Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-23563 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:05:21.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database content via SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.geomatika.fr/isigeo-web/ - https://github.com/Orange-Cyberdefense/CVE-repository - https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
CVE ID: CVE-2023-23564 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T14:04:24.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to execute commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.geomatika.fr/isigeo-web/ - https://github.com/Orange-Cyberdefense/CVE-repository - https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
CVE ID: CVE-2023-23565 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-02T19:34:38.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to retrieve PHP files from the server via Local File Inclusion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.geomatika.fr/isigeo-web/ - https://github.com/Orange-Cyberdefense/CVE-repository - https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_geomatika_isigeoweb.md
CVE ID: CVE-2023-23566 State: PUBLISHED Published: 2023-01-13T00:00:00.000Z Last Updated: 2025-04-07T15:33:54.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to add an account to any third-party webmail service (or add an account to Outlook or Gmail, etc.) with IMAP or POP3 without any verification code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/umz-cert/vulnerabilities/issues/1 - https://github.com/umz-cert/vulnerabilitys/blob/patch-1/Axigen%20Mail%20Server%2010.3.3.52%202-St
erabilities/issues/1 - https://github.com/umz-cert/vulnerabilitys/blob/patch-1/Axigen%20Mail%20Server%2010.3.3.52%202-Step%20verification - https://www.axigen.com/mail-server/download/ - https://www.axigen.com/documentation/2-step-verification-two-factor-authentication-for-webmail-p69140479
CVE ID: CVE-2023-23567 State: PUBLISHED Published: 2023-09-25T15:22:35.898Z Last Updated: 2024-08-02T10:35:33.412Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Accusoft Products: ImageGear Problem Types: CWE-119 Description: A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1729
CVE ID: CVE-2023-23568 State: PUBLISHED Published: 2023-07-25T01:31:59.175Z Last Updated: 2024-10-17T13:05:39.755Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Gallagher Products: Command Centre Problem Types: CWE-285 Description: Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects Command Centre: vEL 8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior Additional Analyst Notes: - CVE Program
2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and prior Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-23568
CVE ID: CVE-2023-23569 State: PUBLISHED Published: 2023-05-10T13:16:41.468Z Last Updated: 2025-01-27T18:10:56.824Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: escalation of privilege, CWE-121 Description: Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel
Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html
CVE ID: CVE-2023-23570 State: PUBLISHED Published: 2023-12-18T21:59:16.732Z Last Updated: 2024-11-27T20:27:18.000Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Gallagher Products: Command Centre Problem Types: CWE-602 Description: Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undefined behavior. This issue affects: Gallagher Command Centre 8.90 prior to vEL8.90.1620 (MR2), all versions of 8.80 and prior. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.gallagher.com/Security-Advisories/CVE-2023-23570
CVE ID: CVE-2023-23571 State: PUBLISHED Published: 2023-07-06T14:53:34.762Z Last Updated: 2024-08-02T10:35:33.260Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-126 Description: An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1696
CVE ID: CVE-2023-23572 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T15:51:26.574Z Vendors: SEIKO EPSON CORPORATION Products: SEIKO EPSON printers/network interface Web Config Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. [Note] Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers/network interface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web
rface via a web browser. According to SEIKO EPSON CORPORATION, it is also called as Remote Manager in some products. Web Config is pre-installed in some printers/network interface provided by SEIKO EPSON CORPORATION. For the details of the affected product names/model numbers, refer to the information provided by the vendor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.epson.jp/support/misc_t/230308_oshirase.htm - https://jvn.jp/en/jp/JVN82424996/
CVE ID: CVE-2023-23573 State: PUBLISHED Published: 2023-05-10T13:17:24.919Z Last Updated: 2025-01-24T17:48:22.480Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Unite(R) android application Problem Types: information disclosure, CWE-284 Description: Improper access control in the Intel(R) Unite(R) android application before Release 17 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00825.html
CVE ID: CVE-2023-23574 State: PUBLISHED Published: 2023-08-09T08:39:13.045Z Last Updated: 2024-09-20T11:59:12.084Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Nozomi Networks Products: Guardian, CMC Problem Types: CWE-89 Description: A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the alerts_count component, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application. Authenticated users may be able to extract arbitrary information from the DBMS in an uncontrolled way, alter its structure and data, and/or affect its availability. Additional Analyst
n from the DBMS in an uncontrolled way, alter its structure and data, and/or affect its availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:3-01
CVE ID: CVE-2023-23575 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T15:46:14.669Z Vendors: Contec CO.,LTD. Products: CONPROSYS IoT Gateway products Problem Types: Improper access control Description: Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obtaining the network information of the product. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M
ier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/api/downloa
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf - https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware - https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware - https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware - https://jvn.jp/en/vu/JVNVU96198617/
CVE ID: CVE-2023-23576 State: PUBLISHED Published: 2023-12-18T21:59:38.164Z Last Updated: 2024-08-02T10:35:33.566Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Gallagher Products: Command Centre Server Problem Types: CWE-696 Description: Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision. This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 (MR2), 8.80 prior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and
ior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and prior. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2023-23576
CVE ID: CVE-2023-23577 State: PUBLISHED Published: 2023-08-11T02:37:05.948Z Last Updated: 2024-10-10T15:35:53.815Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: ITE Tech consumer infrared drivers for Intel(R) NUC Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-
tainer: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html
CVE ID: CVE-2023-23578 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T16:52:34.243Z Vendors: Seiko Solutions Inc. Products: SkyBridge MB-A200 Problem Types: Improper access control Description: Improper access control vulnerability in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier allows a remote unauthenticated attacker to connect to the product's ADB port. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.seiko-sol.co.jp/archives/73969/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/ - https://www.
/skybridge_download/mb-a100/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/ - https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/ - https://jvn.jp/en/jp/JVN40604023/
CVE ID: CVE-2023-23579 State: PUBLISHED Published: 2023-04-20T18:16:47.878Z Last Updated: 2025-01-16T21:35:44.577Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Datakit Products: CrossCAD/Ware_x64 library 0 Problem Types: CWE-787 Description: Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14
CVE ID: CVE-2023-23580 State: PUBLISHED Published: 2023-05-10T13:16:42.050Z Last Updated: 2025-01-27T18:10:45.681Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: escalation of privilege, CWE-121 Description: Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0
iner: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html
CVE ID: CVE-2023-23581 State: PUBLISHED Published: 2023-10-12T15:27:53.612Z Last Updated: 2024-08-02T10:35:33.372Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SoftEther VPN Products: SoftEther VPN Problem Types: CWE-125 Description: A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1741
CVE ID: CVE-2023-23582 State: PUBLISHED Published: 2023-01-30T22:08:49.317Z Last Updated: 2025-01-16T21:58:27.182Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Snap One Products: Wattbox WB-300-IP-3 Problem Types: CWE-122 Description: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to execute arbitrary code or crash the device remotely. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03
CVE ID: CVE-2023-23583 State: PUBLISHED Published: 2023-11-14T19:04:24.927Z Last Updated: 2025-02-13T16:44:10.560Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure, escalation of privilege, denial of service, CWE-1281 Description: Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/ww
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html - http://www.openwall.com/lists/oss-security/2023/11/14/8 - http://www.openwall.com/lists/oss-security/2023/11/14/6 - http://www.openwall.com/lists/oss-security/2023/11/14/4 - http://www.openwall.com/lists/oss-security/2023/11/14/5 - http://www.openwall.com/lists/oss-security/2023/11/14/7 - http://www.openwall.com/lists/oss-security/2023/11/14/9 - https://security.netapp.com/advisory/ntap-20231116-0015/ - https://www.debian.org/security/2023/dsa-5563 - https://lists.debian.org/debian-lts-announce/2023/12/msg00012.html
CVE ID: CVE-2023-23584 State: PUBLISHED Published: 2023-12-18T21:59:58.271Z Last Updated: 2024-08-02T10:35:33.268Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Gallagher Products: Command Centre Server Problem Types: CWE-204 Description: An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of items that would not otherwise be viewable. This issue affects: Gallagher Command Centre 8.70 prior to vEL8.70.1787 (MR2), 8.60 prior to vEL8.60.2039 (MR4), all version of 8.50 and prior. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/
sion of 8.50 and prior. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2023-23584
CVE ID: CVE-2023-23585 State: PUBLISHED Published: 2023-07-13T10:54:59.559Z Last Updated: 2025-03-05T18:50:52.406Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Honeywell Products: Experion Server, Experion Station, Engineering Station, Direct Station Problem Types: CWE-787 Description: Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process.honeywell.com
CVE ID: CVE-2023-23586 State: PUBLISHED Published: 2023-02-17T12:25:35.000Z Last Updated: 2025-03-12T20:08:30.870Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Linux Products: Linux Kernel Problem Types: CWE-416 Description: Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_threaded to determine if the current process is single-threaded, but this call does not consider io_uring's io_worker threads, thus it is possible to insert a time namespace's vvar page to process's memory space via a page fault. When this time namespace is destroyed, the vvar p
time namespace's vvar page to process's memory space via a page fault. When this time namespace is destroyed, the vvar page is also freed, but not removed from the process' memory, and a next page allocated by the kernel will be still available from the user-space process and can leak memory contents via this (read-only) use-after-free vulnerability. We recommend upgrading past version 5.10.161 or commit 788d0824269bef539fe31a785b1517882eafed93 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring
- CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring?h=linux-5.10.y&id=788d0824269bef539fe31a785b1517882eafed93 - https://kernel.dance/#788d0824269bef539fe31a785b1517882eafed93
CVE ID: CVE-2023-23588 State: PUBLISHED Published: 2023-04-11T09:03:01.130Z Last Updated: 2024-10-15T17:12:13.841Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: SIMATIC IPC1047, SIMATIC IPC1047E, SIMATIC IPC647D, SIMATIC IPC647E, SIMATIC IPC847D, SIMATIC IPC847E Problem Types: CWE-200 Description: A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC647D (All versions), SIMATIC IPC647E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC847D (All versions), SIMATIC IPC847E (All
versions with maxView Storage Manager < 4.09.00.25611 on Windows), SIMATIC IPC847D (All versions), SIMATIC IPC847E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows). The Adaptec Maxview application on affected devices is using a non-unique TLS certificate across installations to protect the communication from the local browser to the local application. A local attacker may use this key to decrypt intercepted local traffic between the browser and the application and could perform a man-in-the-middle attack in order to modify data in transit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcer
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-511182.pdf
CVE ID: CVE-2023-23589 State: PUBLISHED Published: 2023-01-14T00:00:00.000Z Last Updated: 2025-04-07T18:14:11.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a protocol, aka TROVE-2022-002. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.7/ReleaseNotes - https://gitlab.torproject.org/tpo/core/tor/-/issues/40730 - https://gitlab.torproject.org/tpo/core/tor/-/commit/a282145b3634547ab84ccd959d0537c021ff7ffc - https://www.debian.org/security/2023/d
b.torproject.org/tpo/core/tor/-/commit/a282145b3634547ab84ccd959d0537c021ff7ffc - https://www.debian.org/security/2023/dsa-5320 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMY4FWXYKP3MDXTZ3EJ7XJVGBCKBK2XL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYOLTP6HQO2HPXUYKOR7P5YYYN7CINQQ/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00026.html - https://security.gentoo.org/glsa/202305-11