Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-41254 State: PUBLISHED Published: 2023-10-25T18:32:03.673Z Last Updated: 2025-02-13T17:08:59.704Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to access sensitive user data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213981 - https://support.apple.com/en-us/HT213984 - https://
lnrichment: References: - https://support.apple.com/en-us/HT213981 - https://support.apple.com/en-us/HT213984 - https://support.apple.com/en-us/HT213988 - https://support.apple.com/en-us/HT213985 - https://support.apple.com/en-us/HT213982 - https://support.apple.com/kb/HT213982 - https://support.apple.com/kb/HT213984 - https://support.apple.com/kb/HT213985 - https://support.apple.com/kb/HT213988 - https://support.apple.com/kb/HT213981 - http://seclists.org/fulldisclosure/2023/Oct/23 - http://seclists.org/fulldisclosure/2023/Oct/19 - http://seclists.org/fulldisclosure/2023/Oct/24 - http://seclists.org/fulldisclosure/2023/Oct/26 - http://seclists.org/fulldisclosure/2023/Oct/25
CVE ID: CVE-2023-41255 State: PUBLISHED Published: 2023-10-25T14:10:50.626Z Last Updated: 2024-09-12T14:30:27.445Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rexroth Products: ctrlX HMI Web Panel - WR21 (WR2107), ctrlX HMI Web Panel - WR21 (WR2110), ctrlX HMI Web Panel - WR21 (WR2115) Problem Types: CWE-306 Description: The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network. Additional Analyst Notes: -
hat can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-175607.html
CVE ID: CVE-2023-41256 State: PUBLISHED Published: 2023-09-11T18:55:05.231Z Last Updated: 2025-01-16T21:30:15.820Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Dover Fueling Solutions Products: MAGLINK LX Web Console Configuration Problem Types: CWE-288 Description: Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication bypass that could allow an unauthorized attacker to obtain user access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-01
CVE ID: CVE-2023-41257 State: PUBLISHED Published: 2023-11-27T15:25:09.111Z Last Updated: 2025-11-04T19:21:04.665Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Reader Problem Types: CWE-843 Description: A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially
nto opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1838
CVE ID: CVE-2023-41259 State: PUBLISHED Published: 2023-11-03T00:00:00.000Z Last Updated: 2025-11-04T19:21:05.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.bestpractical.com/release-notes/rt/index.html - https://docs.bestpractical.com/release-notes/rt/5.0.5 - https://docs.bestpractical.com/release-notes/rt/4.4.7
CVE ID: CVE-2023-41260 State: PUBLISHED Published: 2023-11-03T00:00:00.000Z Last Updated: 2025-11-04T19:21:06.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.bestpractical.com/release-notes/rt/index.html - https://docs.bestpractical.com/release-notes/rt/5.0.5 - https://docs.bestpractical.com/release-notes/rt/4.4.7
CVE ID: CVE-2023-41261 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T14:24:24.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md
CVE ID: CVE-2023-41262 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T18:37:46.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV is vulnerable to SQL injection through the sorting parameter, allowing an unauthenticated user to execute arbitrary SQL statements in the context of the application's backend database server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md
CVE ID: CVE-2023-41263 State: PUBLISHED Published: 2023-10-12T00:00:00 Last Updated: 2024-09-18T18:31:47.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md
CVE ID: CVE-2023-41264 State: PUBLISHED Published: 2023-11-28T00:00:00.000Z Last Updated: 2025-06-05T13:56:20.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret fields (for the POST /api/Deployment/ExportConfiguration and POST /api/Deployment endpoints). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.netwrix.com/identity_governance_and
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.netwrix.com/identity_governance_and_administration_solution.html - https://www.synacktiv.com/advisories/usercube-netwrix-multiple-vulnerabilities
CVE ID: CVE-2023-41265 State: PUBLISHED Published: 2023-08-29T00:00:00.000Z Last Updated: 2025-10-30T16:25:59.533Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request. This allows them to send requests that get executed by the backend server hosting the repository application. Thi
quest. This allows them to send requests that get executed by the backend server hosting the repository application. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes - https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801
CVE ID: CVE-2023-41266 State: PUBLISHED Published: 2023-08-29T00:00:00.000Z Last Updated: 2025-10-30T15:32:22.573Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2
requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://community.qlik.com/t5/Release-Notes/tkb-p/ReleaseNotes - https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801
CVE ID: CVE-2023-41267 State: PUBLISHED Published: 2023-09-14T07:46:42.191Z Last Updated: 2025-02-13T17:09:00.280Z Vendors: Apache Software Foundation Products: Apache Airflow HDFS Provider Problem Types: CWE-829 Description: In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1 Additional Analyst Notes: - CVE Program Container: - CISA
ralizing the risk), and fixed the doc strings in version 4.1.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/33813 - https://lists.apache.org/thread/ggthr5pn42bn6wcr25hxnykjzh4ntw7z - http://www.openwall.com/lists/oss-security/2023/09/14/3
CVE ID: CVE-2023-41268 State: PUBLISHED Published: 2023-12-06T03:46:16.110Z Last Updated: 2024-12-02T15:04:06.823Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Open Source Products: Escargot Problem Types: CWE-20 Description: Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Samsung/escargot/pull/1260
CVE ID: CVE-2023-41269 State: REJECTED Published: N/A Last Updated: 2023-08-30T01:14:24.416809Z Description: No description available.
