Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
-wgf4-qhxf - https://github.com/cxong/tinydir/releases/tag/1.2.6 - http://www.openwall.com/lists/oss-security/2023/12/04/1 - http://packetstormsecurity.com/files/176060/TinyDir-1.2.5-Buffer-Overflow.html - http://seclists.org/fulldisclosure/2023/Dec/14
CVE ID: CVE-2023-49288 State: PUBLISHED Published: 2023-12-04T22:49:31.317Z Last Updated: 2025-02-13T17:18:39.710Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: squid-cache Products: squid Problem Types: CWE-416 Description: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. Thi
le. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3F
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/ - https://security.netapp.com/advisory/ntap-20240119-0006/
CVE ID: CVE-2023-49289 State: PUBLISHED Published: 2023-12-04T23:53:08.245Z Last Updated: 2024-10-11T17:54:27.839Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: michaelschwarz Products: Ajax.NET-Professional Problem Types: CWE-79 Description: Ajax.NET Professional (AjaxPro) is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 are affected. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes
affected. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/michaelschwarz/Ajax.NET-Professional/security/advisories/GHSA-8v6j-gc74-fmpp - https://github.com/michaelschwarz/Ajax.NET-Professional/commit/c89e39b9679fcb8ab6644fe21cc7e652cb615e2b - https://www.nuget.org/packages/AjaxNetProfessional/
CVE ID: CVE-2023-49290 State: PUBLISHED Published: 2023-12-04T23:42:53.061Z Last Updated: 2025-05-29T13:39:54.272Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: lestrrat-go Products: jwx Problem Types: CWE-400 Description: lestrrat-go/jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. A p2c parameter set too high in JWE's algorithm PBES2-* could lead to a denial of service. The JWE key management algorithms based on PBKDF2 require a JOSE Header Parameter called p2c (PBES2 Count). This parameter dictates the number of PBKDF2 iterations needed to derive a CEK wrapping key. Its primary purpose is to intent
parameter dictates the number of PBKDF2 iterations needed to derive a CEK wrapping key. Its primary purpose is to intentionally slow down the key derivation function, making password brute-force and dictionary attacks more resource- intensive. Therefore, if an attacker sets the p2c parameter in JWE to a very large number, it can cause a lot of computational consumption, resulting in a denial of service. This vulnerability has been addressed in commit `64f2a229b` which has been included in release version 1.2.27 and 2.0.18. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
rkarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lestrrat-go/jwx/security/advisories/GHSA-7f9x-gw85-8grf - https://github.com/lestrrat-go/jwx/commit/64f2a229b8e18605f47361d292b526bdc4aee01c
CVE ID: CVE-2023-49291 State: PUBLISHED Published: 2023-12-04T23:21:33.367Z Last Updated: 2024-08-02T21:53:44.957Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N) Vendors: tj-actions Products: branch-names Problem Types: CWE-20 Description: tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The `tj-actions/branch-names` GitHub Actions improperly references the `github.event.pull_request.head.ref` and `github.head_ref` context variables within a GitHub Actions `run` step. The head ref variable is the branch name and can be used to execute arbitrary code using a specially crafted branch name. As a result an attacke
the branch name and can be used to execute arbitrary code using a specially crafted branch name. As a result an attacker can use this vulnerability to steal secrets from or abuse `GITHUB_TOKEN` permissions. This vulnerability has been addressed in version 7.0.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tj-actions/branch-names/security/advisories/GHSA-8v8w-v8xg-79rf - https://github.com/tj-actions/branch-names/commit/4923d1ca41f928c24f1c1b3af9daaadfb71e6337 - https://github.com/tj-actions/branch-names/commit/6c999acf206f5561e19f46301bb310e9e70d8815 - https://github.
