Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-42479 State: PUBLISHED Published: 2023-12-12T00:59:36.906Z Last Updated: 2024-11-26T14:33:56.259Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Biller Direct Problem Types: CWE-79 Description: An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct system. This can result in the disclosure or modification of non-sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3383321 - https://www.sap.com/documents/2022/0
ontainer: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3383321 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42480 State: PUBLISHED Published: 2023-11-14T01:02:56.929Z Last Updated: 2024-09-03T14:27:52.474Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: NetWeaver AS Java Problem Types: CWE-307 Description: The unauthenticated attacker in NetWeaver AS Java Logon application - version 7.50, can brute force the login functionality to identify the legitimate user ids. This will have an impact on confidentiality but there is no other impact on integrity or availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3366410 - https://www.sap.com/documents/2022/02/fa865
r: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3366410 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42481 State: PUBLISHED Published: 2023-12-12T01:00:19.249Z Last Updated: 2024-09-28T22:13:37.167Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: SAP_SE Products: SAP Commerce Cloud Problem Types: CWE-640 Description: In SAP Commerce Cloud - versions HY_COM 1905, HY_COM 2005, HY_COM2105, HY_COM 2011, HY_COM 2205, COM_CLOUD 2211, a locked B2B user can misuse the forgotten password functionality to un-block his user account again and re-gain access if SAP Commerce Cloud - Composable Storefront is used as storefront, due to weak access controls in place. This leads to a considerable impact on confidentiality and integrity. Additional Analyst Note
access controls in place. This leads to a considerable impact on confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://me.sap.com/notes/3394567 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2023-42482 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-24T16:37:07.878Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AC:H/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-42483 State: PUBLISHED Published: 2023-12-13T00:00:00 Last Updated: 2024-08-28T14:41:09.877Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can cause unexpected termination of a system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-42486 State: PUBLISHED Published: 2023-09-27T12:13:37.235Z Last Updated: 2024-09-23T20:07:37.270Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Fortect Products: Fortect Problem Types: CWE-428 Description: Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42487 State: PUBLISHED Published: 2023-09-27T12:15:17.677Z Last Updated: 2024-09-23T20:07:13.529Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Soundminer Products: Soundminer Problem Types: CWE-22 Description: Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42488 State: PUBLISHED Published: 2023-10-25T14:37:16.713Z Last Updated: 2024-09-17T13:40:20.869Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: EisBaer Scada Products: v3.0.6433.1964 Problem Types: CWE-22 Description: EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42489 State: PUBLISHED Published: 2023-10-25T14:40:14.864Z Last Updated: 2024-09-10T19:55:27.791Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: EisBaer Scada Products: v3.0.6433.1964 Problem Types: CWE-732 Description: EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42490 State: PUBLISHED Published: 2023-10-25T14:41:10.046Z Last Updated: 2024-09-10T19:54:35.465Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: EisBaer Scada Products: v3.0.6433.1964 Problem Types: CWE-200 Description: EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42491 State: PUBLISHED Published: 2023-10-25T14:34:39.083Z Last Updated: 2024-09-17T13:40:50.914Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: EisBaer Scada Products: EisBaer Scada Problem Types: CWE-285 Description: EisBaer Scada - CWE-285: Improper Authorization Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42492 State: PUBLISHED Published: 2023-10-25T14:42:54.050Z Last Updated: 2024-09-10T19:53:27.877Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: EisBaer Scada Products: v3.0.6433.1964 Problem Types: CWE-321 Description: EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42493 State: PUBLISHED Published: 2023-10-25T14:43:59.520Z Last Updated: 2024-09-10T19:52:38.996Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: EisBaer Scada Products: v3.0.6433.1964 Problem Types: CWE-256 Description: EisBaer Scada - CWE-256: Plaintext Storage of a Password Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42494 State: PUBLISHED Published: 2023-10-25T14:45:04.978Z Last Updated: 2024-09-10T19:51:49.969Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: EisBaer Scada Products: v3.0.6433.1964 Problem Types: CWE-749 Description: EisBaer Scada - CWE-749: Exposed Dangerous Method or Function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42495 State: PUBLISHED Published: 2023-12-13T12:48:41.608Z Last Updated: 2024-08-02T19:23:39.667Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dasan Networks Products: Dasan Networks Problem Types: CWE-78 Description: Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/Departments/faq/cve_advisories
CVE ID: CVE-2023-42496 State: PUBLISHED Published: 2024-02-21T02:21:01.515Z Last Updated: 2024-08-02T19:23:39.433Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Liferay Products: Portal, DXP Problem Types: CWE-79 Description: Reflected cross-site scripting (XSS) vulnerability on the add assignees to a role page in Liferay Portal 7.3.3 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, 7.4 GA through update 92, and 7.3 before update 34 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_roles_admin_web_portlet_RolesAdminPortlet_tabs2 parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Containe
web_portlet_RolesAdminPortlet_tabs2 parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42496
CVE ID: CVE-2023-42497 State: PUBLISHED Published: 2023-10-17T07:56:20.696Z Last Updated: 2024-09-13T16:32:16.701Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Liferay Products: DXP, Portal Problem Types: CWE-79 Description: Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liferay.dev/p
rameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42497
CVE ID: CVE-2023-42498 State: PUBLISHED Published: 2024-02-21T02:47:45.261Z Last Updated: 2024-08-02T19:23:39.621Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Liferay Products: Portal, DXP Problem Types: CWE-79 Description: Reflected cross-site scripting (XSS) vulnerability in the Language Override edit screen in Liferay Portal 7.4.3.8 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 4 through 92 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portal_language_override_web_internal_portlet_PLOPortlet_key parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
ernal_portlet_PLOPortlet_key parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42498
CVE ID: CVE-2023-42501 State: PUBLISHED Published: 2023-11-27T10:23:47.721Z Last Updated: 2025-06-05T14:08:25.751Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-276 Description: Unnecessary read permissions within the Gamma role would allow authenticated users to read configured CSS templates and annotations. This issue affects Apache Superset: before 2.1.2. Users should upgrade to version or above 2.1.2 and run `superset init` to reconstruct the Gamma role or remove `can_read` permission from the mentioned resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
`can_read` permission from the mentioned resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/vk1rmrh9kz0chjmc9tk7o3md6zpz4ygh - http://www.openwall.com/lists/oss-security/2023/11/27/3
CVE ID: CVE-2023-42502 State: PUBLISHED Published: 2023-11-28T16:25:43.177Z Last Updated: 2024-08-02T19:23:39.566Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-601 Description: An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset versions before 3.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/n8348f194d8o8mln3oxd0s8jdl5bxbmn
CVE ID: CVE-2023-42503 State: PUBLISHED Published: 2023-09-14T07:45:14.520Z Last Updated: 2025-02-13T17:09:24.584Z Vendors: Apache Software Foundation Products: Apache Commons Compress Problem Types: CWE-20, CWE-400 Description: Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed TAR file by manipulating file modification times headers, which when parsed with Apache Commons Compress, will cause a denial of service issue via CPU consumption. In versio
ers, which when parsed with Apache Commons Compress, will cause a denial of service issue via CPU consumption. In version 1.22 of Apache Commons Compress, support was added for file modification times with higher precision (issue # COMPRESS-612 [1]). The format for the PAX extended headers carrying this data consists of two numbers separated by a period [2], indicating seconds and subsecond precision (for example “1647221103.5998539”). The impacted fields are “atime”, “ctime”, “mtime” and “LIBARCHIVE.creationtime”. No input validation is performed prior to the parsing of header values. Parsing of these numbers uses the BigDecimal [3] class from the JDK which has a publicly known algorithmic
ader values. Parsing of these numbers uses the BigDecimal [3] class from the JDK which has a publicly known algorithmic complexity issue when doing operations on large numbers, causing denial of service (see issue # JDK-6560193 [4]). A third party can manipulate file time headers in a TAR file by placing a number with a very long fraction (300,000 digits) or a number with exponent notation (such as “9e9999999”) within a file modification time header, and the parsing of files with these headers will take hours instead of seconds, leading to a denial of service via exhaustion of CPU resources. This issue is similar to CVE-2012-2098 [5]. [1]: https://issues.apache.org/jira/browse/COMPRESS-612 [
of CPU resources. This issue is similar to CVE-2012-2098 [5]. [1]: https://issues.apache.org/jira/browse/COMPRESS-612 [2]: https://pubs.opengroup.org/onlinepubs/9699919799/utilities/pax.html#tag_20_92_13_05 [3]: https://docs.oracle.com/javase/8/docs/api/java/math/BigDecimal.html [4]: https://bugs.openjdk.org/browse/JDK-6560193 [5]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2098 Only applications using CompressorStreamFactory class (with auto-detection of file types), TarArchiveInputStream and TarFile classes to parse TAR files are impacted. Since this code was introduced in v1.22, only that version and later versions are impacted. Additional Analyst Notes: - CVE Program Contai
s introduced in v1.22, only that version and later versions are impacted. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/5xwcyr600mn074vgxq92tjssrchmc93c - https://security.netapp.com/advisory/ntap-20231020-0003/
CVE ID: CVE-2023-42504 State: PUBLISHED Published: 2023-11-28T17:59:59.504Z Last Updated: 2025-02-13T17:09:25.157Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-770 Description: An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/yzq5gk1y9lyw6nxwd3xdkxg1djqw1h6l - http://www.openwall.com/lists/oss-security/202
ces: - https://lists.apache.org/thread/yzq5gk1y9lyw6nxwd3xdkxg1djqw1h6l - http://www.openwall.com/lists/oss-security/2023/11/28/6
CVE ID: CVE-2023-42505 State: PUBLISHED Published: 2023-11-28T16:26:58.326Z Last Updated: 2025-02-13T17:09:25.693Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-200 Description: An authenticated user with read permissions on database connections metadata could potentially access sensitive information such as the connection's username. This issue affects Apache Superset before 3.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/bd0fhtfzrtgo1q8x35tpm8ms144d1t2y - http://www.openwall.com/lists/oss-security/2023/11/28/5
CVE ID: CVE-2023-42506 State: PUBLISHED Published: 2023-10-17T22:32:33.471Z Last Updated: 2024-09-13T15:33:48.767Z Vendors: JTEKT ELECTRONICS CORPORATION Products: OnSinView2 Problem Types: Improper restriction of operations within the bounds of a memory buffer Description: Improper restriction of operations within the bounds of a memory buffer issue exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user open a specially crafted OnSinView2 project file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/top
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202310175488/ - https://jvn.jp/en/vu/JVNVU98392064/
CVE ID: CVE-2023-42507 State: PUBLISHED Published: 2023-10-17T22:33:33.352Z Last Updated: 2024-09-13T15:31:57.124Z Vendors: JTEKT ELECTRONICS CORPORATION Products: OnSinView2 Problem Types: Stack-based buffer overflow Description: Stack-based buffer overflow vulnerability exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user open a specially crafted OnSinView2 project file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202310175488/ - https://jvn.jp/en/vu/JVNVU98392064/
CVE ID: CVE-2023-42508 State: PUBLISHED Published: 2023-10-03T12:28:26.154Z Last Updated: 2024-09-19T19:50:49.713Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: JFrog Products: Artifactory Problem Types: CWE-20 Description: JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticated users being able to send emails with manipulated email body. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories
CVE ID: CVE-2023-42509 State: PUBLISHED Published: 2024-03-07T14:07:09.944Z Last Updated: 2024-08-02T19:57:43.236Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: JFrog Products: Artifactory Problem Types: CWE-755 Description: JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in repository configuration initialization steps may lead to exposure of sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories
CVE ID: CVE-2023-42520 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:46:23.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Contai
otection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2023-42521 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:45:52.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Contai
CVE ID: CVE-2023-42522 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:45:19.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Pr
0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2023-42523 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T15:50:58.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CI
12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.withsecure.com/en/support/security-advisories