Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-22288 State: PUBLISHED Published: 2023-03-20T15:33:59.877Z Last Updated: 2025-02-26T19:09:03.592Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: Tribe29 Products: Checkmk Problem Types: CWE-138 Description: HTML Email Injection in Tribe29 Checkmk <=2.1.0p23; <=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/15069
CVE ID: CVE-2023-22290 State: PUBLISHED Published: 2023-11-14T19:04:28.347Z Last Updated: 2024-08-30T17:50:12.638Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel Unison software Problem Types: denial of service, CWE-248 Description: Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2023-22291 State: PUBLISHED Published: 2023-04-05T15:18:02.937Z Last Updated: 2024-08-02T10:07:05.923Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ichitaro Products: Ichitaro Problem Types: CWE-590 Description: An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1
ogram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1687 - https://jvn.jp/en/jp/JVN79149117/
CVE ID: CVE-2023-22292 State: PUBLISHED Published: 2023-11-14T19:04:27.786Z Last Updated: 2024-08-30T17:52:25.166Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: n/a Products: Intel Unison software Problem Types: escalation of privilege, CWE-248 Description: Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html
CVE ID: CVE-2023-22293 State: PUBLISHED Published: 2024-02-14T13:37:39.054Z Last Updated: 2025-05-12T14:57:51.222Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: escalation of privilege, CWE-284 Description: Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-22294 State: PUBLISHED Published: 2023-04-18T18:59:33.380Z Last Updated: 2025-02-05T21:22:34.383Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Tribe29 Products: Checkmk Appliance Problem Types: CWE-732 Description: Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/9520
CVE ID: CVE-2023-22295 State: PUBLISHED Published: 2023-04-20T18:09:44.137Z Last Updated: 2025-01-16T21:36:13.393Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Datakit Products: CrossCAD/Ware_x64 library Problem Types: CWE-125 Description: Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14
CVE ID: CVE-2023-22296 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T17:54:33.218Z Vendors: Mahoroba Kobo, Inc. Products: MAHO-PBX NetDevancer series Problem Types: Cross-site scripting Description: Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/Office prior to Ver.1.11.00 allows a remote unauthenticated attacker to inject an arbitrary script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ate-mahoroba.jp/netdevancer/manu
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ate-mahoroba.jp/netdevancer/manual/ - https://jvn.jp/en/jp/JVN99957889/index.html
CVE ID: CVE-2023-22297 State: PUBLISHED Published: 2023-05-10T13:17:03.477Z Last Updated: 2025-01-27T18:03:42.960Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server Board BMC firmware Problem Types: escalation of privilege, CWE-788 Description: Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html
CVE ID: CVE-2023-22298 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-03T15:12:12.592Z Vendors: pgAdmin Project Products: pgAdmin 4 Problem Types: Open Redirect Description: Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pgadmin.org/ - https://github.com/pgadmin-org/pgadmin4 - https://github.com/pgadmin-org/pgadmin4/issues/5343 - https://jvn.jp/en/jp/JVN03832974/index.html - https:/
g/pgadmin4 - https://github.com/pgadmin-org/pgadmin4/issues/5343 - https://jvn.jp/en/jp/JVN03832974/index.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHY2B25YHIIFQ3G44TR7NNEST7FJGJPH/
CVE ID: CVE-2023-22299 State: PUBLISHED Published: 2023-07-06T14:53:29.031Z Last Updated: 2024-08-02T10:07:05.850Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-78 Description: An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1712
CVE ID: CVE-2023-22300 State: PUBLISHED Published: 2023-03-27T19:36:02.936Z Last Updated: 2025-01-17T17:35:14.960Z Vendors: SAUTER Products: EY-AS525F001 with moduWeb Problem Types: CWE-79 Cross-site Scripting Description: An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unauthorized actions by viewing the logs. This action would also grant the attacker privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-03
CVE ID: CVE-2023-22301 State: PUBLISHED Published: 2023-03-10T10:44:38.102Z Last Updated: 2025-02-27T21:01:25.746Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-20 Description: The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an arbitrary memory accessing vulnerability which network attackers can launch a remote attack to obtain kernel memory data of the target system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md
CVE ID: CVE-2023-22302 State: PUBLISHED Published: 2023-02-01T17:53:19.320Z Last Updated: 2025-03-26T15:58:24.750Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-772 Description: In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3, when an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool member, undisclosed requests sent to the BIG-IP system can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional A
to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K58550078
CVE ID: CVE-2023-22303 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T17:53:04.056Z Vendors: TP-Link Products: TP-Link SG105PE Problem Types: Authentication bypass Description: TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an attacker may impersonate an administrator of the product. As a result, information may be obtained and/or the product's settings may be altered with the privilege of the administrator. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/tl-sg105pe/v1/#
VE Program Container: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/jp/support/download/tl-sg105pe/v1/#Firmware - https://www.tp-link.com/en/business-networking/easy-smart-switch/tl-sg105pe/ - https://jvn.jp/en/jp/JVN78481846/index.html
CVE ID: CVE-2023-22304 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T17:51:03.207Z Vendors: PIXELA CORPORATION Products: PIX-RT100 Problem Types: OS Command Injection Description: OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pixela.co.jp/products/network/pix_rt100/update.html - https://jvn.jp/en/jp/JVN57296685/index.html
