Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
runk/includes/modules/sales-notification/class.sale_notification.php?contextall=1&old=3061864&old_path=%2Fwoolentor-addons%2Ftrunk%2Fincludes%2Fmodules%2Fsales-notification%2Fclass.sale_notification.php
CVE ID: CVE-2023-6329 State: PUBLISHED Published: 2023-11-27T16:34:50.656Z Last Updated: 2024-08-02T08:28:21.191Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Control iD Products: iDSecure Problem Types: CWE-287 Description: An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user. Additional Analyst Notes: - CVE Program Container: References: - https://tenable.com/security/research/tra-2023-36
CVE ID: CVE-2023-6333 State: PUBLISHED Published: 2023-12-07T18:08:04.324Z Last Updated: 2024-08-02T08:28:21.197Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L) Vendors: ControlByWeb Products: X-332-24I, X-301-I, X-301-24I Problem Types: CWE-79 Description: The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-05
CVE ID: CVE-2023-6334 State: PUBLISHED Published: 2024-01-16T19:41:52.057Z Last Updated: 2025-06-17T21:19:15.233Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: HYPR Products: Workforce Access Problem Types: CWE-120 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hypr.com/security-advisories
CVE ID: CVE-2023-6335 State: PUBLISHED Published: 2024-01-16T19:42:02.665Z Last Updated: 2025-06-02T15:08:28.827Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L) Vendors: HYPR Products: Workforce Access Problem Types: CWE-59 Description: Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hypr.com/security-advisories
CVE ID: CVE-2023-6336 State: PUBLISHED Published: 2024-01-16T19:42:09.035Z Last Updated: 2025-06-02T15:08:23.060Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: HYPR Products: Workforce Access Problem Types: CWE-59 Description: Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hypr.com/security-advisories
CVE ID: CVE-2023-6337 State: PUBLISHED Published: 2023-12-08T21:12:31.712Z Last Updated: 2025-02-13T17:26:18.153Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-770 Description: HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of the host when handling large unauthenticated and authenticated HTTP requests from a client. Vault will attempt to map the request to memory, resulting in the exhaustion of available memory on the host, which may cause Vault to crash. Fixed in Vault 1.15.4, 1.14.8, 1.13.12. Additional Analyst Notes: - CVE
ory on the host, which may cause Vault to crash. Fixed in Vault 1.15.4, 1.14.8, 1.13.12. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2023-34-vault-vulnerable-to-denial-of-service-through-memory-exhaustion-when-handling-large-http-requests/60741 - https://security.netapp.com/advisory/ntap-20240112-0006/
CVE ID: CVE-2023-6338 State: PUBLISHED Published: 2024-01-03T21:00:26.988Z Last Updated: 2025-06-03T14:43:14.048Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Universal Device Client (UDC) Problem Types: CWE-427 Description: Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-121183
CVE ID: CVE-2023-6339 State: PUBLISHED Published: 2024-01-02T21:44:05.703Z Last Updated: 2025-06-03T14:45:15.471Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Google Products: Wifi Pro Problem Types: CWE-311 Description: Google Nest WiFi Pro root code-execution & user-data compromise Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.google.com/product-documentation/answer/14273332?hl=en&ref_topic=12974021&sjid=4533873659772963473-NA
CVE ID: CVE-2023-6340 State: PUBLISHED Published: 2024-01-17T23:57:06.142Z Last Updated: 2025-06-11T16:40:22.236Z Vendors: SonicWall Products: Capture Client, NetExtender Problem Types: CWE-121 Description: SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver. The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019
CVE ID: CVE-2023-6341 State: PUBLISHED Published: 2023-11-30T17:41:22.671Z Last Updated: 2024-08-02T08:28:21.307Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Catalis Products: CMS360 Problem Types: CWE-639 Description: Catalis (previously Icon Software) CMS360 allows a remote, unauthenticated attacker to view sensitive court documents by modifying document and other identifiers in URLs. The impact varies based on the intention and configuration of a specific CMS360 installation. Additional Analyst Notes: - CVE Program Container: References: - https://catalisgov.com/courts-land-records-support/ - https://github.com/qwell/disorder-in-the-court/blob/main/RE
ces: - https://catalisgov.com/courts-land-records-support/ - https://github.com/qwell/disorder-in-the-court/blob/main/README-Catalis.md - https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/ - https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems
CVE ID: CVE-2023-6342 State: PUBLISHED Published: 2023-11-30T17:41:13.229Z Last Updated: 2024-10-15T17:41:05.798Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tyler Technologies Products: Court Case Management Plus Problem Types: CWE-287 Description: Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tylertech.com
-01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tylertech.com/solutions/courts-public-safety/courts-justice - https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md - https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/ - https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems
CVE ID: CVE-2023-6343 State: PUBLISHED Published: 2023-11-30T17:47:54.613Z Last Updated: 2025-08-25T19:55:29.460Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tyler Technologies Products: Court Case Management Plus Problem Types: CWE-287 Description: Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate and access sensitive files using the tiffserver/tssp.aspx 'FN' and 'PN' parameters. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The vulnerable Aquaforest TIFF Server feature was removed on or around 2023-11-01. Insecure configuration issues in Aquaforest
lnerable Aquaforest TIFF Server feature was removed on or around 2023-11-01. Insecure configuration issues in Aquaforest TIFF Server are identified separately as CVE-2023-6352. CVE-2023-6343 is similar to CVE-2020-9323. CVE-2023-6343 is related to or partially caused by CVE-2023-6352. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tylertech.com/solutions/courts-public-safety/courts-justice - https://www.aquaforest.com/blog/tiff-server-security-update - https://www.aquaforest.com/blog/aquaforest-tiff-server-sunsetting - https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md - https://techcrunch.com/2023/11/30
https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md - https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/ - https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems
CVE ID: CVE-2023-6344 State: PUBLISHED Published: 2023-11-30T17:48:42.195Z Last Updated: 2025-06-03T02:30:17.222Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tyler Technologies Products: Court Case Management Plus Problem Types: CWE-287 Description: Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate directories using the tiffserver/te003.aspx or te004.aspx 'ifolder' parameter. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The vulnerable Aquaforest TIFF Server feature was removed on or around 2023-11-01. Insecure configuration issues in Aquaforest TIFF
ble Aquaforest TIFF Server feature was removed on or around 2023-11-01. Insecure configuration issues in Aquaforest TIFF Server are identified separately as CVE-2023-6352. CVE-2023-6343 is related to or partially caused by CVE-2023-6352. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tylertech.com/solutions/courts-public-safety/courts-justice - https://www.aquaforest.com/blog/tiff-server-security-update - https://www.aquaforest.com/blog/aquaforest-tiff-server-sunsetting - https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md - https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-expose
lob/main/README-TylerTechnologies.md - https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/ - https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems
CVE ID: CVE-2023-6345 State: PUBLISHED Published: 2023-11-29T12:02:05.401Z Last Updated: 2025-10-21T23:05:31.869Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html - https://crbug.com/1505053 - https://lists.fedoraproject.org/archives/list/package-announce@lists.f
for-desktop_28.html - https://crbug.com/1505053 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/ - https://www.debian.org/security/2023/dsa-5569 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-6346 State: PUBLISHED Published: 2023-11-29T12:02:04.978Z Last Updated: 2025-02-13T17:26:19.284Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html - https://crbug.com/1500856 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/ - htt
fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/ - https://www.debian.org/security/2023/dsa-5569 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-6347 State: PUBLISHED Published: 2023-11-29T12:02:04.687Z Last Updated: 2025-06-05T13:42:53.559Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html - https://crbug.com/1494461 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IY
4461 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/ - https://www.debian.org/security/2023/dsa-5569 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-6348 State: PUBLISHED Published: 2023-11-29T12:02:04.351Z Last Updated: 2025-02-13T17:26:20.363Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html - https://crbug.com/1491459 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mess
