Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1683 State: PUBLISHED Published: 2023-03-29T01:00:07.062Z Last Updated: 2024-08-02T05:57:24.728Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Xunrui Products: CMS Problem Types: CWE-200 Description: A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/Fcms/View/system_log.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224240. Additional Analyst Notes: - CVE Program Container: References: - https
e identifier of this vulnerability is VDB-224240. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224240 - https://vuldb.com/?ctiid.224240 - https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md
CVE ID: CVE-2023-1684 State: PUBLISHED Published: 2023-03-29T04:00:05.886Z Last Updated: 2024-08-02T05:57:25.097Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: n/a Products: HadSky Problem Types: CWE-434 Description: A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.php?c=app&a=superadmin:index. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224241 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com
1 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224241 - https://vuldb.com/?ctiid.224241 - https://gitee.com/wkstestete/cve/blob/master/upload/HadSky.md
CVE ID: CVE-2023-1685 State: PUBLISHED Published: 2023-03-29T06:00:06.947Z Last Updated: 2024-08-02T05:57:24.769Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: HadSky Problem Types: CWE-77 Description: A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224242 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - ht
42 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224242 - https://vuldb.com/?ctiid.224242 - https://gitee.com/xinbate/cve/blob/master/HadSky%20rce.md - https://gitee.com/galaxies2580/cve/blob/master/hadSky.md
CVE ID: CVE-2023-1686 State: PUBLISHED Published: 2023-03-29T07:00:06.029Z Last Updated: 2025-02-12T16:25:41.988Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Young Entrepreneur E-Negosyo System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <script>alert(233)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclose
t>alert(233)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224243. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224243 - https://vuldb.com/?ctiid.224243 - https://github.com/Apeng96/bug_report/blob/main/XSS-1.md
CVE ID: CVE-2023-1687 State: PUBLISHED Published: 2023-03-29T08:00:06.721Z Last Updated: 2025-02-11T21:14:55.508Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Simple Task Allocation System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=register_user. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-224244. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
dentifier of this vulnerability is VDB-224244. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.224244 - https://vuldb.com/?ctiid.224244
CVE ID: CVE-2023-1688 State: PUBLISHED Published: 2023-03-29T09:00:07.157Z Last Updated: 2024-08-02T05:57:24.928Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Earnings and Expense Tracker App Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Master.php?a=save_expense. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-224307. Additional Analyst Notes: - CVE Program Container: References: - https://
dentifier of this vulnerability is VDB-224307. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224307 - https://vuldb.com/?ctiid.224307
CVE ID: CVE-2023-1689 State: PUBLISHED Published: 2023-03-29T10:00:05.942Z Last Updated: 2024-08-02T05:57:24.908Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Earnings and Expense Tracker App Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=save_earning. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-224308. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.2
is vulnerability is VDB-224308. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224308 - https://vuldb.com/?ctiid.224308
CVE ID: CVE-2023-1690 State: PUBLISHED Published: 2023-03-29T10:31:04.384Z Last Updated: 2024-08-02T05:57:24.737Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Earnings and Expense Tracker App Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=register_user. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-224309 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Co
iated remotely. The identifier VDB-224309 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.224309 - https://vuldb.com/?ctiid.224309
CVE ID: CVE-2023-1691 State: PUBLISHED Published: 2023-07-06T12:50:39.273Z Last Updated: 2024-11-20T20:32:19.921Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-248 Description: Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2023-1692 State: PUBLISHED Published: 2023-05-20T14:10:55.121Z Last Updated: 2025-01-21T17:10:05.010Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Input Validation Description: The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/4/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486
CVE ID: CVE-2023-1693 State: PUBLISHED Published: 2023-05-20T14:12:33.342Z Last Updated: 2025-01-21T17:06:30.404Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission Issues Description: The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/4/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486
CVE ID: CVE-2023-1694 State: PUBLISHED Published: 2023-05-20T14:13:46.239Z Last Updated: 2025-01-21T17:04:59.145Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration Description: The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/4/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486
CVE ID: CVE-2023-1695 State: PUBLISHED Published: 2023-07-06T12:51:58.425Z Last Updated: 2024-11-27T15:22:51.221Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-755 Description: Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/7/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
CVE ID: CVE-2023-1696 State: PUBLISHED Published: 2023-05-20T14:15:55.847Z Last Updated: 2025-01-21T17:02:03.357Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Data Processing Errors Description: The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/4/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486
CVE ID: CVE-2023-1697 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T15:59:41.316Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-230, Denial of Service (DoS) Description: An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a dcpfe process core and thereby a Denial of Service (DoS). Continued receipt of these specific frames will cause a sustained Denial of Service condition. This issue occurs when a specific malformed ethernet frame is received. This i
a sustained Denial of Service condition. This issue occurs when a specific malformed ethernet frame is received. This issue affects Juniper Networks Junos OS on QFX10000 Series, PTX1000 Series Series: All versions prior to 19.4R3-S10; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S1; 22.1 versions prior to 22.1R2-S1, 22.1R3; 22.2 versions prior to 22.2R1-S2, 22.2R2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supp
