Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47245 State: PUBLISHED Published: 2023-11-16T18:38:20.715Z Last Updated: 2024-12-18T18:02:49.946Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Marco Milesi Products: ANAC XML Viewer Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/anac-xml-viewer/wordpress-anac-xml-viewer-plugin-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47246 State: PUBLISHED Published: 2023-11-10T00:00:00.000Z Last Updated: 2025-10-21T23:05:32.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.sysaid.com/docs/on-premise-security-enhancements-2023 - https://www.sysaid.com/blog/service-desk/on-premise-software-security-vulnerability-notification - https://documentation.sysaid.com/docs/latest-version-installation-fil
ise-software-security-vulnerability-notification - https://documentation.sysaid.com/docs/latest-version-installation-files
CVE ID: CVE-2023-47247 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T21:09:35.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.sysaid.com/docs/23334
CVE ID: CVE-2023-47248 State: PUBLISHED Published: 2023-11-09T08:17:08.431Z Last Updated: 2025-02-13T17:17:56.649Z Vendors: Apache Software Foundation Products: PyArrow Problem Types: CWE-502 Description: Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied input files). This vulnerability only affects PyArrow, not other Apache Arrow implementations or bindings. It is recommended that users of PyArrow upgrade to 14.0.1. Similarly, it is recommended that downstream libraries upgrade their dep
mended that users of PyArrow upgrade to 14.0.1. Similarly, it is recommended that downstream libraries upgrade their dependency requirements to PyArrow 14.0.1 or later. PyPI packages are already available, and we hope that conda-forge packages will be available soon. If it is not possible to upgrade, we provide a separate package `pyarrow-hotfix` that disables the vulnerability on older PyArrow versions. See https://pypi.org/project/pyarrow-hotfix/ for instructions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/yhy7tdfjf9hrl9vfrtzo8p2cyjq87v7n - https://github.com/apache/arrow/commit/f14170976372436ec1d03a724d8d3f3925484ecf - https://pypi.or
l9vfrtzo8p2cyjq87v7n - https://github.com/apache/arrow/commit/f14170976372436ec1d03a724d8d3f3925484ecf - https://pypi.org/project/pyarrow-hotfix/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FR34AIPXVTMB3XPRU5ULV5HHWPMRE33X/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAGWEAJDWO2ACYATUQCPXLSYY5C3L3XU/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWFYXLVBTBHNKYRXI572RFX7IJDDQGBL/
CVE ID: CVE-2023-47249 State: PUBLISHED Published: 2023-11-04T00:00:00 Last Updated: 2024-09-05T14:25:54.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in IccUtilXml.cpp in libIccXML.a has an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/InternationalColorConsortium/DemoIccMAX/issues/54
CVE ID: CVE-2023-47250 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:35.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11 server sockets allows authenticated attackers (with access to a VNC session) to access the X11 desktops of other users by specifying their DISPLAY ID. This allows complete control of their desktop, including the ability to inject keystrokes and perform a keylogging attack. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/vulnerability-lab/advisories/index.html - https://www.m-privacy.de/
Container: References: - https://sec-consult.com/en/vulnerability-lab/advisories/index.html - https://www.m-privacy.de/en/tightgate-pro-safe-surfing/ - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-m-privacy-tightgate-pro/ - http://seclists.org/fulldisclosure/2023/Nov/13 - http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html
CVE ID: CVE-2023-47251 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:35.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers (with access to a VNC session) to automatically transfer malicious PDF documents by moving them into the .spool directory, and then sending a signal to the VNC service, which automatically transfers them to the connected VNC client's filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/vulnerability-lab/advisories/i
ditional Analyst Notes: - CVE Program Container: References: - https://sec-consult.com/en/vulnerability-lab/advisories/index.html - https://www.m-privacy.de/en/tightgate-pro-safe-surfing/ - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-m-privacy-tightgate-pro/ - http://seclists.org/fulldisclosure/2023/Nov/13 - http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html
CVE ID: CVE-2023-47252 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-11-20T15:50:18.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not verify data size before getting it from the communication buffer, which could lead to possible circumstances where the data immediately following the command buffer could be destroyed with a fixed value. This is fixed in kernel 5.2 v05.28.45, kernel 5.3 v05.37.45, kernel 5.4 v05.45.45, kernel 5.5 v05.53.45, an
fixed value. This is fixed in kernel 5.2 v05.28.45, kernel 5.3 v05.37.45, kernel 5.4 v05.45.45, kernel 5.5 v05.53.45, and kernel 5.6 v05.60.45. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.insyde.com/security-pledge/SA-2023067
CVE ID: CVE-2023-47253 State: PUBLISHED Published: 2023-11-06T00:00:00.000Z Last Updated: 2025-06-12T16:38:22.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.linkedin.com/in/xvinicius/ - https://www.linkedin.com/in/hairrison-wenning-4631a4124/ - https://www.qualitor.com.br/qualitor-8-20 - https://openxp.xpsec.co/blog/cve-2023-47253 - https://www.qualitor.com.br/official-security-advisory-cve-2023-47253
CVE ID: CVE-2023-47254 State: PUBLISHED Published: 2023-12-09T00:00:00 Last Updated: 2024-08-02T21:09:36.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system commands and escalate privileges via any account created within the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-023.txt - https://www.syss.de/pentest-blog/command-injection-via-cli-des-draytek-vigor167-syss-2023-023
CVE ID: CVE-2023-47256 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-06-17T16:16:50.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix - https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
CVE ID: CVE-2023-47257 State: PUBLISHED Published: 2024-02-01T00:00:00.000Z Last Updated: 2025-05-07T20:14:12.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.8-security-fix - https://web.archive.org/web/20240208140218/https://gotham-security.com/screenconnect-cve-2023-47256
CVE ID: CVE-2023-47258 State: PUBLISHED Published: 2023-11-05T00:00:00 Last Updated: 2024-09-05T14:21:27.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE ID: CVE-2023-47259 State: PUBLISHED Published: 2023-11-05T00:00:00 Last Updated: 2024-09-05T14:20:32.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE ID: CVE-2023-47260 State: PUBLISHED Published: 2023-11-05T00:00:00 Last Updated: 2024-09-05T14:19:21.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE ID: CVE-2023-47261 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-08-02T21:09:36.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/gettingstarted request contains a connection string for privileged SQL Server database access, and xp_cmdshell can be enabled. Additional Analyst Notes: - CVE Program Container: References: - https://www.dokmee.com/Support-Learn/Updates-Change-Log - https://h3x0s3.github.io/CVE2023~47261/
CVE ID: CVE-2023-47262 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-11-26T20:20:47.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and/or modified via physical access to an internal serial port. Direct physical access is required to exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cybersecurity.abbott/home/product-advisories.html - https://www.cybersecurity.abbott/home/product-advisories/id-now.html
CVE ID: CVE-2023-47263 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-02T21:09:36.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 15 and later. Additional
ity 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 15 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories/cve-2023-47263
CVE ID: CVE-2023-47264 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-02T21:09:37.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 15 and lat
re Linux Security 64 12.0, WithSecure Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 15 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories/cve-2023-47264
CVE ID: CVE-2023-47265 State: PUBLISHED Published: 2023-12-21T09:28:09.653Z Last Updated: 2025-02-13T17:17:57.265Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-79 Description: Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the browser sandbox. While this issue does not allow to exit the browser sandbox or manipulation of the server-side data - more than the DAG author already has, it allows to modify what the user l
dbox or manipulation of the server-side data - more than the DAG author already has, it allows to modify what the user looking at the DAG details sees in the browser - which opens up all kinds of possibilities of misleading other users. Users of Apache Airflow are recommended to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/airflow/pull/35460 - https://lists.apache.org/thread/128f3zl375vb1qv93k82zhnwkpl233pr - http://www.openwall.com/lists/oss-security/2023/12/21/2
CVE ID: CVE-2023-47267 State: PUBLISHED Published: 2023-12-19T00:00:00 Last Updated: 2024-08-02T21:09:36.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file. Additional Analyst Notes: - CVE Program Container: References: - https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093
CVE ID: CVE-2023-47271 State: PUBLISHED Published: 2023-11-05T00:00:00 Last Updated: 2024-11-26T21:28:25.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pkp/pkp-lib/issues/9464 - http://packetstormsecurity.com/files/176255/PKP-WAL-3.4.0-3-Remote-Code-Execution.html - http://seclis
lib/issues/9464 - http://packetstormsecurity.com/files/176255/PKP-WAL-3.4.0-3-Remote-Code-Execution.html - http://seclists.org/fulldisclosure/2023/Dec/23
CVE ID: CVE-2023-47272 State: PUBLISHED Published: 2023-11-05T00:00:00 Last Updated: 2024-08-02T21:09:37.368Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview or download). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/releases/tag/1.5.6 - https://github.com/roundcube/roundcubemail/releases/tag/1.6.5 - https://github.com/roundcube/roundcubemail/commit/5ec496885e18ec6af956e8c0d627856c2257ba2d - https://lists.fed
g/1.6.5 - https://github.com/roundcube/roundcubemail/commit/5ec496885e18ec6af956e8c0d627856c2257ba2d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4F4DUA3Q46ZVB2RD7BFP4XMNS4RYFFQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFRGBPET73URF6364CI547ZVWQESJLGK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GILSR762MJB3BNJOVOCMW2JXEPV46IIQ/ - https://www.debian.org/security/2023/dsa-5572 - https://lists.debian.org/debian-lts-announce/2023/12/msg00005.html
CVE ID: CVE-2023-47279 State: PUBLISHED Published: 2023-11-30T22:12:05.985Z Last Updated: 2025-06-03T13:44:50.144Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Delta Electronics Products: InfraSuite Device Master Problem Types: CWE-22 Description: In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-331-01
CVE ID: CVE-2023-47282 State: PUBLISHED Published: 2024-05-16T20:47:42.013Z Last Updated: 2024-08-02T21:09:36.041Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) oneVPL software Problem Types: escalation of privilege, CWE-787 Description: Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE ID: CVE-2023-47283 State: PUBLISHED Published: 2023-11-17T04:37:37.783Z Last Updated: 2024-08-02T21:09:36.609Z Vendors: CubeCart Limited Products: CubeCart Problem Types: Directory traversal Description: Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system. Additional Analyst Notes: - CVE Program Container: References: - https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/ - https://jvn.jp/en/jp/JVN22220399/
CVE ID: CVE-2023-47294 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-26T15:11:39.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1owG3_2oVpoCb34Mb7nCYZNrjW8cFxpzN/view?usp=sharing - https://github.com/pwahba/cve-research/blob/main/CVE-2023-47294/CVE-2023-47294.md
CVE ID: CVE-2023-47295 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-24T17:53:35.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload into any text field that accepts strings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/14uldfUpLRIc-NfHiUco0ja-ZiF0MazGA/view?usp=sharing - https://github.com/pwahba/cve-research/blob/main/CVE-2023-47295/CVE-2023-47295.md
CVE ID: CVE-2023-47297 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-24T17:40:47.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing configurations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1YzoJ2QuI9LEEpF8r5ZiCdTQtR9hfsXl7/view?usp=sharing - https://github.com/pwahba/cve-research/blob/main/CVE-2023-47297/CVE-2023-47297.md
CVE ID: CVE-2023-47298 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-24T15:54:26.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1-BDd0ycuYhuxo-lg4th-Cswimoqqzkot/view?usp=sharing - https://github.com/pwahba/cve-research/blob/main/CVE-2023-47298/CVE-2023-47298.md
CVE ID: CVE-2023-47304 State: PUBLISHED Published: 2023-12-05T00:00:00 Last Updated: 2024-08-02T21:09:36.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Vonage Box Telephone Adapter VDV23 version VDV21-3.2.11-0.5.1, allows local attackers to bypass UART authentication controls and read/write arbitrary values to the memory of the device. Additional Analyst Notes: - CVE Program Container: References: - https://trojanhorsey.substack.com/p/cve-2023-47304-unsecured-uart-in
CVE ID: CVE-2023-47307 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-08-02T21:09:36.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in /apply.cgi in Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 allows attackers to cause a denial of service via the ApCliAuthMode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forever-more-cjy/overflow/blob/main/LBT-T310%20Buffer%20overflow.md