Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-25746 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T19:15:06.530Z Vendors: Mozilla Products: Thunderbird, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox ESR 102.8 Description: Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 102.8 and Firefox ESR < 102.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/adv
nrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-06/ - https://www.mozilla.org/security/advisories/mfsa2023-07/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1544127%2C1762368
CVE ID: CVE-2023-25747 State: PUBLISHED Published: 2023-06-19T10:10:16.518Z Last Updated: 2024-12-11T16:01:36.222Z Vendors: Mozilla Products: Firefox for Android Problem Types: Potential use-after-free in libaudio when used on Android API <= 30 Description: A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1815801 - https://www.mozilla.org/s
- CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1815801 - https://www.mozilla.org/security/advisories/mfsa2023-08/
CVE ID: CVE-2023-25748 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T18:58:18.391Z Vendors: Mozilla Products: Firefox Problem Types: Fullscreen Notification could have been hidden by window prompts on Android Description: By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 111. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://bug
Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1798798
CVE ID: CVE-2023-25749 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T18:54:55.617Z Vendors: Mozilla Products: Firefox Problem Types: Firefox for Android may have opened third-party apps without a prompt Description: Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. <br>*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
vulnerability affects Firefox < 111. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1810705
CVE ID: CVE-2023-25750 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T18:48:01.080Z Vendors: Mozilla Products: Firefox Problem Types: Potential ServiceWorker cache leak during private browsing mode Description: Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1814733
CVE ID: CVE-2023-25751 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T16:09:47.319Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Incorrect code generation during JIT compilation Description: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://www.mozilla.org/security/advi
richment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://www.mozilla.org/security/advisories/mfsa2023-10/ - https://www.mozilla.org/security/advisories/mfsa2023-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1814899
CVE ID: CVE-2023-25752 State: PUBLISHED Published: 2023-06-02T00:00:00 Last Updated: 2025-01-09T16:08:24.910Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Potential out-of-bounds when accessing throttled streams Description: When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This may have lead future code to be incorrect and vulnerable. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://www.moz
ainer: - CISA ADP Vulnrichment: References: - https://www.mozilla.org/security/advisories/mfsa2023-09/ - https://www.mozilla.org/security/advisories/mfsa2023-10/ - https://www.mozilla.org/security/advisories/mfsa2023-11/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1811627
CVE ID: CVE-2023-25753 State: PUBLISHED Published: 2023-10-19T08:35:24.075Z Last Updated: 2024-09-12T20:32:26.867Z Vendors: Apache Software Foundation Products: Apache ShenYu Problem Types: CWE-918 Description: There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability to exert control over the HTTP method, cookies, IP address, and headers. This effectively grants us the capability to dispatch complete HTTP requests to hosts of our choosing. This issue af
rs. This effectively grants us the capability to dispatch complete HTTP requests to hosts of our choosing. This issue affects Apache ShenYu: 2.5.1. Upgrade to Apache ShenYu 2.6.0 or apply patch https://github.com/apache/shenyu/pull/4776 . Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/chprswxvb22z35vnoxv9tt3zknsm977d
CVE ID: CVE-2023-25754 State: PUBLISHED Published: 2023-05-08T11:57:45.144Z Last Updated: 2025-02-13T16:44:37.529Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-270 Description: Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/airflow/pull/29506 - https://lists.apache.org/thread/3y83gr0qb8t49ppfk4fb2yk7md8ltq4v - http://www.openwall.com/lists/oss-security/2023/05/08/2
CVE ID: CVE-2023-25755 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T16:27:42.681Z Vendors: JTEKT ELECTRONICS CORPORATION Products: Screen Creator Advance 2 Problem Types: Improper restriction of operations within the bounds of a memory Buffer Description: Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Advance 2 opens a specially crafted project file, information may be disclosed and/or arbitrary code may be executed. Additional Analyst Notes: - CVE Progr
project file, information may be disclosed and/or arbitrary code may be executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202303315311/ - https://jvn.jp/en/vu/JVNVU99710864/
CVE ID: CVE-2023-25756 State: PUBLISHED Published: 2023-11-14T19:05:06.822Z Last Updated: 2025-02-13T16:44:38.159Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege, CWE-125 Description: Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00924.html - https://security.netapp.com/advisory/ntap-20231221-0008/
CVE ID: CVE-2023-25757 State: PUBLISHED Published: 2023-08-11T02:37:21.352Z Last Updated: 2024-10-10T17:49:09.357Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Unison(TM) software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Unison(TM) software before version 10.12 may allow a privileged user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00897.html
CVE ID: CVE-2023-25758 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T19:07:00.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Onekey Touch devices through 4.0.0 and Onekey Mini devices through 2.10.0 allow man-in-the-middle attackers to obtain the seed phase. The man-in-the-middle access can only be obtained after disassembling a device (i.e., here, "man-in-the-middle" does not refer to the attacker's position on an IP network). NOTE: the vendor states that "our hardware team has updated the security patch without anyone being affected." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com
