Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
GGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDC
GGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300
RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. The web server of the affected devices allow a low privileged user to access hashes and password salts of all system's users, including admin users. An attacker could use the obta
ed user to access hashes and password salts of all system's users, including admin users. An attacker could use the obtained information to brute force the passwords offline. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-170375.html
CVE ID: CVE-2023-52238 State: PUBLISHED Published: 2024-07-09T12:04:40.975Z Last Updated: 2025-08-27T20:42:52.926Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM RST2228, RUGGEDCOM RST2228P Problem Types: CWE-200 Description: A vulnerability has been identified in RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0). The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients. Additional Analy
r could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-170375.html
CVE ID: CVE-2023-52239 State: PUBLISHED Published: 2024-02-06T00:00:00.000Z Last Updated: 2025-06-17T15:16:09.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://ds-security.com/post/xml_external_entity_injection_magic_xpi/ - https://www2.magicsoftware.com/ver/docs/Downloads/Magicxpi/4.14/Windows/ReleaseNotes4.14.pdf
CVE ID: CVE-2023-52240 State: PUBLISHED Published: 2023-12-29T00:00:00 Last Updated: 2024-08-02T22:55:41.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kantega SAML SSO OIDC Kerberos Single Sign-on apps before 6.20.0 for Atlassian products allow XSS if SAML POST Binding is enabled. This affects 4.4.2 through 4.14.8 before 4.14.9, 5.0.0 through 5.11.4 before 5.11.5, and 6.0.0 through 6.19.0 before 6.20.0. The full product names are Kantega SAML SSO OIDC Kerberos Single Sign-on for Jira Data Center & Server (Kantega SSO Enterprise), Kantega SAML SSO OIDC Kerberos Single Sign-on for Confluence Data Center & Server (Kantega SSO Enterprise), Kantega SAML SSO OIDC Kerberos Sin
Kerberos Single Sign-on for Confluence Data Center & Server (Kantega SSO Enterprise), Kantega SAML SSO OIDC Kerberos Single Sign-on for Bitbucket Data Center & Server (Kantega SSO Enterprise), Kantega SAML SSO OIDC Kerberos Single Sign-on for Bamboo Data Center & Server (Kantega SSO Enterprise), and Kantega SAML SSO OIDC Kerberos Single Sign-on for FeCru Server (Kantega SSO Enterprise). (Here, FeCru refers to the Atlassian Fisheye and Crucible products running together.) Additional Analyst Notes: - CVE Program Container: References: - https://kantega-sso.atlassian.net/wiki/spaces/KSE/pages/1226473473/Security+Vulnerability+HTML+injection+Cross-site+scripting+in+SAML+POST+binding+Kantega+SSO+
spaces/KSE/pages/1226473473/Security+Vulnerability+HTML+injection+Cross-site+scripting+in+SAML+POST+binding+Kantega+SSO+Enterprise - https://marketplace.atlassian.com/apps/1211923/kantega-saml-sso-oidc-kerberos-single-sign-on-for-jira?hosting=datacenter&tab=versions - https://marketplace.atlassian.com/apps/1212126/kantega-saml-sso-oidc-kerberos-single-sign-on-for-confluence?hosting=datacenter&tab=overview - https://marketplace.atlassian.com/apps/1213019/kantega-saml-sso-oidc-kerberos-single-sign-on-for-bitbucket?hosting=datacenter&tab=overview - https://marketplace.atlassian.com/apps/1215262/kantega-saml-sso-oidc-kerberos-single-sign-on-for-bamboo?hosting=datacenter&tab=overview - https://ma
n.com/apps/1215262/kantega-saml-sso-oidc-kerberos-single-sign-on-for-bamboo?hosting=datacenter&tab=overview - https://marketplace.atlassian.com/apps/1215263/kantega-saml-sso-oidc-kerberos-single-sign-on-for-fecru?hosting=server&tab=overview
CVE ID: CVE-2023-52251 State: PUBLISHED Published: 2024-01-25T00:00:00.000Z Last Updated: 2025-06-17T15:13:39.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/BobTheShoplifter/CVE-2023-52251-POC - http://packetstormsecurity.com/files/177214/Kafka-UI-0.7.1-Command-Injection.html
CVE ID: CVE-2023-52252 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T22:55:41.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://harkenzo.tlstickle.com/2023-03-17-UR-Web-Triggerable-RCE/ - https://www.exploit-db.com/exploits/51309
CVE ID: CVE-2023-52257 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T22:55:41.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: LogoBee 0.2 allows updates.php?id= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/174815
CVE ID: CVE-2023-52262 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T22:55:41.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: outdoorbits little-backup-box (aka Little Backup Box) before f39f91c allows remote attackers to execute arbitrary code because the PHP extract function is used for untrusted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/outdoorbits/little-backup-box/commit/f39f91cd05544b3eb18b59897c765d6ba9313faa - https://www.php.net/manual/en/function.extract
