Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-5855 State: PUBLISHED Published: 2023-11-01T17:14:02.193Z Last Updated: 2025-04-29T20:23:09.754Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1492396 - https://www.debian.org/security/2023/dsa-5546 -
/stable-channel-update-for-desktop_31.html - https://crbug.com/1492396 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5856 State: PUBLISHED Published: 2023-11-01T17:14:02.689Z Last Updated: 2025-04-29T20:20:25.108Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1493380 - https://www.debian.org/security/2023/dsa-5546 - ht
able-channel-update-for-desktop_31.html - https://crbug.com/1493380 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5857 State: PUBLISHED Published: 2023-11-01T17:14:02.873Z Last Updated: 2025-02-13T17:25:56.332Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1493435 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/ar
31.html - https://crbug.com/1493435 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5858 State: PUBLISHED Published: 2023-11-01T17:14:03.098Z Last Updated: 2025-06-12T14:36:37.535Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1457704 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/
- https://crbug.com/1457704 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5859 State: PUBLISHED Published: 2023-11-01T17:14:03.270Z Last Updated: 2025-02-13T17:25:57.409Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1482045 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.
CVE ID: CVE-2023-5860 State: PUBLISHED Published: 2023-11-02T11:00:50.449Z Last Updated: 2025-02-05T18:52:08.148Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: abuhayat Products: Icons Font Loader Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
ccess and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/12a9fbe8-445a-478a-b6ce-cd669ccb6a2d?source=cve - https://plugins.trac.wordpress.org/changeset/2987296/icons-font-loader
CVE ID: CVE-2023-5861 State: PUBLISHED Published: 2023-10-31T00:00:18.866Z Last Updated: 2024-09-05T17:52:50.280Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7baecef8-6c59-42fc-bced-886c4929e220 - https://github.com/microweber/microweber/commit/6ed7ebf1631dd8f0780caa4151a5538f3b227d26
CVE ID: CVE-2023-5862 State: PUBLISHED Published: 2023-10-31T00:00:18.766Z Last Updated: 2024-09-05T17:54:32.066Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: hamza417 Products: hamza417/inure Problem Types: CWE-862 Description: Missing Authorization in GitHub repository hamza417/inure prior to Build95. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/0e517db6-d8ba-4cb9-9339-7991dda52e6d - https://github.com/hamza417/inure/commit/52b8c0bae36f129a5be05e377d7391afc3629df6
CVE ID: CVE-2023-5863 State: PUBLISHED Published: 2023-10-31T00:00:19.197Z Last Updated: 2024-09-05T17:50:14.983Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/fbfd4e84-61fb-4063-8f11-15877b8c1f6f - https://github.com/thorsten/phpmyfaq/commit/97e813dcd2022bd10a8770569a8b02591716365f
CVE ID: CVE-2023-5864 State: PUBLISHED Published: 2023-10-31T00:00:19.789Z Last Updated: 2024-09-17T13:55:06.239Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad - https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
CVE ID: CVE-2023-5865 State: PUBLISHED Published: 2023-10-31T00:00:40.896Z Last Updated: 2024-09-17T13:35:48.990Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-613 Description: Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/4c4b7395-d9fd-4ca0-98d7-2e20c1249aff - https://github.com/thorsten/phpmyfaq/commit/5f43786f52c3d517e7665abd25d534e180e08dc5
CVE ID: CVE-2023-5866 State: PUBLISHED Published: 2023-10-31T00:00:42.138Z Last Updated: 2024-09-05T19:57:57.689Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-614 Description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ec44bcba-ae7f-497a-851e-8165ecf56945 - https://github.com/thorsten/phpmyfaq/commit/fdacff14acd5e69841068f0e32b59e2d1b1d0d55
