Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31217 State: PUBLISHED Published: 2023-10-18T12:47:54.712Z Last Updated: 2024-09-12T18:22:45.997Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: MyTechTalky Products: User Location and IP Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MyTechTalky User Location and IP plugin <= 1.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/user-location-and-ip/wordpress-user-location-and-ip-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31218 State: PUBLISHED Published: 2023-08-18T13:28:46.662Z Last Updated: 2024-08-02T14:53:30.249Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: realmag777 Products: WOLF – WordPress Posts Bulk Editor and Manager Professional Problem Types: CWE-352, CWE-79 Description: Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.6 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-wordpress-posts-bulk-editor-and-manager-professio
tps://patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-wordpress-posts-bulk-editor-and-manager-professional-plugin-1-0-6-cross-site-scripting-xss-via-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31219 State: PUBLISHED Published: 2023-11-13T02:24:15.809Z Last Updated: 2024-08-28T18:08:17.851Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: WPChill Products: Download Monitor Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-8-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31220 State: PUBLISHED Published: 2023-09-04T10:24:37.344Z Last Updated: 2025-02-19T21:24:21.433Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WP-EXPERTS.IN TEAM Products: WP Categories Widget Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-categories-widget/wordpress-wp-categories-widget-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31221 State: PUBLISHED Published: 2023-08-08T12:46:59.765Z Last Updated: 2024-09-25T16:47:29.546Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Ransom Christofferson Products: PDQ CSV Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ransom Christofferson PDQ CSV plugin <= 1.0.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/pdq-csv/wordpress-pdq-csv-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31222 State: PUBLISHED Published: 2023-06-29T15:19:22.621Z Last Updated: 2024-11-26T19:27:36.479Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Medtronic Products: Paceart Optima Problem Types: CWE-502 Description: Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration via network connectivity. Additional Analyst Notes: - CVE
ceart Optima system being used for further network penetration via network connectivity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://global.medtronic.com/xg-en/product-security/security-bulletins/paceart-optima-system.html
CVE ID: CVE-2023-31223 State: PUBLISHED Published: 2023-04-25T00:00:00.000Z Last Updated: 2025-05-30T16:02:47.626Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://dradisframework.com/ce/security_reports.html#fixed-4.8.0 - https://excellium-services.com/cert-xlm-advisory/cve-2023-31223/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-31223
CVE ID: CVE-2023-31224 State: PUBLISHED Published: 2023-12-25T00:00:00 Last Updated: 2024-08-02T14:53:30.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is broken access control during authentication in Jamf Pro Server before 10.46.1. Additional Analyst Notes: - CVE Program Container: References: - https://learn.jamf.com/bundle/jamf-pro-release-notes-10.47.0/page/Resolved_Issues.html
CVE ID: CVE-2023-31225 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-16T16:16:31.668Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2023-31226 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T21:28:50.299Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2023-31227 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T21:00:14.858Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/5/
CVE ID: CVE-2023-31228 State: PUBLISHED Published: 2023-08-18T12:57:43.899Z Last Updated: 2024-09-25T14:39:30.385Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: CreativeMindsSolutions Products: CM On Demand Search And Replace Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/cm-on-demand-search-and-replace/wordpress-cm-on-demand-search-and-replace-plugin-1-3-0-cross-site-scripting-xss-vulnerab
cm-on-demand-search-and-replace/wordpress-cm-on-demand-search-and-replace-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31229 State: PUBLISHED Published: 2023-12-29T09:53:39.432Z Last Updated: 2024-08-02T14:53:30.831Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: WP Directory Kit Products: WP Directory Kit Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through 1.1.9. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wpdirectorykit/wordpress-wp-directory-kit-plugin-1-1-9-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-31230 State: PUBLISHED Published: 2023-11-13T17:26:15.616Z Last Updated: 2024-08-02T14:53:30.673Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Haoqisir Products: Baidu Tongji generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Haoqisir Baidu Tongji generator allows Stored XSS.This issue affects Baidu Tongji generator: from n/a through 1.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/baidu-tongji-generator/wordpress-baidu-tongji-generator-plugin-1-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31231 State: PUBLISHED Published: 2023-12-20T18:56:58.422Z Last Updated: 2024-08-02T14:53:30.674Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Unlimited Elements Products: Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerabi
rough 1.5.65. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-65-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2023-31232 State: PUBLISHED Published: 2023-08-18T13:11:56.639Z Last Updated: 2024-09-25T14:39:22.129Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: David Artiss Products: Plugins List Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Artiss Plugins List plugin <= 2.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/plugins-list/wordpress-plugins-list-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31233 State: PUBLISHED Published: 2023-05-18T09:30:55.703Z Last Updated: 2025-01-09T15:14:17.804Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Haoqisir Products: Baidu Tongji generator Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Haoqisir Baidu Tongji generator plugin <= 1.0.2 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/baidu-tongji-generator/wordpress-baidu-tongji-generator-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31234 State: PUBLISHED Published: 2024-05-07T13:00:36.324Z Last Updated: 2024-08-02T14:53:30.643Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Tilda Publishing Products: Tilda Publishing Problem Types: CWE-862 Description: Missing Authorization vulnerability in Tilda Publishing.This issue affects Tilda Publishing: from n/a through 0.3.23. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/tilda-publishing/wordpress-tilda-publishing-plugin-0-3-20-broken-access-control-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31235 State: PUBLISHED Published: 2023-11-09T22:40:52.389Z Last Updated: 2024-09-03T17:59:52.266Z Vendors: Roland Barker, xnau webdesign Products: Participants Database Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.9 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/participants-database/wordpress-participants-database-plugin-2-4-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-31236 State: PUBLISHED Published: 2023-06-12T14:47:46.800Z Last Updated: 2024-10-10T17:28:37.358Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: unFocus Projects Products: Scripts n Styles Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in unFocus Projects Scripts n Styles plugin <= 3.5.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/scripts-n-styles/wordpress-scripts-n-styles-plugin-3-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-31237 State: PUBLISHED Published: 2023-12-29T09:56:50.694Z Last Updated: 2024-09-09T17:40:27.652Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Dylan James Products: Zephyr Project Manager Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/zephyr-project-manager/wordpress-zephyr-project-manager-plugin-3-3-9-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2023-31238 State: PUBLISHED Published: 2023-06-13T08:17:13.351Z Last Updated: 2025-11-11T20:20:12.502Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Siemens Products: SICAM P850, SICAM P855 Problem Types: CWE-732 Description: A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.
AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-2AA0) (All versions < V3.11). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains acc
V3.11). Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-480095.pdf - https://cert-portal.siemens.com/productcert/html/ssa-887249.html - https://cert-portal.siemens.com/productcert/html/ssa-480095.html - https://cert-portal.siemens.com/productcert/html/ssa-201498.html
CVE ID: CVE-2023-31239 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-23T21:34:13.092Z Vendors: FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. Products: V-Server and V-Server Lite Problem Types: Stack-based Buffer Overflow Description: Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attacker to execute arbitrary code by having user open a specially crafted VPR file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php - https://jvn.jp/en/vu/JVNVU98818508/
CVE ID: CVE-2023-31240 State: PUBLISHED Published: 2023-05-22T19:58:48.755Z Last Updated: 2025-01-16T21:33:20.754Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Snap One Products: OvrC Cloud Problem Types: CWE-1391 Description: Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hidden superuser account accessible through hard-coded credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01 - https://www.control4.com/docs/product/ovrc-software/releas
ps://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01 - https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-r.pdf
CVE ID: CVE-2023-31241 State: PUBLISHED Published: 2023-05-22T19:26:22.401Z Last Updated: 2025-01-16T21:33:49.710Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Snap One Products: OvrC Cloud Problem Types: CWE-420 Description: Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01
CVE ID: CVE-2023-31242 State: PUBLISHED Published: 2023-09-05T16:15:05.565Z Last Updated: 2025-02-13T16:49:47.437Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Open Automation Software Products: OAS Platform Problem Types: CWE-284 Description: An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially-crafted series of network requests can lead to arbitrary authentication. An attacker can send a sequence of requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerabi
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1769 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1769
CVE ID: CVE-2023-31244 State: PUBLISHED Published: 2023-06-06T16:27:01.068Z Last Updated: 2025-01-07T18:44:03.245Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Horner Automation Products: Cscape, Cscape EnvisionRV Problem Types: CWE-824 Description: The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE ID: CVE-2023-31245 State: PUBLISHED Published: 2023-05-22T19:37:10.365Z Last Updated: 2025-01-16T21:33:28.000Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Snap One Products: OvrC Cloud Problem Types: CWE-601 Description: Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
ry and dangerous locations on the web. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01 - https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-p.pdf
CVE ID: CVE-2023-31246 State: PUBLISHED Published: 2023-08-11T02:37:22.996Z Last Updated: 2024-10-10T15:19:41.951Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) SDP Tool software Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00905.html
CVE ID: CVE-2023-31247 State: PUBLISHED Published: 2023-11-14T09:14:51.588Z Last Updated: 2025-11-04T19:16:00.398Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Silicon Labs, Weston Embedded Products: Gecko Platform, Cesium NET, uC-HTTP Problem Types: CWE-119 Description: A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulner
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1746
CVE ID: CVE-2023-31248 State: PUBLISHED Published: 2023-07-05T18:33:59.665Z Last Updated: 2025-03-05T18:54:52.842Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Linux Kernel Problem Types: CWE-416 Description: Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/netfilter-devel/20230705121627.GC19489@breakpoint.cc/T/ - https://www.openwall.com/lists/oss-security/2023/07/05/2 - http://
ilter-devel/20230705121627.GC19489@breakpoint.cc/T/ - https://www.openwall.com/lists/oss-security/2023/07/05/2 - http://www.openwall.com/lists/oss-security/2023/07/05/2 - https://www.debian.org/security/2023/dsa-5453 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPHI46ROSSLVAV4R5LJWJYU747JGOS6D/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGZC5XOANA75OJ4XARBBXYSLDKUIJI5E/ - http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html - http://packetstormsecurity.com/files/174577/Kernel-Liv
ps://lists.debian.org/debian-lts-announce/2023/08/msg00001.html - http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html - https://security.netapp.com/advisory/ntap-20240201-0001/