supp
7459. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7122399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267459
CVE ID: CVE-2023-43057 State: PUBLISHED Published: 2023-11-11T15:31:11.884Z Last Updated: 2024-09-03T15:23:43.717Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: IBM QRadar SIEM Problem Types: CWE-79 Description: IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267484. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7070736 - https://exchange.xfo
Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7070736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267484
CVE ID: CVE-2023-43058 State: PUBLISHED Published: 2023-10-06T13:09:44.458Z Last Updated: 2024-09-19T16:10:55.953Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Robotic Process Automation Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM Robotic Process Automation 23.0.9 is vulnerable to privilege escalation that affects ownership of projects. IBM X-Force ID: 247527. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267527
CVE ID: CVE-2023-43064 State: PUBLISHED Published: 2023-12-25T02:02:23.683Z Last Updated: 2024-11-21T19:03:24.043Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: IBM Products: i Problem Types: CWE-427 Description: Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause arbitrary code to run with the privilege of the user invoking the facsimile support. IBM X-Force ID: 267689. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7101330 - https://exchange.xforce.ibmcloud.com/
A ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7101330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/267689
CVE ID: CVE-2023-43065 State: PUBLISHED Published: 2023-10-23T14:55:31.830Z Last Updated: 2024-09-11T13:59:12.356Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: Dell Products: Unity Problem Types: CWE-79 Description: Dell Unity prior to 5.3 contains a Cross-site scripting vulnerability. A low-privileged authenticated attacker can exploit these issues to obtain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43066 State: PUBLISHED Published: 2023-10-23T15:00:39.727Z Last Updated: 2024-09-11T14:06:29.902Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L) Vendors: Dell Products: Unity Problem Types: CWE-78 Description: Dell Unity prior to 5.3 contains a Restricted Shell Bypass vulnerability. This could allow an authenticated, local attacker to exploit this vulnerability by authenticating to the device CLI and issuing certain commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabil
com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43067 State: PUBLISHED Published: 2023-10-23T15:05:22.900Z Last Updated: 2024-09-17T13:45:47.983Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Unity Problem Types: CWE-611 Description: Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43068 State: PUBLISHED Published: 2023-10-05T17:16:39.232Z Last Updated: 2024-09-19T18:51:29.894Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell SmartFabric Storage Software Problem Types: CWE-78 Description: Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH. An authenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-
- CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43069 State: PUBLISHED Published: 2023-10-05T17:25:35.046Z Last Updated: 2024-09-19T18:50:23.918Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell SmartFabric Storage Software Problem Types: CWE-78 Description: Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI. An authenticated local attacker could potentially exploit this vulnerability, leading to possible injection of parameters to curl or docker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfa
ner: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43070 State: PUBLISHED Published: 2023-10-05T17:38:19.374Z Last Updated: 2024-09-19T18:49:31.977Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Dell Products: Dell SmartFabric Storage Software Problem Types: CWE-22 Description: Dell SmartFabric Storage Software v1.4 (and earlier) contains a Path Traversal Vulnerability in the HTTP interface. A remote authenticated attacker could potentially exploit this vulnerability, leading to modify or write arbitrary files to arbitrary locations in the license container. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/00
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43071 State: PUBLISHED Published: 2023-10-05T17:43:29.648Z Last Updated: 2024-09-19T18:48:48.616Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Dell SmartFabric Storage Software Problem Types: CWE-1236 Description: Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML injection or CVS formula injection which might escalate to cross-site scripting attacks in HTML pages in the GUI. A remote authenticated attacker could potentially exploit these issues, leading to various injection type attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
ous injection type attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43072 State: PUBLISHED Published: 2023-10-05T17:47:43.394Z Last Updated: 2024-09-19T18:35:06.200Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: Dell Products: Dell SmartFabric Storage Software Problem Types: CWE-284 Description: Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI. A local possibly unauthenticated attacker could potentially exploit this vulnerability, leading to ability to execute arbritrary shell commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell
m Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43073 State: PUBLISHED Published: 2023-10-05T17:52:25.891Z Last Updated: 2024-09-19T18:19:10.183Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Dell Products: Dell SmartFabric Storage Software Problem Types: CWE-20 Description: Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-sma
ntainer: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43074 State: PUBLISHED Published: 2023-10-23T14:50:11.610Z Last Updated: 2024-09-11T13:50:53.810Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:L) Vendors: Dell Products: Unity Problem Types: CWE-73 Description: Dell Unity 5.3 contain(s) an Arbitrary File Creation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by crafting arbitrary files through a request to the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43076 State: PUBLISHED Published: 2023-11-02T10:37:33.394Z Last Updated: 2024-09-05T18:53:02.560Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-401 Description: Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker could potentially exploit this vulnerability to cause an out of memory (OOM) condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218934/powerscale-onefs-security-updates-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-43078 State: PUBLISHED Published: 2024-08-28T05:33:16.899Z Last Updated: 2024-08-28T22:31:00.645Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Client Platform, Dell Dock Firmware Problem Types: CWE-59 Description: Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which could lead to Privilege Escalation or Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000217981/dsa-2023-362-security-update-for-dell-dock-firmware-and-dell-client-platform-fo
