Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-22999 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-20T19:44:01.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NULL in the error case, whereas it is actually an error pointer). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - https://github.com/torvalds/linux/commit/b52fe2dbb3e655eb1483000adfab68a219549e13
CVE ID: CVE-2023-23000 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-20T19:35:28.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17 - https://github.com/torvalds/linux/commit/045a31b95509c8f25f5f04ec5e0dec5cd09f2c5f - https://security.netapp.com/advisory/ntap-20230331-0004/
CVE ID: CVE-2023-23001 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-20T19:27:06.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error case, whereas it is actually an error pointer). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - https://github.com/torvalds/linux/commit/3ba880a12df5aa4488c18281701b5b1bc3d4531a
CVE ID: CVE-2023-23002 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-20T19:00:27.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - https://github.com/torvalds/linux/commit/6845667146a28c09b5dfc401c1ad112374087944
CVE ID: CVE-2023-23003 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-20T14:24:31.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16 - https://github.com/torvalds/linux/commit/0a515a06c5ebfa46fee3ac519e418f801e718da4 - https://security.netapp.com/advisory/ntap-20230331-0003/
CVE ID: CVE-2023-23004 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-19T19:33:52.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19 - https://github.com/torvalds/linux/commit/15342f930ebebcfe36f2415049736a77d7d2e045 - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
CVE ID: CVE-2023-23005 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-19T18:12:42.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic cases in which a user can cause the alloc_memory_type error case to be reached. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/4a625ceee8a0ab0273534cb6b432ce6b331db5ee - https://cdn.kernel
nt: References: - https://github.com/torvalds/linux/commit/4a625ceee8a0ab0273534cb6b432ce6b331db5ee - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2 - https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2
CVE ID: CVE-2023-23006 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-19T18:08:11.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it is actually an error pointer). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/6b8b42585886c59a008015083282aae434349094 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.13
CVE ID: CVE-2023-23007 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T15:56:06.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function node where members are added. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/earclink/espcms/issues/I680WG
CVE ID: CVE-2023-23009 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-17T17:02:28.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS payload with an incorrect selector length. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libreswan/libreswan/issues/954 - https://www.debian.org/security/2023/dsa-5368 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MFOIQX2LRL43P3GJT33DE7G7COHNXDN/ - https://lists.fedoraproject.org/archives/l
nnounce%40lists.fedoraproject.org/message/2MFOIQX2LRL43P3GJT33DE7G7COHNXDN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSMYJH7MC2FZGCY5NH5AXULO3ISXIHOF/
CVE ID: CVE-2023-23010 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:05:05.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit d5904379ca55014c5df34c67deda982c73dc7fe5 (on Dec 27, 2022), allows attackers to execute arbitrary code via the languages and trans_load parameters in file add_product.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/8a836008e9f635a2f80d09c9a8b5a533 - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/242 - https://github.com/kirilkirkov/Ec
a8b5a533 - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/242 - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/d5904379ca55014c5df34c67deda982c73dc7fe5
CVE ID: CVE-2023-23011 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T14:29:42.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/e4ab1aedd9727c3b09c7d0154a052199 - https://gist.github.com/enferas/e8fff9261526fdf51808c39b3004e1b5
CVE ID: CVE-2023-23012 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:03:59.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecified impacts via the input bgcol in file Weeks.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/bd8ec37999c216eceabd6b80d5a95f94 - https://github.com/craigrodway/classroombookings/issues/52
CVE ID: CVE-2023-23014 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T15:01:37.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c (on Apr 23, 2021) via edit_store_name and edit_active inputs in file InventorySystem.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/649f39c955ce2816ba1abae620e749c7 - https://github.com/ronknight/InventorySystem/issues/23
CVE ID: CVE-2023-23015 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T14:58:22.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Kalkun 0.8.0 via username input in file User_model.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/eaf599190451745f1b339f64cca4a36d - https://github.com/kalkun-sms/Kalkun/issues/487
CVE ID: CVE-2023-23019 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-08-02T10:28:40.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in file main.php in sourcecodester oretnom23 Blog Site 1.0 via the name and email parameters to function user_add.\ Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/enferas/fc3a1b4b3826d0e10cc4a021e5ec1822
CVE ID: CVE-2023-23021 State: PUBLISHED Published: 2024-05-01T00:00:00.000Z Last Updated: 2025-03-27T20:12:51.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/enferas/fe381bcc4a020f22cec31cb00e73f43c
CVE ID: CVE-2023-23022 State: PUBLISHED Published: 2024-05-01T00:00:00.000Z Last Updated: 2025-03-26T21:08:27.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, from_date and to_date inputs in file Main.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/enferas/ffc4d8e38e238709a3dedf3002cb321d
CVE ID: CVE-2023-23024 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T14:56:39.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/6ae66b7daf4f86997cd5320975f209e2
CVE ID: CVE-2023-23026 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T14:28:44.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the product_name and product_price inputs in file print.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/enferas/63b2bc406f50349403029c26683e84ce
