Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-29921 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:20:09.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PowerJob/PowerJob/issues/586
CVE ID: CVE-2023-29922 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:18:14.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PowerJob/PowerJob/issues/585
CVE ID: CVE-2023-29923 State: PUBLISHED Published: 2023-04-19T00:00:00.000Z Last Updated: 2025-02-05T15:14:57.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PowerJob/PowerJob/issues/587
CVE ID: CVE-2023-29924 State: PUBLISHED Published: 2023-04-21T00:00:00.000Z Last Updated: 2025-02-05T15:51:14.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PowerJob/PowerJob/issues/588 - https://iotaa.cn/articles/62
CVE ID: CVE-2023-29926 State: PUBLISHED Published: 2023-04-20T00:00:00.000Z Last Updated: 2025-02-05T14:57:05.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerJob V4.3.2 has unauthorized interface that causes remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iotaa.cn/articles/63
CVE ID: CVE-2023-29927 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T16:25:25.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privileged Sage users, particularly those on a workstation setup in the "Windows Peer-to-Peer Network" or "Client Server Network" Sage 300 configurations, could recover the SQL connection strings being used by Sage 300 and interact directly with the underlying database(s) to create, update, and delete all company records, bypassing the program’s role-based access controls. Additional Analyst Notes: - CVE Program
delete all company records, bypassing the program’s role-based access controls. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.controlgap.com/blog/critical-vulnerability-disclosure-sage-300
CVE ID: CVE-2023-29929 State: PUBLISHED Published: 2024-08-21T00:00:00 Last Updated: 2024-10-24T19:41:46.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker to casue a denial of service via the libkemplink.so, isreverse library. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://loadmaster.com - http://kemptechnologies.com - https://github.com/YSaxon/CVE-2023-29929/
CVE ID: CVE-2023-29930 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-27T19:43:57.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/YSaxon/TFTPlunder - https://help.genesys.com/pureconnect/mergedprojects/wh_tr/mergedprojects/wh_tr_polycom_phones/desktop/configuring_the_tftp_server1.htm
CVE ID: CVE-2023-29931 State: PUBLISHED Published: 2023-06-22T00:00:00 Last Updated: 2024-12-06T21:20:06.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hhxsv5/laravel-s/issues/437
CVE ID: CVE-2023-29932 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T20:57:47.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/llvm/llvm-project/issues/58745
CVE ID: CVE-2023-29933 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T20:54:59.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/llvm/llvm-project/issues/59442
CVE ID: CVE-2023-29934 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T20:47:59.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/llvm/llvm-project/issues/59136
CVE ID: CVE-2023-29935 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T20:35:54.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/llvm/llvm-project/issues/59182
CVE ID: CVE-2023-29939 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T20:27:59.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/llvm/llvm-project/issues/59983
CVE ID: CVE-2023-29941 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T20:23:44.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/llvm/llvm-project/issues/59988 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWCCXDZP7H2JNFULSZZWXGAZHZUPN5DS/
CVE ID: CVE-2023-29942 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T20:22:07.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/llvm/llvm-project/issues/59990
CVE ID: CVE-2023-29944 State: PUBLISHED Published: 2023-05-08T00:00:00.000Z Last Updated: 2025-01-29T18:47:30.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom code snippet function of the metersphere system workbench Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/metersphere/metersphere - https://hacku.top/wl/?id=N67LxQL238Tsw9PDok5fy8tihEO0jI7L
CVE ID: CVE-2023-29950 State: PUBLISHED Published: 2023-04-27T00:00:00.000Z Last Updated: 2025-01-31T18:38:35.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/matthiaskramm/swftools/issues/198
CVE ID: CVE-2023-29961 State: PUBLISHED Published: 2023-05-16T00:00:00.000Z Last Updated: 2025-01-23T16:22:35.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup, Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/Archerber/bug_submit/blob/main/D-Link/dir605l.md
CVE ID: CVE-2023-29962 State: PUBLISHED Published: 2024-01-04T00:00:00.000Z Last Updated: 2025-06-03T14:43:02.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/superjock1988/debug/blob/main/s-cms.md - https://gist.github.com/superjock1988/546df50f8251cb2c99adda4351098528
CVE ID: CVE-2023-29963 State: PUBLISHED Published: 2023-05-05T00:00:00.000Z Last Updated: 2025-01-29T20:20:35.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-CMS v5.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /admin/ajax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/superjock1988/debug/blob/main/s-cms_rce.md
CVE ID: CVE-2023-29973 State: PUBLISHED Published: 2023-10-24T00:00:00 Last Updated: 2024-09-17T13:43:23.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-29973-no-rate-limit/
CVE ID: CVE-2023-29974 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-04T19:02:33.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-29974-weak-password-policy/
CVE ID: CVE-2023-29975 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-04T13:53:07.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.esecforte.com/cve-2023-29975-unverified-password-changed/
CVE ID: CVE-2023-29983 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:26:51.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary code via the auditlog tab in the admin panel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vogtmh/cmaps - https://www.exploit-db.com/exploits/51417 - https://packetstormsecurity.com/files/172075/CompanyMaps-8.0-Cross-Site-Scripting.html - https://github.com/zPrototype/CVE-2023-29983
CVE ID: CVE-2023-29984 State: PUBLISHED Published: 2023-07-11T00:00:00 Last Updated: 2024-11-08T16:24:26.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU93767756/index.html - https://www.fujifilm.com/fbglobal/eng/company/news/notic