CVE ID: CVE-2023-22305 State: PUBLISHED Published: 2023-11-14T19:04:51.733Z Last Updated: 2024-08-14T20:26:02.931Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Aptio* V UEFI Firmware Integrator Tools Problem Types: denial of service, CWE-680 Description: Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2023-22306 State: PUBLISHED Published: 2023-07-06T14:53:34.023Z Last Updated: 2024-11-14T14:26:34.373Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Milesight Products: UR32L Problem Types: CWE-77 Description: An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1698
CVE ID: CVE-2023-22307 State: PUBLISHED Published: 2023-04-18T18:57:53.574Z Last Updated: 2025-02-05T21:21:07.125Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Tribe29 Products: Checkmk Appliance Problem Types: CWE-200, CWE-598 Description: Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/9522
CVE ID: CVE-2023-22308 State: PUBLISHED Published: 2023-10-12T15:27:54.061Z Last Updated: 2024-08-02T10:07:06.157Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SoftEther VPN Products: SoftEther VPN Problem Types: CWE-191 Description: An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1737
CVE ID: CVE-2023-22309 State: PUBLISHED Published: 2023-04-20T13:05:27.510Z Last Updated: 2025-02-04T21:43:45.579Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Tribe29 Products: Checkmk Appliance Problem Types: CWE-80 Description: Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/9523
CVE ID: CVE-2023-22310 State: PUBLISHED Published: 2023-11-14T19:04:50.657Z Last Updated: 2024-08-30T15:22:49.926Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Aptio* V UEFI Firmware Integrator Tools Problem Types: denial of service, CWE-421 Description: Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE ID: CVE-2023-22311 State: PUBLISHED Published: 2024-02-14T13:38:00.411Z Last Updated: 2025-05-12T14:58:35.716Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Optane(TM) PMem 100 Series Management Software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/inte
Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html
CVE ID: CVE-2023-22312 State: PUBLISHED Published: 2023-05-10T13:16:46.656Z Last Updated: 2025-01-27T18:09:18.206Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUC BIOS firmware Problem Types: escalation of privilege, CWE-284 Description: Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00777.html
CVE ID: CVE-2023-22313 State: PUBLISHED Published: 2023-11-14T19:05:14.351Z Last Updated: 2024-08-02T10:07:06.137Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) QAT Library software Problem Types: information disclosure, CWE-92 Description: Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.html
CVE ID: CVE-2023-22314 State: PUBLISHED Published: 2023-08-03T12:59:07.012Z Last Updated: 2024-10-17T14:27:35.927Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Use after free Description: Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU92877622/
CVE ID: CVE-2023-22315 State: PUBLISHED Published: 2023-01-30T21:58:38.264Z Last Updated: 2025-01-16T21:58:40.447Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: Snap One Products: Wattbox WB-300-IP-3 Problem Types: CWE-345 Description: Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-03
CVE ID: CVE-2023-22316 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T17:49:36.747Z Vendors: PIXELA CORPORATION Products: PIX-RT100 Problem Types: Hidden Functionality Description: Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker to access the product via undocumented Telnet or SSH services. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pixela.co.jp/products/network/pix_rt100/update.html - https://jvn.jp/en/jp/JVN57296685/index.html
CVE ID: CVE-2023-22317 State: PUBLISHED Published: 2023-08-03T12:56:14.503Z Last Updated: 2024-10-17T15:34:00.712Z Vendors: OMRON Corporation Products: CX-Programmer Problem Types: Use after free Description: Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22314. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU92877622/
CVE ID: CVE-2023-22318 State: PUBLISHED Published: 2023-05-15T08:34:43.641Z Last Updated: 2025-01-23T19:19:35.769Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Tribe29 Products: Checkmk Appliance Problem Types: CWE-412 Description: Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/9526
CVE ID: CVE-2023-22319 State: PUBLISHED Published: 2023-07-06T14:53:32.886Z Last Updated: 2024-11-14T14:40:36.065Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Milesight Products: MilesightVPN Problem Types: CWE-89 Description: A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1701
CVE ID: CVE-2023-22320 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-04-07T18:15:07.267Z Vendors: OpenAM consortium Products: OpenAM Web Policy Agent (OpenAM Consortium Edition) Problem Types: CWE-22 Description: OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openam-jp/web-agents/issues/3 - https://jvn.jp/en/vu/JVN91740661/
CVE ID: CVE-2023-22321 State: PUBLISHED Published: 2023-04-20T18:12:15.327Z Last Updated: 2025-01-16T21:36:07.126Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Datakit Products: CrossCAD/Ware_x64 library 0 Problem Types: CWE-125 Description: Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14
CVE ID: CVE-2023-22322 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-03-27T20:17:03.881Z Vendors: OMRON Corporation Products: CX-Motion Pro Problem Types: XML external entities (XXE) Description: Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU94200979/
CVE ID: CVE-2023-22323 State: PUBLISHED Published: 2023-02-01T17:53:34.262Z Last Updated: 2025-03-26T15:58:46.426Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-770 Description: In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K56412001
CVE ID: CVE-2023-22324 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-03-28T14:08:12.248Z Vendors: Contec Co., Ltd. Products: CONPROSYS HMI System (CHS) Problem Types: SQL Injection Description: SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.contec.com/download/contract/contract4/?itemid=ea8039aa-3434-4999-9ab6-897aa690210c&downloaditemid=866d7d3c-aae9-438d-87f3-17aa040df90b - https://www.con