CVE ID: CVE-2023-23039 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-20T20:46:39.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use-after-free if a physically proximate attacker removes a VCC device while calling open(), aka a race condition between vcc_open() and vcc_remove(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lkml.org/lkml/2023/1/1/169
CVE ID: CVE-2023-23040 State: PUBLISHED Published: 2023-02-22T00:00:00.000Z Last Updated: 2025-03-12T20:48:12.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for basic authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://midist0xf.medium.com/tl-wr940n-uses-weak-md5-hashing-algorithm-ae7b589860d2 - https://www.tp-link.com/en/support/download/tl-wr940n/#Firmware
CVE ID: CVE-2023-23059 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-01-29T20:54:00.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default installation and allows attackers to execute arbitrary code and gain escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://geovision.com - http://gv-edge.com - https://packetstormsecurity.com/files/172141/GV-Edge-Recording-Manager-2.2.3.0-Privilege-Escalation.html
CVE ID: CVE-2023-23063 State: PUBLISHED Published: 2023-02-22T00:00:00 Last Updated: 2024-08-02T10:28:40.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ahmedalroky/CVEs/tree/cellinx
CVE ID: CVE-2023-23064 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T19:53:21.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/shellpei/TOTOLINK-Unauthorized/blob/main/CVE-2023-23064
CVE ID: CVE-2023-23073 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:29:08.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the purchase component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugbounty.zohocorp.com/bb/#/bug/101000006459171?tab=originator - https://www.manageengine.com/products/service-desk/CVE-2023-23073.html
CVE ID: CVE-2023-23074 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:27:27.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugbounty.zohocorp.com/bb/#/bug/101000006459195?tab=originator - https://www.manageengine.com/products/service-desk/CVE-2023-23074.html
CVE ID: CVE-2023-23075 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:26:03.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugbounty.zohocorp.com/bb/#/bug/101000006463045?tab=originator
CVE ID: CVE-2023-23076 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:22:23.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugbounty.zohocorp.com/bb/#/bug/101000006459751?tab=originator - https://www.manageengine.com/products/support-center/CVE-2023-23076.html
CVE ID: CVE-2023-23077 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:20:01.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment field when adding a new status comment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugbounty.zohocorp.com/bb/#/bug/101000006387693?tab=originator - https://www.manageengine.com/products/service-desk/CVE-2023-23077.html
CVE ID: CVE-2023-23078 State: PUBLISHED Published: 2023-02-01T00:00:00.000Z Last Updated: 2025-03-27T14:19:08.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment field when changing the credentials in the Assets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugbounty.zohocorp.com/bb/#/bug/101000006458675?tab=originator - https://www.manageengine.com/products/service-desk/CVE-2023-23078.html
CVE ID: CVE-2023-23080 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T14:01:45.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10<=V20220906024_2025 and Tenda IT7-PCS Tenda IT7-PCS<=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS<=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS<=V2209020908. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fxc233/iot-vul/tree/main/Tenda/IPC
CVE ID: CVE-2023-23082 State: PUBLISHED Published: 2023-02-03T00:00:00 Last Updated: 2024-08-02T10:28:39.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xbmc/xbmc/issues/22377 - https://github.com/xbmc/xbmc/commit/8c2aafb6d4987833803e037c923aaf83f9ff41e1 - https://github.com/xbmc/xbmc/pull/22380 - https://github.com/xbmc/xbmc/pull/22380/commits/00fec1dbdd1df827872c7b55ad93059636dfc076 - https://github.c
pull/22380 - https://github.com/xbmc/xbmc/pull/22380/commits/00fec1dbdd1df827872c7b55ad93059636dfc076 - https://github.com/xbmc/xbmc/pull/22380/commits/7e5f9fbf9aaa3540aab35e7504036855b23dcf60 - https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
CVE ID: CVE-2023-23086 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:33:07.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/scottcgi/MojoJson/issues/2
CVE ID: CVE-2023-23087 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:33:40.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/scottcgi/MojoJson/issues/3
CVE ID: CVE-2023-23088 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:34:04.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the json_value_parse function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Barenboim/json-parser/issues/7
CVE ID: CVE-2023-23108 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T14:00:00.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WhatTheFuzz/crasm-fuzz/tree/a020ad6ad99a72ca373f7dd1aab3a61a7c87fd66/bug-null-pointer - https://github.com/colinbourassa/crasm/pull/7
CVE ID: CVE-2023-23109 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T13:58:20.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/colinbourassa/crasm/pull/7 - https://github.com/WhatTheFuzz/crasm-fuzz/tree/a020ad6ad99a72ca373f7dd1aab3a61a7c87fd66/bug-floating-point-exception
CVE ID: CVE-2023-23110 State: PUBLISHED Published: 2023-02-02T00:00:00.000Z Last Updated: 2025-03-26T20:39:41.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification. This affects WNR612v2 Wireless Routers 1.0.0.3 and earlier, DGN1000v3 Modem Router 1.0.0.22 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2
2 and earlier, D6100 WiFi DSL Modem Routers 1.0.0.63 and earlier, WNR1000v2 Wireless Routers 1.1.2.60 and earlier, XAVN2001v2 Wireless-N Extenders 0.4.0.7 and earlier, WNR2200 Wireless Routers 1.0.1.102 and earlier, WNR2500 Wireless Routers 1.0.0.34 and earlier, R8900 Smart WiFi Routers 1.0.3.6 and earlier, and R9000 Smart WiFi Routers 1.0.3.6 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SJCGkb-9o - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/r1Z4BX-5i - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco - https://hackmd.io/%40slASVrz_SrW7NQCsunof
NQCsunofeA/r1Z4BX-5i - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/H1lIcXbco - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/ryjVZz-5s - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1t47Ebqj - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1BNhbWqi - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/HyZRxmb9s - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/BkBPIeGco - https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/S1qWglM5o