Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
be further exploited to read the encrypted flash content in cleartext format or execute stub code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://espressif.com - https://www.espressif.com/sites/default/files/advisory_downloads/AR2023-005%20Security%20Advisory%20Concerning%20Bypassing%20Secure%20Boot%20and%20Flash%20Encryption%20Using%20EMFI%20EN.pdf
CVE ID: CVE-2023-35823 State: PUBLISHED Published: 2023-06-18T00:00:00.000Z Last Updated: 2025-05-05T15:57:10.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 - https://lore.kernel.org/all/49bb0b6a-e669-d4e7-d742-a19d2763e947%40xs4all.nl/ - https://lore.kernel.org/lkml/20230318085023.832510-1-zyytlz.wz%40163.com/t/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
lkml/20230318085023.832510-1-zyytlz.wz%40163.com/t/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=30cf57da176cca80f11df0d9b7f71581fe601389 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://security.netapp.com/advisory/ntap-20230803-0002/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
CVE ID: CVE-2023-35824 State: PUBLISHED Published: 2023-06-18T00:00:00.000Z Last Updated: 2025-05-05T15:57:00.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 - https://lore.kernel.org/all/49bb0b6a-e669-d4e7-d742-a19d2763e947%40xs4all.nl/ - https://lore.kernel.org/lkml/20230318081506.795147-1-zyytlz.wz%40163.com/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id
0318081506.795147-1-zyytlz.wz%40163.com/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5abda7a16698d4d1f47af1168d8fa2c640116b4a - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://security.netapp.com/advisory/ntap-20230803-0002/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
CVE ID: CVE-2023-35825 State: REJECTED Published: N/A Last Updated: 2023-06-19T00:00:00 Description: No description available.
CVE ID: CVE-2023-35826 State: PUBLISHED Published: 2023-06-18T00:00:00 Last Updated: 2024-08-02T16:30:45.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 - https://lore.kernel.org/all/a4dafa22-3ee3-dbe1-fd50-fee07883ce1a%40xs4all.nl/ - https://lore.kernel.org/linux-arm-kernel/20230308032333.1893394-1-zyytlz.wz%40163.com/T/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50d0
33.1893394-1-zyytlz.wz%40163.com/T/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50d0a7aea4809cef87979d4669911276aa23b71f - https://security.netapp.com/advisory/ntap-20230803-0002/
CVE ID: CVE-2023-35827 State: PUBLISHED Published: 2023-06-18T00:00:00 Last Updated: 2024-08-02T16:30:45.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/netdev/msg886947.html - https://lore.kernel.org/lkml/cca0b40b-d6f8-54c7-1e46-83cb62d0a2f1%40huawei.com/T/ - https://security.netapp.com/advisory/ntap-20230803-0003/ - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE ID: CVE-2023-35828 State: PUBLISHED Published: 2023-06-18T00:00:00 Last Updated: 2024-10-21T16:00:11.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 - https://lore.kernel.org/all/20230327121700.52d881e0%40canb.auug.org.au/ - https://lore.kernel.org/lkml/CAJedcCwkuznS1kSTvJXhzPoavcZDWNhNMshi-Ux0spSVRwU=RA%40mail.gmail.com/T/ - https://git.kernel.org/pub/scm/linux/kernel/git/tor
cCwkuznS1kSTvJXhzPoavcZDWNhNMshi-Ux0spSVRwU=RA%40mail.gmail.com/T/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2b947f8769be8b8181dc795fd292d3e7120f5204 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://security.netapp.com/advisory/ntap-20230803-0002/
CVE ID: CVE-2023-35829 State: PUBLISHED Published: 2023-06-18T00:00:00 Last Updated: 2024-08-02T16:30:45.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2 - https://lore.kernel.org/all/a4dafa22-3ee3-dbe1-fd50-fee07883ce1a%40xs4all.nl/ - https://lore.kernel.org/lkml/20230307173900.1299387-1-zyytlz.wz%40163.com/T/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3228cec23b8b29215e1809
z.wz%40163.com/T/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3228cec23b8b29215e18090c6ba635840190993d - https://security.netapp.com/advisory/ntap-20230803-0002/
CVE ID: CVE-2023-35830 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T16:27:11.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: STW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module DeploymentPackage_v3.03r0-Impala and DeploymentPackage_v3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackage_v3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for authentication, giving an attacker arbitrary remote code execution over LTE / 4G network via SMS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.stw-mobile-machines.com/fileadmin/user_u
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.stw-mobile-machines.com/fileadmin/user_upload/content/STW/PSIRT/STW-IR-23-001.pdf - https://www.stw-mobile-machines.com/psirt/
