Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-5911 State: PUBLISHED Published: 2024-01-08T19:00:37.176Z Last Updated: 2025-06-18T16:03:35.125Z Vendors: Unknown Products: WP Custom Cursors | WordPress Cursor Plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Custom Cursors | WordPress Cursor Plugin WordPress plugin through 3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dde0767d-1dff-
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dde0767d-1dff-4261-adbe-1f3fdf2d9aae
CVE ID: CVE-2023-5912 State: PUBLISHED Published: 2024-04-05T20:45:00.681Z Last Updated: 2024-08-02T08:14:24.668Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Notebook BIOS Problem Types: CWE-787 Description: A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker with elevated privileges to write to NVRAM variables. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-155477
CVE ID: CVE-2023-5913 State: PUBLISHED Published: 2023-11-08T16:42:31.074Z Last Updated: 2024-09-04T13:53:22.231Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: opentext Products: Fortify ScanCentral DAST Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000023500?language=en_US
CVE ID: CVE-2023-5914 State: PUBLISHED Published: 2024-01-17T20:19:49.869Z Last Updated: 2025-06-17T21:19:18.814Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Cloud Software Group Products: Citrix StoreFront Problem Types: CWE-79 Description: Cross-site scripting (XSS) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX583759/citrix-storefront-security-bulletin-for-cve20235914
CVE ID: CVE-2023-5915 State: PUBLISHED Published: 2023-12-01T06:12:03.581Z Last Updated: 2024-08-02T08:14:24.685Z Vendors: Yokogawa Electric Corporation Products: STARDOM Problem Types: CWE-400 Description: A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corporation. This vulnerability may allow to a remote attacker to cause a denial-of-service condition to the FCN/FCJ controller by sending a crafted packet. While sending the packet, the maintenance homepage of the controller could not be accessed. Therefore, functions of the maintenance homepage, changing configuration, viewing logs, etc. are not available. But the controller
functions of the maintenance homepage, changing configuration, viewing logs, etc. are not available. But the controller’s operation is not stopped by the condition. The affected products and versions are as follows: STARDOM FCN/FCJ R1.01 to R4.31. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/35463/files/YSAR-23-0003-E.pdf - https://www.cisa.gov/news-events/ics-advisories/icsa-23-334-02 - https://jvn.jp/vu/JVNVU95177889/index.html
CVE ID: CVE-2023-5916 State: PUBLISHED Published: 2023-11-02T10:31:06.228Z Last Updated: 2025-02-27T20:36:06.793Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Lissy93 Products: Dashy Problem Types: CWE-284 Description: A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-244305 was assigned to this vulnerability. Additional Analys
disclosed to the public and may be used. The identifier VDB-244305 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244305 - https://vuldb.com/?ctiid.244305 - https://github.com/Lissy93/dashy/issues/1336 - https://treasure-blarney-085.notion.site/Dashy-0dca8a0ebbd84f78ae6d03528ff1538c?pvs=4
CVE ID: CVE-2023-5917 State: PUBLISHED Published: 2023-11-02T10:31:07.376Z Last Updated: 2025-02-27T20:36:00.959Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: phpBB Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in phpBB up to 3.3.10. This issue affects the function main of the file phpBB/includes/acp/acp_icons.php of the component Smiley Pack Handler. The manipulation of the argument pak leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 3.3.11 is able to address this issue. The patch is named ccf6e6c255d38692d72fcb613b113e6eaa240aac. It is recommended to upgrade the
ble to address this issue. The patch is named ccf6e6c255d38692d72fcb613b113e6eaa240aac. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-244307. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244307 - https://vuldb.com/?ctiid.244307 - https://www.phpbb.com/community/viewtopic.php?t=2646991 - https://github.com/phpbb/phpbb/commit/ccf6e6c255d38692d72fcb613b113e6eaa240aac - https://github.com/phpbb/phpbb/releases/tag/release-3.3.11 - https://www.phpbb.com/
CVE ID: CVE-2023-5918 State: PUBLISHED Published: 2023-11-02T11:00:11.083Z Last Updated: 2025-02-27T20:35:54.791Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Visitor Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-244308. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
B-244308. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244308 - https://vuldb.com/?ctiid.244308 - https://github.com/Castle1984/CveRecord/blob/main/Sql_apply.md