affected." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OneKeyHQ/firmware - https://blog.onekey.so/our-response-to-recent-security-fix-reports-13914fea8afd - https://fortune.com/crypto/2023/02/09/cyber-firm-cracks-onekey-crypto-wallets-in-video-raises-questions-hardware-security/amp/
CVE ID: CVE-2023-25759 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T16:35:56.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tripleplay.tv - https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25759-Summary.pdf
CVE ID: CVE-2023-25760 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T16:33:37.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tripleplay.tv - https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25760-Summary.pdf
CVE ID: CVE-2023-25761 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T15:37:20.556Z Vendors: Jenkins Project Products: Jenkins JUnit Plugin Description: Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032 - http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE ID: CVE-2023-25762 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T18:48:35.472Z Vendors: Jenkins Project Products: Jenkins Pipeline: Build Step Plugin Description: Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019 - http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE ID: CVE-2023-25763 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T18:47:34.681Z Vendors: Jenkins Project Products: Jenkins Email Extension Plugin Description: Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control affected fields. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2931 - http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE ID: CVE-2023-25764 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:24:33.099Z Vendors: Jenkins Project Products: Jenkins Email Extension Plugin Description: Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or change custom email templates. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2934 - http://www.openwall.com/lists/oss-security
ences: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2934 - http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE ID: CVE-2023-25765 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:20:52.614Z Vendors: Jenkins Project Products: Jenkins Email Extension Plugin Description: In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2939 - http://www.openwall.com/lists/oss-security/202
s: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2939 - http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE ID: CVE-2023-25766 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:17:46.441Z Vendors: Jenkins Project Products: Jenkins Azure Credentials Plugin Description: A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1757 - http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE ID: CVE-2023-25767 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:16:03.757Z Vendors: Jenkins Project Products: Jenkins Azure Credentials Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1756 - http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE ID: CVE-2023-25768 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T16:14:14.050Z Vendors: Jenkins Project Products: Jenkins Azure Credentials Plugin Description: A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1756 - http://www.openwall.com/lists/oss-security/2023/02/15/4
CVE ID: CVE-2023-25769 State: PUBLISHED Published: 2024-02-14T13:37:44.004Z Last Updated: 2024-08-02T11:32:12.170Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: denial of service, CWE-400 Description: Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-25770 State: PUBLISHED Published: 2023-07-13T10:59:58.825Z Last Updated: 2024-08-02T11:32:12.419Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Honeywell Products: C300 Problem Types: CWE-502 Description: Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell Security Notification for recommendations on upgrading and versioning. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://process.honeywell.com
CVE ID: CVE-2023-25771 State: PUBLISHED Published: 2023-05-10T13:16:48.326Z Last Updated: 2025-01-27T18:08:44.812Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) NUC BIOS firmware Problem Types: denial of service, CWE-284 Description: Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
CVE ID: CVE-2023-25772 State: PUBLISHED Published: 2023-05-10T13:40:57.384Z Last Updated: 2025-01-24T17:51:39.871Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Retail Edge Mobile Android application Problem Types: denial of service, CWE-20 Description: Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00847.html
CVE ID: CVE-2023-25773 State: PUBLISHED Published: 2023-08-11T02:37:04.317Z Last Updated: 2024-10-10T15:38:06.231Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Unite(R) Hub software installer for Windows Problem Types: escalation of privilege, CWE-284 Description: Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.htm
CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.html
CVE ID: CVE-2023-25774 State: PUBLISHED Published: 2023-10-12T15:27:53.149Z Last Updated: 2024-08-02T11:32:12.619Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SoftEther VPN Products: SoftEther VPN Problem Types: CWE-400 Description: A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. A set of specially crafted network connections can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-17
gram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1743
CVE ID: CVE-2023-25775 State: PUBLISHED Published: 2023-08-11T02:36:57.397Z Last Updated: 2025-02-13T16:44:38.689Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Ethernet Controller RDMA driver for linux Problem Types: escalation of privilege, CWE-284 Description: Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html - https://security.netap
ferences: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html - https://security.netapp.com/advisory/ntap-20230915-0013/ - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE ID: CVE-2023-25776 State: PUBLISHED Published: 2023-05-10T13:17:05.623Z Last Updated: 2025-01-27T18:02:55.643Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H) Vendors: n/a Products: Intel(R) Server Board BMC firmware Problem Types: information disclosure, CWE-20 Description: Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html
CVE ID: CVE-2023-25777 State: PUBLISHED Published: 2024-02-14T13:37:39.633Z Last Updated: 2024-08-22T14:09:49.752Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html