Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
esn't affect map/reduce or search (Dreyfus) index functions. Users are recommended to upgrade to a version that is no longer affected by this issue (Apache CouchDB 3.3.2 or 3.2.3). Workaround: Avoid using design documents from untrusted sources which may attempt to cache or store data in the Javascript environment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/r2wvjfysg3d92lhhjd1qh3wfr8mlp0pp - https://docs.couchdb.org/en/stable/cve/2023-26268.html - https://lists.apache.org/thread/ldkqs0nhpmho26bdxf4fon7w75hsq5gl
CVE ID: CVE-2023-26269 State: PUBLISHED Published: 2023-04-03T07:59:13.228Z Last Updated: 2025-02-13T16:44:53.250Z Vendors: Apache Software Foundation Products: Apache James server Problem Types: CWE-862 Description: Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that version 3.7.4 onward will set up a JMX password automatically for Guice users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/2z44rg93pflbjhvbwy3xtz505bx4
E Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/2z44rg93pflbjhvbwy3xtz505bx41cbs - http://www.openwall.com/lists/oss-security/2023/04/18/3
CVE ID: CVE-2023-26270 State: PUBLISHED Published: 2023-08-28T00:14:10.103Z Last Updated: 2024-10-02T14:30:21.614Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: IBM Products: Guardium Cloud Key Manager Problem Types: 1136 Improper Neutralization of Special Elements Used in a Template Engine Description: IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 248119. Addition
, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 248119. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6995161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248119
CVE ID: CVE-2023-26271 State: PUBLISHED Published: 2023-08-28T00:09:42.467Z Last Updated: 2024-10-02T14:34:22.360Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Guardium Cloud Key Manager Problem Types: CWE-307 Description: IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 248126. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6995161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248126
CVE ID: CVE-2023-26272 State: PUBLISHED Published: 2023-08-28T00:05:48.844Z Last Updated: 2024-10-02T13:54:15.565Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Guardium Cloud Key Manager Problem Types: CWE-209 Description: IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 248133. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/suppor
33. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6995161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248133
CVE ID: CVE-2023-26273 State: PUBLISHED Published: 2023-06-27T17:04:43.321Z Last Updated: 2024-11-06T21:49:29.233Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Security QRadar SIEM Problem Types: CWE-20 Description: IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 248134. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7006083 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248134
CVE ID: CVE-2023-26274 State: PUBLISHED Published: 2023-06-27T17:35:29.144Z Last Updated: 2024-11-08T19:04:32.599Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: Security QRadar SIEM Problem Types: CWE-79 Description: IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248144. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7006085 - https://exchang
ogram Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7006085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248144
CVE ID: CVE-2023-26276 State: PUBLISHED Published: 2023-06-27T17:09:43.059Z Last Updated: 2024-11-06T20:39:46.837Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security QRadar SIEM Problem Types: CWE-327 Description: IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 248147. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7006081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248147
CVE ID: CVE-2023-26277 State: PUBLISHED Published: 2023-05-31T18:57:38.773Z Last Updated: 2025-01-09T19:57:32.397Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: QRadar WinCollect Agent Problem Types: 250 Execution with Unnecessary Privileges Description: IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to execution with unnecessary privileges. IBM X-Force ID: 248156. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6999343 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/248156
CVE ID: CVE-2023-26278 State: PUBLISHED Published: 2023-05-31T19:05:56.360Z Last Updated: 2025-01-09T19:56:47.534Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: IBM Products: QRadar WinCollect Agent Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges on the system. IBM X-Force ID: 248158. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6999341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248158
CVE ID: CVE-2023-26279 State: PUBLISHED Published: 2023-11-23T23:39:05.581Z Last Updated: 2024-08-02T11:46:23.441Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: QRadar WinCollect Agent Problem Types: CWE-116 Description: IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7081403 - https://exchange.xforce.ibmcloud.com/vulnerabilities/213551
CVE ID: CVE-2023-26280 State: PUBLISHED Published: 2024-11-25T15:51:46.104Z Last Updated: 2024-11-25T18:16:42.402Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: IBM Products: Jazz Foundation Problem Types: CWE-266 Description: IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7176207
CVE ID: CVE-2023-26281 State: PUBLISHED Published: 2023-02-28T14:19:15.880Z Last Updated: 2025-03-06T16:35:55.531Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: HTTP Server Problem Types: CWE-20 Description: IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force ID: 248296. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6958522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248296
CVE ID: CVE-2023-26282 State: PUBLISHED Published: 2024-03-05T19:31:33.593Z Last Updated: 2024-08-02T11:46:24.042Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Watson CP4D Data Stores Problem Types: CWE-73 Description: IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system. IBM X-Force ID: 248415. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://www.ibm.com/support/pages/node/6965452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248415
CVE ID: CVE-2023-26283 State: PUBLISHED Published: 2023-03-22T21:35:07.785Z Last Updated: 2025-02-25T19:10:14.350Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: WebSphere Application Server Problem Types: CWE-79 Description: IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248416. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/69
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6964836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248416
CVE ID: CVE-2023-26284 State: PUBLISHED Published: 2023-03-15T17:26:21.136Z Last Updated: 2025-02-26T21:16:33.240Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: MQ Certified Container Problem Types: 284 Improper Access Control Description: IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6960201 - https://exchange.xforce.ibmcloud.c
CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6960201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248417
CVE ID: CVE-2023-26285 State: PUBLISHED Published: 2023-05-05T15:16:00.291Z Last Updated: 2025-01-29T16:25:29.267Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: MQ Problem Types: CWE-119 Description: IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6986563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248418
CVE ID: CVE-2023-26286 State: PUBLISHED Published: 2023-04-26T11:50:34.674Z Last Updated: 2024-08-02T11:46:23.878Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: AIX Problem Types: 264 Permissions, Privileges, Access Controls Description: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX runtime services library to execute arbitrary commands. IBM X-Force ID: 248421. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6983236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248421
CVE ID: CVE-2023-26288 State: PUBLISHED Published: 2024-07-30T17:01:00.430Z Last Updated: 2024-08-02T11:46:23.557Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: IBM Products: Aspera Orchestrator Problem Types: CWE-613 Description: IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 248477. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7161538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248477
CVE ID: CVE-2023-26289 State: PUBLISHED Published: 2024-07-30T16:50:29.871Z Last Updated: 2024-08-02T11:46:23.507Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Aspera Orchestrator Problem Types: CWE-644 Description: IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 248478. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/page
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7161537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/248478
CVE ID: CVE-2023-26290 State: PUBLISHED Published: 2023-03-29T16:28:47.463Z Last Updated: 2025-02-12T16:17:13.561Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Forcepoint Products: Cloud Security Gateway (CSG), Web Security Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_reset_request.mhtml modules), Forcepoint Web Security Portal on Hybrid (login_reset_request.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023;
n_reset_request.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.forcepoint.com/s/article/000041617
CVE ID: CVE-2023-26291 State: PUBLISHED Published: 2023-03-29T16:29:41.294Z Last Updated: 2025-02-12T16:53:28.747Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Forcepoint Products: Cloud Security Gateway (CSG), Web Security Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_form.mhtml modules), Forcepoint Web Security Portal on Hybrid (login_form.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: befo
tml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.forcepoint.com/s/article/000041617
CVE ID: CVE-2023-26292 State: PUBLISHED Published: 2023-03-29T16:29:49.674Z Last Updated: 2025-02-12T16:16:21.065Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Forcepoint Products: Cloud Security Gateway (CSG), Web Security Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG) Portal on Web Cloud Security Gateway, Email Security Cloud (login_submit.mhtml modules), Forcepoint Web Security Portal on Hybrid (login_submit.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security:
t.mhtml modules) allows Reflected XSS.This issue affects Cloud Security Gateway (CSG): before 03/29/2023; Web Security: before 03/29/2023. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.forcepoint.com/s/article/000041617
CVE ID: CVE-2023-26293 State: PUBLISHED Published: 2023-04-11T09:03:02.235Z Last Updated: 2024-11-25T21:18:55.576Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: Totally Integrated Automation Portal (TIA Portal) V15, Totally Integrated Automation Portal (TIA Portal) V16, Totally Integrated Automation Portal (TIA Portal) V17, Totally Integrated Automation Portal (TIA Portal) V18 Problem Types: CWE-20 Description: A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automa
ersions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V16 Update 7), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 6), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 1). Affected products contain a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-116924.pdf - https://cert-portal.siemens.com/productcert/html/ssa-116924.html
CVE ID: CVE-2023-26294 State: PUBLISHED Published: 2023-06-12T21:17:31.080Z Last Updated: 2025-01-06T15:57:18.476Z Vendors: HP Inc. Products: HP Device Manager Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7974907-7974931-16/hpsbhf03842
CVE ID: CVE-2023-26295 State: PUBLISHED Published: 2023-06-12T21:18:10.418Z Last Updated: 2025-01-06T15:54:27.882Z Vendors: HP Inc. Products: HP Device Manager Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7974907-7974931-16/hpsbhf03842
CVE ID: CVE-2023-26296 State: PUBLISHED Published: 2023-06-12T21:18:50.616Z Last Updated: 2025-01-06T15:52:51.476Z Vendors: HP Inc. Products: HP Device Manager Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7974907-7974931-16/hpsbhf03842
CVE ID: CVE-2023-26297 State: PUBLISHED Published: 2023-06-12T21:19:33.982Z Last Updated: 2025-01-06T15:50:45.388Z Vendors: HP Inc. Products: HP Device Manager Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7974907-7974931-16/hpsbhf03842
CVE ID: CVE-2023-26298 State: PUBLISHED Published: 2023-06-12T21:20:38.474Z Last Updated: 2025-01-06T15:48:57.324Z Vendors: HP Inc. Products: HP Device Manager Description: Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7974907-7974931-16/hpsbhf03842
CVE ID: CVE-2023-26299 State: PUBLISHED Published: 2023-06-30T15:40:10.380Z Last Updated: 2024-12-04T16:06:16.624Z Vendors: HP Inc. Products: HP PC products using AMI UEFI Firmware Description: A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_8642715-8642746-16/hpsbhf03850
CVE ID: CVE-2023-26300 State: PUBLISHED Published: 2023-10-18T18:07:55.999Z Last Updated: 2024-08-02T11:46:23.908Z Vendors: HP Inc. Products: HP PC products Description: A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privilege. HP is releasing firmware updates to mitigate the potential vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_9461800-9461828-16
CVE ID: CVE-2023-26301 State: PUBLISHED Published: 2023-07-21T16:06:27.054Z Last Updated: 2024-08-02T11:46:23.942Z Vendors: HP Inc. Products: HP LaserJet Pro Description: Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_8746769-8746795-16/hpsbpi03855
CVE ID: CVE-2023-26302 State: PUBLISHED Published: 2023-02-22T22:02:35.556Z Last Updated: 2025-03-11T18:23:39.942Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Executable Books Products: markdown-it-py Problem Types: CWE-173 Description: Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/executablebooks/markdown-it-py/commit/53ca3e9c2b9e9b295f6abf7f4ad2730a9b70f68c
CVE ID: CVE-2023-26303 State: PUBLISHED Published: 2023-02-22T23:44:40.711Z Last Updated: 2025-03-11T18:22:36.539Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Executable Books Products: markdown-it-py Problem Types: CWE-173 Description: Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/executablebooks/markdown-it-py/commit/ae03c6107dfa18e648f6fdd1280f5b89092d5d49