CVE ID: CVE-2023-35833 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-10-30T19:36:25.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be (re)entered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the vendor originally reported this as a security issue but then reconsidered because of the requirement for Admin access in order to change the configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
ss in order to change the configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ysoft.com - https://www.ysoft.com/en/legal/ldaps-encryption-downgrade-attack-vulnerability
CVE ID: CVE-2023-35835 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-05-30T14:20:46.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi network provided has no network authentication (such as an encryption key) and persists permanently, including after enrollment and setup is complete. The WiFi network serves a web-based configuration utility, as well as an unauthenticated ModBus protocol interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://yougottahackthat.com
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://yougottahackthat.com/blog/ - https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/ - https://www.solaxpower.com/downloads/ - https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication
CVE ID: CVE-2023-35836 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-06-11T16:49:47.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://yougottahackthat.com/blog/ - https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/ - https://www.
https://yougottahackthat.com/blog/ - https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/ - https://www.solaxpower.com/downloads/ - https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication
CVE ID: CVE-2023-35837 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-06-16T19:52:03.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as the WiFi SSID name. No routine is in place to force a change to this password on first use or bring its default state to the attention of the user. Once authenticated, an attacker can reconfigure the device or upload new firmwar
ult state to the attention of the user. Once authenticated, an attacker can reconfigure the device or upload new firmware, both of which can lead to Denial of Service, code execution, or Escalation of Privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://yougottahackthat.com/blog/ - https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/ - https://www.solaxpower.com/downloads/ - https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication
CVE ID: CVE-2023-35838 State: PUBLISHED Published: 2023-08-09T00:00:00 Last Updated: 2024-10-18T19:02:08.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard. Additional Analyst Notes: - CVE Progr
calNet attack resulting in the blocking of traffic" rather than to only WireGuard. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wireguard.com - https://tunnelcrack.mathyvanhoef.com/details.html - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0015
CVE ID: CVE-2023-35839 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-08-02T16:30:45.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/noear/solon/issues/145 - https://github.com/noear/solon/compare/v2.3.2...v2.3.3
CVE ID: CVE-2023-35840 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T20:06:00.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: _joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Studio-42/elFinder/security/advisories/GHSA-wm5g-p99q-66g4 - https://github.com/Studio-42/elFinder/commit/bb9aaa7b096a1b83f2f85657c43f12131ece2891 - https://github.com/sectroyer/CVEs/tree/main/CVE-2023-35840 - https://github.com/afine-com/CVE-2023-35840
CVE ID: CVE-2023-35841 State: PUBLISHED Published: 2024-05-14T14:56:14.743Z Last Updated: 2025-07-28T20:49:33.663Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Phoenix Products: WinFlash Driver Problem Types: CWE-732, CWE-782 Description: Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which allows for modification of system firmware.This issue affects WinFlash Driver: before 4.5.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/ - https://blogs.vmware.com/security/2023/10/hunting
tps://phoenixtech.com/phoenix-security-notifications/cve-2023-35841/ - https://blogs.vmware.com/security/2023/10/hunting-vulnerable-kernel-drivers.html - https://jvn.jp/en/vu/JVNVU93886750/index.html
CVE ID: CVE-2023-35843 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T20:10:03.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the server, including configuration files, source code, and other sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisory.dw1.io/60 - https://github.com/nocodb/nocodb
Program Container: - CISA ADP Vulnrichment: References: - https://advisory.dw1.io/60 - https://github.com/nocodb/nocodb/blob/f7ee7e3beb91d313a159895d1edc1aba9d91b0bc/packages/nocodb/src/controllers/attachments.controller.ts#L55-L66 - https://github.com/nocodb/nocodb/blob/6decfa2b20c28db9946bddce0bcb1442b683ecae/packages/nocodb/src/lib/controllers/attachment.ctl.ts#L62-L74
