Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-44260 State: PUBLISHED Published: 2023-10-09T08:35:06.821Z Last Updated: 2024-09-19T14:36:11.823Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Mikk Mihkel Nurges, Rebing OÜ Products: Woocommerce ESTO Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mikk Mihkel Nurges, Rebing OÜ Woocommerce ESTO plugin <= 2.23.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-esto/wordpress-woocommerce-esto-plugin-2-23-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44261 State: PUBLISHED Published: 2023-10-10T09:04:05.455Z Last Updated: 2024-09-17T19:25:43.202Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Dinesh Karki Products: Block Plugin Update Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki Block Plugin Update plugin <= 3.3 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/block-specific-plugin-updates/wordpress-block-plugin-update-plugin-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44262 State: PUBLISHED Published: 2023-10-02T09:55:30.136Z Last Updated: 2024-09-20T15:59:26.141Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Renzo Johnson Products: Blocks Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Renzo Johnson Blocks plugin <= 1.6.41 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/blocks/wordpress-blocks-plugin-1-6-41-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-44263 State: PUBLISHED Published: 2023-10-02T09:37:30.112Z Last Updated: 2024-09-20T15:33:51.456Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Riyaz Products: Social Metrics Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Riyaz Social Metrics plugin <= 2.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/social-metrics/wordpress-social-metrics-plugin-2-2-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-44264 State: PUBLISHED Published: 2023-10-02T10:06:27.286Z Last Updated: 2024-09-20T17:24:36.768Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Arrow Plugins Products: The Awesome Feed – Custom Feed Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-facebook-feed/wordpress-the-awesome-feed-custom-feed-plugin-2-2-5-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-44265 State: PUBLISHED Published: 2023-10-02T10:14:31.576Z Last Updated: 2024-09-20T17:27:49.315Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Gopi Ramasamy Products: Popup contact form Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Popup contact form plugin <= 7.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/popup-contact-form/wordpress-popup-contact-form-plugin-7-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-44266 State: PUBLISHED Published: 2023-10-02T10:26:24.604Z Last Updated: 2025-02-19T21:22:30.394Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jewel Theme Products: WP Adminify Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jewel Theme WP Adminify plugin <= 3.1.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/adminify/wordpress-wp-adminify-custom-login-admin-dashboard-admin-columns-plugin-3-1-6-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-44267 State: PUBLISHED Published: 2023-10-26T19:14:53.663Z Last Updated: 2024-09-09T16:13:09.232Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Projectworlds Pvt. Limited Products: Online Art Gallery Problem Types: CWE-89 Description: Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://projectworlds.in/ - https://fluidattacks.com/advisories/ono
CVE ID: CVE-2023-44268 State: REJECTED Published: 2023-10-26T22:04:22.592Z Last Updated: 2024-01-02T19:08:25.196Z Description: No description available.
CVE ID: CVE-2023-44270 State: PUBLISHED Published: 2023-09-29T00:00:00.000Z Last Updated: 2025-11-03T21:49:45.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being included in a comment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/postcss/postcss/blob/main/lib/tokenize.
CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/postcss/postcss/blob/main/lib/tokenize.js#L25 - https://github.com/postcss/postcss/releases/tag/8.4.31 - https://github.com/postcss/postcss/commit/58cc860b4c1707510c9cd1bc1fa30b423a9ad6c5 - https://github.com/github/advisory-database/issues/2820
CVE ID: CVE-2023-44271 State: PUBLISHED Published: 2023-11-03T00:00:00 Last Updated: 2024-08-02T19:59:51.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/python-pillow/Pillow/pull/7244 - https://github.com/python-pillow/Pillow/commit/1fe1bb49c452b0318cad12ea9d97c3bef188e9a7 - htt
-pillow/Pillow/pull/7244 - https://github.com/python-pillow/Pillow/commit/1fe1bb49c452b0318cad12ea9d97c3bef188e9a7 - https://devhub.checkmarx.com/cve-details/CVE-2023-44271/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N2JOEDUJDQLCUII2LQYZYSM7RJL2I3P4/ - https://lists.debian.org/debian-lts-announce/2024/03/msg00021.html
CVE ID: CVE-2023-44272 State: PUBLISHED Published: 2023-10-04T08:07:46.459Z Last Updated: 2024-09-19T19:55:17.251Z Vendors: Citadel Products: Citadel Problem Types: Cross-site scripting (XSS) Description: A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.citadel.org/download.html - https://code.citadel.org/citadel/citadel - https://code.citadel.org/citadel/citadel/-/commit/f0dac5ff074ad686fa71ea663c8ead107bd3041e - https://jvn
tadel/citadel - https://code.citadel.org/citadel/citadel/-/commit/f0dac5ff074ad686fa71ea663c8ead107bd3041e - https://jvn.jp/en/jp/JVN08237727/
CVE ID: CVE-2023-44273 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-23T19:14:02.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://verichains.io - https://github.com/Consensys/gnark-crypto/releases - https://github.com/Consensys/gnark-crypto/pull/449
CVE ID: CVE-2023-44275 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-23T19:12:11.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: OPNsense before 23.7.5 allows XSS via the index.php column_count parameter to the Lobby Dashboard. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.x41-dsec.de/lab/advisories/x41-2023-001-opnsense - https://github.com/opnsense/core/compare/23.7.4...23.7.5 - https://github.com/opnsense/core/commit/484753b2abe3fd0fcdb73d8bf00c3fc3709eb8b7
CVE ID: CVE-2023-44276 State: PUBLISHED Published: 2023-09-28T00:00:00 Last Updated: 2024-09-23T19:11:13.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.x41-dsec.de/lab/advisories/x41-2023-001-opnsense - https://github.com/opnsense/core/compare/23.7.4...23.7.5 - https://github.com/opnsense/core/commit/484753b2abe3fd0fcdb73d8bf00c3fc3709eb8b7
CVE ID: CVE-2023-44277 State: PUBLISHED Published: 2023-12-14T15:05:01.367Z Last Updated: 2024-08-02T19:59:52.006Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-78 Description: Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. Additional Analy
e privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-44278 State: PUBLISHED Published: 2023-12-14T15:17:01.213Z Last Updated: 2024-08-02T19:59:51.937Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-22 Description: Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this vulnerability, to gain unauthorized read and write access to the OS files stored on the server filesystem, with the privileges of the running application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/s
eges of the running application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-44279 State: PUBLISHED Published: 2023-12-14T15:22:27.116Z Last Updated: 2024-10-01T14:44:19.118Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-78 Description: Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI. A local high privileged attacker could potentially exploit this vulnerability, to bypass security restrictions. Exploitation may lead to a system take over by an attacker Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.
an attacker Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-44281 State: PUBLISHED Published: 2024-01-24T15:38:32.061Z Last Updated: 2025-05-30T14:16:43.502Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H) Vendors: Dell Products: Dell Pair Problem Types: CWE-264 Description: Dell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. A low privilege user with local access to the system could potentially exploit this vulnerability to delete arbitrary files and result in Denial of Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000219185/dsa-2023-141
CVE ID: CVE-2023-44282 State: PUBLISHED Published: 2023-11-16T09:16:46.487Z Last Updated: 2024-08-29T14:50:11.892Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Repository Manager (DRM) Problem Types: CWE-284 Description: Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module. A local low-privileged attacker could potentially exploit this vulnerability, leading to gaining escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000219303/dsa-2023-415-security-update-for-dell-repo
ulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000219303/dsa-2023-415-security-update-for-dell-repository-manager-vulnerability
CVE ID: CVE-2023-44283 State: PUBLISHED Published: 2024-02-14T07:49:13.074Z Last Updated: 2024-08-14T18:49:25.331Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SupportAssist for Home PCs, SupportAssist for Business PCs Problem Types: CWE-284 Description: In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC. Addit