2.2R1-S2, 22.2R2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportportal.juniper.net/JSA70612
CVE ID: CVE-2023-1698 State: PUBLISHED Published: 2023-05-15T08:51:27.453Z Last Updated: 2025-01-23T19:13:09.654Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WAGO Products: Compact Controller CC100, Edge Controller, PFC100, PFC200, Touch Panel 600 Advanced Line, Touch Panel 600 Marine Line, Touch Panel 600 Standard Line Problem Types: CWE-78 Description: In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
r, Denial of Service and full system compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.vde.com/en/advisories/VDE-2023-007/
CVE ID: CVE-2023-1699 State: PUBLISHED Published: 2023-03-30T09:26:13.515Z Last Updated: 2025-02-11T20:12:14.684Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Rapid7 Products: Nexpose Problem Types: CWE-425 Description: Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability. This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.rapid7.com/release-notes/nexpose/20230329/
CVE ID: CVE-2023-1701 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-12T16:52:59.036Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/64f943c4-68e5-4ef8-82f6-9c4abe928256 - https://github.com/pimcore/pimcore/commit/2b997737dd6a60be2239a51dd6d9ef5881568e6d
CVE ID: CVE-2023-1702 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-12T16:52:16.949Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pimcore/pimcore/commit/2b997737dd6a60be2239a51dd6d9ef5881568e6d - https://huntr.dev/bounties/d8a47f29-3297-4fce-b534-e1d95a2b3e19
CVE ID: CVE-2023-1703 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-12T19:31:33.148Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d12d105c-18fa-4d08-b591-b0e89e39eec1 - https://github.com/pimcore/pimcore/commit/765832f0dc5f6cfb296a82e089b701066f27bcef
CVE ID: CVE-2023-1704 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-02-12T19:31:07.783Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/84419c7b-ae29-401b-bdfd-5d0c498d320f - https://github.com/pimcore/pimcore/commit/295f5e8d108b68198e36399bea0f69598eb108a0
CVE ID: CVE-2023-1705 State: PUBLISHED Published: 2024-01-29T16:29:18.716Z Last Updated: 2025-05-29T15:09:02.909Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Forcepoint Products: F|One SmartEdge Agent Problem Types: CWE-862 Description: Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) allows Privilege Escalation, Functionality Bypass.This issue affects F|One SmartEdge Agent: before 1.7.0.230330-554. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.forcepoint.com/s/article/000042333
CVE ID: CVE-2023-1706 State: REJECTED Published: N/A Last Updated: 2023-04-12T20:19:09.435Z Description: No description available.
CVE ID: CVE-2023-1707 State: PUBLISHED Published: 2023-06-13T17:06:04.682Z Last Updated: 2025-01-03T17:58:46.273Z Vendors: HP Inc. Products: HP Enterprise LaserJet and HP LaserJet Managed Printers Description: Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled with FutureSmart version 5.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7905330-7905358-16/hpsbpi03838
CVE ID: CVE-2023-1708 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T20:51:52.816Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper control of generation of code ('code injection') in GitLab Description: An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable characters gets copied from clipboard, allowing unexpected commands to be executed on victim machine. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitl
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/387185 - https://hackerone.com/reports/1805604 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1708.json
CVE ID: CVE-2023-1709 State: PUBLISHED Published: 2023-06-07T20:36:05.055Z Last Updated: 2025-01-06T19:59:28.270Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Siemens , Datalogics Products: JT2Go, Teamcenter Visualization, Library APDFL Problem Types: CWE-121 Description: Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-11 - https://cer
ner: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-11 - https://cert-portal.siemens.com/productcert/html/ssa-629917.html - https://www.cisa.gov/news-events/ics-advisories/icsa-23-164-01
CVE ID: CVE-2023-1710 State: PUBLISHED Published: 2023-04-05T00:00:00.000Z Last Updated: 2025-02-10T20:49:48.239Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 prior to 15.10.1 allows an attacker to view the count of internal notes for a given issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/388242 - https://hackerone.com/reports/1829768 - https
ment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/388242 - https://hackerone.com/reports/1829768 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1710.json
CVE ID: CVE-2023-1711 State: PUBLISHED Published: 2023-05-30T18:46:24.317Z Last Updated: 2025-01-09T21:19:26.511Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: Hitachi Energy Products: FOXMAN-UN, UNEM Problem Types: CWE-117 Description: A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information. List of CPEs: * cpe:2.3:a:hitachienergy:foxman_un:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11B:
n_un:R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy:foxman_un:R16A:*:*:*:*:*:*:* * * cpe:2.3:a:hitachienergy:unem:R9C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R10C:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem
chienergy: unem :R11B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R14B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15A:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R15B:*:*:*:*:*:*:* * cpe:2.3:a:hitachienergy: unem :R16A:*:*:*:*:*:*:* Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000155&LanguageCode=en&DocumentPartId=&Action=Launch - https://search.abb.com/library/Download.aspx?DocumentID=8DBD000166&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2023-1712 State: PUBLISHED Published: 2023-03-30T00:00:00.000Z Last Updated: 2025-02-11T20:14:55.996Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: deepset-ai Products: deepset-ai/haystack Problem Types: CWE-547 Description: Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/9a6b1fb4-ec9b-4cfa-af1e-9ce304924829 - https://github.com/deepset-ai/haystack/commit/5fc84904f198de661d5b933fde756aa922bf09f1
CVE ID: CVE-2023-1713 State: PUBLISHED Published: 2023-11-01T09:02:18.019Z Last Updated: 2024-09-05T19:55:42.789Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bitrix24 Products: Bitrix24 Problem Types: CWE-434 Description: Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authenticated attackers to execute arbitrary code via uploading a crafted ".htaccess" file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://starlabs.sg/advisories/23/23-1713/