CVE ID: CVE-2023-52263 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T22:55:41.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to browser/brave_content_browser_client.cc and browser/ui/webui/brave_web_ui_controller_factory.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brave/brave-browser/issues/32449 - https://github.com/brave/brave-core/pull/19820 - https://github.com/brave/brave-core/pull/19820/commits/9da202f7f4bc80b6975909b684bbc0764a31c4e9 - https://github.com/brave/brave-browser/issues/3247
ve-core/pull/19820/commits/9da202f7f4bc80b6975909b684bbc0764a31c4e9 - https://github.com/brave/brave-browser/issues/32473
CVE ID: CVE-2023-52264 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-08-02T22:55:41.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The beesblog (aka Bees Blog) component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharing_url is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://zigrin.com/advisories/thirty-bees-reflected-cross-site-scripting-vulnerability/ - https://github.com/thirtybees/beesblog/commit/a3aeed8fcf01c8e4112c168cf2ef7d67c8056daf - https://github.com/thirtybees/beesblog/compare/1.6.1...1.6.2
CVE ID: CVE-2023-52265 State: PUBLISHED Published: 2023-12-30T00:00:00.000Z Last Updated: 2025-04-17T20:00:42.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wbowm15/jubilant-enigma/blob/main/writeup.md - https://github.com/idurar/idurar-erp-crm/compare/2.0.1...2.1.0
CVE ID: CVE-2023-52266 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-09-09T20:45:20.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trigger this. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hongliuliao/ehttp/issues/38 - https://github.com/hongliuliao/ehttp/commit/17405b975948abc216f6a085d2d027ec1cfd5766
CVE ID: CVE-2023-52267 State: PUBLISHED Published: 2023-12-30T00:00:00 Last Updated: 2024-11-20T16:56:20.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hongliuliao/ehttp/issues/38 - https://github.com/hongliuliao/ehttp/commit/17405b975948abc216f6a085d2d027ec1cfd5766
CVE ID: CVE-2023-52268 State: PUBLISHED Published: 2024-11-12T00:00:00 Last Updated: 2024-11-19T16:51:30.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module is not part of freescout-helpdesk/freescout on GitHub. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://freescout.net/module/end-user-portal/ - https://freescout.net/modules-faq/ - https://github.com/squ1dw3rm/CVE-2023-52268
CVE ID: CVE-2023-52269 State: PUBLISHED Published: 2023-12-31T00:00:00 Last Updated: 2024-08-02T22:55:41.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDaemon SecurityGateway through 9.0.3 allows XSS via a crafted Message Content Filtering rule. This might allow domain administrators to conduct attacks against global administrators. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vipercalling/XSSsecurityGateway/blob/main/finding - https://mdaemon.com/pages/security-gateway
CVE ID: CVE-2023-52271 State: PUBLISHED Published: 2024-01-08T00:00:00.000Z Last Updated: 2025-06-03T14:39:11.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process Light) process via an IOCTL (which will be named at a later time). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.topazevolution.com/en/antifraud/ - https://northwave-cybersecurity.com/vulnerability-notice-topaz-antifraud
CVE ID: CVE-2023-52274 State: PUBLISHED Published: 2024-01-11T00:00:00.000Z Last Updated: 2025-06-17T15:14:27.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yzmcms/yzmcms/tags - https://github.com/yzmcms/yzmcms/issues/65
CVE ID: CVE-2023-52275 State: PUBLISHED Published: 2023-12-31T00:00:00 Last Updated: 2024-08-02T22:55:41.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tahaafarooq/gallery3d-tecno-exploit/ - https://hackmd.io/%40tahaafarooq/bypassing-gallery3d-in-tecno-camon-x
CVE ID: CVE-2023-52277 State: PUBLISHED Published: 2023-12-31T00:00:00 Last Updated: 2024-08-02T22:55:41.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clicks on Test Connection. This occurs during SecureGatewayHost object processing in RAPortCheck.createNWConnection. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5788.php
CVE ID: CVE-2023-52284 State: PUBLISHED Published: 2023-12-31T00:00:00 Last Updated: 2024-08-02T22:55:41.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because push_pop_frame_ref_offset is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bytecodealliance/wasm-micro-runtime/issues/2586 - https://github.com/bytecodealliance/wasm-micro-runtime/pull/2590 - https://github.com/bytecodealliance/wasm-micro-runtime/compare/WAMR-1.2.3...WAMR-1.3.0
CVE ID: CVE-2023-52285 State: PUBLISHED Published: 2024-01-17T00:00:00.000Z Last Updated: 2025-06-17T17:28:47.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: ExamSys 9150244 allows SQL Injection via the /Support/action/Pages.php s_score2 parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lrx0014/ExamSys/commit/915024448428867f2228cf7f06abd1b6e65e9397 - https://fh4ntke.medium.com/examsys-multiple-sql-injections-ef94d84e440c
