Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-34383 State: PUBLISHED Published: 2023-11-03T11:11:51.699Z Last Updated: 2024-09-05T15:16:17.218Z Vendors: weDevs Products: WP Project Manager Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP Project Manager wedevs-project-manager allows SQL Injection.This issue affects WP Project Manager: from n/a through 2.6.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wedevs-project-manager/wordpress-wp-project-manager-task-team-and-project-management-plugin-featuring-kanban-board-and-gantt-charts-pl
-manager/wordpress-wp-project-manager-task-team-and-project-management-plugin-featuring-kanban-board-and-gantt-charts-plugin-2-6-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-34384 State: PUBLISHED Published: 2023-11-13T00:58:11.841Z Last Updated: 2024-08-29T13:34:51.049Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Kebo Products: Kebo Twitter Feed Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Kebo Kebo Twitter Feed plugin <= 1.5.12 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/kebo-twitter-feed/wordpress-kebo-twitter-feed-plugin-1-5-12-cross-site-request-forgery-csrf?_s_id=cve
CVE ID: CVE-2023-34385 State: PUBLISHED Published: 2023-12-20T18:44:48.701Z Last Updated: 2024-08-02T16:10:06.683Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Akshay Menariya Products: Export Import Menus Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Akshay Menariya Export Import Menus.This issue affects Export Import Menus: from n/a through 1.8.0. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/export-import-menus/wordpress-export-import-menus-plugin-1-8-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-34386 State: PUBLISHED Published: 2023-11-09T18:00:48.045Z Last Updated: 2024-09-03T18:45:32.999Z Vendors: WPClever Products: WPC Smart Wishlist for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPClever WPC Smart Wishlist for WooCommerce plugin <= 4.7.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-smart-wishlist/wordpress-wpc-smart-wishlist-for-woocommerce-plugin-4-6-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-34387 State: PUBLISHED Published: 2024-12-13T14:23:37.765Z Last Updated: 2024-12-13T18:42:38.255Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Constant Contact Products: Constant Contact Forms Problem Types: CWE-862 Description: Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/constant-contact-forms/vulnerability/wordpress-constant-contact-forms-plugin-1-14-0-b
tack.com/database/wordpress/plugin/constant-contact-forms/vulnerability/wordpress-constant-contact-forms-plugin-1-14-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-34388 State: PUBLISHED Published: 2023-11-30T16:54:08.503Z Last Updated: 2025-06-03T13:46:12.767Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Schweitzer Engineering Laboratories Products: SEL-451 Problem Types: CWE-287 Description: An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-34389 State: PUBLISHED Published: 2023-11-30T16:54:29.986Z Last Updated: 2024-12-02T17:53:15.070Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H) Vendors: Schweitzer Engineering Laboratories Products: SEL-451 Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to make the system unavailable for an indefinite amount of time. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com
re details. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-34390 State: PUBLISHED Published: 2023-11-30T16:54:54.190Z Last Updated: 2024-08-02T16:10:06.673Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H) Vendors: Schweitzer Engineering Laboratories Products: SEL-451 Problem Types: CWE-20 Description: An input validation vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote authenticated attacker to create a denial of service against the system and locking out services. See product Instruction Manual Appendix A dated 20230830 for more details. Additional Analyst Notes: - CVE Program Container: References: - https://selinc.com/support/security-notifications/external-reports/ -
yst Notes: - CVE Program Container: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-34391 State: PUBLISHED Published: 2023-08-31T15:31:45.454Z Last Updated: 2024-10-01T17:02:03.948Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: Schweitzer Engineering Laboratories Products: SEL-5033 AcSELerator RTAC Software Problem Types: CWE-277 Description: Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulating Configuration File Search Paths. See Instruction Manual Appendix A [Cybersecurity] tag dated 20230522 for more details. This issue affects SEL-5033 AcSELerator RTAC Software: before 1.35.151.21000. Additional Analyst Notes: - C
ore details. This issue affects SEL-5033 AcSELerator RTAC Software: before 1.35.151.21000. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://dragos.com
