Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24488 State: PUBLISHED Published: 2023-07-10T20:41:31.248Z Last Updated: 2024-10-25T19:51:19.071Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Citrix Products: Citrix ADC and Citrix Gateway Problem Types: CWE-79 Description: Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488
CVE ID: CVE-2023-24489 State: PUBLISHED Published: 2023-07-10T21:11:39.479Z Last Updated: 2025-10-21T23:05:43.859Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Citrix Products: Citrix ShareFile Storage Zones Controller Problem Types: CWE-284 Description: A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-s
- CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489
CVE ID: CVE-2023-24490 State: PUBLISHED Published: 2023-07-10T21:06:05.934Z Last Updated: 2024-10-23T17:36:56.196Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Citrix Products: Virtual Delivery Agents for Windows for CVAD and Citrix DaaS Security, Virtual Delivery Agents for Linux for CVAD and Citrix DaaS Security Problem Types: CWE-284 Description: Users with only access to launch VDA applications can launch an unauthorized desktop Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX559370/windows-and-linux-virtual-delivery-agent-for-cvad-and-citrix-daas-security-bulletin-cve2023
citrix.com/article/CTX559370/windows-and-linux-virtual-delivery-agent-for-cvad-and-citrix-daas-security-bulletin-cve202324490
CVE ID: CVE-2023-24491 State: PUBLISHED Published: 2023-07-11T21:13:05.305Z Last Updated: 2024-11-07T15:20:58.467Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Citrix Products: Citrix Secure Access client for Windows Problem Types: CWE-269 Description: A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/artic
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491
CVE ID: CVE-2023-24492 State: PUBLISHED Published: 2023-07-11T21:36:52.664Z Last Updated: 2024-11-07T15:18:05.001Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Citrix Products: Citrix Secure Access client for Ubuntu Problem Types: CWE-94 Description: A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX564169/citrix-secure-access-client-for-ubuntu-securit
Vulnrichment: References: - https://support.citrix.com/article/CTX564169/citrix-secure-access-client-for-ubuntu-security-bulletin-for-cve202324492
CVE ID: CVE-2023-24493 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T14:57:24.584Z Vendors: n/a Products: Tenable.sc Problem Types: Formula injection Description: A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2023-03
CVE ID: CVE-2023-24494 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-04-01T14:56:19.961Z Vendors: n/a Products: Tenable.sc Problem Types: Stored Cross Site Scripting (XSS) Description: A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's browser session. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2023-03
CVE ID: CVE-2023-24495 State: PUBLISHED Published: 2023-01-25T00:00:00.000Z Last Updated: 2025-03-27T19:59:14.608Z Vendors: n/a Products: Tenable.sc Problem Types: Server Side Request Forgery (SSRF) Description: A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. A privileged, authenticated remote attacker could interact with external and internal services covertly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2023-03
CVE ID: CVE-2023-24496 State: PUBLISHED Published: 2023-07-06T14:53:31.258Z Last Updated: 2025-11-04T19:14:41.808Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Milesight Products: MilesightVPN Problem Types: CWE-80 Description: Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the name field of the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
ame field of the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704
CVE ID: CVE-2023-24497 State: PUBLISHED Published: 2023-07-06T14:53:31.342Z Last Updated: 2025-11-04T19:14:42.892Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Milesight Products: MilesightVPN Problem Types: CWE-80 Description: Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-crafted HTTP request can lead to arbitrary Javascript code injection. An attacker can send an HTTP request to trigger these vulnerabilities.This XSS is exploited through the remote_subnet field of the database Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
emote_subnet field of the database Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1704
CVE ID: CVE-2023-24498 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-18T15:47:36.542Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Netgear Products: ProSAFE 24 Port 10/100 FS726TP Problem Types: CWE-522 Description: An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24499 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T18:54:18.081Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Butterfly Button Products: Butterfly Button plugin Problem Types: Leaves usage trail on user's device Description: Butterfly Button plugin may leave traces of its use on user's device. Since it is used for reporting domestic problems, this may lead to spouse knowing about its use. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24500 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T15:39:59.922Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Electra Products: Electra Central AC unit Problem Types: Adjacent attacker may cause the unit to load unauthorized FW Description: Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24501 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T16:44:34.146Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Electra Products: Electra Central AC unit Problem Types: Hardcoded Credentials Description: Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24502 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T15:29:40.773Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Electra Products: Electra Central AC unit Problem Types: Easily calculated password Description: Electra Central AC unit – The unit opens an AP with an easily calculated password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24503 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T15:18:56.447Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Electra Products: OSK201 Problem Types: Adjacent attacker may cause the unit to load unauthorized FW Description: Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24504 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T15:17:01.343Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Electra Products: Central AC unit Problem Types: Adjacent attacker may cause the