Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-37201 State: PUBLISHED Published: 2023-07-05T08:51:01.631Z Last Updated: 2025-02-13T16:56:31.740Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in WebRTC certificate generation Description: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1826002 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://www.mozilla.org/security/advisories/mfsa
id=1826002 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://www.mozilla.org/security/advisories/mfsa2023-23/ - https://www.mozilla.org/security/advisories/mfsa2023-24/ - https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html - https://www.debian.org/security/2023/dsa-5450 - https://www.debian.org/security/2023/dsa-5451 - https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html
CVE ID: CVE-2023-37202 State: PUBLISHED Published: 2023-07-05T08:52:01.098Z Last Updated: 2025-02-13T16:56:32.298Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Potential use-after-free from compartment mismatch in SpiderMonkey Description: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1834711 - https://www.mozilla.org
r: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1834711 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://www.mozilla.org/security/advisories/mfsa2023-23/ - https://www.mozilla.org/security/advisories/mfsa2023-24/ - https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html - https://www.debian.org/security/2023/dsa-5450 - https://www.debian.org/security/2023/dsa-5451 - https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html
CVE ID: CVE-2023-37203 State: PUBLISHED Published: 2023-07-05T09:01:27.313Z Last Updated: 2025-02-13T16:56:32.939Z Vendors: Mozilla Products: Firefox Problem Types: Drag and Drop API may provide access to local system files Description: Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox < 115. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=291640 - https://www.mozilla.org/security/a
ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=291640 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-37204 State: PUBLISHED Published: 2023-07-05T09:01:40.288Z Last Updated: 2025-02-13T16:56:33.629Z Vendors: Mozilla Products: Firefox Problem Types: Fullscreen notification obscured via option element Description: A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive computational function. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1832195 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://security.gentoo.org/glsa/20
show_bug.cgi?id=1832195 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-37205 State: PUBLISHED Published: 2023-07-05T09:01:53.093Z Last Updated: 2025-02-13T16:56:34.188Z Vendors: Mozilla Products: Firefox Problem Types: URL spoofing in address bar using RTL characters Description: The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefox < 115. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1704420 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-37206 State: PUBLISHED Published: 2023-07-05T09:02:02.430Z Last Updated: 2025-02-13T16:56:34.742Z Vendors: Mozilla Products: Firefox Problem Types: Insufficient validation of symlinks in the FileSystem API Description: Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox < 115. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1813299 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-37207 State: PUBLISHED Published: 2023-07-05T08:52:52.315Z Last Updated: 2025-02-13T16:56:35.407Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Fullscreen notification obscured Description: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1816287 - https://www.mozill
tainer: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1816287 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://www.mozilla.org/security/advisories/mfsa2023-23/ - https://www.mozilla.org/security/advisories/mfsa2023-24/ - https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html - https://www.debian.org/security/2023/dsa-5450 - https://www.debian.org/security/2023/dsa-5451 - https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html
CVE ID: CVE-2023-37208 State: PUBLISHED Published: 2023-07-05T08:54:19.005Z Last Updated: 2024-11-20T21:35:10.883Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Lack of warning when opening Diagcab files Description: When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1837675 - https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html - https://lists.debian.org/debian-lts-announce/2
75 - https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html - https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html - https://www.debian.org/security/2023/dsa-5450 - https://www.debian.org/security/2023/dsa-5451 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://www.mozilla.org/security/advisories/mfsa2023-23/ - https://www.mozilla.org/security/advisories/mfsa2023-24/
CVE ID: CVE-2023-37209 State: PUBLISHED Published: 2023-07-05T09:05:08.334Z Last Updated: 2025-02-13T16:56:36.387Z Vendors: Mozilla Products: Firefox Problem Types: Use-after-free in `NotifyOnHistoryReload` Description: A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox < 115. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1837993 - https://www.mozilla.org/security/advisories/mfsa2023-22/
ences: - https://bugzilla.mozilla.org/show_bug.cgi?id=1837993 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-37210 State: PUBLISHED Published: 2023-07-05T09:05:30.754Z Last Updated: 2025-02-13T16:56:36.990Z Vendors: Mozilla Products: Firefox Problem Types: Full-screen mode exit prevention Description: A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1821886 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-37211 State: PUBLISHED Published: 2023-07-05T09:00:58.955Z Last Updated: 2025-02-13T16:56:37.588Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 Description: Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
ox ESR < 102.13, and Thunderbird < 102.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1832306%2C1834862%2C1835886%2C1836550%2C1837450 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://www.mozilla.org/security/advisories/mfsa2023-23/ - https://www.mozilla.org/security/advisories/mfsa2023-24/ - https://lists.debian.org/debian-lts-announce/2023/07/msg00006.html - https://www.debian.org/security/2023/dsa-5450 - https://www.debian.org/security/2023/dsa-5451 - https://lists.debian.org/debian-lts-announce/2023/07/msg00015.html
CVE ID: CVE-2023-37212 State: PUBLISHED Published: 2023-07-05T09:05:53.775Z Last Updated: 2025-02-13T16:56:38.189Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 115 Description: Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1750870%2C1825552%2C1826206%2C1827076%2C1828690%2C1833503%2C1835710%2C1838587 - https://www.mozilla.org/security/advisories/mf