CVE ID: CVE-2023-5919 State: PUBLISHED Published: 2023-11-02T13:31:06.780Z Last Updated: 2025-02-27T18:51:23.492Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-434 Description: A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /dashboard/createblog of the component Create Blog Page. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-244310 is the identifier assigned to this vulnerability. Additional Analy
n disclosed to the public and may be used. VDB-244310 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244310 - https://vuldb.com/?ctiid.244310 - https://www.jianshu.com/p/a451953f36f1?v=1698808954608
CVE ID: CVE-2023-5920 State: PUBLISHED Published: 2023-11-02T08:34:30.659Z Last Updated: 2025-02-27T20:36:12.934Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Desktop Problem Types: CWE-200 Description: Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-5921 State: PUBLISHED Published: 2023-11-22T09:03:14.924Z Last Updated: 2024-08-02T08:14:24.979Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: DECE Software Products: Geodi Problem Types: CWE-841 Description: Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.This issue affects Geodi: before 8.0.0.27396. Additional Analyst Notes: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-23-0650
CVE ID: CVE-2023-5922 State: PUBLISHED Published: 2024-01-16T15:57:21.145Z Last Updated: 2025-06-02T15:09:11.518Z Vendors: Unknown Products: Royal Elementor Addons and Templates Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The Royal Elementor Addons and Templates WordPress plugin before 1.3.81 does not ensure that users accessing posts via an AJAX action (and REST endpoint, currently disabled in the plugin) have the right to do so, allowing unauthenticated users to access arbitrary draft, private and password protected posts/pages content Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulner
tent Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/debd8498-5770-4270-9ee1-1503e675ef34/
CVE ID: CVE-2023-5923 State: PUBLISHED Published: 2023-11-02T18:00:11.560Z Last Updated: 2025-02-27T20:35:49.191Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Campcodes Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Campcodes Simple Student Information System 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-244323. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
ciated identifier of this vulnerability is VDB-244323. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244323 - https://vuldb.com/?ctiid.244323 - https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%201.pdf
CVE ID: CVE-2023-5924 State: PUBLISHED Published: 2023-11-02T18:00:12.789Z Last Updated: 2025-02-27T20:35:43.439Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Campcodes Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability affects unknown code of the file /admin/courses/view_course.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-244324. Additional Analyst Notes: - CVE Program Container: - CIS
ay be used. The identifier of this vulnerability is VDB-244324. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244324 - https://vuldb.com/?ctiid.244324 - https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%202.pdf
CVE ID: CVE-2023-5925 State: PUBLISHED Published: 2023-11-02T19:00:08.783Z Last Updated: 2025-02-27T20:35:25.857Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Campcodes Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-244325 was assigned to this vulnerability. Additional Analyst Notes: - CVE Progra
ic and may be used. The identifier VDB-244325 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244325 - https://vuldb.com/?ctiid.244325 - https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%203.pdf
CVE ID: CVE-2023-5926 State: PUBLISHED Published: 2023-11-02T19:00:09.944Z Last Updated: 2025-02-27T20:35:20.100Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Campcodes Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affected is an unknown function of the file /admin/students/update_status.php. The manipulation of the argument student_id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-244326 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE
he public and may be used. VDB-244326 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244326 - https://vuldb.com/?ctiid.244326 - https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%204.pdf
CVE ID: CVE-2023-5927 State: PUBLISHED Published: 2023-11-02T19:31:04.823Z Last Updated: 2025-02-27T20:35:14.159Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Campcodes Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/courses/manage_course.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-244327. Additional Anal
disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-244327. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244327 - https://vuldb.com/?ctiid.244327 - https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%205.pdf