CVE ID: CVE-2023-5867 State: PUBLISHED Published: 2023-10-31T00:00:41.524Z Last Updated: 2025-02-27T20:38:50.260Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: thorsten Products: thorsten/phpmyfaq Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/5c09b32e-a041-4a1e-a277-eb3e80967df0 - https://github.com/thorsten/phpmyfaq/commit/5310cb8c37dc3a5c5aead0898690b14705c433d3
CVE ID: CVE-2023-5868 State: PUBLISHED Published: 2023-12-10T17:56:57.176Z Last Updated: 2025-11-20T01:15:56.663Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Advanced Cluster Security 4.2, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended
s Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Software Collections for Red Hat Enterprise Linux 7, RHACS-3.74-RHEL-8, RHACS-4.1-RHEL-8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Software Collections Problem Types: CWE-686 Description: A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function
as found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can disclose bytes, potentially revealing notable and confidential information. This issue exists due to excessive data output in aggregate function calls, enabling remote users to read some portion of system memory. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:7545 - https://access.redhat.com/errata/RHSA-2023:7579 - https://access.redhat.com/errata/RHSA-2023:7580 - https://access.redhat.com/errata/
s.redhat.com/errata/RHSA-2023:7579 - https://access.redhat.com/errata/RHSA-2023:7580 - https://access.redhat.com/errata/RHSA-2023:7581 - https://access.redhat.com/errata/RHSA-2023:7616 - https://access.redhat.com/errata/RHSA-2023:7656 - https://access.redhat.com/errata/RHSA-2023:7666 - https://access.redhat.com/errata/RHSA-2023:7667 - https://access.redhat.com/errata/RHSA-2023:7694 - https://access.redhat.com/errata/RHSA-2023:7695 - https://access.redhat.com/errata/RHSA-2023:7714 - https://access.redhat.com/errata/RHSA-2023:7770 - https://access.redhat.com/errata/RHSA-2023:7772 - https://access.redhat.com/errata/RHSA-2023:7784 - https://access.redhat.com/errata/RHSA-2023:7785 - https://acces
7772 - https://access.redhat.com/errata/RHSA-2023:7784 - https://access.redhat.com/errata/RHSA-2023:7785 - https://access.redhat.com/errata/RHSA-2023:7883 - https://access.redhat.com/errata/RHSA-2023:7884 - https://access.redhat.com/errata/RHSA-2023:7885 - https://access.redhat.com/errata/RHSA-2024:0304 - https://access.redhat.com/errata/RHSA-2024:0332 - https://access.redhat.com/errata/RHSA-2024:0337 - https://access.redhat.com/security/cve/CVE-2023-5868 - https://bugzilla.redhat.com/show_bug.cgi?id=2247168 - https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/ - https://www.postgresql.org/support/security/CVE-2023-5868/
CVE ID: CVE-2023-5869 State: PUBLISHED Published: 2023-12-10T17:56:57.131Z Last Updated: 2025-11-06T20:51:34.742Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Advanced Cluster Security 4.2, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Ente
4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Software Collections for Red Hat Enterprise Linux 7, RHACS-3.74-RHEL-8, RHACS-4.1-RHEL-8, Red Hat Enterprise Linux 6 Problem Types: CWE-190 Description: A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow
law was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2023:7545 - https://access.redhat.com/errata/RHSA-2023:7579 - https://access.redhat.com/errata/RHSA-2023:7580 - https://a
023:7545 - https://access.redhat.com/errata/RHSA-2023:7579 - https://access.redhat.com/errata/RHSA-2023:7580 - https://access.redhat.com/errata/RHSA-2023:7581 - https://access.redhat.com/errata/RHSA-2023:7616 - https://access.redhat.com/errata/RHSA-2023:7656 - https://access.redhat.com/errata/RHSA-2023:7666 - https://access.redhat.com/errata/RHSA-2023:7667 - https://access.redhat.com/errata/RHSA-2023:7694 - https://access.redhat.com/errata/RHSA-2023:7695 - https://access.redhat.com/errata/RHSA-2023:7714 - https://access.redhat.com/errata/RHSA-2023:7770 - https://access.redhat.com/errata/RHSA-2023:7771 - https://access.redhat.com/errata/RHSA-2023:7772 - https://access.redhat.com/errata/RHSA-2