CVE ID: CVE-2023-35844 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T20:12:03.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisory.dw1.io/59 - https://github.com/lightdash/lightdash/commit/fcc808c84c2cc3afb343063e32a49440d32a553c - https://github.com/lightdash/lightdash/compare/0.510.2...0.510.3 - https://github.com/lightdash/lightdash/pull/5090
CVE ID: CVE-2023-35845 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T15:00:22.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program. This occurs because many files are installed as world-writable on Linux, ignoring umask, even when these files are installed as root. Miniconda is also affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://uponfurtherinvestigation.blogspot.com/2023/06/cve-2023-35845-anaconda3-creates.html
CVE ID: CVE-2023-35846 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T20:14:29.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/virtualsquare/picotcp/commit/d561990a358899178115e156871cc054a1c55ffe
CVE ID: CVE-2023-35847 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T17:09:07.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/virtualsquare/picotcp/commit/eaf166009e44641e6570c576ba071217f100fd99
CVE ID: CVE-2023-35848 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T17:07:57.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/virtualsquare/picotcp/pull/15/files
CVE ID: CVE-2023-35849 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T17:06:44.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401
CVE ID: CVE-2023-35850 State: PUBLISHED Published: 2023-09-18T02:30:35.609Z Last Updated: 2024-09-25T15:45:21.497Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: SUNNET Products: WMPro Problem Types: CWE-78 Description: SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-737
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7373-4ef46-1.html
CVE ID: CVE-2023-35851 State: PUBLISHED Published: 2023-09-18T02:33:59.550Z Last Updated: 2024-09-25T15:44:38.562Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SUNNET Products: WMPro Problem Types: CWE-89 Description: SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-7372-3994a-1.html
CVE ID: CVE-2023-35852 State: PUBLISHED Published: 2023-06-19T00:00:00.000Z Last Updated: 2025-11-03T19:28:15.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolute or relative directory traversal, and lead to write access to a local filesystem. This is addressed in 6.0.13 by requiring allow-absolute-filenames and allow-write (in the datasets rules configuration section) if an installation requires traversal/writing in this situation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
al/writing in this situation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OISF/suricata/compare/suricata-6.0.12...suricata-6.0.13 - https://github.com/OISF/suricata/commit/aee1523b4591430ebed1ded0bb95508e6717a335 - https://github.com/OISF/suricata/commit/735f5aa9ca3b28cfacc7a443f93a44387fbacf17 - https://www.stamus-networks.com/stamus-labs
CVE ID: CVE-2023-35853 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T17:04:00.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OISF/suricata/compare/suricata-6.0.12...suricata-6.0.13 - https://www.stamus-networks.com/stamus-labs - https://github.com/OISF/suricata/commit/b95bbcc66db526ffcc880eb439dbe8abc87a81da
CVE ID: CVE-2023-35854 State: PUBLISHED Published: 2023-06-20T00:00:00 Last Updated: 2024-08-02T16:30:45.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domain controller session token for identity spoofing, thereby achieving the privileges of the domain controller administrator. NOTE: the vendor's perspective is that they have "found no evidence or detail of a security vulnerability." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.manageengine.com - https://github.com/970198175/Simply-use
CVE ID: CVE-2023-35855 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T16:58:14.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MikeIsAStar/Counter-Strike-Remote-Code-Execution
CVE ID: CVE-2023-35856 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T16:57:22.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machine via a crafted packet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MikeIsAStar/Mario-Kart-Wii-Remote-Code-Execution
CVE ID: CVE-2023-35857 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T16:56:22.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Siren Investigate before 13.2.2, session keys remain active even after logging out. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.siren.io/c/announcements - https://docs.support.siren.io/siren-platform-user-guide/13.2/release-notes.html