: References: - https://jvn.jp/en/vu/JVNVU93767756/index.html - https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/browser_announce.html - https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100793_000 - https://support.brother.com/g/s/security/en/
CVE ID: CVE-2023-29985 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2025-01-22T16:20:00.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.php#date_from has a SQL Injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liaorj.github.io/2023/03/17/admin-reports-date-from-has-sql-injection-vulnerability/#more
CVE ID: CVE-2023-29986 State: PUBLISHED Published: 2023-05-11T00:00:00.000Z Last Updated: 2025-01-27T16:52:28.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lukashinsch/spring-boot-actuator-logview/issues/33
CVE ID: CVE-2023-29994 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:55:07.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq/issues/1042
CVE ID: CVE-2023-29995 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:50:42.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq/issues/1043
CVE ID: CVE-2023-29996 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T19:36:39.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo_decode and unsubinfo_decode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/emqx/nanomq/issues/1038
CVE ID: CVE-2023-29998 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-14T19:45:14.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in the content editor in Gis3W g3w-suite 3.5 allows remote authenticated users to inject arbitrary web script or HTML and gain privileges via the description parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/g3w-suite - https://labs.yarix.com/2023/07/gis3w-persistent-xss-in-g3wsuite-3-5-cve-2023-29998/
CVE ID: CVE-2023-2000 State: PUBLISHED Published: 2023-05-02T08:57:39.331Z Last Updated: 2024-12-06T23:04:35.557Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-601 Description: Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2023-2001 State: PUBLISHED Published: 2023-06-07T00:00:00 Last Updated: 2025-01-07T16:54:05.061Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper authorization in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. An attacker was able to spoof protected tags, which could potentially lead a victim to download malicious code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/iss
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/406764 - https://hackerone.com/reports/1908423 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2001.json
CVE ID: CVE-2023-2002 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2024-08-02T06:05:27.122Z Vendors: n/a Products: Kernel Problem Types: CWE-250 Description: A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2023/04/16/3 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://www.debian.o
ts/oss-security/2023/04/16/3 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://www.debian.org/security/2023/dsa-5480 - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://security.netapp.com/advisory/ntap-20240202-0004/
CVE ID: CVE-2023-2003 State: PUBLISHED Published: 2023-07-13T11:25:03.096Z Last Updated: 2024-10-30T16:04:09.807Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) Vendors: Unitronics Products: Vision1210 Problem Types: CWE-506 Description: Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/avis
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/embedded-malicious-code-vulnerability-unitronics-vision1210 - https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html
CVE ID: CVE-2023-2004 State: REJECTED Published: 2023-04-14T20:49:26.564Z Last Updated: 2025-02-13T15:46:36.481Z Description: No description available.
CVE ID: CVE-2023-2005 State: PUBLISHED Published: 2023-06-26T17:39:56.554Z Last Updated: 2024-12-03T18:44:10.535Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Tenable Products: Tenable.io, Nessus, Security Center Description: Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to e
ssions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2023-21
CVE ID: CVE-2023-2006 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-04-23T16:22:00.741Z Vendors: n/a Products: Linux kernel's RxRPC network protocol Problem Types: CWE-362 Description: A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper locking when performing operations on an object. This may allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2189112 - https://www.zerodayinitiative.com
ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2189112 - https://www.zerodayinitiative.com/advisories/ZDI-23-439/ - https://github.com/torvalds/linux/commit/3bcd6c7eaa53 - https://security.netapp.com/advisory/ntap-20230609-0004/
CVE ID: CVE-2023-2007 State: PUBLISHED Published: 2023-04-24T00:00:00 Last Updated: 2024-08-02T06:05:27.109Z Vendors: n/a Products: Linux kernel's DPT I2O Controller driver Problem Types: CWE-367 Description: The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/b04e75a4a8a81887386a0d2dbf605a48e779d2a0 - https://lists.debian.org/debian-lts-
https://github.com/torvalds/linux/commit/b04e75a4a8a81887386a0d2dbf605a48e779d2a0 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://www.debian.org/security/2023/dsa-5480 - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://security.netapp.com/advisory/ntap-20240119-0011/
CVE ID: CVE-2023-2008 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-05-05T16:01:30.708Z Vendors: n/a Products: Linux kernel udmabuf device driver Problem Types: CWE-129 Description: A flaw was found in the Linux kernel's udmabuf device driver. The specific flaw exists within a fault handler. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an array. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/l
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/05b252cccb2e5c3f56119d25de684b4f810ba4 - https://www.zerodayinitiative.com/advisories/ZDI-23-441/ - https://bugzilla.redhat.com/show_bug.cgi?id=2186862 - https://security.netapp.com/advisory/ntap-20230517-0007/
CVE ID: CVE-2023-2009 State: PUBLISHED Published: 2023-05-15T12:15:42.265Z Last Updated: 2025-01-14T18:25:26.460Z Vendors: Unknown Products: Pretty Url Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: Plugin does not sanitize and escape the URL field in the Pretty Url WordPress plugin through 1.5.4 settings, which could allow high-privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f7988a18-ba9d-4ead-82c8-30ea8223846f