Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-42643 State: PUBLISHED Published: 2023-11-01T09:08:12.158Z Last Updated: 2024-09-05T19:52:30.888Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42644 State: PUBLISHED Published: 2023-11-01T09:08:12.438Z Last Updated: 2024-09-05T19:52:02.654Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42645 State: PUBLISHED Published: 2023-11-01T09:08:12.743Z Last Updated: 2024-09-05T15:13:33.944Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42646 State: PUBLISHED Published: 2023-11-01T09:08:13.045Z Last Updated: 2024-09-05T19:51:35.102Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42647 State: PUBLISHED Published: 2023-11-01T09:08:13.347Z Last Updated: 2024-09-05T19:50:21.563Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42648 State: PUBLISHED Published: 2023-11-01T09:08:13.634Z Last Updated: 2024-09-05T19:49:38.151Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42649 State: PUBLISHED Published: 2023-11-01T09:08:13.915Z Last Updated: 2024-09-05T19:49:16.495Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42650 State: PUBLISHED Published: 2023-11-01T09:08:14.192Z Last Updated: 2024-09-05T19:48:23.290Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42651 State: PUBLISHED Published: 2023-11-01T09:08:14.474Z Last Updated: 2024-09-05T19:47:10.777Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42652 State: PUBLISHED Published: 2023-11-01T09:08:14.758Z Last Updated: 2024-09-05T19:45:39.264Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42653 State: PUBLISHED Published: 2023-11-01T09:08:15.127Z Last Updated: 2024-09-05T19:42:07.265Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In faceid service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42654 State: PUBLISHED Published: 2023-11-01T09:08:17.997Z Last Updated: 2024-09-05T18:12:04.254Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42655 State: PUBLISHED Published: 2023-11-01T09:08:18.345Z Last Updated: 2024-09-05T15:46:40.652Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: T760/T770/T820/S8000 Description: In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857
CVE ID: CVE-2023-42656 State: PUBLISHED Published: 2023-09-20T16:06:59.527Z Last Updated: 2024-09-24T18:44:28.016Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Progress Software Corporation Products: MOVEit Transfer Problem Types: CWE-79 Description: In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a reflected cross-site scripting (XSS) vulnerability has been identified in MOVEit Transfer's web interface. An attacker could craft a malicious payload targeting MOVEit Transfer users during the package composition procedure. If a MOVEit user interacts with the crafted payload, the
MOVEit Transfer users during the package composition procedure. If a MOVEit user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-September-2023
CVE ID: CVE-2023-42657 State: PUBLISHED Published: 2023-09-27T14:49:03.093Z Last Updated: 2024-09-24T14:19:21.640Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: WS_FTP Server Problem Types: CWE-22 Description: In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered. An attacker could leverage this vulnerability to perform file operations (delete, rename, rmdir, mkdir) on files and folders outside of their authorized WS_FTP folder path. Attackers could also escape the context of the WS_FTP Server file structure and perform the same level of operations (delete, rename, r
also escape the context of the WS_FTP Server file structure and perform the same level of operations (delete, rename, rmdir, mkdir) on file and folder locations on the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/ws_ftp - https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023
CVE ID: CVE-2023-42658 State: PUBLISHED Published: 2023-10-31T14:08:03.537Z Last Updated: 2024-09-06T16:00:52.926Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: Chef InSpec Problem Types: CWE-94, CWE-917 Description: Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.chef.io/release_notes_inspec/ - https://docs.chef.io/inspec/cli/ - https://community.progress.com/s/article/Product-Alert-Bulletin-October-2023-CHEF-Inspec-CVE-2023-42658
CVE ID: CVE-2023-42659 State: PUBLISHED Published: 2023-11-07T15:13:40.001Z Last Updated: 2024-09-04T15:24:41.092Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: Progress Software Corporation Products: WS_FTP Server Problem Types: CWE-434 Description: In WS_FTP Server versions prior to 8.7.6 and 8.8.4, an unrestricted file upload flaw has been identified. An authenticated Ad Hoc Transfer user has the ability to craft an API call which allows them to upload a file to a specified location on the underlying operating system hosting the WS_FTP Server application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
TP Server application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/ws_ftp - https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2023
CVE ID: CVE-2023-42660 State: PUBLISHED Published: 2023-09-20T16:04:54.432Z Last Updated: 2025-02-27T20:49:24.513Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Progress Software Corporation Products: MOVEit Transfer Problem Types: CWE-89 Description: In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a SQL injection vulnerability has been identified in the MOVEit Transfer machine interface that could allow an authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to the MOVEit Transfer machine interface which
the MOVEit Transfer database. An attacker could submit a crafted payload to the MOVEit Transfer machine interface which could result in modification and disclosure of MOVEit database content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-September-2023
CVE ID: CVE-2023-42661 State: PUBLISHED Published: 2024-03-07T13:56:38.162Z Last Updated: 2024-08-16T20:05:40.307Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: JFrog Products: Artifactory Problem Types: CWE-20 Description: JFrog Artifactory prior to version 7.76.2 is vulnerable to Arbitrary File Write of untrusted data, which may lead to DoS or Remote Code Execution when a specially crafted series of requests is sent by an authenticated user. This is due to insufficient validation of artifacts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisorie
iner: - CISA ADP Vulnrichment: References: - https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories
CVE ID: CVE-2023-42662 State: PUBLISHED Published: 2024-03-07T08:29:03.112Z Last Updated: 2024-08-02T20:00:35.991Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: JFrog Products: Artifactory Problem Types: CWE-287 Description: JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/help/r/jfrog-release-information/jfrog-secur
Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories
CVE ID: CVE-2023-42663 State: PUBLISHED Published: 2023-10-14T09:47:26.494Z Last Updated: 2025-02-13T17:09:31.436Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-200 Description: Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/airflow/pull/34315 - https://lists.apache.org/thread/xj86cvfkxgd0cyqfmz6mh1bsf
: References: - https://github.com/apache/airflow/pull/34315 - https://lists.apache.org/thread/xj86cvfkxgd0cyqfmz6mh1bsfc61c6o9 - http://www.openwall.com/lists/oss-security/2023/11/12/2
CVE ID: CVE-2023-42664 State: PUBLISHED Published: 2024-02-06T16:20:13.968Z Last Updated: 2025-11-04T18:17:04.346Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Tp-Link Products: ER7206 Omada Gigabit VPN Router Problem Types: CWE-78 Description: A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
equest to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1856
CVE ID: CVE-2023-42665 State: REJECTED Published: N/A Last Updated: 2025-02-13T17:09:39.018Z Description: No description available.