CVE ID: CVE-2023-5928 State: PUBLISHED Published: 2023-11-02T19:31:05.941Z Last Updated: 2025-02-27T20:35:07.901Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Campcodes Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/departments/manage_department.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-244328. Additional Analyst Notes: - C
sclosed to the public and may be used. The identifier of this vulnerability is VDB-244328. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244328 - https://vuldb.com/?ctiid.244328 - https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%206.pdf
CVE ID: CVE-2023-5929 State: PUBLISHED Published: 2023-11-02T20:00:07.167Z Last Updated: 2025-02-27T20:35:02.506Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Campcodes Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/students/manage_academic.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-244329 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
c and may be used. The identifier VDB-244329 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244329 - https://vuldb.com/?ctiid.244329 - https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%207.pdf
CVE ID: CVE-2023-5930 State: PUBLISHED Published: 2023-11-02T20:00:08.389Z Last Updated: 2025-02-27T20:34:56.762Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Simple Student Information System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/students/manage_academic.php. The manipulation of the argument student_id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-244330 is the identifier assigned to this vulnerability
he exploit has been disclosed to the public and may be used. VDB-244330 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.244330 - https://vuldb.com/?ctiid.244330 - https://github.com/E1CHO/cve_hub/blob/main/Simple%20Student%20Information%20System/Simple%20Student%20Information%20System%20-%20vuln%208.pdf
CVE ID: CVE-2023-5931 State: PUBLISHED Published: 2023-12-26T18:33:01.473Z Last Updated: 2024-08-02T08:14:25.118Z Vendors: Unknown Products: rtMedia for WordPress, BuddyPress and bbPress Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.6.16 does not validate files to be uploaded, which could allow attackers with a low-privilege account (e.g. subscribers) to upload arbitrary files such as PHP on the server Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3d6889e3-a01b-4e7f-868f-af7cc8c7531a
CVE ID: CVE-2023-5932 State: PUBLISHED Published: 2025-05-15T20:09:02.567Z Last Updated: 2025-05-16T18:32:44.915Z Vendors: Unknown Products: Travelpayouts: All Travel Brands in One Place Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/16fbca64-cc35-455e-bfef-d1f28857f991/
CVE ID: CVE-2023-5933 State: PUBLISHED Published: 2024-01-26T01:02:58.931Z Last Updated: 2025-11-20T04:10:58.262Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-80 Description: An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary API PUT requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ - https://gitlab.com/gitlab-org/gitlab/-/i
lab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/430236 - https://hackerone.com/reports/2225710
CVE ID: CVE-2023-5934 State: PUBLISHED Published: 2025-05-15T20:09:02.811Z Last Updated: 2025-05-16T18:31:46.188Z Vendors: Unknown Products: Travelpayouts: All Travel Brands in One Place Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place when importing settings from the v1, which could allow attackers to make a logged in admin update some settings via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2a45cdba-df41-457e-bff9-2d6d89776dd0/
CVE ID: CVE-2023-5935 State: PUBLISHED Published: 2024-05-15T16:02:34.507Z Last Updated: 2024-08-02T08:14:25.128Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Nozomi Networks Products: Arc Problem Types: CWE-306 Description: When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself. A malicious local user or process, during a window of opportunity when the local web interface is active, may be able to extract sensitive information or change Arc's configuration. This could a
local web interface is active, may be able to extract sensitive information or change Arc's configuration. This could also lead to arbitrary code execution if a malicious update package is installed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:13-01
CVE ID: CVE-2023-5936 State: PUBLISHED Published: 2024-05-15T16:04:58.720Z Last Updated: 2024-08-02T08:14:25.124Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Nozomi Networks Products: Arc Problem Types: CWE-732 Description: On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:14-01
CVE ID: CVE-2023-5937 State: PUBLISHED Published: 2024-05-15T16:06:52.478Z Last Updated: 2024-09-20T18:23:17.824Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Nozomi Networks Products: Arc Problem Types: CWE-538 Description: On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:15-01