Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-29463 State: PUBLISHED Published: 2023-09-12T16:42:14.868Z Last Updated: 2025-02-27T20:54:59.034Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Rockwell Automation Products: Pavilion8 Problem Types: CWE-287 Description: The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1140590
CVE ID: CVE-2023-29464 State: PUBLISHED Published: 2023-10-13T12:57:25.490Z Last Updated: 2024-09-17T16:58:55.796Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Rockwell Automation Products: FactoryTalk Linx Problem Types: CWE-20 Description: FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets. Sending a size larger than the buffer size results in leakage of data from memory resulting in an information disclosure. If the size is large enough, it causes communications over the common industrial protocol to become unresponsive to any type of packet, resulting
gh, it causes communications over the common industrial protocol to become unresponsive to any type of packet, resulting in a denial-of-service to FactoryTalk Linx over the common industrial protocol. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1141040
CVE ID: CVE-2023-29465 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-12T16:34:31.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privileges of a different user (who is running FlintQS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sagemath/FlintQS/issues/3 - https://github.com/sagemath/sage/pull/35419
CVE ID: CVE-2023-29468 State: PUBLISHED Published: 2023-08-14T00:00:00.000Z Last Updated: 2025-05-05T16:01:41.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote code execution. This affects WILINK8-WIFI-MCP8 version 8.5_SP3 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ti.com/lit/swra773
CVE ID: CVE-2023-29469 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T21:02:32.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\0' value). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.gnome.org/GNOME/libxml2/-/iss
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.gnome.org/GNOME/libxml2/-/issues/510 - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.10.4 - https://lists.debian.org/debian-lts-announce/2023/04/msg00031.html - https://security.netapp.com/advisory/ntap-20230601-0006/
CVE ID: CVE-2023-29471 State: PUBLISHED Published: 2023-04-27T00:00:00.000Z Last Updated: 2025-01-31T18:39:55.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/akka/alpakka-kafka/issues/1592 - https://akka.io/security/alpakka-kafka-cve-2023-29471.html
CVE ID: CVE-2023-29473 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-12T16:41:55.413Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2303-01.pdf - https://www.news.de/technik/856806612/
: References: - https://networks.unify.com/security/advisories/OBSO-2303-01.pdf - https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/
CVE ID: CVE-2023-29474 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-12T16:44:14.408Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2303-01.pdf - https://www.news.de/technik/856806612/u
References: - https://networks.unify.com/security/advisories/OBSO-2303-01.pdf - https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/
CVE ID: CVE-2023-29475 State: PUBLISHED Published: 2023-04-06T00:00:00.000Z Last Updated: 2025-02-12T16:49:31.846Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2303-01.pdf - https://www.news.de/technik/856806612/u
CVE ID: CVE-2023-29476 State: PUBLISHED Published: 2024-12-14T00:00:00 Last Updated: 2024-12-16T17:09:06.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests. This is fixed in 2.88.2+, 2.89.1+, and 2.90.1+. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.menlosecurity.com/published-security-vulnerabilities
CVE ID: CVE-2023-29478 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-11T19:31:53.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Exopteron/BiblioRCE
CVE ID: CVE-2023-29479 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-11-21T20:05:26.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ribose RNP before 0.16.3 may hang when the input is malformed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/ - https://cve.ribose.com/advisories/ra-2023-04-11/ - https://open.ribose.com/advisories/ra-2023-04-11/
CVE ID: CVE-2023-29480 State: PUBLISHED Published: 2023-04-24T00:00:00.000Z Last Updated: 2025-02-04T20:59:09.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/
CVE ID: CVE-2023-29483 State: PUBLISHED Published: 2024-04-11T00:00:00.000Z Last Updated: 2025-11-04T17:12:31.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1. Additional Analyst Notes:
packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dnspython.org/ - https://github.com/rthalley/dnspython/releases/tag/v2.6.0 - https://github.com/rthalley/dnspython/issues/1045 - https://security.snyk.io/vuln/SNYK-PYTHON-DNSPYTHON-6241713 - https://github.com/eventlet/eventlet/issues/913 - https://github.com/eventlet/eventlet/releases/tag/v0.35.2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOHJOO3OM65UIUUUVDEXMCTXNM6LXZEH/ - https://security.netapp.com/advisory/ntap-20240510-0001/ - https://lis
t.org/message/VOHJOO3OM65UIUUUVDEXMCTXNM6LXZEH/ - https://security.netapp.com/advisory/ntap-20240510-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLRKR57IFVKQC2GCXZBFLCLBAWBWL3F6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3BNSIK5NFYSAP53Y45GOCMOQHHDLGIF/
CVE ID: CVE-2023-29484 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T19:58:24.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.terminalfour.com/release-notes/83/16.html - https://docs.terminalfour.com/articles/security-notices/cve-2023-29484/
CVE ID: CVE-2023-29485 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-09-25T19:57:45.161325 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass network filtering, execute arbitrary code, and obtain sensitive information via DarkLayer Guard threat prevention module. NOTE: Heimdal disputes the validity of this issue arguing that their DNS Security for Endpoint filters DNS traffic on the endpoint by intercepting system-generated DNS requests. The product was not designed to intercept DNS requests from third-party solutions. Addit
system-generated DNS requests. The product was not designed to intercept DNS requests from third-party solutions. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93
CVE ID: CVE-2023-29486 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-09-25T20:04:25.938971 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a Microsoft Windows issue, not a Heimdal specific vulnerability. The USB control solution by Heimdal is meant to manage Microsoft Windows native USB restrictions. They maintain that their solution functions as a management layer over Win
