Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d identifier of this vulnerability is VDB-221087. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.221087 - https://vuldb.com/?ctiid.221087 - https://github.com/qianshuidewajueji/poc/blob/main/gpac/mp3_dmx_process_poc3 - https://github.com/advisories/GHSA-w52x-cp47-xhhw - https://github.com/gpac/gpac/releases/tag/v2.2.1 - https://github.com/gpac/gpac/commit/851560e3dc8155d45ace4b0d77421f241ed71dc4 - https://github.com/gpac/gpac/issues/2396
CVE ID: CVE-2023-0842 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-09-24T11:46:07.112Z Vendors: n/a Products: xml2js Problem Types: Prototype Pollution Description: xml2js version 0.4.23 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the __proto__ property to be edited. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/myers/ - https://github.com/Leonidas-from-XIV/node-xml2js/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00013.html - https://github.com/
eonidas-from-XIV/node-xml2js/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00013.html - https://github.com/Leonidas-from-XIV/node-xml2js/releases/tag/0.6.2
CVE ID: CVE-2023-0844 State: PUBLISHED Published: 2023-03-13T16:03:35.583Z Last Updated: 2025-02-27T15:48:29.391Z Vendors: Unknown Products: Namaste! LMS Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8d8e5852-3787-47f9-9931-8308bb81beb1
CVE ID: CVE-2023-0845 State: PUBLISHED Published: 2023-03-09T15:14:26.581Z Last Updated: 2025-02-28T16:24:23.430Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: HashiCorp Products: Consul, Consul Enterprise Problem Types: CWE-476 Description: Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-06-consul-server-panic-when-ingress-and-api-gate
Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-06-consul-server-panic-when-ingress-and-api-gateways-configured-with-peering-connections/51197 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
CVE ID: CVE-2023-0846 State: PUBLISHED Published: 2023-02-22T18:35:19.051Z Last Updated: 2024-08-02T05:24:34.302Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: The OpenNMS Group , The OpenNMS Group Products: Horizon, Meridian Problem Types: CWE-79 Description: Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information. Users should upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private n
n and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenNMS/opennms/pull/5506/files - https://docs.opennms.com/meridian/2022/releasenotes/changelog.html#releasenotes-changelog-Meridian-2022.1.13
CVE ID: CVE-2023-0847 State: PUBLISHED Published: 2023-02-28T23:16:22.740Z Last Updated: 2025-01-16T21:55:38.471Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Sub-IoT Products: DASH 7 Alliance Protocol stack implementation Problem Types: CWE-787 Description: The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write prior to implementation version 0.5.0. If the protocol has been compiled using default settings, this will only grant the attacker access to allocated but unused memory. However, if it was configured using non-default settings, there is the possibility that exploiting this vulnerabili
ory. However, if it was configured using non-default settings, there is the possibility that exploiting this vulnerability could lead to system crashes and remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-047-13 - https://github.com/Sub-IoT/Sub-IoT-Stack/security/advisories/GHSA-ggxh-88wc-c4fg
CVE ID: CVE-2023-0848 State: PUBLISHED Published: 2023-02-15T21:31:42.916Z Last Updated: 2024-08-02T05:24:34.524Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Netgear Products: WNDR3700v2 Problem Types: CWE-404 Description: A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the component Web Management Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221147. Additional Analyst Notes: - CVE Program Container: Re
ed. The associated identifier of this vulnerability is VDB-221147. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221147 - https://vuldb.com/?ctiid.221147
CVE ID: CVE-2023-0849 State: PUBLISHED Published: 2023-02-15T21:43:27.588Z Last Updated: 2024-08-02T05:24:34.450Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Netgear Products: WNDR3700v2 Problem Types: CWE-77 Description: A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221152. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221152 - https:
ty is VDB-221152. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221152 - https://vuldb.com/?ctiid.221152
CVE ID: CVE-2023-0850 State: PUBLISHED Published: 2023-02-15T21:45:33.719Z Last Updated: 2024-08-02T05:24:34.449Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:N/A:P) Vendors: Netgear Products: WNDR3700v2 Problem Types: CWE-404 Description: A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component Web Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221153 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221
signed to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.221153 - https://vuldb.com/?ctiid.221153
CVE ID: CVE-2023-0851 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-02-10T20:58:11.734Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-122 Description: Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageC
era LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/supp
mation/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0852 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-02-10T21:00:00.954Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-121 Description: Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan.
code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.ca
visory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0853 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-02-10T20:57:39.735Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-121 Description: Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color
*:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.co
-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0854 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-02-10T20:59:18.111Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-122 Description: Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold i
arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://w
.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0855 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-02-10T20:58:44.202Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-121 Description: Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color image
tera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/sup
rmation/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0856 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-02-10T21:00:32.631Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-121 Description: Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLAS
LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support
ion/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0857 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-24T21:10:43.501Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-286 Description: Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifunction Printers and Laser Printers(*) may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and e
rized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-respons
https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0858 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-24T21:11:04.107Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-284 Description: Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger unauthorized access to the product. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C
C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabi
-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0859 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-24T21:11:41.070Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Canon Inc. Products: Canon Office/Small Office Multifunction Printers and Laser Printers Problem Types: CWE-1285 Description: Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier
ageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/support/product-security-latest-news/ - https://psirt.canon/advisory-information/cp2023-001/ - https://canon.jp/support/support-info/230414vulnerability-response - https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
CVE ID: CVE-2023-0860 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T15:34:38.466Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: modoboa Products: modoboa/modoboa-installer Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/64f3ab93-1357-4468-8ff4-52bbcec18cca - https://github.com/modoboa/modoboa-installer/commit/63d92b73f3da6971ae4e13d033d625773ac91085
CVE ID: CVE-2023-0861 State: PUBLISHED Published: 2023-02-16T08:58:43.370Z Last Updated: 2025-03-18T14:54:51.639Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NetModule Products: NSRW Problem Types: CWE-77 Description: NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
4.6.0.105, from 4.7.0.0 before 4.7.0.103. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://share.netmodule.com/public/system-software/4.7/4.7.0.103/NRSW-RN-4.7.0.103.pdf - https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities