Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-3722 State: PUBLISHED Published: 2023-07-19T19:56:52.681Z Last Updated: 2024-10-22T19:17:58.386Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Avaya Products: Aura Device Services Problem Types: CWE-434 Description: An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.avaya.com/css/public/documents/101076366
CVE ID: CVE-2023-3724 State: PUBLISHED Published: 2023-07-17T21:13:10.623Z Last Updated: 2024-10-29T15:53:43.066Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: wolfSSL Products: wolfSSL Problem Types: CWE-20 Description: If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension) when connecting to a malicious server, a default predictable buffer gets used for the IKM (Input Keying Material) value when generating the session master secret. Using a potentially known IKM value when generating the session master secret key compromises the key generated, allowing an eavesdropper to reconstruct it and potentially allowing
ion master secret key compromises the key generated, allowing an eavesdropper to reconstruct it and potentially allowing access to or meddling with message contents in the session. This issue does not affect client validation of connected servers, nor expose private key information, but could result in an insecure TLS 1.3 session when not controlling both sides of the connection. wolfSSL recommends that TLS 1.3 client side users update the version of wolfSSL used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wolfSSL/wolfssl/pull/6412 - https://www.wolfssl.com/docs/security-vulnerabilities/
CVE ID: CVE-2023-3725 State: PUBLISHED Published: 2023-10-06T20:10:11.543Z Last Updated: 2025-02-13T16:56:38.760Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-120, CWE-121 Description: Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2g3m-p6c7-8rr3 - http://www.openwall.com/lists/oss-security/2023/11/07/1 - http://seclists.org/fulldisclosure/2023/Nov/1 - http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-O
- http://seclists.org/fulldisclosure/2023/Nov/1 - http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html
CVE ID: CVE-2023-3726 State: PUBLISHED Published: 2024-01-04T14:39:43.942Z Last Updated: 2025-09-24T15:23:57.483Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N) Vendors: OCSInventory Products: OCSInventory Problem Types: CWE-79 Description: OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/creed/ - https://ocsinventory-ng.org/
CVE ID: CVE-2023-3727 State: PUBLISHED Published: 2023-08-01T22:39:16.484Z Last Updated: 2025-02-13T16:56:39.986Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1454086 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://s
project.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3728 State: PUBLISHED Published: 2023-08-01T22:39:16.671Z Last Updated: 2025-02-13T16:56:40.941Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1457421 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://s
CVE ID: CVE-2023-3729 State: PUBLISHED Published: 2023-08-01T22:39:16.947Z Last Updated: 2024-08-02T07:01:57.546Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Splitscreen in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-chromeos.html - https://crbug.com/1451803
CVE ID: CVE-2023-3730 State: PUBLISHED Published: 2023-08-01T22:39:17.106Z Last Updated: 2025-02-13T17:01:12.646Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1453465 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedorapr
desktop.html - https://crbug.com/1453465 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3731 State: PUBLISHED Published: 2023-08-01T22:39:17.259Z Last Updated: 2024-08-02T07:01:57.473Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-chromeos.html - https://crbug.com/1441306
CVE ID: CVE-2023-3732 State: PUBLISHED Published: 2023-08-01T22:39:17.419Z Last Updated: 2025-02-13T17:01:13.203Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1450899 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedora
r-desktop.html - https://crbug.com/1450899 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - http://packetstormsecurity.com/files/174223/Chrome-IPCZ-FragmentDescriptors-Missing-Validation.html - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3733 State: PUBLISHED Published: 2023-08-01T22:39:17.582Z Last Updated: 2025-02-13T17:01:13.759Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1450203 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraprojec
top.html - https://crbug.com/1450203 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3734 State: PUBLISHED Published: 2023-08-01T22:39:17.738Z Last Updated: 2025-02-13T17:01:14.324Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1450376 - https://lists.fedoraproject.org/archives/list/package
able-channel-update-for-desktop.html - https://crbug.com/1450376 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3735 State: PUBLISHED Published: 2023-08-01T22:39:17.904Z Last Updated: 2025-07-09T13:43:27.952Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1394410 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj
sktop.html - https://crbug.com/1394410 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3736 State: PUBLISHED Published: 2023-08-01T22:39:18.093Z Last Updated: 2025-02-13T17:01:15.555Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1434438 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3
om/1434438 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3737 State: PUBLISHED Published: 2023-08-01T22:39:18.253Z Last Updated: 2025-02-13T17:01:16.141Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1446754 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQ
://crbug.com/1446754 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3738 State: PUBLISHED Published: 2023-08-01T22:39:18.419Z Last Updated: 2025-02-13T17:01:17.266Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1434330 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4N
tps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3739 State: PUBLISHED Published: 2023-08-01T22:39:18.614Z Last Updated: 2024-08-02T07:01:57.561Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Chromad in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker to execute arbitrary code via a crafted shell script. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-chromeos.html - https://crbug.com/1398986
CVE ID: CVE-2023-3740 State: PUBLISHED Published: 2023-08-01T22:39:18.788Z Last Updated: 2025-02-13T17:01:17.866Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially serve malicious content to a user via a crafted background URL. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html - https://crbug.com/1405223 - https://lists.fedoraproject.org/archives/list/package-announce@lists.f
te-for-desktop.html - https://crbug.com/1405223 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-3741 State: PUBLISHED Published: 2023-11-30T00:55:50.692Z Last Updated: 2024-12-02T19:03:40.069Z Vendors: NEC Platforms, Ltd Products: ITK-6DGS-1(BK) TEL, ITK-32LCGS-1(BK) TEL, ITK-32TCGS-1(BK) TEL, ITK-6D-1(BK)TEL, ITK-12D-1(BK)TEL, ITK-8LCX-1(BK)TEL, ITK-8TCGX-1(BK)TEL, ITK-6DGS-1A(BK) TEL, ITK-32LCGS-1A(BK) TEL, ITK-32TCGS-1A(BK) TEL, ITK-6DGS-1P(BK) TEL, ITK-32LCGS-1P(BK) TEL, ITK-32TCGS-1P(BK) TEL, ITK-6D-1P(BK)TEL, ITK-12D-1P(BK)TEL, ITK-6DG-1P(BK)TEL, ITK-12DG-1P(BK)TEL, ITK-8LCX-1P(BK)TEL, ITK-8LCG-1P(BK)TEL, ITK-32LCG-1P(BK)TEL, ITK-8TCGX-1P(BK)TEL, ITK-32TCG-1P(BK)TEL Problem Types: CWE-78 Description: An OS Command injection vulnerability in NEC Platforms DT900 an
, ITK-32TCG-1P(BK)TEL Problem Types: CWE-78 Description: An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://jpn.nec.com/security-info/secinfo/nv23-011_en.html
CVE ID: CVE-2023-3742 State: PUBLISHED Published: 2023-12-20T15:30:14.710Z Last Updated: 2024-08-02T07:01:57.520Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to bypass device policy restrictions via physical access to the device. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=1443292 - https://crbug.com/1443292
CVE ID: CVE-2023-3743 State: PUBLISHED Published: 2023-07-18T11:56:05.572Z Last Updated: 2024-10-28T18:04:34.890Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: LeoTheme Products: Ap Page Builder Problem Types: CWE-89 Description: Ap Page Builder, in versions lower than 1.7.8.2, could allow a remote attacker to send a specially crafted SQL query to the product_one_img parameter to retrieve the information stored in the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-vulnerability-leothemes-ap-page-builder
CVE ID: CVE-2023-3744 State: PUBLISHED Published: 2023-10-02T13:50:31.607Z Last Updated: 2024-09-20T14:52:59.983Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SLiMS Products: SLiMS Problem Types: CWE-918 Description: Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/server-side-request-forgery-slims
CVE ID: CVE-2023-3745 State: PUBLISHED Published: 2023-07-24T15:19:23.319Z Last Updated: 2025-11-20T17:39:59.167Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-125 Description: A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and allowing an application to crash, resulting in a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
rash, resulting in a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2023-3745 - https://bugzilla.redhat.com/show_bug.cgi?id=2223557 - https://github.com/ImageMagick/ImageMagick/commit/54cdc146bbe50018526770be201b56643ad58ba7 - https://github.com/ImageMagick/ImageMagick/commit/651672f19c75161a6159d9b6838fd3095b6c5304 - https://github.com/ImageMagick/ImageMagick/issues/1857 - https://github.com/ImageMagick/ImageMagick6/commit/7486477aa00c5c7856b111506da075b6cdfa8b73 - https://github.com/ImageMagick/ImageMagick6/commit/b466a96965afc1308a4ace93f5535c2b770f294b
CVE ID: CVE-2023-3746 State: PUBLISHED Published: 2023-10-16T19:39:14.930Z Last Updated: 2025-04-23T16:12:00.785Z Vendors: Unknown Products: ActivityPub Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c15a6032-6495-47a8-828c-37e55ed9665a
CVE ID: CVE-2023-3747 State: PUBLISHED Published: 2023-09-07T12:11:01.435Z Last Updated: 2024-09-26T14:17:57.684Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Cloudflare Products: WARP Client Problem Types: CWE-602 Description: Zero Trust Administrators have the ability to disallow end users from disabling WARP on their devices. Override codes can also be created by the Administrators to allow a device to temporarily be disconnected from WARP, however, due to lack of server side validation, an attacker with local access to the device, could extend the maximum allowed disconnected time of WARP client granted by an override code by changing the date & time
uld extend the maximum allowed disconnected time of WARP client granted by an override code by changing the date & time on the local device where WARP is running. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=com.cloudflare.onedotonedotonedotone - https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#retrieve-the-override-code
CVE ID: CVE-2023-3748 State: PUBLISHED Published: 2023-07-24T15:19:20.511Z Last Updated: 2024-09-27T13:44:27.663Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a, Red Hat, Fedora Products: frr, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-835 Description: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Addition
LV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-3748 - https://bugzilla.redhat.com/show_bug.cgi?id=2223668
CVE ID: CVE-2023-3749 State: PUBLISHED Published: 2023-08-03T19:40:05.497Z Last Updated: 2024-10-09T20:11:19.294Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. Products: VideoEdge Problem Types: CWE-349 Description: A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/news-events/ics-advisories/icsa-23-215-04
CVE ID: CVE-2023-3750 State: PUBLISHED Published: 2023-07-24T15:19:22.512Z Last Updated: 2025-11-08T06:30:27.187Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization Problem Types: CWE-667 Description: A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only so
en attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2023:6409 - https://access.redhat.com/security/cve/CVE-2023-3750 - https://bugzilla.redhat.com/show_bug.cgi?id=2222210