fb71e6337 - https://github.com/tj-actions/branch-names/commit/6c999acf206f5561e19f46301bb310e9e70d8815 - https://github.com/tj-actions/branch-names/commit/726fe9ba5e9da4fcc716223b7994ffd0358af060 - https://securitylab.github.com/research/github-actions-untrusted-input
CVE ID: CVE-2023-49292 State: PUBLISHED Published: 2023-12-04T23:12:03.059Z Last Updated: 2024-08-02T21:53:44.990Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ecies Products: go Problem Types: CWE-200 Description: ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate(), Decapsulate() and ECDH() could be called by an attacker, they could recover any private key that interacts with it. This vulnerability was patched in 2.0.8. Users are advised to upgrade. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ecies/go/security/advisories/GHSA-8j98-cjfr-qx3h - https://github.c
Program Container: References: - https://github.com/ecies/go/security/advisories/GHSA-8j98-cjfr-qx3h - https://github.com/ecies/go/commit/c6e775163866d6ea5233eb8ec8530a9122101ebd - https://github.com/ashutosh1206/Crypton/blob/master/Diffie-Hellman-Key-Exchange/Attack-Invalid-Curve-Point/README.md - https://github.com/ecies/go/releases/tag/v2.0.8
CVE ID: CVE-2023-49293 State: PUBLISHED Published: 2023-12-04T23:03:30.752Z Last Updated: 2025-05-29T13:40:53.278Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: vitejs Products: vite Problem Types: CWE-79 Description: Vite is a website frontend framework. When Vite's HTML transformation is invoked manually via `server.transformIndexHtml`, the original request URL is passed in unmodified, and the `html` being transformed contains inline module scripts (`<script type="module">...</script>`), it is possible to inject arbitrary HTML into the transformed output by supplying a malicious URL query string to `server.transformIndexHtml`. Only apps using `appType: '
transformed output by supplying a malicious URL query string to `server.transformIndexHtml`. Only apps using `appType: 'custom'` and using the default Vite HTML middleware are affected. The HTML entry must also contain an inline script. The attack requires a user to click on a malicious URL while running the dev server. Restricted files aren't exposed to the attacker. This issue has been addressed in vite@5.0.5, vite@4.5.1, and vite@4.4.12. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vitejs/vite/security/advisories/GHSA-92r3-m2mg-pj97
CVE ID: CVE-2023-49294 State: PUBLISHED Published: 2023-12-14T19:40:46.157Z Last Updated: 2025-02-13T17:18:40.277Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: asterisk Products: asterisk Problem Types: CWE-22 Description: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the `live_dangerously` is not enabled. This allows arbitrary files to be read. Asterisk versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, contain a fix for this issu
isk versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, contain a fix for this issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/asterisk/asterisk/security/advisories/GHSA-8857-hfmw-vg8f - https://github.com/asterisk/asterisk/commit/424be345639d75c6cb7d0bd2da5f0f407dbd0bd5 - https://github.com/asterisk/asterisk/blob/master/main/manager.c#L3757 - https://lists.debian.org/debian-lts-announce/2023/12/msg00019.html
CVE ID: CVE-2023-49295 State: PUBLISHED Published: 2024-01-10T21:40:58.881Z Last Updated: 2025-06-17T20:59:15.978Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: quic-go Products: quic-go Problem Types: CWE-400 Description: quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can cause its peer to run out of memory sending a large number of PATH_CHALLENGE frames. The receiver is supposed to respond to each PATH_CHALLENGE frame with a PATH_RESPONSE frame. The attacker can prevent the receiver from sending out (the vast majority of) these PATH_RESPONSE frames by collapsing the peers congestion window (by selectiv
rom sending out (the vast majority of) these PATH_RESPONSE frames by collapsing the peers congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT estimate. This vulnerability has been patched in versions 0.37.7, 0.38.2 and 0.39.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/quic-go/quic-go/security/advisories/GHSA-ppxx-5m9h-6vxf - https://github.com/quic-go/quic-go/commit/17fc98c2d81dbe685c19702dc694a9d606ac56dc - https://github.com/quic-go/quic-go/commit/21609ddfeff93668c7625a85eb09f1541fdad965 - https://github.com/quic-go/quic-go/commit/3a9c18bcd27a01c551ac9bf8bd2b4bded77c189a - ht