w.dell.com/support/kbdoc/en-us/000217981/dsa-2023-362-security-update-for-dell-dock-firmware-and-dell-client-platform-for-an-improper-link-resolution-vulnerability
CVE ID: CVE-2023-43079 State: PUBLISHED Published: 2023-10-13T11:52:45.902Z Last Updated: 2025-02-27T20:40:39.593Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell OpenManage Server Administrator Problem Types: CWE-284 Description: Dell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access Control vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to execute arbitrary code in order to elevate privileges on the system. Exploitation may lead to a complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
a complete system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218469/dsa-2023-367-dell-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43081 State: PUBLISHED Published: 2023-11-22T12:50:22.272Z Last Updated: 2024-10-01T14:45:42.540Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Dell Products: PowerProtect Agent for File System Problem Types: CWE-276 Description: PowerProtect Agent for File System Version 19.14 and prior, contains an incorrect default permissions vulnerability in ddfscon component. A low Privileged local attacker could potentially exploit this vulnerability, leading to overwriting of log files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000219782/dsa-2023-427-security-upd
ner: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000219782/dsa-2023-427-security-update-for-dell-powerprotect-agent-for-file-system-vulnerabilities
CVE ID: CVE-2023-43082 State: PUBLISHED Published: 2023-11-22T16:16:08.393Z Last Updated: 2024-08-02T19:37:23.496Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Dell Products: Unity Problem Types: CWE-295 Description: Dell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component. If a customer has a certificate signed by a third-party public Certificate Authority, the vCenter CA could be spoofed by an attacker who can obtain a CA-signed certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update
ces: - https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2023-43086 State: PUBLISHED Published: 2023-11-23T06:27:19.920Z Last Updated: 2024-08-02T19:37:23.064Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Command Configure (DCC) Problem Types: CWE-284 Description: Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local malicious user could potentially modify files inside installation folder during application upgrade, leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000218424/dsa-2023-387-security-update-for-a-dell-command-configure-vulner
s: - https://www.dell.com/support/kbdoc/en-us/000218424/dsa-2023-387-security-update-for-a-dell-command-configure-vulnerability
CVE ID: CVE-2023-43087 State: PUBLISHED Published: 2023-11-02T10:30:31.343Z Last Updated: 2024-09-05T18:54:12.369Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-280 Description: Dell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient permissions. A low privileged remote attacker could potentially exploit this vulnerability to cause information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218934/powerscale-onefs-security-updates-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-43088 State: PUBLISHED Published: 2023-12-22T18:00:38.953Z Last Updated: 2024-08-02T19:37:23.719Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-16 Description: Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical access to the system may potentially exploit this vulnerability in order to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000218223/dsa-2023-377
CVE ID: CVE-2023-43089 State: PUBLISHED Published: 2023-12-01T02:06:51.270Z Last Updated: 2024-08-02T19:37:23.193Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dell Products: Dell Rugged Control Center Problem Types: CWE-284 Description: Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malicious standard user could potentially exploit this vulnerability to modify the content of the policy file, leading to unauthorized access to resources. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000218066/dsa-2023-371
CVE ID: CVE-2023-43090 State: PUBLISHED Published: 2023-09-22T05:02:08.801Z Last Updated: 2024-08-02T19:37:23.406Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Description: A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-43090 - https://bugzilla.redhat.com/show_bug.cgi?id=2239087 - https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990
-43090 - https://bugzilla.redhat.com/show_bug.cgi?id=2239087 - https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990 - https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/2944
CVE ID: CVE-2023-43091 State: PUBLISHED Published: 2024-11-17T12:25:49.293Z Last Updated: 2024-11-18T16:39:41.368Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Problem Types: CWE-79 Description: A flaw was found in GNOME Maps, which is vulnerable to a code injection attack via its service.json configuration file. If the configuration file is malicious, it may execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2239091 - https://gitlab.gnome.org/GNOME/gnome-maps/-/commit/d26cd774d524404ef7784e6808f551de83de4bea - https://gitlab.gnome.org/GNOME/gnome-maps/-/issues/588
CVE ID: CVE-2023-43102 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T19:37:23.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4. An XSS issue can be exploited to access the mailbox of an authenticated user. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center
CVE ID: CVE-2023-43103 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T19:37:22.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an unsanitized parameter. This is also fixed in 8.8.15 Patch 43 and 9.0.0 Patch 36. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories - https://wiki.zimbra.com/wiki/Security_Center
CVE ID: CVE-2023-43114 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T15:48:41.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When using the GDI font engine, if a corrupted font is loaded via QFontDatabase::addApplicationFont{FromData], then it can cause the application to crash because of missing length checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codereview.qt-project.org/c/qt/qtbase/+/503026
CVE ID: CVE-2023-43115 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-08-02T19:37:23.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server). Additional Analyst Notes: - CVE Program Container: References: - https://ghostscript.com/ - https://bugs.ghostscript.com/show_bu
al Analyst Notes: - CVE Program Container: References: - https://ghostscript.com/ - https://bugs.ghostscript.com/show_bug.cgi?id=707051 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=e59216049cac290fb437a04c4f41ea46826cfba5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IK3UXJ5HKMPAL5EQELJAWSRPA2AUOJJO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PG5AQV7JOL5TAU76FWPJCMSKO5DREKV5/
CVE ID: CVE-2023-43116 State: PUBLISHED Published: 2023-12-22T00:00:00 Last Updated: 2024-08-02T19:37:23.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0003.md
CVE ID: CVE-2023-43118 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-17T16:20:09.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379