CVE ID: CVE-2023-52286 State: PUBLISHED Published: 2023-12-31T00:00:00 Last Updated: 2024-09-09T17:25:42.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/get_db_info request, a related issue to CVE-2023-42387. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Narrator21/tdsql/blob/main/20230927.md
CVE ID: CVE-2023-52288 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-20T16:48:48.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a GET request to a /resource-data/<file_path>.txt URI (from views.py), allows attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-52289 State: PUBLISHED Published: 2024-01-13T00:00:00.000Z Last Updated: 2025-06-17T15:10:22.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/<file_path> URI (from views.py), allows attackers to write to arbitrary files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md
CVE ID: CVE-2023-52290 State: PUBLISHED Published: 2024-07-16T07:37:38.660Z Last Updated: 2024-09-13T17:04:01.780Z Vendors: Apache Software Foundation Products: Apache StreamPark (incubating) Problem Types: CWE-89 Description: In streampark-console the list pages(e.g: application pages), users can sort page by field. This sort field is sent from the front-end to the back-end, and the SQL query is generated using this field. However, because this sort field isn't validated, there is a risk of SQL injection vulnerability. The attacker must successfully log into the system to launch an attack, which may cause data leakage. Since no data will be written, so this is a low-impact vulnerability. Mi
launch an attack, which may cause data leakage. Since no data will be written, so this is a low-impact vulnerability. Mitigation: all users should upgrade to 2.1.4, Such parameters will be blocked. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/t3mcm8pb65d9gj3wrgtj9sx9s2pfvvl3
CVE ID: CVE-2023-52291 State: PUBLISHED Published: 2024-07-17T08:16:12.520Z Last Updated: 2025-02-13T17:20:01.487Z Vendors: Apache Software Foundation Products: Apache StreamPark (incubating) Problem Types: CWE-77 Description: In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not strict, allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in to the streampark system and have system-level permissions. Generally, only users of that system have the authorization to log in, and users would not manually input a dangerous operation command. Therefore
hat system have the authorization to log in, and users would not manually input a dangerous operation command. Therefore, the risk level of this vulnerability is very low. Background: In the "Project" module, the maven build args “<” operator causes command injection. e.g : “< (curl http://xxx.com )” will be executed as a command injection, Mitigation: all users should upgrade to 2.1.4, The "<" operator will blocked。 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/pl6xgzoqrl4kcn0nt55zjbsx8dn80mkf - http://www.openwall.com/lists/oss-security/2024/07/17/1
CVE ID: CVE-2023-52292 State: PUBLISHED Published: 2025-01-27T16:06:50.729Z Last Updated: 2025-01-27T17:57:29.747Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling File Gateway Problem Types: CWE-79 Description: IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7176079
CVE ID: CVE-2023-52296 State: PUBLISHED Published: 2024-04-03T12:30:40.180Z Last Updated: 2025-02-13T17:20:02.121Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-20 Description: IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service when querying a specific UDF built-in function concurrently. IBM X-Force ID: 278547. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7145722 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/278547 - https://security.netap
upport/pages/node/7145722 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/278547 - https://security.netapp.com/advisory/ntap-20240517-0003/
CVE ID: CVE-2023-52302 State: PUBLISHED Published: 2024-01-03T08:12:45.328Z Last Updated: 2024-11-14T18:37:34.603Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-476 Description: Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-011.md
CVE ID: CVE-2023-52303 State: PUBLISHED Published: 2024-01-03T08:12:59.795Z Last Updated: 2025-06-17T20:29:07.664Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-476 Description: Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-012.md
CVE ID: CVE-2023-52304 State: PUBLISHED Published: 2024-01-03T08:13:13.759Z Last Updated: 2025-06-17T20:29:07.794Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-120 Description: Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-013.md
CVE ID: CVE-2023-52305 State: PUBLISHED Published: 2024-01-03T08:13:26.696Z Last Updated: 2025-06-03T14:43:55.071Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-369 Description: FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-014.md
CVE ID: CVE-2023-52306 State: PUBLISHED Published: 2024-01-03T08:13:52.600Z Last Updated: 2025-06-03T14:43:50.464Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: PaddlePaddle Products: PaddlePaddle Problem Types: CWE-369 Description: FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-015.md