https://crbug.com/1491459 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/ - https://www.debian.org/security/2023/dsa-5569 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/ - http://packetstormsecurity.com/files/176368/Chrome-BindTextSuggestionHostForFrame-Type-Confusion.html - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-6349 State: PUBLISHED Published: 2024-05-27T11:26:58.207Z Last Updated: 2024-08-02T08:28:21.518Z Vendors: Chromium Products: libvpx Problem Types: CWE-122 Description: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://crbug.com/webm/1642
CVE ID: CVE-2023-6350 State: PUBLISHED Published: 2023-11-29T12:02:05.123Z Last Updated: 2025-02-13T17:26:20.995Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html - https://crbug.com/1501766 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/ - http
edoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T7ABNYMOI4ZHVCSPCNP7HQTOLGF53A2/ - https://www.debian.org/security/2023/dsa-5569 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C7XQNYZZA3X2LBJF57ZHKXWOMJKNLZYR/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-6351 State: PUBLISHED Published: 2023-11-29T12:02:05.266Z Last Updated: 2025-02-13T17:26:21.520Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html - https://crbug.com/1501770 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ/ - http
CVE ID: CVE-2023-6352 State: PUBLISHED Published: 2023-11-30T18:01:09.116Z Last Updated: 2024-08-02T08:28:21.792Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Aquaforest Products: TIFF Server Problem Types: CWE-22 Description: The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet Information Services (IIS) or Microsoft Windows. Depending on how a web application uses and configures TIFF Server, a remote attacker may be able to enumerate files or directories, traverse directories, bypass authentication, or access restricted files. Additional Analyst Notes: - CVE Program Co
ies, traverse directories, bypass authentication, or access restricted files. Additional Analyst Notes: - CVE Program Container: References: - https://www.aquaforest.com/blog/tiff-server-security-update - https://www.aquaforest.com/blog/aquaforest-tiff-server-sunsetting - https://www.aquaforest.com/wp-content/uploads/pdf/ts/TiffServer4.2.pdf - https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md - https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems
CVE ID: CVE-2023-6353 State: PUBLISHED Published: 2023-11-30T17:51:10.531Z Last Updated: 2025-08-25T19:55:12.804Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tyler Technologies Products: Civil and Criminal Electronic Filing Problem Types: CWE-287 Description: Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the Upload.aspx 'enky' parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tylertech.com/solutions/courts-public-safety/courts-justice - https://github.com/qwell/disorder-in-the-court/blob/mai
ww.tylertech.com/solutions/courts-public-safety/courts-justice - https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md - https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/ - https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems
CVE ID: CVE-2023-6354 State: PUBLISHED Published: 2023-11-30T17:53:26.147Z Last Updated: 2024-08-02T08:28:21.784Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tyler Technologies Products: Magistrate Court Case Management Plus Problem Types: CWE-287 Description: Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.tylertech.com/solutions/courts-public-safety/courts-justice - https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTe
/solutions/courts-public-safety/courts-justice - https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md - https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/ - https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document-management-systems
CVE ID: CVE-2023-6355 State: PUBLISHED Published: 2023-12-18T21:55:58.148Z Last Updated: 2024-08-02T08:28:21.793Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Gallagher Products: Controller 7000 Problem Types: CWE-1253 Description: Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local debug. This issue affects: Gallagher Controller 7000 9.00 prior to vCR9.00.231204b (distributed in 9.00.1507 (MR1)), 8.90 prior to vCR8.90.231204a (distributed in 8.90.1620 (MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8
(MR2)), 8.80 prior to vCR8.80.231204a (distributed in 8.80.1369 (MR3)), 8.70 prior to vCR8.70.231204a (distributed in 8.70.2375 (MR5)). Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2023-6355
CVE ID: CVE-2023-6356 State: PUBLISHED Published: 2024-02-07T21:04:20.684Z Last Updated: 2025-11-06T21:45:11.718Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, RHOL-5.8-RHEL-9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-476 Description: A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious a