Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-5570 State: PUBLISHED Published: 2023-10-27T11:53:43.885Z Last Updated: 2024-09-09T15:14:43.788Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Inohom Products: Home Manager Gateway Problem Types: CWE-1320 Description: Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Account Footprinting.This issue affects Home Manager Gateway: before v.1.27.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0609
CVE ID: CVE-2023-5571 State: PUBLISHED Published: 2023-10-13T09:55:33.149Z Last Updated: 2024-09-16T20:43:18.242Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: vriteio Products: vriteio/vrite Problem Types: CWE-20 Description: Improper Input Validation in GitHub repository vriteio/vrite prior to 0.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/926ca25f-dd4a-40cf-8e6b-9d7b5938e95a - https://github.com/vriteio/vrite/commit/1877683b932bb33fb20d688e476284b70bb9fe23
CVE ID: CVE-2023-5572 State: PUBLISHED Published: 2023-10-13T09:55:53.916Z Last Updated: 2024-09-17T13:48:19.195Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: vriteio Products: vriteio/vrite Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) in GitHub repository vriteio/vrite prior to 0.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/db649f1b-8578-4ef0-8df3-d320ab33f1be - https://github.com/vriteio/vrite/commit/1877683b932bb33fb20d688e476284b70bb9fe23
CVE ID: CVE-2023-5573 State: PUBLISHED Published: 2023-10-13T09:56:18.689Z Last Updated: 2024-09-17T13:47:50.740Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: vriteio Products: vriteio/vrite Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling in GitHub repository vriteio/vrite prior to 0.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/46a2bb2c-712a-4008-a147-b862e3af7d72 - https://github.com/vriteio/vrite/commit/1877683b932bb33fb20d688e476284b70bb9fe23
CVE ID: CVE-2023-5574 State: PUBLISHED Published: 2023-10-25T19:47:03.122Z Last Updated: 2025-11-20T07:07:51.123Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-416 Description: A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb
er is warped from a screen 1 to a screen 0, a use-after-free issue may be triggered during shutdown or reset of the Xvfb server, allowing for possible escalation of privileges or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2298 - https://access.redhat.com/security/cve/CVE-2023-5574 - https://bugzilla.redhat.com/show_bug.cgi?id=2244735 - https://lists.x.org/archives/xorg-announce/2023-October/003430.html
CVE ID: CVE-2023-5575 State: PUBLISHED Published: 2023-10-16T13:29:57.988Z Last Updated: 2024-09-16T18:08:03.213Z Vendors: Devolutions Products: Server Description: Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a low privileged user to access entries via a specific combination of permissions in the entry and in its parent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2023-0018
CVE ID: CVE-2023-5576 State: PUBLISHED Published: 2023-10-20T06:35:20.189Z Last Updated: 2025-02-05T19:07:34.349Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: wpvividplugins Products: Migration, Backup, Staging – WPvivid Problem Types: CWE-200 Information Exposure Description: The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 0.9.91 via Google Drive API secrets stored in plaintext in the publicly visible plugin source. This could allow unauthenticated attackers to impersonate the WPVivid Google Drive account via the API if they can trick a user into reauthenticating
ed attackers to impersonate the WPVivid Google Drive account via the API if they can trick a user into reauthenticating via another vulnerability or social engineering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4658109d-295c-4a1b-b219-ca1f4664ff1d?source=cve - https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.91/includes/customclass/client_secrets.json - https://plugins.trac.wordpress.org/changeset/2977863/
CVE ID: CVE-2023-5577 State: PUBLISHED Published: 2023-11-07T11:31:06.058Z Last Updated: 2024-08-02T08:07:31.685Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bitlydeveloper Products: Bitly&#039;s WordPress Plugin Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Bitly's plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpbitly' shortcode in all versions up to, and including, 2.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and abov
escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/31522e54-f260-46d0-8d57-2d46af7d3450?source=cve - https://plugins.trac.wordpress.org/browser/wp-bitly/trunk/includes/class-wp-bitly-shortlink.php?rev=2767772#L238
CVE ID: CVE-2023-5578 State: PUBLISHED Published: 2023-10-14T10:31:04.690Z Last Updated: 2024-08-02T08:07:31.172Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Portábilis Products: i-Educar Problem Types: CWE-79 Description: A vulnerability was found in Portábilis i-Educar up to 2.7.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file \intranet\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the input ");'> <script>alert(document.cookie)</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public a
ript> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-242143. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.242143 - https://vuldb.com/?ctiid.242143
CVE ID: CVE-2023-5579 State: PUBLISHED Published: 2023-10-14T11:31:04.350Z Last Updated: 2024-08-02T08:07:32.121Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: yhz66 Products: Sandbox Problem Types: CWE-200 Description: A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-242144. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
is vulnerability is VDB-242144. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.242144 - https://vuldb.com/?ctiid.242144 - https://github.com/cojoben/Sendbox/blob/main/README.md
CVE ID: CVE-2023-5580 State: PUBLISHED Published: 2023-10-14T12:00:07.066Z Last Updated: 2024-09-17T15:24:57.315Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Library System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-242145 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
fier VDB-242145 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.242145 - https://vuldb.com/?ctiid.242145 - https://github.com/GodRone/CVE/blob/main/SerBermz_SQL%20injection.md
CVE ID: CVE-2023-5581 State: PUBLISHED Published: 2023-10-14T12:31:04.178Z Last Updated: 2024-08-02T08:07:32.098Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Medicine Tracker System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-242146 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment:
e used. VDB-242146 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.242146 - https://vuldb.com/?ctiid.242146 - https://github.com/GodRone/MedicineTrackerSystem/blob/main/Medicine%20Tracker%20System_XSS.md
CVE ID: CVE-2023-5582 State: PUBLISHED Published: 2023-10-14T14:00:06.426Z Last Updated: 2024-08-02T08:07:31.164Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: ZZZCMS Problem Types: CWE-80 Description: A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-242147. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Reference
this vulnerability is VDB-242147. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.242147 - https://vuldb.com/?ctiid.242147 - https://github.com/Jacky-Y/vuls/blob/main/vul8.md
CVE ID: CVE-2023-5583 State: PUBLISHED Published: 2023-10-30T13:48:45.699Z Last Updated: 2025-02-05T18:56:31.855Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: maca134 Products: WP Simple Galleries Problem Types: CWE-502 Deserialization of Untrusted Data Description: The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.34 via deserialization of untrusted input from the 'wpsimplegallery_gallery' post meta via 'wpsgallery' shortcode. This allows authenticated attackers, with contributor-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a PO
ntributor-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0dc8f7cf-d8be-4229-b823-3bd9bc9f6eda?source=cve - https://plugins.trac.wordpress.org/browser/wp-simple-galleries/tags/1.34/wp-simple-gallery.php#L250
CVE ID: CVE-2023-5584 State: REJECTED Published: N/A Last Updated: 2024-02-06T14:25:54.738Z Description: No description available.
CVE ID: CVE-2023-5585 State: PUBLISHED Published: 2023-10-14T23:31:05.370Z Last Updated: 2024-09-16T20:02:27.551Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Motorcycle Rental System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/?page=bike of the component Bike List. The manipulation of the argument Model with the input "><script>confirm (document.cookie)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and
> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-242170 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.242170 - https://vuldb.com/?ctiid.242170
CVE ID: CVE-2023-5586 State: PUBLISHED Published: 2023-10-15T00:28:09.002Z Last Updated: 2024-09-16T20:00:46.418Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: gpac Products: gpac/gpac Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d2a6ea71-3555-47a6-9b18-35455d103740 - https://github.com/gpac/gpac/commit/ca1b48f0abe71bf81a58995d7d75dc27f5a17ddc
CVE ID: CVE-2023-5587 State: PUBLISHED Published: 2023-10-15T22:00:05.193Z Last Updated: 2024-08-02T08:07:31.646Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Free Hospital Management System for Small Practices Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The manipulation of the argument search leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
ads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-242186 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.242186 - https://vuldb.com/?ctiid.242186 - https://github.com/GodRone/Hospital-Management-System_SQL-injection/blob/main/Hospital%20Management%20System_SQL%20injection.md
CVE ID: CVE-2023-5588 State: PUBLISHED Published: 2023-10-15T22:00:06.500Z Last Updated: 2024-08-02T08:07:32.112Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: kphrx Products: pleroma Problem Types: CWE-22 Description: A vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emoji.Pack of the file lib/pleroma/emoji/pack.ex. The manipulation of the argument name leads to path traversal. The complexity of an attack is rather high. The exploitability is told to be difficult. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is
ct does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named 2c795094535537a8607cc0d3b7f076a609636f40. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-242187. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.242187 - https://vuldb.com/?ctiid.242187 - https://github.com/kphrx/pleroma/pull/197 - https://github.com/kphrx/pleroma/commit/2c795094535537a8607cc0d3b7f076a609636f40
CVE ID: CVE-2023-5589 State: PUBLISHED Published: 2023-10-15T22:31:04.177Z Last Updated: 2025-06-16T16:53:12.714Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Judging Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-242188. Additional Analyst Notes: - CVE Program Container
c and may be used. The identifier of this vulnerability is VDB-242188. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.242188 - https://vuldb.com/?ctiid.242188 - https://github.com/GodRone/Judging-Management-System_SQL-injection/blob/main/Judging%20Management%20System_SQL%20injection.md
CVE ID: CVE-2023-5590 State: PUBLISHED Published: 2023-10-15T22:14:03.767Z Last Updated: 2024-09-16T20:00:02.076Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: seleniumhq Products: seleniumhq/selenium Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/e268cd68-4f34-49bd-878b-82b96dcc0c99 - https://github.com/seleniumhq/selenium/commit/023a0d52f106321838ab1c0997e76693f4dcbdf6
CVE ID: CVE-2023-5591 State: PUBLISHED Published: 2023-10-16T00:00:19.280Z Last Updated: 2024-09-16T17:17:10.125Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: librenms Products: librenms/librenms Problem Types: CWE-89 Description: SQL Injection in GitHub repository librenms/librenms prior to 23.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/54813d42-5b93-440e-b9b1-c179d2cbf090 - https://github.com/librenms/librenms/commit/908aef65967ce6184bdc587fd105660d5d55129e
CVE ID: CVE-2023-5592 State: PUBLISHED Published: 2023-12-14T14:04:41.083Z Last Updated: 2024-08-02T08:07:31.902Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: PHOENIX CONTACT Products: MULTIPROG, ProConOS eCLR (SDK) Problem Types: CWE-494 Description: Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a complete loss of integrity. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en/advisories/VDE-2023-054/
CVE ID: CVE-2023-5593 State: PUBLISHED Published: 2023-11-20T12:03:16.224Z Last Updated: 2024-08-29T20:47:54.253Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: SecuExtender SSL VPN Client Problem Types: CWE-787 Description: The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerab
: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-secuextender-ssl-vpn-client-software
CVE ID: CVE-2023-5594 State: PUBLISHED Published: 2023-12-21T11:30:41.256Z Last Updated: 2024-08-02T08:07:32.481Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: ESET, spol. s r.o. Products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Endpoint Antivirus for Linux 10.0 and above, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure, ESET Server Security for Linux 10.1 and above Problem Types: CWE-2
Point Server, ESET File Security for Microsoft Azure, ESET Server Security for Linux 10.1 and above Problem Types: CWE-295 Description: Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as trusted. Additional Analyst Notes: - CVE Program Container: References: - https://support.eset.com/en/ca8562-eset-customer-advisory-improper-following-of-a-certificates-chain-of-trust-in-eset-security-products-fixed
CVE ID: CVE-2023-5595 State: PUBLISHED Published: 2023-10-16T08:25:00.327Z Last Updated: 2024-09-16T16:48:15.354Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: gpac Products: gpac/gpac Problem Types: CWE-400 Description: Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0064cf76-ece1-495d-82b4-e4a1bebeb28e - https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1
CVE ID: CVE-2023-5597 State: PUBLISHED Published: 2024-05-17T16:54:57.714Z Last Updated: 2024-08-02T08:07:32.140Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2023-5598 State: PUBLISHED Published: 2023-11-21T09:29:05.310Z Last Updated: 2024-08-02T08:07:31.903Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allow an attacker to execute arbitrary script code. Additional Analyst Notes: - CVE Program Container: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2023-5599 State: PUBLISHED Published: 2023-11-21T09:28:35.458Z Last Updated: 2024-08-07T20:12:59.659Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Dassault Systèmes Products: 3DSwymer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories