Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-32325 State: PUBLISHED Published: 2023-05-26T23:00:17.880Z Last Updated: 2025-01-14T18:40:43.462Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: PostHog Products: posthog-js Problem Types: CWE-79 Description: PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cross-site scripting. Problem has been patched in 1.57.2. Users are advised to upgrade. Users unable to upgrade should ensure that their Content Security Policy is in place. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PostHog/posthog-js/security/advisories
CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PostHog/posthog-js/security/advisories/GHSA-8775-5hwv-wr6v - https://github.com/PostHog/posthog-js/commit/67e07eb8bb271a3a6f4aa251382e4d25abb385a0
CVE ID: CVE-2023-32327 State: PUBLISHED Published: 2024-02-03T00:57:32.934Z Last Updated: 2025-11-03T21:48:27.040Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-611 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 254783.
er could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 254783. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254783
CVE ID: CVE-2023-32328 State: PUBLISHED Published: 2024-02-07T16:07:06.935Z Last Updated: 2025-11-03T21:48:28.595Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-319 Description: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of the server. IBM X-Force Id: 254957. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25465
eferences: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254657
CVE ID: CVE-2023-32329 State: PUBLISHED Published: 2024-02-03T01:00:15.237Z Last Updated: 2025-11-03T21:48:30.079Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-345 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a user to download files from an incorrect repository due to improper file validation. IBM X-Force ID: 254972. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://w
X-Force ID: 254972. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254972
CVE ID: CVE-2023-32330 State: PUBLISHED Published: 2024-02-07T16:09:01.182Z Last Updated: 2025-11-03T21:48:31.546Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-295 Description: IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure calls that could allow an attacker on the network to take control of the server. IBM X-Force ID: 254977. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254977
CVE ID: CVE-2023-32331 State: PUBLISHED Published: 2024-03-04T18:38:46.392Z Last Updated: 2024-08-02T15:10:24.878Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Sterling Connect:Express for UNIX Problem Types: CWE-119 Description: IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI. IBM X-Force ID: 254979. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7011443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254979
CVE ID: CVE-2023-32332 State: PUBLISHED Published: 2023-09-08T19:55:17.970Z Last Updated: 2024-09-26T14:13:16.283Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Maximo Asset Management, Maximo Application Suite Problem Types: 80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 255072. Additional Analyst
in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 255072. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7030367 - https://www.ibm.com/support/pages/node/7030926 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255072
CVE ID: CVE-2023-32333 State: PUBLISHED Published: 2024-02-02T01:55:05.695Z Last Updated: 2024-08-02T15:10:24.930Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Maximo Asset Management Problem Types: CWE-284 Description: IBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access controls. IBM X-Force ID: 255073. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7112388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255073
CVE ID: CVE-2023-32334 State: PUBLISHED Published: 2023-06-05T00:44:31.786Z Last Updated: 2025-01-08T16:47:18.253Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Maximo Asset Management, Maximo Application Suite Problem Types: 598 Information Exposure Through Query Strings in GET Request Description: IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255074. Additional Analyst Notes: - CVE Program Container: - CI
ogs, referrer header or browser history. IBM X-Force ID: 255074. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6999721 - https://www.ibm.com/support/pages/node/6999747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255074
CVE ID: CVE-2023-32335 State: PUBLISHED Published: 2024-03-13T09:23:23.225Z Last Updated: 2024-08-05T15:52:20.030Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Maximo Application Suite, Maximo Asset Management Problem Types: CWE-598 Description: IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/sup
55075. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7138684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/266875 - https://www.ibm.com/support/pages/node/7138686
CVE ID: CVE-2023-32336 State: PUBLISHED Published: 2023-05-22T00:57:53.748Z Last Updated: 2025-01-27T20:11:07.018Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-502 Description: IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service. IBM X-Force ID: 255285. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6995879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255285
CVE ID: CVE-2023-32337 State: PUBLISHED Published: 2024-01-19T01:17:10.283Z Last Updated: 2024-11-13T17:56:03.972Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Maximo Spatial Asset Management Problem Types: CWE-918 Description: IBM Maximo Spatial Asset Management 8.10 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 255288. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7107712 - ht
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7107712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255288
CVE ID: CVE-2023-32338 State: PUBLISHED Published: 2023-09-04T23:57:44.859Z Last Updated: 2024-09-26T18:29:04.687Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Sterling Secure Proxy Problem Types: 256 Plaintext Storage of a Password Description: IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7029765 - https://www.ibm.com/support/pages/node/70
chment: References: - https://https://www.ibm.com/support/pages/node/7029765 - https://www.ibm.com/support/pages/node/7029766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255585
CVE ID: CVE-2023-32339 State: PUBLISHED Published: 2023-06-27T16:57:53.458Z Last Updated: 2024-11-06T20:43:01.731Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Business Automation Workflow Problem Types: CWE-79 Description: IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 255587. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/nod
yst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7001291 - https://https://www.ibm.com/support/pages/node/6998727 - https://www.ibm.com/support/pages/node/6998727
CVE ID: CVE-2023-32340 State: PUBLISHED Published: 2025-01-23T02:37:33.010Z Last Updated: 2025-01-23T14:47:49.995Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Standard Edition Problem Types: CWE-79 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7176082
CVE ID: CVE-2023-32341 State: PUBLISHED Published: 2024-02-09T00:58:25.772Z Last Updated: 2024-08-02T15:10:24.887Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Sterling B2B Integrator Problem Types: CWE-400 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 255827. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7116081 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255827
CVE ID: CVE-2023-32342 State: PUBLISHED Published: 2023-05-30T21:03:25.816Z Last Updated: 2025-01-09T21:11:08.128Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: GSKit Problem Types: 208 Information Exposure Through Timing Discrepancy Description: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 255828. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
ormation. IBM X-Force ID: 255828. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/255828
CVE ID: CVE-2023-32344 State: PUBLISHED Published: 2024-02-24T15:29:33.526Z Last Updated: 2025-02-13T16:50:33.589Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-352 Description: IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7123154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255898 - https://security.netapp.com/advisory/ntap-202
de/7123154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/255898 - https://security.netapp.com/advisory/ntap-20240405-0002/ - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2023-32346 State: PUBLISHED Published: 2023-05-22T14:45:46.985Z Last Updated: 2025-01-16T21:35:08.144Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Teltonika Products: Remote Management System Problem Types: CWE-204 Description: Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devices. This function returns information based on whether the serial number of a device has already been claimed, the MAC address of a device has already been claimed, or whether the attempt to claim a device was successful. An attacker could exploit this to create a list of the serial numbers and MAC add
empt to claim a device was successful. An attacker could exploit this to create a list of the serial numbers and MAC addresses of all devices cloud-connected to the Remote Management System. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08
CVE ID: CVE-2023-32347 State: PUBLISHED Published: 2023-05-22T14:58:44.339Z Last Updated: 2025-01-16T21:35:00.299Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H) Vendors: Teltonika Products: Remote Management System Problem Types: CWE-287 Description: Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the user perspective for device claiming and from the device perspective for authentication. If an attacker obtained the serial number and MAC address of a device, they could authenticate as that device and steal communication credentials of the device. This could allow an attacker to enable
d authenticate as that device and steal communication credentials of the device. This could allow an attacker to enable arbitrary command execution as root by utilizing management options within the newly registered devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08
CVE ID: CVE-2023-32348 State: PUBLISHED Published: 2023-05-22T15:02:56.921Z Last Updated: 2025-01-16T21:34:53.192Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Teltonika Products: Remote Management System Problem Types: CWE-918 Description: Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for cross-device communication that uses OpenVPN. It connects new devices in a manner that allows the new device to communicate with all Teltonika devices connected to the VPN. The OpenVPN server also allows users to route through it. An attacker could route a connection to a remote server through the OpenV
server also allows users to route through it. An attacker could route a connection to a remote server through the OpenVPN server, enabling them to scan and access data from other Teltonika devices connected to the VPN. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08
CVE ID: CVE-2023-32349 State: PUBLISHED Published: 2023-05-22T15:12:08.610Z Last Updated: 2025-01-16T21:34:23.944Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Teltonika Products: RUT model routers Problem Types: CWE-15 Description: Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution
ange these variables and enable malicious parameters in the dump utility, which could result in arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08
CVE ID: CVE-2023-32350 State: PUBLISHED Published: 2023-05-22T15:14:57.025Z Last Updated: 2025-01-16T21:34:13.864Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Teltonika Products: RUT model routers Problem Types: CWE-78 Description: Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that contains an OS command injection payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
t contains an OS command injection payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-08
CVE ID: CVE-2023-32351 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T16:57:21.486Z Vendors: Apple Products: iTunes for Windows Problem Types: An app may be able to gain elevated privileges Description: A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213763
CVE ID: CVE-2023-32352 State: PUBLISHED Published: 2023-06-23T00:00:00.000Z Last Updated: 2025-02-13T16:50:34.161Z Vendors: Apple Products: macOS, watchOS, iOS and iPadOS Problem Types: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks. This issue is fixed in watchOS 9.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may bypass Gatekeeper checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213759 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/
- https://support.apple.com/en-us/HT213759 - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213760 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/kb/HT213761
CVE ID: CVE-2023-32353 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T16:01:25.265Z Vendors: Apple Products: iTunes for Windows Problem Types: An app may be able to elevate privileges Description: A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213763
CVE ID: CVE-2023-32354 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T15:55:18.774Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS Problem Types: An app may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213764 - https://support.apple.com/en-us/HT213757 - https://support.apple.com/en-us/HT213761
CVE ID: CVE-2023-32355 State: PUBLISHED Published: 2023-06-23T00:00:00 Last Updated: 2024-12-05T15:52:40.320Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213758 - https://support.apple.com/en-us/HT213759 - https://support.apple.com/en-us/HT213760
CVE ID: CVE-2023-32356 State: PUBLISHED Published: 2023-09-06T01:36:39.482Z Last Updated: 2025-05-01T18:49:59.534Z Vendors: Apple Products: macOS Problem Types: An app may be able to cause unexpected system termination or write kernel memory Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213670 - https://support.apple.com/kb/HT213670