ge Microsoft Windows native USB restrictions. They maintain that their solution functions as a management layer over Windows settings and is not to blame for limitations in Windows' detection capabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93
CVE ID: CVE-2023-29487 State: PUBLISHED Published: 2023-12-21T00:00:00 Last Updated: 2024-11-26T16:17:20.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause a denial of service (DoS) via the Threat To Process Correlation threat prevention module. NOTE: Heimdal asserts this is not a valid vulnerability. Their DNS Security for Endpoint solution includes an optional feature to provide extra information on the originating process that made a DNS request. The lack of process identification in DNS logs is therefore falsely categorized as a DoS issu
s that made a DNS request. The lack of process identification in DNS logs is therefore falsely categorized as a DoS issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93
CVE ID: CVE-2023-29489 State: PUBLISHED Published: 2023-04-27T00:00:00 Last Updated: 2024-08-02T14:07:46.446Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:L/A:L/C:L/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.cpanel.net/threads/cpanel-tsr-2023-0001-full-disclosure.708949/ - https://blog.assetnote.io/2023/04/26/xss-million-websites-cpanel/
CVE ID: CVE-2023-29491 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-11-04T18:14:36.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2023/04/13/4 - http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 - https
/04/13/4 - http://ncurses.scripts.mit.edu/?p=ncurses.git%3Ba=commit%3Bh=eb51b1ea1f75a0ec17c9c5937cb28df1e8eeec56 - https://www.openwall.com/lists/oss-security/2023/04/12/5 - http://www.openwall.com/lists/oss-security/2023/04/19/10 - http://www.openwall.com/lists/oss-security/2023/04/19/11 - https://security.netapp.com/advisory/ntap-20230517-0009/ - https://support.apple.com/kb/HT213843 - https://support.apple.com/kb/HT213844 - https://support.apple.com/kb/HT213845 - https://lists.debian.org/debian-lts-announce/2023/12/msg00004.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/
CVE ID: CVE-2023-29492 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-10-21T23:05:49.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx
CVE ID: CVE-2023-29494 State: PUBLISHED Published: 2023-08-11T02:37:19.124Z Last Updated: 2024-10-18T18:14:51.786Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUCs Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html
CVE ID: CVE-2023-29495 State: PUBLISHED Published: 2024-01-19T20:03:11.441Z Last Updated: 2025-05-09T15:00:55.471Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel NUC BIOS firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01009.html
CVE ID: CVE-2023-29497 State: PUBLISHED Published: 2023-09-26T20:14:53.241Z Last Updated: 2025-11-04T19:15:56.946Z Vendors: Apple Products: macOS Problem Types: An app may be able to access calendar data saved to a temporary directory Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to access calendar data saved to a temporary directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213940 - http://seclists.org/fulldisclosure/2023/Oct/3
CVE ID: CVE-2023-29498 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T20:17:36.476Z Vendors: FUJI ELECTRIC CO., LTD. Products: FRENIC RHC Loader Problem Types: Improper restriction of XML external entity reference (XXE) Description: Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens a specially crafted project file, sensitive information on the system where the affected product is installed may be disclosed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://felib.fujielectric.co.jp/download/details.htm?dataid=45829407&site=global&l
CISA ADP Vulnrichment: References: - https://felib.fujielectric.co.jp/download/details.htm?dataid=45829407&site=global&lang=en - https://jvn.jp/en/vu/JVNVU97809354/
CVE ID: CVE-2023-29499 State: PUBLISHED Published: 2023-09-14T19:06:17.810Z Last Updated: 2025-02-13T16:49:21.518Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: glib2, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Extra Packages for Enterprise Linux, Fedora 37, Fedora 38 Problem Types: CWE-400 Description: A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023
ervice. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-29499 - https://bugzilla.redhat.com/show_bug.cgi?id=2211828 - https://gitlab.gnome.org/GNOME/glib/-/issues/2794 - https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html - https://security.netapp.com/advisory/ntap-20231103-0001/ - https://security.gentoo.org/glsa/202311-18
CVE ID: CVE-2023-29500 State: PUBLISHED Published: 2023-08-11T02:37:20.297Z Last Updated: 2024-10-02T13:28:17.458Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) NUCs Problem Types: information disclosure, CWE-200 Description: Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html
CVE ID: CVE-2023-29501 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T20:13:12.637Z Vendors: RUNSYSTEM CO.,LTD. Products: Jiyu Kukan Toku-Toku coupon App for iOS, and Jiyu Kukan Toku-Toku coupon App for Android Problem Types: Improper Certificate Validation Description: Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android versions 3.5.0 and earlier are vulnerable to improper server certificate verification. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
cker to eavesdrop on an encrypted communication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.runsystem.co.jp/g1-pr/17570 - https://apps.apple.com/jp/app/%E8%87%AA%E9%81%8A%E7%A9%BA%E9%96%93%E3%81%A8%E3%81%8F%E3%81%A8%E3%81%8F%E3%82%AF%E3%83%BC%E3%83%9D%E3%83%B3/id608149604 - https://play.google.com/store/apps/details?id=jp.runsystem - https://jvn.jp/en/jp/JVN33836375/
CVE ID: CVE-2023-29502 State: PUBLISHED Published: 2023-06-07T21:50:29.836Z Last Updated: 2025-01-06T20:59:14.814Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: PTC Products: Vuforia Studio Problem Types: CWE-22 Description: Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.json file to be a different path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13
CVE ID: CVE-2023-29503 State: PUBLISHED Published: 2023-06-06T16:37:52.103Z Last Updated: 2025-01-07T18:41:30.718Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Cscape, Cscape EnvisionRV Problem Types: CWE-121 Description: The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04