CVE ID: CVE-2023-42666 State: PUBLISHED Published: 2023-10-19T18:21:32.615Z Last Updated: 2024-09-12T17:53:51.103Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: DEXMA Products: DexGate Problem Types: CWE-200 Description: The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnerability, which may allow an attacker to create malicious requests for obtaining the information of the version about the web server used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02
CVE ID: CVE-2023-42667 State: PUBLISHED Published: 2024-08-14T13:45:38.379Z Last Updated: 2024-08-22T03:55:12.553Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Core(TM) Ultra Processor stream cache mechanism Problem Types: escalation of privilege, CWE-1189 Description: Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01038.html
CVE ID: CVE-2023-42668 State: PUBLISHED Published: 2024-05-16T20:47:38.978Z Last Updated: 2024-08-02T19:23:40.291Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: onboard video driver software for Intel(R) Server Boards based on Intel(R) 62X Chipset Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in some onboard video driver software before version 1.14 for Intel(R) Server Boards based on Intel(R) 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ww
e via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00962.html
CVE ID: CVE-2023-42669 State: PUBLISHED Published: 2023-11-06T06:57:28.981Z Last Updated: 2025-11-20T18:28:20.323Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Storage 3 Problem Types: CWE-400 Description: A vulnerability was found in Samba's "rpcecho"
Enterprise Linux 7, Red Hat Storage 3 Problem Types: CWE-400 Description: A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the "rpcecho" service operates with only one worker in the main RPC task, allowing calls to the "rpcecho" server to be blocked for a specified time, causing service disruptions. This disruption is triggered by a "sleep()" call in the "dcesrv_echo_TestSleep()" function under specific conditions. Authenticated users or attackers can exploit this vulnerability to make calls to the "rp
tion under specific conditions. Authenticated users or attackers can exploit this vulnerability to make calls to the "rpcecho" server, requesting it to block for a specified duration, effectively disrupting most services and leading to a complete denial of service on the AD DC. The DoS affects all other services as "rpcecho" runs in the main RPC task. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6209 - https://access.redhat.com/errata/RHSA-2023:6744 - https://access.redhat.com/errata/RHSA-2023:7371 - https://access.redhat.com/errata/RHSA-2023:7408 - https://access.redhat.com/errata/RHSA-2023:7464 - https:
A-2023:7371 - https://access.redhat.com/errata/RHSA-2023:7408 - https://access.redhat.com/errata/RHSA-2023:7464 - https://access.redhat.com/errata/RHSA-2023:7467 - https://access.redhat.com/security/cve/CVE-2023-42669 - https://bugzilla.redhat.com/show_bug.cgi?id=2241884 - https://bugzilla.samba.org/show_bug.cgi?id=15474 - https://www.samba.org/samba/security/CVE-2023-42669.html
CVE ID: CVE-2023-42670 State: PUBLISHED Published: 2023-11-03T07:58:04.881Z Last Updated: 2025-11-20T18:28:26.442Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Storage 3 Problem Types: CWE-400 Description: A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba's RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation "classic DCs") c
es a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation "classic DCs") can erroneously start and compete for the same unix domain sockets. This issue leads to partial query responses from the AD DC, causing issues such as "The procedure number is out of range" when using tools like Active Directory Users. This flaw allows an attacker to disrupt AD DC services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-42670 - https://bugzilla.redhat.com/show_bug.cgi?id=2241885 - https://bugzilla.samba.org/show_bug.cgi?id=15473 - https://www.samba.org/samba/security/C
.com/show_bug.cgi?id=2241885 - https://bugzilla.samba.org/show_bug.cgi?id=15473 - https://www.samba.org/samba/security/CVE-2023-42670.html
CVE ID: CVE-2023-42671 State: PUBLISHED Published: 2023-12-04T00:54:02.367Z Last Updated: 2024-08-02T19:23:40.086Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049
CVE ID: CVE-2023-42672 State: PUBLISHED Published: 2023-12-04T00:54:02.670Z Last Updated: 2024-08-02T19:23:40.145Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed Additional Analyst Notes: - CVE Program Container: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049