Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
etting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2950 - https://access.redhat.com/errata/RHSA-2024:3138 - https://access.redhat.com/security/cve/CVE-2023-39192 - https://bugzilla.redhat.com/show_bug.cgi?id=2226784 - https://www.zerodayinitiative.com/advisories/ZDI-CAN-18408/
CVE ID: CVE-2023-39193 State: PUBLISHED Published: 2023-10-09T17:57:49.676Z Last Updated: 2025-11-06T19:47:45.744Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-125 Description: A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
eading to a crash or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:2394 - https://access.redhat.com/errata/RHSA-2024:2950 - https://access.redhat.com/errata/RHSA-2024:3138 - https://access.redhat.com/security/cve/CVE-2023-39193 - https://bugzilla.redhat.com/show_bug.cgi?id=2226787 - https://www.zerodayinitiative.com/advisories/ZDI-CAN-18866/
CVE ID: CVE-2023-39194 State: PUBLISHED Published: 2023-10-09T17:57:50.354Z Last Updated: 2025-11-06T20:01:52.681Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-125 Description: A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure. Additio
ged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2394 - https://access.redhat.com/errata/RHSA-2024:2950 - https://access.redhat.com/errata/RHSA-2024:3138 - https://access.redhat.com/security/cve/CVE-2023-39194 - https://bugzilla.redhat.com/show_bug.cgi?id=2226788 - https://www.zerodayinitiative.com/advisories/ZDI-CAN-18111/
CVE ID: CVE-2023-39195 State: REJECTED Published: N/A Last Updated: 2023-09-28T16:29:57.240Z Description: No description available.
CVE ID: CVE-2023-39196 State: PUBLISHED Published: 2024-02-07T12:56:29.534Z Last Updated: 2025-02-13T17:02:38.948Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Apache Software Foundation Products: Apache Ozone Problem Types: CWE-287 Description: Improper Authentication vulnerability in Apache Ozone. The vulnerability allows an attacker to download metadata internal to the Storage Container Manager service without proper authentication. The attacker is not allowed to do any modification within the Ozone Storage Container Manager service using this vulnerability. The accessible metadata does not contain sensitive information that can be used to exploit the
sing this vulnerability. The accessible metadata does not contain sensitive information that can be used to exploit the system later on, and the accessible data does not make it possible to gain access to actual user data within Ozone. This issue affects Apache Ozone: 1.2.0 and subsequent releases up until 1.3.0. Users are recommended to upgrade to version 1.4.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/o96ct5t7kj5cgrmmfc6756m931t08nky - http://www.openwall.com/lists/oss-security/2024/02/07/2
CVE ID: CVE-2023-39197 State: PUBLISHED Published: 2024-01-23T03:04:26.950Z Last Updated: 2025-11-20T19:52:50.631Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-125 Description: An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-39
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-39197 - https://bugzilla.redhat.com/show_bug.cgi?id=2218342
CVE ID: CVE-2023-39198 State: PUBLISHED Published: 2023-11-09T19:15:47.605Z Last Updated: 2025-11-06T19:47:48.676Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-416 Description: A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, poten
ference to it. This flaw allows an attacker to guess the returned handle value and trigger a use-after-free issue, potentially leading to a denial of service or privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2394 - https://access.redhat.com/errata/RHSA-2024:2950 - https://access.redhat.com/errata/RHSA-2024:3138 - https://access.redhat.com/security/cve/CVE-2023-39198 - https://bugzilla.redhat.com/show_bug.cgi?id=2218332
CVE ID: CVE-2023-39199 State: PUBLISHED Published: 2023-11-14T23:06:21.805Z Last Updated: 2024-09-19T13:50:58.529Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-325 Description: Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39201 State: PUBLISHED Published: 2023-09-12T19:56:36.101Z Last Updated: 2024-09-25T19:59:45.923Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: CleanZoom Problem Types: CWE-426 Description: Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39202 State: PUBLISHED Published: 2023-11-14T22:17:33.784Z Last Updated: 2024-08-29T15:21:02.476Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms Client for Windows and Zoom VDI Client Problem Types: CWE-426 Description: Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39203 State: PUBLISHED Published: 2023-11-14T22:23:00.825Z Last Updated: 2024-09-27T18:59:21.922Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms Client for Windows and Zoom VDI Client Problem Types: CWE-789 Description: Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39204 State: PUBLISHED Published: 2023-11-14T22:28:44.622Z Last Updated: 2024-08-29T15:20:45.432Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-120 Description: Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39205 State: PUBLISHED Published: 2023-11-14T22:32:18.711Z Last Updated: 2024-08-29T15:20:19.803Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-754 Description: Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39206 State: PUBLISHED Published: 2023-11-14T23:02:41.332Z Last Updated: 2024-08-29T15:45:07.488Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-120 Description: Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39208 State: PUBLISHED Published: 2023-09-12T19:55:02.168Z Last Updated: 2024-09-27T19:02:37.370Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Linux Problem Types: CWE-79 Description: Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39209 State: PUBLISHED Published: 2023-08-08T21:39:52.327Z Last Updated: 2024-10-04T17:31:35.321Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows Problem Types: CWE-449 Description: Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39210 State: PUBLISHED Published: 2023-08-08T21:27:52.422Z Last Updated: 2024-10-04T17:30:57.766Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Client SDK for Windows Problem Types: CWE-312 Description: Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39211 State: PUBLISHED Published: 2023-08-08T21:30:46.350Z Last Updated: 2024-10-10T16:20:17.820Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows and Zoom Rooms for Windows Problem Types: CWE-347 Description: Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39212 State: PUBLISHED Published: 2023-08-08T21:32:20.220Z Last Updated: 2024-10-04T17:31:17.356Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms for Windows Problem Types: CWE-144 Description: Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39213 State: PUBLISHED Published: 2023-08-08T21:36:13.783Z Last Updated: 2024-10-10T16:19:52.228Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows and Zoom VDI Client Problem Types: CWE-176 Description: Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39214 State: PUBLISHED Published: 2023-08-08T21:38:25.554Z Last Updated: 2024-09-27T19:07:24.020Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom SDK's Problem Types: CWE-749 Description: Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access. Additional Analyst Notes: - CVE Program Container: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39215 State: PUBLISHED Published: 2023-09-12T19:53:25.817Z Last Updated: 2024-09-27T19:08:23.362Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-449 Description: Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39216 State: PUBLISHED Published: 2023-08-08T17:48:05.348Z Last Updated: 2024-10-10T16:22:15.094Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows Problem Types: CWE-80 Description: Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39217 State: PUBLISHED Published: 2023-08-08T17:49:38.142Z Last Updated: 2024-10-10T16:21:43.772Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom SDK's Problem Types: CWE-80 Description: Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39218 State: PUBLISHED Published: 2023-08-08T17:54:59.577Z Last Updated: 2024-10-10T16:20:58.392Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Clients Problem Types: CWE-602 Description: Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-39219 State: PUBLISHED Published: 2023-10-25T01:44:44.362Z Last Updated: 2025-06-12T14:58:40.168Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ping Identity Products: PingFederate Problem Types: CWE-400 Description: PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumeration requests Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pingidentity.com/en/resources/downloads/pingfederate.html - https://docs.pingidentity.com/r/en-us/pingfederate-113/gyk1689105783244
CVE ID: CVE-2023-39221 State: PUBLISHED Published: 2023-11-14T19:04:30.584Z Last Updated: 2024-08-30T18:28:03.949Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: n/a Products: Intel Unison software Problem Types: escalation of privilege, CWE-284 Description: Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2023-39222 State: PUBLISHED Published: 2023-10-03T00:12:04.706Z Last Updated: 2024-09-20T18:33:35.622Z Vendors: FURUNO SYSTEMS Co.,Ltd. Products: ACERA 1320, ACERA 1310, ACERA 1210, ACERA 1150i, ACERA 1150w, ACERA 1110, ACERA 1020, ACERA 1010, ACERA 950, ACERA 850F, ACERA 900, ACERA 850M, ACERA 810, ACERA 800ST Problem Types: OS command injection Description: OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command that is not intended to be executed from the web interface by sending a specially crafted request. Affected products and versions are as follows: ACERA 1320 firmware ver.01.26
ace by sending a specially crafted request. Affected products and versions are as follows: ACERA 1320 firmware ver.01.26 and earlier, ACERA 1310 firmware ver.01.26 and earlier, ACERA 1210 firmware ver.02.36 and earlier, ACERA 1150i firmware ver.01.35 and earlier, ACERA 1150w firmware ver.01.35 and earlier, ACERA 1110 firmware ver.01.76 and earlier, ACERA 1020 firmware ver.01.86 and earlier, ACERA 1010 firmware ver.01.86 and earlier, ACERA 950 firmware ver.01.60 and earlier, ACERA 850F firmware ver.01.60 and earlier, ACERA 900 firmware ver.02.54 and earlier, ACERA 850M firmware ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. The
are ver.02.06 and earlier, ACERA 810 firmware ver.03.74 and earlier, and ACERA 800ST firmware ver.07.35 and earlier. They are affected when running in ST(Standalone) mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.furunosystems.co.jp/news/info/vulner20231002.html - https://jvn.jp/en/vu/JVNVU94497038/
CVE ID: CVE-2023-39223 State: PUBLISHED Published: 2024-03-18T00:32:44.762Z Last Updated: 2025-03-27T19:55:14.729Z Vendors: A.K.I Software Products: pmc.exe, pmam.exe, pmum.exe (Standard edition), pmum.exe (Pro edition), pmum.exe (Standard + IMAP4 edition), pmum.exe (Pro + IMAP4 edition / Enterprise edition) Problem Types: Cross-site scripting (XSS) Description: Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://akisoftwa
web browser. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://akisoftware.com/Vulnerability202301.html - https://jvn.jp/en/jp/JVN92720882/
CVE ID: CVE-2023-39224 State: PUBLISHED Published: 2023-09-06T09:22:59.282Z Last Updated: 2024-09-26T20:13:06.770Z Vendors: TP-LINK Products: Archer C5, Archer C7 Problem Types: OS command injection Description: Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated attacker to execute arbitrary OS commands. Note that Archer C5 is no longer supported, therefore the update for this product is not provided. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/archer-c7/v2/#Firmware - https://jvn.jp/en/vu/JVNVU99392903/
CVE ID: CVE-2023-39226 State: PUBLISHED Published: 2023-11-30T22:05:36.057Z Last Updated: 2024-08-02T18:02:06.472Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-749 Description: In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code through a single UDP packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-331-01
CVE ID: CVE-2023-39227 State: PUBLISHED Published: 2023-09-11T19:08:08.109Z Last Updated: 2024-09-25T19:58:43.390Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Softneta Products: MedDream PACS Problem Types: CWE-256 Description: ​Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-248-01
CVE ID: CVE-2023-39228 State: PUBLISHED Published: 2023-11-14T19:04:32.200Z Last Updated: 2024-08-30T17:45:32.929Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel Unison software Problem Types: denial of service, CWE-284 Description: Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2023-39230 State: PUBLISHED Published: 2023-11-14T19:04:18.458Z Last Updated: 2024-08-30T18:30:10.633Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel Rapid Storage Technology software Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00961.html