CVE ID: CVE-2023-41270 State: PUBLISHED Published: 2023-11-08T06:32:40.430Z Last Updated: 2024-08-29T20:13:41.762Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Samsung TV Products: UE40D7000 Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before allows attackers to cause a denial of service via WPS attack tools. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.slideshare.net/fuguet/smold-tv-old-smart - https://www.youtube.com/watch?v=MdIT4mPTX3s
CVE ID: CVE-2023-41273 State: PUBLISHED Published: 2024-02-02T16:03:45.627Z Last Updated: 2024-08-02T18:54:05.073Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-122, CWE-120 Description: A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.2651 and later Add
S 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-23-38
CVE ID: CVE-2023-41274 State: PUBLISHED Published: 2024-02-02T16:03:56.592Z Last Updated: 2024-08-02T18:54:05.183Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.26
ing versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-23-38
CVE ID: CVE-2023-41275 State: PUBLISHED Published: 2024-02-02T16:04:05.690Z Last Updated: 2025-05-09T17:41:06.402Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-120, CWE-122 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.26
ing versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-38
CVE ID: CVE-2023-41276 State: PUBLISHED Published: 2024-02-02T16:04:14.305Z Last Updated: 2025-06-17T21:29:23.256Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-120, CWE-122 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.26
CVE ID: CVE-2023-41277 State: PUBLISHED Published: 2024-02-02T16:04:21.359Z Last Updated: 2025-06-17T21:29:23.386Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.26
CVE ID: CVE-2023-41278 State: PUBLISHED Published: 2024-02-02T16:04:27.970Z Last Updated: 2024-08-02T18:54:05.107Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.26
CVE ID: CVE-2023-41279 State: PUBLISHED Published: 2024-02-02T16:04:34.569Z Last Updated: 2024-08-02T18:54:05.192Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.26
CVE ID: CVE-2023-41280 State: PUBLISHED Published: 2024-02-02T16:04:39.355Z Last Updated: 2024-08-02T18:54:05.015Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-120, CWE-121 Description: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.26
CVE ID: CVE-2023-41281 State: PUBLISHED Published: 2024-02-02T16:04:43.783Z Last Updated: 2025-05-15T19:49:26.415Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Additi
.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-53
CVE ID: CVE-2023-41282 State: PUBLISHED Published: 2024-02-02T16:04:48.454Z Last Updated: 2025-05-07T20:08:08.057Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Additi
.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-23-53
CVE ID: CVE-2023-41283 State: PUBLISHED Published: 2024-02-02T16:04:53.120Z Last Updated: 2024-09-06T17:42:13.440Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud Problem Types: CWE-77, CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Additi
CVE ID: CVE-2023-41284 State: PUBLISHED Published: 2023-11-10T16:01:54.206Z Last Updated: 2024-09-03T17:34:52.723Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QuMagie Problem Types: CWE-89 Description: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-50
CVE ID: CVE-2023-41285 State: PUBLISHED Published: 2023-11-10T16:02:06.812Z Last Updated: 2024-09-03T17:33:49.118Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QuMagie Problem Types: CWE-89 Description: A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-50
CVE ID: CVE-2023-41287 State: PUBLISHED Published: 2024-01-05T16:19:15.421Z Last Updated: 2025-06-17T14:37:58.131Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: Video Station Problem Types: CWE-89 Description: A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-55