Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-33253 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:44:06.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file (such as shell.jpg.php.shell) being sent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labcollector.com/ - https://github.com/Toxich4/CVE-2023-33253 - https://labcollector.com/changelog-labcollector/
CVE ID: CVE-2023-33254 State: PUBLISHED Published: 2023-05-21T00:00:00.000Z Last Updated: 2025-01-31T15:33:33.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an authenticated attacker edits the user-authentication settings to specify an attacker-controlled LDAP server, clicks the Test Settings button, and captures the cleartext credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.stevencampbell.info/KA
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.stevencampbell.info/KACE-LDAP-Bind-Credential-Exposure/
CVE ID: CVE-2023-33255 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T20:33:07.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Papaya Viewer 1.0.1449. User-supplied input in form of DICOM or NIFTI images can be loaded into the Papaya web application without any kind of sanitization. This allows injection of arbitrary JavaScript code into image metadata, which is executed when that metadata is displayed in the Papaya web application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://schutzwerk.com - https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2022-001.txt - http://secli
: References: - https://schutzwerk.com - https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2022-001.txt - http://seclists.org/fulldisclosure/2023/May/21 - http://packetstormsecurity.com/files/172644/Papaya-Medical-Viewer-1.0-Cross-Site-Scripting.html - https://www.schutzwerk.com/blog/schutzwerk-sa-2022-001/
CVE ID: CVE-2023-33257 State: PUBLISHED Published: 2023-08-02T00:00:00 Last Updated: 2024-10-17T18:25:50.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://writeup.recoil.nl/verint/
CVE ID: CVE-2023-33263 State: PUBLISHED Published: 2023-05-25T00:00:00 Last Updated: 2025-01-16T14:56:34.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com/files/172560/WFTPD-3.25-Credential-Disclosure.html
CVE ID: CVE-2023-33264 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T15:20:07.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hazelcast/hazelcast/pull/24266
CVE ID: CVE-2023-33265 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T18:31:09.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing authenticated users to execute tasks on members without the required permissions granted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hazelcast/hazelcast - https://support.hazelcast.com/s/article/Security-Advisory-for-CVE-2023-33265
CVE ID: CVE-2023-33268 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T17:48:31.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection (blind). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l4rRyxz/CVE-Disclosures/blob/main/CVE-2023-33268.md
CVE ID: CVE-2023-33269 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T17:40:31.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection (blind). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l4rRyxz/CVE-Disclosures/blob/main/CVE-2023-33269.md
CVE ID: CVE-2023-33270 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T16:38:52.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection (blind). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l4rRyxz/CVE-Disclosures/blob/main/CVE-2023-33270.md
CVE ID: CVE-2023-33271 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T16:37:59.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DTS Monitoring 3.57.0. The parameter common_name within the SSL Certificate check function is vulnerable to OS command injection (blind). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l4rRyxz/CVE-Disclosures/blob/main/CVE-2023-33271.md
CVE ID: CVE-2023-33272 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T17:37:34.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection (blind). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l4rRyxz/CVE-Disclosures/blob/main/CVE-2023-33272.md
CVE ID: CVE-2023-33273 State: PUBLISHED Published: 2023-10-03T00:00:00 Last Updated: 2024-09-20T17:38:07.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection (blind). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/l4rRyxz/CVE-Disclosures/blob/main/CVE-2023-33273.md
CVE ID: CVE-2023-33274 State: PUBLISHED Published: 2023-07-12T00:00:00 Last Updated: 2024-11-07T17:06:31.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access Common Gateway Interface (CGI) scripts without proper identification or authorization. This vulnerability arises from a lack of proper cookie verification and affects all instances of SNMP Web Pro 1.1 without HTTP Digest authentication enabled, regardless of the password used for the web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
used for the web interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/pedromonteirobb/a0584095b46141702c8cae0f3f1b6759
CVE ID: CVE-2023-33276 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-26T19:49:35.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisori
Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-016.txt - https://www.syss.de/en/responsible-disclosure-policy
CVE ID: CVE-2023-33277 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-27T15:41:09.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.syss.de/en/responsible-disclosure-policy - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-015.txt
CVE ID: CVE-2023-33278 State: PUBLISHED Published: 2023-05-25T00:00:00 Last Updated: 2025-01-16T14:55:07.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.storecommander.com/en/addons/480-customer-export-pro.html - https://friends-of-presta.github.io/security-advisories/modules/2023/05/25/scexportcustomers.html
CVE ID: CVE-2023-33279 State: PUBLISHED Published: 2023-05-25T00:00:00 Last Updated: 2025-01-16T14:53:23.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://friends-of-presta.github.io/security-advisories/modules/2023/05/25/scfixmyprestashop.html
CVE ID: CVE-2023-33280 State: PUBLISHED Published: 2023-05-25T00:00:00 Last Updated: 2025-01-16T14:52:25.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.storecommander.com/en/addons/440-order-export-pro.html - https://friends-of-presta.github.io/security-advisories/modules/2023/05/25/scquickaccounting.html
CVE ID: CVE-2023-33281 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2024-08-02T15:39:36.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allows for a replay attack. NOTE: the vendor's position is that this cannot be reproduced with genuine Nissan parts: for example, the combination of keyfob and door handle shown in the exploit demonstration does not match any technology that Nissan provides to customers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.youtube.com/watch?v=GG1utSdYG1k - https://t
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.youtube.com/watch?v=GG1utSdYG1k - https://twitter.com/Kevin2600/status/1658059570806415365 - https://chaos-lab.blogspot.com/2023/05/nissan-sylphy-classic-2021-fixed-code.html
CVE ID: CVE-2023-33282 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T14:34:44.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote attacker is able to login and create a valid session. This makes it possible to make backend calls to endpoints in the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://marvalglobal.com/software/ - https://www.cyberskydd.se/cve/2023/CVE-2023-33282.html
CVE ID: CVE-2023-33283 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T16:10:35.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cyberskydd.se/cve/2023/CVE-2023-33283.html
CVE ID: CVE-2023-33284 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T16:03:11.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote attacker authenticated as any user is able to execute code in context of the web server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cyberskydd.se/cve/2023/CVE-2023-33284.html
CVE ID: CVE-2023-33285 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T15:17:54.872Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://codereview.qt-project.org/c/qt/qtbase/+/477644 - https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html
CVE ID: CVE-2023-33287 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T15:29:06.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arbitrary JavaScript via a crafted payload injected into the tables. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://marketplace.atlassian.com/apps/1217271/inline-table-editing/version-history - https://actonic.de/produkte/inline-table-editing/ - https://marketplace.atlassian.com/apps/1217271/inline-table-editing?hosting=se
tonic.de/produkte/inline-table-editing/ - https://marketplace.atlassian.com/apps/1217271/inline-table-editing?hosting=server&tab=versions
CVE ID: CVE-2023-33288 State: PUBLISHED Published: 2023-05-22T00:00:00.000Z Last Updated: 2025-03-18T18:22:32.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power/supply/bq24190_charger.c. It could allow a local attacker to crash the system due to a race condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.9 - https://lore.kernel.org/all/CAHk-=whcaHLNpb7Mu_QX7ABwPgyRyfW-V8=v4Mv0S22fpjY4JQ%40mail.gmail.com/ - https://lore.kernel.org/lkml/20230309174728.233732
Hk-=whcaHLNpb7Mu_QX7ABwPgyRyfW-V8=v4Mv0S22fpjY4JQ%40mail.gmail.com/ - https://lore.kernel.org/lkml/20230309174728.233732-1-zyytlz.wz%40163.com/ - https://github.com/torvalds/linux/commit/47c29d69212911f50bdcdd0564b5999a559010d4 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=47c29d69212911f50bdcdd0564b5999a559010d4
CVE ID: CVE-2023-33289 State: PUBLISHED Published: 2023-06-21T00:00:00.000Z Last Updated: 2025-03-08T16:09:27.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of URLs is not a CVE." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/progscrape/urlnorm - https://lib.rs/crates/urlnorm - https://gist.github.com/6en6ar/b118888dc739e8979038f24c8ac33611 - https://news.ycombinator.com/item?id=40435263
CVE ID: CVE-2023-33290 State: PUBLISHED Published: 2023-06-12T00:00:00 Last Updated: 2025-01-03T23:41:49.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issue to CVE-2023-32758 (Python). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lib.rs/crates/git-url-parse - https://github.com/tjtelan/git-url-parse-rs/issues/51
CVE ID: CVE-2023-33291 State: PUBLISHED Published: 2023-05-28T00:00:00 Last Updated: 2025-01-14T18:11:35.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate allow generation of OTP messages to any e-mail address or phone number without validation. (It cannot be exploited with e-mail addresses or phone numbers that are registered in the application.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ebankit.com/digital-banking-platform - http://packetstormsecurity.com/files/172476/eBankIT-6-Arbitrary-OTP-Generation.html
CVE ID: CVE-2023-33293 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T15:14:19.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.localhost with subdomains for each installed applications, e.g., myapp.localhost. An attacker can make fetch requests to api-deamon to determine if a given app is installed and read the manifest.webmanifest contents, including the app version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kaios.dev/cve/1410290
CVE ID: CVE-2023-33294 State: PUBLISHED Published: 2023-05-22T00:00:00 Last Updated: 2025-01-21T15:10:23.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a local web server that responds to GET and POST requests on port 2929. The server accepts arbitrary Bash commands and executes them as root. Because it is not permission or context restricted and returns proper CORS headers, it's accessible to all websites via the browser. At a bare minimum, this allows an attacker to retrieve a list of the user's installed apps, notifications, and downloads. It also allows an attacker to delete loc
to retrieve a list of the user's installed apps, notifications, and downloads. It also allows an attacker to delete local files and modify system properties including the boolean persist.moz.killswitch property (which would render the device inoperable). This vulnerability is partially mitigated by SELinux which prevents reads, writes, or modifications to files or permissions within protected partitions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kaios.dev/cve/1411380
CVE ID: CVE-2023-33295 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-17T15:25:13.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cohesity.com - https://github.com/cohesity/SecAdvisory/blob/master/CVE-2023-33295.md
CVE ID: CVE-2023-33297 State: PUBLISHED Published: 2023-05-22T00:00:00.000Z Last Updated: 2025-01-28T17:20:52.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures - https://github.com/bitcoin/bitcoin/issues/27586 - https://github.com/bitcoin/bitcoin/issues/27623 - https://github.com/bitcoin/bitcoin/blob/master
/bitcoin/issues/27586 - https://github.com/bitcoin/bitcoin/issues/27623 - https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-24.1.md - https://github.com/bitcoin/bitcoin/pull/27610 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2EI7SAP4QP2AJYK2JVEOO4GJ6DOBSM5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3CQY277NWXY3RFCZCJ4VKT2P3ROACEJ/ - https://github.com/visualbasic6/drain - https://github.com/dogecoin/dogecoin/issues/3243#issuecomment-1712575544 - https://x.com/123456/status/1711601593399828530
CVE ID: CVE-2023-33298 State: PUBLISHED Published: 2023-06-30T00:00:00 Last Updated: 2024-11-27T16:17:10.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: com.perimeter81.osx.HelperTool in Perimeter81 10.0.0.19 on macOS allows Local Privilege Escalation (to root) via shell metacharacters in usingCAPath. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.perimeter81.com/docs/macos-agent-release-notes - https://www.ns-echo.com/posts/cve_2023_33298.html - https://www.kb.cert.org/vuls/id/653767
CVE ID: CVE-2023-33299 State: PUBLISHED Published: 2023-06-23T07:46:37.499Z Last Updated: 2024-10-23T14:25:53.423Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiNAC Problem Types: CWE-502 Description: A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-074
CVE ID: CVE-2023-33300 State: PUBLISHED Published: 2025-03-14T15:46:48.352Z Last Updated: 2025-03-14T17:24:11.918Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiNAC Problem Types: CWE-77 Description: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-096