f93668c7625a85eb09f1541fdad965 - https://github.com/quic-go/quic-go/commit/3a9c18bcd27a01c551ac9bf8bd2b4bded77c189a - https://github.com/quic-go/quic-go/commit/554d543b50b917369fb1394cc5396d928166cf49 - https://github.com/quic-go/quic-go/commit/6cc3d58935426191296171a6c0d1ee965e10534e - https://github.com/quic-go/quic-go/commit/9aaefe19fc3dc8c8917cc87e6128bb56d9e9e6cc - https://github.com/quic-go/quic-go/commit/a0ffa757499913f7be69aa78f573a6aee3430ae4 - https://github.com/quic-go/quic-go/commit/d7aa627ebde91cf799ada2a07443faa9b1e5abb8 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G5RSHDTVMYAIGYVVFGKTMFHAZJMA3EVV/ - https://lists.fedoraprojec
ves/list/package-announce@lists.fedoraproject.org/message/G5RSHDTVMYAIGYVVFGKTMFHAZJMA3EVV/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZE7IOKXX5AATU2WR3V76X5Y3A44QAATG/
CVE ID: CVE-2023-49296 State: PUBLISHED Published: 2023-12-13T19:54:34.638Z Last Updated: 2024-08-02T21:53:44.988Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: arduino Products: arduino-create-agent Problem Types: CWE-79 Description: The Arduino Create Agent allows users to use the Arduino Create applications to upload code to any USB connected Arduino board directly from the browser. A vulnerability in versions prior to 1.3.6 affects the endpoint `/certificate.crt` and the way the web interface of the ArduinoCreateAgent handles custom error messages. An attacker that is able to persuade a victim into clicking on a malicious link can perform a Reflected C
rror messages. An attacker that is able to persuade a victim into clicking on a malicious link can perform a Reflected Cross-Site Scripting attack on the web interface of the create agent, which would allow the attacker to execute arbitrary browser client side code. Version 1.3.6 contains a fix for the issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/arduino/arduino-create-agent/security/advisories/GHSA-j5hc-wx84-844h - https://github.com/arduino/arduino-create-agent/commit/9a0e582bb8a1ff8e70d202943ddef8625ccefcc8
CVE ID: CVE-2023-49297 State: PUBLISHED Published: 2023-12-05T20:51:24.143Z Last Updated: 2025-02-13T17:18:41.420Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: iterative Products: PyDrive2 Problem Types: CWE-502 Description: PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2 is run in the same directory as it, or if it is loaded in via `LoadSettingsFile`. This is a deserilization attack that will affect any user who initializes GoogleAuth from this pack
`LoadSettingsFile`. This is a deserilization attack that will affect any user who initializes GoogleAuth from this package while a malicious yaml file is present in the same directory. This vulnerability does not require the file to be directly loaded through the code, only present. This issue has been addressed in commit `c57355dc` which is included in release version `1.16.2`. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/iterative/PyDrive2/security/advisories/GHSA-v5f6-hjmf-9mc5 - https://github.com/iterative/PyDrive2/commit/c57355dc2033ad90b7050d681b2c3ba548ff0004 -
advisories/GHSA-v5f6-hjmf-9mc5 - https://github.com/iterative/PyDrive2/commit/c57355dc2033ad90b7050d681b2c3ba548ff0004 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CYR5SJKOFSSXFV3E3D2SLXBUBA5WMJJG/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K34YWTDKBAYWZPOAKBYDM72WIFL5CAYW/
CVE ID: CVE-2023-49298 State: PUBLISHED Published: 2023-11-24T00:00:00.000Z Last Updated: 2025-11-03T19:28:35.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but can be security related in realistic situations. A possible example is cp, from a recent GNU Core Utilities (coreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when config
oreutils) version, when attempting to preserve a rule set for denying unauthorized access. (One might use cp when configuring access control, such as with the /etc/hosts.deny file specified in the IBM Support reference.) NOTE: this issue occurs less often in version 2.2.1, and in versions before 2.1.4, because of the default configuration in those versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openzfs/zfs/pull/15571 - https://github.com/openzfs/zfs/issues/15526 - https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=275308 - https://news.ycombinator.com/item?id=38405731 - https://web.archive.org/web/20231124172959/https://ww