at.com/errata/RHSA-2023:7771 - https://access.redhat.com/errata/RHSA-2023:7772 - https://access.redhat.com/errata/RHSA-2023:7778 - https://access.redhat.com/errata/RHSA-2023:7783 - https://access.redhat.com/errata/RHSA-2023:7784 - https://access.redhat.com/errata/RHSA-2023:7785 - https://access.redhat.com/errata/RHSA-2023:7786 - https://access.redhat.com/errata/RHSA-2023:7788 - https://access.redhat.com/errata/RHSA-2023:7789 - https://access.redhat.com/errata/RHSA-2023:7790 - https://access.redhat.com/errata/RHSA-2023:7878 - https://access.redhat.com/errata/RHSA-2023:7883 - https://access.redhat.com/errata/RHSA-2023:7884 - https://access.redhat.com/errata/RHSA-2023:7885 - https://access.redh
https://access.redhat.com/errata/RHSA-2023:7884 - https://access.redhat.com/errata/RHSA-2023:7885 - https://access.redhat.com/errata/RHSA-2024:0304 - https://access.redhat.com/errata/RHSA-2024:0332 - https://access.redhat.com/errata/RHSA-2024:0337 - https://access.redhat.com/security/cve/CVE-2023-5869 - https://bugzilla.redhat.com/show_bug.cgi?id=2247169 - https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/ - https://www.postgresql.org/support/security/CVE-2023-5869/
CVE ID: CVE-2023-5870 State: PUBLISHED Published: 2023-12-10T17:58:30.213Z Last Updated: 2025-11-20T01:24:42.606Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Advanced Cluster Security 4.2, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Upd
pdate Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Software Collections for Red Hat Enterprise Linux 7, RHACS-3.74-RHEL-8, RHACS-4.1-RHEL-8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Software Collections Problem Types: CWE-400 Description: A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum wo
ng the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:7545 - https://access.redhat.com/errata/RHSA-2023:7579 - https://access.redhat.com/errata/RHSA-2023:7580 - https://access.redhat.com/errata/RHSA-2023:7581 - https://ac
23:7579 - https://access.redhat.com/errata/RHSA-2023:7580 - https://access.redhat.com/errata/RHSA-2023:7581 - https://access.redhat.com/errata/RHSA-2023:7616 - https://access.redhat.com/errata/RHSA-2023:7656 - https://access.redhat.com/errata/RHSA-2023:7666 - https://access.redhat.com/errata/RHSA-2023:7667 - https://access.redhat.com/errata/RHSA-2023:7694 - https://access.redhat.com/errata/RHSA-2023:7695 - https://access.redhat.com/errata/RHSA-2023:7714 - https://access.redhat.com/errata/RHSA-2023:7770 - https://access.redhat.com/errata/RHSA-2023:7772 - https://access.redhat.com/errata/RHSA-2023:7784 - https://access.redhat.com/errata/RHSA-2023:7785 - https://access.redhat.com/errata/RHSA-20
t.com/errata/RHSA-2023:7784 - https://access.redhat.com/errata/RHSA-2023:7785 - https://access.redhat.com/errata/RHSA-2023:7883 - https://access.redhat.com/errata/RHSA-2023:7884 - https://access.redhat.com/errata/RHSA-2023:7885 - https://access.redhat.com/errata/RHSA-2024:0304 - https://access.redhat.com/errata/RHSA-2024:0332 - https://access.redhat.com/errata/RHSA-2024:0337 - https://access.redhat.com/security/cve/CVE-2023-5870 - https://bugzilla.redhat.com/show_bug.cgi?id=2247170 - https://www.postgresql.org/about/news/postgresql-161-155-1410-1313-1217-and-1122-released-2749/ - https://www.postgresql.org/support/security/CVE-2023-5870/
CVE ID: CVE-2023-5871 State: PUBLISHED Published: 2023-11-27T11:58:44.737Z Last Updated: 2025-11-20T18:07:22.926Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-617 Description: A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2204 - h
ce. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2204 - https://access.redhat.com/security/cve/CVE-2023-5871 - https://bugzilla.redhat.com/show_bug.cgi?id=2247308 - https://lists.libguestfs.org/archives/list/guestfs@lists.libguestfs.org/thread/PFVUCMPFQUDC23JXSCUUPXIGDZ7XCFMD/
CVE ID: CVE-2023-5873 State: PUBLISHED Published: 2023-10-31T08:06:44.834Z Last Updated: 2025-02-27T20:38:44.746Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/701cfc30-22a1-4c4b-9b2f-885c77c290ce - https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c