Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-28712 State: PUBLISHED Published: 2023-03-28T20:10:26.133Z Last Updated: 2025-01-16T21:37:40.431Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: ProPump and Controls, Inc. Products: Osprey Pump Controller Problem Types: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') Description: Osprey Pump Controller version 1.01 contains an unauthenticated command injection vulnerability that could allow system access with www-data permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06
CVE ID: CVE-2023-28713 State: PUBLISHED Published: 2023-06-01T00:00:00 Last Updated: 2025-01-09T19:30:31.500Z Vendors: Contec Co., Ltd. Products: CONPROSYS HMI System (CHS) Problem Types: Plaintext storage of a password Description: Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in a local file in plaintext, a user who can access the PC where the affected product is installed can obtain the information. As a result, information in the database may be obtained and/or altered by the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec
y the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf - https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf - https://jvn.jp/en/vu/JVNVU93372935/
CVE ID: CVE-2023-28714 State: PUBLISHED Published: 2023-08-11T02:37:13.625Z Last Updated: 2024-10-17T13:55:10.459Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi software for Windows Problem Types: escalation of privilege, CWE-284 Description: Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/in
ram Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00872.html
CVE ID: CVE-2023-28715 State: PUBLISHED Published: 2024-02-14T13:38:06.567Z Last Updated: 2024-08-14T18:38:08.368Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) oneAPI Toolkit and component software installers Problem Types: denial of service, CWE-284 Description: Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00956.html
CVE ID: CVE-2023-28716 State: PUBLISHED Published: 2023-04-27T22:11:48.603Z Last Updated: 2025-01-17T17:05:06.847Z Vendors: mySCADA Technologies Products: mySCADA myPRO Problem Types: CWE-78 OS Command Injection Description: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06
CVE ID: CVE-2023-28718 State: PUBLISHED Published: 2023-03-28T20:09:15.958Z Last Updated: 2025-01-16T21:37:47.648Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: ProPump and Controls, Inc. Products: Osprey Pump Controller Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: Osprey Pump Controller version 1.01 allows users to perform certain actions via HTTP requests without performing any checks to verify the requests. This may allow an attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
sits a malicious website. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06
CVE ID: CVE-2023-28720 State: PUBLISHED Published: 2024-02-14T13:37:55.300Z Last Updated: 2024-08-16T19:46:41.176Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software Problem Types: denial of service, CWE-665 Description: Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/
CVE ID: CVE-2023-28722 State: PUBLISHED Published: 2024-01-19T20:03:12.028Z Last Updated: 2024-09-12T18:40:35.098Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H) Vendors: n/a Products: Intel NUC BIOS firmware Problem Types: escalation of privilege, CWE-92 Description: Improper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01009.html
CVE ID: CVE-2023-28723 State: PUBLISHED Published: 2023-11-14T19:04:52.898Z Last Updated: 2024-08-30T15:17:07.509Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Aptio* V UEFI Firmware Integrator Tools Problem Types: information disclosure, CWE-200 Description: Exposure of sensitive information to an unauthorized actor in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.ht
CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2023-28724 State: PUBLISHED Published: 2023-05-03T14:34:28.973Z Last Updated: 2025-02-13T16:48:50.260Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: F5 Products: NGINX Instance Manager, NGINX API Connectivity Manager, NGINX Security Monitoring Problem Types: CWE-276 Description: NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
pport (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000133233 - https://security.netapp.com/advisory/ntap-20230609-0006/
CVE ID: CVE-2023-28725 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-26T16:57:15.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March 2023. This is fixed in 20221118.48 and 20230120.44. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/2885222430/Security+Incident+M
ADP Vulnrichment: References: - https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/2885222430/Security+Incident+March+17-18th+2023 - https://www.generalbytes.com/en/support/changelog - https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/951418958/Update+CAS - https://twitter.com/generalbytes/status/1637192687160897537 - https://web3isgoinggreat.com/single/general-bytes-crypto-atms-exploited-for-over-1-6-million - https://arstechnica.com/information-technology/2023/03/hackers-drain-bitcoin-atms-of-1-5-million-by-exploiting-0-day-bug/ - https://www.bleepingcomputer.com/news/security/general-bytes-bitcoin-atms-hacked-using-zero-day-15m-stolen/
CVE ID: CVE-2023-28726 State: PUBLISHED Published: 2023-03-31T06:29:32.493Z Last Updated: 2025-02-12T14:48:56.297Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Panasonic Products: AiSEG2 Problem Types: OS command injection Description: Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www2.panasonic.biz/jp/densetsu/aiseg/firmup_info.html
CVE ID: CVE-2023-28727 State: PUBLISHED Published: 2023-03-31T06:30:25.635Z Last Updated: 2025-02-12T14:48:07.572Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Panasonic Products: AiSEG2 Problem Types: authentication bypass Description: Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www2.panasonic.biz/jp/densetsu/aiseg/firmup_info.html
CVE ID: CVE-2023-28728 State: PUBLISHED Published: 2023-07-21T06:03:00.280Z Last Updated: 2024-10-24T14:25:55.388Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Panasonic Products: Control FPWIN Pro Problem Types: CWE-121 Description: A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specially crafted project files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://industry.panasonic.eu/factory-automation/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro
CVE ID: CVE-2023-28729 State: PUBLISHED Published: 2023-07-21T06:05:26.585Z Last Updated: 2024-10-24T14:24:31.164Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Panasonic Products: Control FPWIN Pro Problem Types: CWE-843 Description: A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specially crafted project files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://industry.panasonic.eu/factory-automation/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro
CVE ID: CVE-2023-28730 State: PUBLISHED Published: 2023-07-21T06:07:24.310Z Last Updated: 2024-10-24T14:21:34.449Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Panasonic Products: Control FPWIN Pro Problem Types: CWE-119 Description: A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specially crafted project files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://industry.panasonic.eu/factory-automation/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro
CVE ID: CVE-2023-28731 State: PUBLISHED Published: 2023-03-30T11:25:36.854Z Last Updated: 2025-02-11T20:11:00.208Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AcyMailing Products: Newsletter Plugin for Joomla in the Enterprise version Problem Types: CWE-20, CWE-434 Description: AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file upload allowing PHP code to be injected. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
nterprise in versions below 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.acymailing.com/change-log/ - https://www.bugbounty.ch/advisories/CVE-2023-28731
CVE ID: CVE-2023-28732 State: PUBLISHED Published: 2023-03-30T11:26:27.209Z Last Updated: 2025-02-11T20:10:17.247Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: AcyMailing Products: Newsletter Plugin for Joomla Problem Types: CWE-20, CWE-200 Description: Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system files via path traversal, when being granted access to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin in versions below 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
mla Plugin in versions below 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.acymailing.com/change-log/ - https://github.com/acyba/acymailing/releases/tag/v8.3.0 - https://www.bugbounty.ch/advisories/CVE-2023-28732
CVE ID: CVE-2023-28733 State: PUBLISHED Published: 2023-03-30T11:27:40.884Z Last Updated: 2025-02-11T19:17:17.402Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: AcyMailing Products: Newsletter Plugin for Joomla in the Enterprise version Problem Types: CWE-20, CWE-116 Description: AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, exploitable without authentication when access is granted to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plugin Enterprise in versions below 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
rprise in versions below 8.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.acymailing.com/change-log/ - https://www.bugbounty.ch/advisories/CVE-2023-28733
CVE ID: CVE-2023-28736 State: PUBLISHED Published: 2023-08-11T02:36:51.218Z Last Updated: 2024-10-01T20:31:29.903Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) SSD Tools software Problem Types: escalation of privilege, CWE-120 Description: Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html
CVE ID: CVE-2023-28737 State: PUBLISHED Published: 2023-11-14T19:04:41.403Z Last Updated: 2024-08-14T20:43:50.532Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Aptio* V UEFI Firmware Integrator Tools Problem Types: escalation of privilege, CWE-665 Description: Improper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2023-28738 State: PUBLISHED Published: 2024-01-19T20:03:10.260Z Last Updated: 2024-10-21T11:17:46.512Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel NUC BIOS firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01009.html
CVE ID: CVE-2023-28739 State: PUBLISHED Published: 2024-02-14T13:37:53.192Z Last Updated: 2024-08-08T13:37:53.621Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Chipset Driver Software Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00928.html
CVE ID: CVE-2023-28740 State: PUBLISHED Published: 2023-11-14T19:05:13.791Z Last Updated: 2024-10-15T17:51:10.905Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QAT drivers for Windows - HW Version 2.0 Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.
- CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.html
CVE ID: CVE-2023-28741 State: PUBLISHED Published: 2023-11-14T19:06:16.079Z Last Updated: 2024-08-02T13:51:37.297Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) QAT drivers for Windows - HW Version 1.0 Problem Types: escalation of privilege, CWE-120 Description: Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.html
CVE ID: CVE-2023-28742 State: PUBLISHED Published: 2023-05-03T14:34:38.621Z Last Updated: 2025-02-03T18:41:56.994Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-78 Description: When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000132972
CVE ID: CVE-2023-28743 State: PUBLISHED Published: 2024-01-19T20:03:10.872Z Last Updated: 2025-06-17T14:49:08.324Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel NUC BIOS firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01009.html
CVE ID: CVE-2023-28744 State: PUBLISHED Published: 2023-07-19T13:16:38.150Z Last Updated: 2025-11-04T19:15:55.860Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigger the reuse of previously freed memory by manipulating form fields of a specific type. This can lead to memory corruption and arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible
ker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1739
CVE ID: CVE-2023-28745 State: PUBLISHED Published: 2024-02-14T13:38:11.529Z Last Updated: 2024-08-12T20:19:45.318Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) QSFP+ Configuration Utility software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00974.html
CVE ID: CVE-2023-28746 State: PUBLISHED Published: 2024-03-14T16:45:50.370Z Last Updated: 2025-04-26T20:03:13.216Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Atom(R) Processors Problem Types: information disclosure, CWE-1342 Description: Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa
chment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/ - http://www.openwall.com/lists/oss-security/2024/03/12/13 - https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html - https://lists.debian.org/debian-lts-announce/
/13 - https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
CVE ID: CVE-2023-28747 State: PUBLISHED Published: 2023-11-22T13:06:31.080Z Last Updated: 2024-08-29T19:14:09.323Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: codeboxr Products: CBX Currency Converter Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in codeboxr CBX Currency Converter plugin <= 3.0.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cbcurrencyconverter/wordpress-cbx-currency-converter-plugin-3-0-3-cross-site-request-forgery-csrf?_s_id=cve