lation and the execution of arbitrary code, in the Windows system context, and confined to that specific local PC. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000219086/dsa-2023-401-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-user-interface-component
CVE ID: CVE-2023-44284 State: PUBLISHED Published: 2023-12-14T15:26:43.251Z Last Updated: 2024-11-21T16:20:17.129Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-89 Description: Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized read access to application data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
read access to application data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-44285 State: PUBLISHED Published: 2023-12-14T15:31:14.009Z Last Updated: 2024-08-02T19:59:51.974Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-1220 Description: Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vulnerability leading to escalation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-upda
ferences: - https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-44286 State: PUBLISHED Published: 2023-12-14T15:35:32.521Z Last Updated: 2024-08-02T19:59:52.026Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-79 Description: Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the injection of malicious HTML or JavaScript code to a victim user's DOM environment in the browser. . Exploitation may lead to information disclosure, session theft, or client-side request forgery. A
ment in the browser. . Exploitation may lead to information disclosure, session theft, or client-side request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-44288 State: PUBLISHED Published: 2023-12-05T05:35:07.303Z Last Updated: 2024-08-02T19:59:51.999Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-664 Description: Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x, contains an improper control of a resource through its lifetime vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000219932/dsa-2023-417-dell-powerscale-onefs-security-updates-for-multiple-security-vulnerab
ell.com/support/kbdoc/en-us/000219932/dsa-2023-417-dell-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities
CVE ID: CVE-2023-44289 State: PUBLISHED Published: 2023-11-23T06:41:33.931Z Last Updated: 2025-06-05T14:11:38.414Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Command Configure (DCC) Problem Types: CWE-284 Description: Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218628/dsa-2023-390-security-update-for-d
SA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000218628/dsa-2023-390-security-update-for-dell-command-configure-and-dell-command-monitor-vulnerabilities
CVE ID: CVE-2023-44290 State: PUBLISHED Published: 2023-11-23T06:46:03.616Z Last Updated: 2024-08-02T19:59:52.070Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Command Monitor (DCM) Problem Types: CWE-284 Description: Dell Command | Monitor versions prior to 10.10.0, contain an improper access control vulnerability. A local malicious standard user could potentially exploit this vulnerability while repairing/changing installation, leading to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000218628/dsa-2023-390-security-update-for-dell-command-configure-and-de
ces: - https://www.dell.com/support/kbdoc/en-us/000218628/dsa-2023-390-security-update-for-dell-command-configure-and-dell-command-monitor-vulnerabilities
CVE ID: CVE-2023-44291 State: PUBLISHED Published: 2023-12-04T08:13:28.742Z Last Updated: 2024-08-02T19:59:51.989Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell PowerProtect Data Manager DM5500 Appliance Problem Types: CWE-78 Description: Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. Additional Analyst Notes: - CVE Program Container: Re
ation. Exploitation may lead to a system take over by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000220107/dsa-2023-425-security-update-for-dell-powerprotect-data-manager-dm5500-appliance-for-multiple-vulnerabilities
CVE ID: CVE-2023-44292 State: PUBLISHED Published: 2023-11-16T09:22:00.297Z Last Updated: 2024-08-14T18:08:11.988Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Repository Manager (DRM) Problem Types: CWE-284 Description: Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module. A local low-privileged attacker could potentially exploit this vulnerability, leading to gaining escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000219303/dsa-2023-415-security-update-for-dell-repo
CVE ID: CVE-2023-44293 State: PUBLISHED Published: 2024-02-14T08:05:10.270Z Last Updated: 2024-08-10T15:32:07.989Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Dell Products: Secure Connect Gateway-Application, Secure Connect Gateway-Appliance Problem Types: CWE-89 Description: In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially lead to unintentional information disclosure from the product database. Additional Anal
API. This issue may potentially lead to unintentional information disclosure from the product database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
CVE ID: CVE-2023-44294 State: PUBLISHED Published: 2024-02-14T08:24:00.579Z Last Updated: 2024-08-14T18:39:12.452Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Dell Products: Secure Connect Gateway-Application, Secure Connect Gateway-Appliance Problem Types: CWE-89 Description: In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially lead to unintentional information disclosure from the product database. Additional An