ug.cgi?id=275308 - https://news.ycombinator.com/item?id=38405731 - https://web.archive.org/web/20231124172959/https://www.ibm.com/support/pages/how-remove-missing%C2%A0newline%C2%A0or%C2%A0line%C2%A0too%C2%A0long-error-etchostsallow%C2%A0and%C2%A0etchostsdeny-files - https://github.com/openzfs/zfs/releases/tag/zfs-2.2.2 - https://github.com/openzfs/zfs/releases/tag/zfs-2.1.14 - https://www.theregister.com/2023/12/04/two_new_versions_of_openzfs/ - https://bugs.gentoo.org/917224 - https://news.ycombinator.com/item?id=38770168 - https://lists.debian.org/debian-lts-announce/2024/03/msg00019.html
CVE ID: CVE-2023-49299 State: PUBLISHED Published: 2023-12-30T16:27:12.045Z Last Updated: 2025-02-13T17:18:42.096Z Vendors: Apache Software Foundation Products: Apache DolphinScheduler Problem Types: CWE-20 Description: Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.This issue affects Apache DolphinScheduler: until 3.1.9. Users are recommended to upgrade to version 3.1.9, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/dolphinscheduler/pull/15228 - https://lists.apache.org/thread/tnf99qoc
richment: References: - https://github.com/apache/dolphinscheduler/pull/15228 - https://lists.apache.org/thread/tnf99qoc6tlnwrny4t1zk6mfszgdsokm - http://www.openwall.com/lists/oss-security/2024/02/23/3
CVE ID: CVE-2023-49312 State: PUBLISHED Published: 2023-11-26T00:00:00 Last Updated: 2024-08-02T21:53:44.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address. Additional Analyst Notes: - CVE Program Container: References: - https://precisionbridge.net/738vulnerability - https://processhacker.sourceforge.io/archive/website_v2/features.php
CVE ID: CVE-2023-49313 State: PUBLISHED Published: 2023-11-28T00:00:00 Last Updated: 2024-08-02T21:53:44.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/horsicq/XMachOViewer - https://github.com/louiselalanne/CVE-2023-49313
CVE ID: CVE-2023-49314 State: PUBLISHED Published: 2023-11-28T00:00:00 Last Updated: 2024-11-26T20:33:38.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://asana.com/pt/download - https://github.com/r3ggi/electroniz3r - https://www.electronjs.org/docs/latest/tutorial/fuses - https://github.com/louiselalanne/CVE-202
om/r3ggi/electroniz3r - https://www.electronjs.org/docs/latest/tutorial/fuses - https://github.com/louiselalanne/CVE-2023-49314 - https://github.com/electron/fuses - https://www.electronjs.org/blog/statement-run-as-node-cves
CVE ID: CVE-2023-49316 State: PUBLISHED Published: 2023-11-27T00:00:00 Last Updated: 2024-08-02T21:53:45.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f - https://github.com/phpseclib/phpseclib/releases/tag/3.0.34
CVE ID: CVE-2023-49321 State: PUBLISHED Published: 2023-11-26T00:00:00 Last Updated: 2024-08-02T21:53:45.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1. Additional Analyst Not
hSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories/cve-2023-49321
CVE ID: CVE-2023-49322 State: PUBLISHED Published: 2023-11-26T00:00:00 Last Updated: 2024-08-02T21:53:44.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1. Additional Analyst Not
hSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant 1.0.35-1. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories/cve-2023-49322
CVE ID: CVE-2023-49328 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T21:53:45.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2023-49329 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-20T18:19:48.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anomali Match before 4.6.2 allows OS Command Injection. An authenticated admin user can inject and execute operating system commands. This arises from improper handling of untrusted input, enabling an attacker to elevate privileges, execute system commands, and potentially compromise the underlying operating system. The fixed versions are 4.4.5, 4.5.4, and 4.6.2. The earliest affected version is 4.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.anomali.com/collabor
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.anomali.com/collaborate/ciso-blog - https://www.anomali.com/security-advisory/anml-2023-01