0%2C1825552%2C1826206%2C1827076%2C1828690%2C1833503%2C1835710%2C1838587 - https://www.mozilla.org/security/advisories/mfsa2023-22/ - https://security.gentoo.org/glsa/202401-10
CVE ID: CVE-2023-37213 State: PUBLISHED Published: 2023-07-30T08:21:30.664Z Last Updated: 2024-10-21T17:59:27.385Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Synel Products: SYnergy Fingerprint Terminals Problem Types: CWE-78 Description: Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection' Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37214 State: PUBLISHED Published: 2023-07-30T08:33:16.142Z Last Updated: 2024-10-21T18:00:37.504Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Heights Telecom Products: ERO1xS-Pro Dual-Band WiFi Description: Heights Telecom ERO1xS-Pro Dual-Band FW version BZ_ERO1XP.025. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37215 State: PUBLISHED Published: 2023-07-30T08:42:48.116Z Last Updated: 2024-10-15T14:15:03.984Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: JBL Products: soundbar multibeam Problem Types: CWE-798 Description: JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37216 State: PUBLISHED Published: 2023-07-30T09:03:13.073Z Last Updated: 2024-10-21T18:02:54.101Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: AnaSystem Products: SensMini M4 Description: AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37217 State: PUBLISHED Published: 2023-07-30T10:34:36.413Z Last Updated: 2024-10-21T18:03:39.903Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Tadiran Products: Telecom Aeonix Problem Types: CWE-204 Description: Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37218 State: PUBLISHED Published: 2023-07-30T10:35:29.342Z Last Updated: 2024-10-22T19:41:35.016Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Tadiran Products: Telecom Aeonix Problem Types: CWE-22 Description: Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37219 State: PUBLISHED Published: 2023-07-30T10:40:47.944Z Last Updated: 2024-10-22T19:40:49.099Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Tadiran Products: Telecom Composit Problem Types: CWE-1236 Description: Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37220 State: PUBLISHED Published: 2023-09-03T13:47:05.388Z Last Updated: 2024-10-01T13:07:25.275Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Synel Products: Terminals Problem Types: CWE-494 Description: Synel Terminals - CWE-494: Download of Code Without Integrity Check Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37221 State: PUBLISHED Published: 2023-09-03T13:55:27.065Z Last Updated: 2024-09-27T16:00:04.602Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H) Vendors: 7Twenty Products: BOT Problem Types: CWE-79 Description: 7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37222 State: PUBLISHED Published: 2023-09-03T14:03:22.234Z Last Updated: 2024-09-27T15:48:29.866Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Farsight Tech Nordic Products: AB ProVide Problem Types: CWE-79 Description: Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user with administrator privilege. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-37223 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:50:49.095Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://archerirm.com - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362
CVE ID: CVE-2023-37224 State: PUBLISHED Published: 2023-07-14T00:00:00 Last Updated: 2024-10-30T15:49:31.665Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AC:L/AV:L/A:N/C:H/I:N/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://archerirm.com - https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362
CVE ID: CVE-2023-37225 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T17:09:33.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2023-37226 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T16:10:13.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/ - https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm
CVE ID: CVE-2023-37227 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T16:15:44.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/ - https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF13.htm
CVE ID: CVE-2023-37228 State: REJECTED Published: N/A Last Updated: 2024-08-15T15:50:19.506902 Description: No description available.
CVE ID: CVE-2023-37229 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T16:17:44.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loftware Spectrum before 5.1 allows SSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-37230 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T16:21:24.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-37231 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T16:23:35.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/ - https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm
CVE ID: CVE-2023-37232 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T20:11:38.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-37233 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-10T20:17:58.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/ - https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm
CVE ID: CVE-2023-37234 State: PUBLISHED Published: 2024-09-10T00:00:00 Last Updated: 2024-09-11T14:07:54.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loftware Spectrum through 4.6 has unprotected JMX Registry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://code-white.com - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-37237 State: PUBLISHED Published: 2023-06-29T00:00:00 Last Updated: 2024-11-26T19:40:11.523Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary operating system commands via SSH. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS23-004
CVE ID: CVE-2023-37238 State: PUBLISHED Published: 2023-07-06T12:26:28.737Z Last Updated: 2024-11-19T17:03:28.687Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-275 Description: Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitation of this vulnerability may affect some wireless projection features. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2023-37239 State: PUBLISHED Published: 2023-07-06T12:27:38.720Z Last Updated: 2024-11-19T17:03:04.691Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2023-37240 State: PUBLISHED Published: 2023-07-06T12:29:12.863Z Last Updated: 2024-11-19T17:02:39.701Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause out-of-bounds read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2023-37241 State: PUBLISHED Published: 2023-07-06T12:30:10.304Z Last Updated: 2024-11-19T17:02:14.903Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858