unit to connect to unauthorized update server Description: Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24505 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:26:00.255Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Milesight Products: NCR/Camera Problem Types: CWE-200 Description: Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24506 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:22:14.759Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Milesight Products: NCR/Camera Problem Types: CWE-522 Description: Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24507 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T15:16:54.027Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AgilePoint Products: NX Problem Types: Insecure File Upload Description: AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-24508 State: PUBLISHED Published: 2023-01-24T22:32:58.249Z Last Updated: 2025-03-27T20:20:04.220Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L) Vendors: Baicells Products: Nova 227, Nova 233, Nova 246 Problem Types: CWE-79 Description: Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin
w have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG - https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf
CVE ID: CVE-2023-24509 State: PUBLISHED Published: 2023-04-13T00:00:00.000Z Last Updated: 2025-02-07T15:42:09.265Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Arista Networks Products: Arista EOS Problem Types: CWE-269 Description: On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentials are required in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ired in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/16985-security-advisory-0082
CVE ID: CVE-2023-24510 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T17:46:55.549Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Arista Networks Products: Arista EOS Problem Types: CWE-755 Description: On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/17445-security-advisory-0087
CVE ID: CVE-2023-24511 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-07T15:47:42.435Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Arista Networks Products: EOS Problem Types: CWE-401 Description: On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system. Addit
r processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/17239-security-advisory-0084
CVE ID: CVE-2023-24512 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-02-03T19:15:59.467Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Arista Networks Products: Terminattr Problem Types: CWE-284 Description: On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent (referred to as the TerminAttr agent) is enabled and gNMI access is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used wh
ccess is configured on the agent. Note: This gNMI over the Streaming Telemetry Agent scenario is mostly commonly used when streaming to a 3rd party system and is not used by default when streaming to CloudVision Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/17250-security-advisory-0086
CVE ID: CVE-2023-24513 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-07T15:47:10.611Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Arista Networks Products: EOS Problem Types: CWE-126 Description: On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en
fic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085
CVE ID: CVE-2023-24514 State: PUBLISHED Published: 2023-08-22T13:02:10.102Z Last Updated: 2024-09-27T21:57:03.260Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in Visual Console Module of Pandora FMS could be used to hijack admin users session cookie values, carry out phishing attacks, etc. This issue affects Pandora FMS v767 version and prior versions on all platforms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-24515 State: PUBLISHED Published: 2023-08-22T12:59:25.617Z Last Updated: 2024-10-03T13:29:38.308Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in API checker of Pandora FMS. Application does not have a check on the URL scheme used while retrieving API URL. Rather than validating the http/https scheme, the application allows other scheme such as file, which could allow a malicious user to fetch internal file content. This issue affects Pandora FMS v767 version and prior versions on all platforms. Additional Analyst Notes:
ile content. This issue affects Pandora FMS v767 version and prior versions on all platforms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://gist.github.com/damodarnaik/9cc76c6b320510c34a0a668bd7439f7b
CVE ID: CVE-2023-24516 State: PUBLISHED Published: 2023-08-22T13:03:39.181Z Last Updated: 2024-09-06T14:13:21.668Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in the Pandora FMS Special Days component allows an attacker to use it to steal the session cookie value of admin users easily with little user interaction. This issue affects Pandora FMS v767 version and prior versions on all platforms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exp
gram Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://gist.github.com/Argonx21/5ef4d123c975285b3a42835c8e81603a
CVE ID: CVE-2023-24517 State: PUBLISHED Published: 2023-08-22T13:05:17.554Z Last Updated: 2024-10-03T13:29:05.911Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attacker to make make use of this issue ( unrestricted file upload ) to execute arbitrary system commands. This issue affects Pandora FMS v767 version and prior versions on all platforms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/commo
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/ - https://gist.github.com/Argonx21/9ab62f6e5d8bc6d39b8a338426af121e
CVE ID: CVE-2023-24518 State: PUBLISHED Published: 2023-10-03T10:41:42.777Z Last Updated: 2024-09-23T14:57:35.149Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: Artica PFMS Products: Pandora FMS Problem Types: CWE-352 Description: A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions on all platforms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-expos
am Container: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2023-24519 State: PUBLISHED Published: 2023-07-06T14:53:30.365Z Last Updated: 2025-11-04T19:14:43.973Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-77 Description: Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5. A specially-crafted network request can lead to command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is in the ping tool utility. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1706