Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
o/chamilo-lms/commit/f6e83550c2d17fc93a65ec4be602a78312289f37 - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-113-2023-05-31-Low-impact-Low-risk-XSS-through-SVG
CVE ID: CVE-2023-34958 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T21:00:15.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Chamilo 1.11.* up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-109-2023-04-15-Moderate-impact-Moderate-risk-IDOR-in-workstudent-publication - https://github.com/chamilo/chamilo-lms/commit/0c1c29db18856a6f25e21d0405dda2c20b35ff3a
CVE ID: CVE-2023-34959 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:31:31.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the services running on the server via crafted requests in the social and links tools. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-111-2023-04-20-Moderate-impact-Low-risk-Multiple-blind-SSRF-in-links-and-social-tools - https://github.com/chamilo/chamilo-lms/commit/ed946908fef23e8aa4ce
-risk-Multiple-blind-SSRF-in-links-and-social-tools - https://github.com/chamilo/chamilo-lms/commit/ed946908fef23e8aa4cefc28f745f3cd6710099f - https://github.com/chamilo/chamilo-lms/commit/cc278f01864948b1fb160e03f0a3dc0875d5f81f - https://github.com/chamilo/chamilo-lms/commit/ea5791ff8ce6ea45148a171b0da5348a7c415e6f
CVE ID: CVE-2023-34960 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-23T20:44:14.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API call with a crafted PowerPoint name. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://chamilo.com - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-112-2023-04-20-Critical-impact-High-risk-Remote-Code-Execution - http://packetstormsecurity.com/files/174314/Chamilo-1.11.18-Command-Injection.html
CVE ID: CVE-2023-34961 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:29:41.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo v1.11.x up to v1.11.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the /feedback/comment field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-105-2023-04-15-Low-impact-Moderate-risk-XSS-in-student-work-comments - https://github.com/chamilo/chamilo-lms/commit/80d1a8c9063a20f286b0195ef537c84a1a11875a
CVE ID: CVE-2023-34962 State: PUBLISHED Published: 2023-06-08T00:00:00 Last Updated: 2025-01-06T20:13:11.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another student's personal notes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-106-2023-04-15-Moderate-impact-Moderate-risk-A-student-can-access-and-modify-another-students-personal-notes - https://github.com/chamilo/chamilo-lms/commit/19af444d2da9e5a60f02b4ebe7755cdff36709cd - https://github.com/chamilo/chami
ttps://github.com/chamilo/chamilo-lms/commit/19af444d2da9e5a60f02b4ebe7755cdff36709cd - https://github.com/chamilo/chamilo-lms/commit/f9a17bfaf05994383bca5f4b65eb6897acc60d41
CVE ID: CVE-2023-34965 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T02:14:44.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Anankke/SSPanel-Uim - https://docs.google.com/document/d/1TbHYGW65o1HBZoDf0rUDQMHPJE6qfQAvqdFv1DYY4BU/edit?usp=sharing - https://github.com/AgentY0/CVE-2023-34965
CVE ID: CVE-2023-34966 State: PUBLISHED Published: 2023-07-20T14:56:14.644Z Last Updated: 2025-11-20T17:28:59.854Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Storage 3 Problem Types: CWE-835 Description: An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spo
-835 Description: An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function sl_unpack_loop() did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in an endless loop consuming 100% CPU. This flaw allows an attacker to issue a malformed RPC request, triggering an infinite loop, resulting in a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6667 - https://access.redha
yst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6667 - https://access.redhat.com/errata/RHSA-2023:7139 - https://access.redhat.com/errata/RHSA-2024:0423 - https://access.redhat.com/errata/RHSA-2024:0580 - https://access.redhat.com/errata/RHSA-2024:4101 - https://access.redhat.com/security/cve/CVE-2023-34966 - https://bugzilla.redhat.com/show_bug.cgi?id=2222793 - https://www.samba.org/samba/security/CVE-2023-34966
CVE ID: CVE-2023-34967 State: PUBLISHED Published: 2023-07-20T14:57:45.624Z Last Updated: 2025-11-20T17:29:02.200Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Storage 3 Problem Types: CWE-843 Description: A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structur
found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol. Due to a lack of type checking in callers of the dalloc_value_for_key() function, which returns the object associated with a key, a caller may trigger a crash in talloc_get_size() when talloc detects that the passed-in pointer is not a valid talloc pointer. With an RPC worker process shared among multiple client connections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker process, affecting
onnections, a malicious client or attacker can trigger a process crash in a shared RPC mdssvc worker process, affecting all other clients this worker serves. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6667 - https://access.redhat.com/errata/RHSA-2023:7139 - https://access.redhat.com/errata/RHSA-2024:0423 - https://access.redhat.com/errata/RHSA-2024:0580 - https://access.redhat.com/security/cve/CVE-2023-34967 - https://bugzilla.redhat.com/show_bug.cgi?id=2222794 - https://www.samba.org/samba/security/CVE-2023-34967.html
CVE ID: CVE-2023-34968 State: PUBLISHED Published: 2023-07-20T14:58:59.825Z Last Updated: 2025-11-20T17:29:04.734Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Storage 3 Problem Types: CWE-201 Description: A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and
s found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:6667 - https://access.redhat.com/errata/RHSA-2023:7139 - https://access.redhat.com/errata/RHSA-2024:0423 - https://access.redhat.com/errata/RHSA-2024:0580 - https://access.redhat.com/security/cve/CVE-2023-34968 - https://bugzilla.redhat.com/show_bug.cgi?id=2222795 - https://www.samba.
access.redhat.com/security/cve/CVE-2023-34968 - https://bugzilla.redhat.com/show_bug.cgi?id=2222795 - https://www.samba.org/samba/security/CVE-2023-34968.html
CVE ID: CVE-2023-34969 State: PUBLISHED Published: 2023-06-08T00:00:00.000Z Last Updated: 2025-06-09T15:02:51.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6. Additional
wn system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/dbus/dbus/-/issues/457 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZYCDRMD7B4XO4HF6C6YTLH4YUD7TANP/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00033.html - https://security.netapp.com/advisory/ntap-20231208-0007/
CVE ID: CVE-2023-34970 State: PUBLISHED Published: 2023-10-03T16:44:14.509Z Last Updated: 2025-03-07T18:28:17.423Z Vendors: Arm Ltd Products: Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver Problem Types: CWE-416 Description: A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bounds or to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn could give them access to already freed memory Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vu
ainer: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2023-34971 State: PUBLISHED Published: 2023-08-24T16:14:56.611Z Last Updated: 2024-10-02T19:46:35.096Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-326 Description: An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QTS 4.5.4.2467 build 20230718 and late
: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QTS 4.5.4.2467 build 20230718 and later QuTS hero h5.1.0.2424 build 20230609 and later QuTS hero h4.5.4.2476 build 20230728 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-60
CVE ID: CVE-2023-34972 State: PUBLISHED Published: 2023-08-24T16:15:16.038Z Last Updated: 2024-09-30T19:10:16.091Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-319 Description: A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QuTS hero h5.1.0.24
following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QuTS hero h5.1.0.2424 build 20230609 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-58
CVE ID: CVE-2023-34973 State: PUBLISHED Published: 2023-08-24T16:15:27.703Z Last Updated: 2024-09-30T19:09:53.667Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-331 Description: An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QuTS hero h5.1.0.2424 build 20230609 and later Additional Analyst Notes: - CVE Program
1.0.2444 build 20230629 and later QuTS hero h5.1.0.2424 build 20230609 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-59
CVE ID: CVE-2023-34974 State: PUBLISHED Published: 2024-09-06T16:27:27.244Z Last Updated: 2024-09-06T17:41:58.365Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero, QuTScloud, QVR, QES Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTScloud, QVR, QES are not affected. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build 20240605 and later QuTS hero h4.5.4.2626 build 20231225 and later Additional Analyst Note
versions: QTS 4.5.4.2790 build 20240605 and later QuTS hero h4.5.4.2626 build 20231225 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-32
CVE ID: CVE-2023-34975 State: PUBLISHED Published: 2023-10-13T19:17:06.034Z Last Updated: 2024-08-02T16:17:04.268Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QuTS hero, QTS, QuTScloud Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. QuTScloud c5.1.x is not affected. We have already fixed the vulnerability in the following versions: QuTS hero h4.5.4.2626 build 20231225 and later QTS 4.5.4.2627 build 20231225 and later Additional A
following versions: QuTS hero h4.5.4.2626 build 20231225 and later QTS 4.5.4.2627 build 20231225 and later Additional Analyst Notes: - CVE Program Container: References: - https://www.qnap.com/en/security-advisory/qsa-24-12
CVE ID: CVE-2023-34976 State: PUBLISHED Published: 2023-10-13T19:17:17.403Z Last Updated: 2024-09-16T19:42:53.154Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: QNAP Systems Inc. Products: Video Station Problem Types: CWE-89 Description: A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.0 ( 2023/07/27 ) and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-52
CVE ID: CVE-2023-34977 State: PUBLISHED Published: 2023-10-13T19:17:26.921Z Last Updated: 2024-09-16T19:42:13.359Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: QNAP Systems Inc. Products: Video Station Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.0 ( 2023/07/27 ) and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-ad
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-23-52
CVE ID: CVE-2023-34979 State: PUBLISHED Published: 2024-09-06T16:27:31.562Z Last Updated: 2024-09-06T17:22:05.522Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build 20240605 and later QuTS hero h4.5.4.2790 build 20240606 and later Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
40605 and later QuTS hero h4.5.4.2790 build 20240606 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-32
CVE ID: CVE-2023-34980 State: PUBLISHED Published: 2024-03-08T16:16:00.564Z Last Updated: 2024-09-06T17:42:06.996Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-78 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2627 build 20231225 and later QuTS hero h4.5.4.2626 build 20231225 and later Additional Analyst Notes: - CVE Program Container: - CISA
31225 and later QuTS hero h4.5.4.2626 build 20231225 and later Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-12
CVE ID: CVE-2023-34981 State: PUBLISHED Published: 2023-06-21T10:26:16.916Z Last Updated: 2025-02-13T16:55:41.813Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Incorrect loop logic Description: A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (mod_proxy_ajp) would use the response headers from the previous request leading to an information leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.or
leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/j1ksjh9m9gx1q60rtk1sbzmxhvj5h5qz - https://security.netapp.com/advisory/ntap-20230714-0003/
CVE ID: CVE-2023-34982 State: PUBLISHED Published: 2023-11-15T16:28:35.183Z Last Updated: 2024-08-02T16:17:04.179Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: AVEVA Products: SystemPlatform, Historian, Application Server, InTouch, Enterprise Licensing (formerly known as License Manager), Manufacturing Execution System (formerly known as Wonderware MES), Recipe Management, Batch Management, Edge (formerly known as Indusoft Web Studio), Worktasks (formerly known as Workflow Management), Plant SCADA (formerly known as Citect), Mobile Operator (formerly known as IntelaTrac Mobile Operator Rounds), Communication Drivers Pack, Telemetry Server Problem Types: C
tor (formerly known as IntelaTrac Mobile Operator Rounds), Communication Drivers Pack, Telemetry Server Problem Types: CWE-73 Description: This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-318-01 - https://www.aveva.com/en/support-and-success/cyber-security-updates/
CVE ID: CVE-2023-34983 State: PUBLISHED Published: 2024-02-14T13:37:57.071Z Last Updated: 2024-08-07T20:11:35.386Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software Problem Types: denial of service, CWE-20 Description: Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/
CVE ID: CVE-2023-34984 State: PUBLISHED Published: 2023-09-13T12:29:20.911Z Last Updated: 2024-10-22T21:00:40.634Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiWeb Problem Types: CWE-693 Description: A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-23-068