CVE ID: CVE-2023-34392 State: PUBLISHED Published: 2023-08-31T15:31:57.140Z Last Updated: 2024-10-01T16:59:22.498Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Schweitzer Engineering Laboratories Products: SEL-5037 SEL Grid Configurator Problem Types: CWE-306 Description: A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. Addi
and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://selinc.com/support/security-notifications/external-reports/ - https://www.nozominetworks.com/blog/
CVE ID: CVE-2023-34394 State: PUBLISHED Published: 2023-07-19T21:55:31.934Z Last Updated: 2024-10-28T14:19:36.758Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Keysight Technologies Products: N6845A Geolocation Server Problem Types: CWE-23 Description: In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-ad
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-02
CVE ID: CVE-2023-34395 State: PUBLISHED Published: 2023-06-27T11:36:58.116Z Last Updated: 2024-10-07T18:24:32.391Z Vendors: Apache Software Foundation Products: Apache Airflow ODBC Provider Problem Types: CWE-88 Description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foundation Apache Airflow ODBC Provider. In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of arbitrary dynamic-link libraries, resulting in command execution. Starting version 4.0.0 driver can be set only from the hook constructor. This issue affects Apache Airflow ODBC Pr
tion. Starting version 4.0.0 driver can be set only from the hook constructor. This issue affects Apache Airflow ODBC Provider: before 4.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/31713 - https://lists.apache.org/thread/l26yykftzbhc9tgcph8cso88bc2lqwwd
CVE ID: CVE-2023-34396 State: PUBLISHED Published: 2023-06-14T07:50:59.730Z Last Updated: 2025-02-13T16:55:30.737Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Apache Software Foundation Products: Apache Struts Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwiki.apache.org/confluence/display/WW/S2-064 - http://www.openwall.com/lists/oss-security/2023
t: References: - https://cwiki.apache.org/confluence/display/WW/S2-064 - http://www.openwall.com/lists/oss-security/2023/06/14/3 - https://security.netapp.com/advisory/ntap-20230706-0005/
CVE ID: CVE-2023-34397 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-24T16:38:44.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can trigger that the service will be crashed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34398 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-18T18:07:36.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34399 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-24T16:10:35.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34400 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-18T19:48:07.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34401 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-18T16:08:57.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34402 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-14T17:24:26.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34403 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-18T16:11:03.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to this pins and get access to internal network. A race condition can be acquired and attacker can spoof “UserData” with desirable file path and access it though backup on USB. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34404 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-17T18:52:06.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins and get access to internal network. As a result, by accessing a specific port an attacker can send call request to all registered services in router and achieve command injection vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34406 State: PUBLISHED Published: 2025-02-13T00:00:00.000Z Last Updated: 2025-03-17T18:50:53.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export function of NTG (New Telematics Generation) 6 head units. To perform this attack, local access to USB interface of the car is needed. With prepared data, an attacker can cause the User-Data service to fail. The failed service instance will restart automatically. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securelist.com/mercedes-benz-head-unit-security-research/115218/
CVE ID: CVE-2023-34407 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T17:01:15.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cybir.com/2023/cve/proof-of-concept-checkpoint-learning-harbinger-systems-offline-player-multiple-poc-for-cl-4-0-6-0-2-lfi-excessive-rights/
CVE ID: CVE-2023-34408 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T19:37:53.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: DokuWiki before 2023-04-04a allows XSS via RSS titles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dokuwiki/dokuwiki/pull/3967 - https://www.github.com/splitbrain/dokuwiki/commit/53df38b0e4465894a67a5890f74a6f5f82e827de - https://huntr.dev/bounties/c6119106-1a5c-464c-94dd-ee7c5d0bece0/ - https://github.com/dokuwiki/dokuwiki/compare/release-2023-04-04...release-2023-04-04a
CVE ID: CVE-2023-34409 State: PUBLISHED Published: 2023-06-06T00:00:00 Last Updated: 2025-01-08T16:01:28.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly formalize and sanitize URL paths to reject path traversal attempts. This allows an unauthenticated remote user, when a crafted POST request is made against unauthenticated API routes, to access otherwise protected API routes leading to escalation of privileges and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.percona.c
closure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.percona.com/blog/pmm-authentication-bypass-vulnerability-fixed-in-2-37-1/
CVE ID: CVE-2023-34410 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T16:58:53.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codereview.qt-project.org/c/qt/qtbase/+/477560 - https://codereview.qt-project.org/c/qt/qtbase/+/480002 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3IHQZCEUFV
+/480002 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE3IHQZCEUFVOPWG75V2HDKXNUZBB4FX/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
CVE ID: CVE-2023-34411 State: PUBLISHED Published: 2023-06-05T00:00:00 Last Updated: 2025-01-08T16:54:17.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/netvl/xml-rs/pull/226 - https://github.com/00xc/xml-rs/commit/0f084d45aa53e4a27476961785f59f2bd7d59a9f - https://github.com/netvl/xml-rs/compare/0.8.13...0.8.14 - https://github.com/netvl/xml-rs/commit/c09549a187e62d39d4
9f - https://github.com/netvl/xml-rs/compare/0.8.13...0.8.14 - https://github.com/netvl/xml-rs/commit/c09549a187e62d39d40467f129e64abf32efc35c
CVE ID: CVE-2023-34412 State: PUBLISHED Published: 2023-08-17T13:07:01.697Z Last Updated: 2024-08-02T16:10:06.979Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Red Lion Europe, Helmholz Products: mbNET, mbNET.rokey, REX 200, REX 250 Problem Types: CWE-79 Description: A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2023-012/ - https://cert.vde.com/en/advisories/VDE-2023-029
tainer: References: - https://cert.vde.com/en/advisories/VDE-2023-012/ - https://cert.vde.com/en/advisories/VDE-2023-029/
CVE ID: CVE-2023-34414 State: PUBLISHED Published: 2023-06-19T10:14:49.519Z Last Updated: 2025-02-13T16:55:31.280Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Click-jacking certificate exceptions through rendering lag Description: The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays. If a malicious page elicited user clicks in precise locations immediately before navigating to a site with a certificate error and made the renderer extremely busy at the same time, it could create a gap between when the error page was load
error and made the renderer extremely busy at the same time, it could create a gap between when the error page was loaded and when the display actually refreshed. With the right timing the elicited clicks could land in that gap and activate the button that overrides the certificate error for that site. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1695986 - https://www.mozilla.org/security/advisories/mfsa2023-19/ - https://www.mozilla.org/security/advisories/mfsa2023-20/ - https://www.mozilla.org/security/advisories/mfsa2023-21/ - https://
//www.mozilla.org/security/advisories/mfsa2023-20/ - https://www.mozilla.org/security/advisories/mfsa2023-21/ - https://security.gentoo.org/glsa/202312-03 - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-34415 State: PUBLISHED Published: 2023-06-19T10:40:49.021Z Last Updated: 2025-02-13T16:55:31.907Z Vendors: Mozilla Products: Firefox Problem Types: Site-isolation bypass on sites that allow open redirects to data: urls Description: When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect. This bypassed the site-isolation protections against Spectre-like attacks on sites that host an "open redirect". Firefox no longer follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114. Additional Analyst Notes: - CVE Progr
er follows HTTP redirects to data: URLs. This vulnerability affects Firefox < 114. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1811999 - https://www.mozilla.org/security/advisories/mfsa2023-20/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-34416 State: PUBLISHED Published: 2023-06-19T10:17:18.830Z Last Updated: 2025-02-13T16:55:32.403Z Vendors: Mozilla Products: Firefox ESR, Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12 Description: Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12. Additional Analyst Notes: - CVE Program Container: References: - https://bugz