Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-44142 State: PUBLISHED Published: 2024-12-13T14:24:26.006Z Last Updated: 2024-12-16T16:41:17.929Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Inactive Logout Products: Inactive Logout Problem Types: CWE-862 Description: Missing Authorization vulnerability in Inactive Logout Inactive Logout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Inactive Logout: from n/a through 3.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/inactive-logout/vulnerability/wordpress-inactive-logout-plugin-3-2-2-broken-access-control-vulnerability?_s_
ress/plugin/inactive-logout/vulnerability/wordpress-inactive-logout-plugin-3-2-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-44143 State: PUBLISHED Published: 2023-11-30T15:55:01.216Z Last Updated: 2024-08-02T19:59:50.843Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Bamboo Mcr Products: Bamboo Columns Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bamboo Mcr Bamboo Columns allows Stored XSS.This issue affects Bamboo Columns: from n/a through 1.6.1. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bamboo-columns/wordpress-bamboo-columns-plugin-1-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-44144 State: PUBLISHED Published: 2023-10-02T09:43:00.906Z Last Updated: 2024-09-20T15:37:44.431Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Dreamfox Products: Payment gateway per Product for WooCommerce Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dreamfox Payment gateway per Product for WooCommerce plugin <= 3.2.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-product-payments/wordpress-payment-gateway-per-product-for-woocommerce-plugin-3-2-7-reflected-cross-site-scripting-xss
e-product-payments/wordpress-payment-gateway-per-product-for-woocommerce-plugin-3-2-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-44145 State: PUBLISHED Published: 2023-10-02T09:49:37.487Z Last Updated: 2024-09-20T15:38:08.571Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: jesweb.dev Products: Anchor Episodes Index (Spotify for Podcasters) Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in jesweb.Dev Anchor Episodes Index (Spotify for Podcasters) plugin <= 2.1.7 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/anchor-episodes-index/wordpress-anchor-episodes-index-spotify-for-podcasters-plugin-2-1-7-cross-site-scripting-xss
ility/anchor-episodes-index/wordpress-anchor-episodes-index-spotify-for-podcasters-plugin-2-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-44146 State: PUBLISHED Published: 2023-10-06T14:59:34.450Z Last Updated: 2024-09-19T15:21:48.626Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Checkfront Inc. Products: Checkfront Online Booking System Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Checkfront Inc. Checkfront Online Booking System plugin <= 3.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/checkfront-wp-booking/wordpress-checkfront-online-booking-system-plugin-3-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2023-44147 State: PUBLISHED Published: 2024-12-13T14:24:26.595Z Last Updated: 2024-12-16T16:40:20.057Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Apasionados Products: Comment Blacklist Updater Problem Types: CWE-862 Description: Missing Authorization vulnerability in Apasionados Comment Blacklist Updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comment Blacklist Updater: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/comment-blacklist-updater/vulnerability/wordpress-comment-blacklist-updater-plugin-1-1
ack.com/database/wordpress/plugin/comment-blacklist-updater/vulnerability/wordpress-comment-blacklist-updater-plugin-1-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-44148 State: PUBLISHED Published: 2024-06-19T11:50:25.340Z Last Updated: 2024-08-02T19:59:51.147Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Brainstorm Force Products: Astra Bulk Edit Problem Types: CWE-862 Description: Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: from n/a through 1.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/astra-bulk-edit/wordpress-astra-bulk-edit-plugin-1-2-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-44149 State: PUBLISHED Published: 2024-12-13T14:24:27.160Z Last Updated: 2024-12-13T19:07:06.979Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: BeRocket Products: Brands for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in BeRocket Brands for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brands for WooCommerce: from n/a through 3.8.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/brands-for-woocommerce/vulnerability/wordpress-brands-for-woocommerce-plugin-3-8-2-2-broken-access-
ase/wordpress/plugin/brands-for-woocommerce/vulnerability/wordpress-brands-for-woocommerce-plugin-3-8-2-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-44150 State: PUBLISHED Published: 2023-11-30T14:50:35.916Z Last Updated: 2024-08-02T19:59:51.596Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ProfilePress Membership Team Products: Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile &
ntent – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress: from n/a through 4.13.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-user-avatar/wordpress-profilepress-plugin-4-13-2-sensitive-data-exposure-via-debug-log-vulnerability?_s_id=cve
CVE ID: CVE-2023-44151 State: PUBLISHED Published: 2024-06-19T11:49:25.470Z Last Updated: 2024-08-02T19:59:50.839Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Brainstorm Force Products: Pre-Publish Checklist Problem Types: CWE-862 Description: Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/pre-publish-checklist/wordpress-pre-publish-checklist-plugin-1-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2023-44152 State: PUBLISHED Published: 2023-09-27T11:59:56.524Z Last Updated: 2024-09-23T18:11:17.766Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-306 Description: Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-1908
CVE ID: CVE-2023-44153 State: PUBLISHED Published: 2023-09-27T12:00:09.210Z Last Updated: 2024-09-23T19:26:52.210Z Severity: LOW (CVSS 2.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-316 Description: Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-1994
CVE ID: CVE-2023-44154 State: PUBLISHED Published: 2023-09-27T12:00:34.428Z Last Updated: 2024-09-23T19:26:20.584Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-639 Description: Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-2436
CVE ID: CVE-2023-44155 State: PUBLISHED Published: 2023-09-27T12:00:50.339Z Last Updated: 2024-09-23T18:11:04.492Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-532 Description: Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-3471
CVE ID: CVE-2023-44156 State: PUBLISHED Published: 2023-09-27T12:01:56.823Z Last Updated: 2024-09-23T18:06:33.949Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-359 Description: Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-5124
CVE ID: CVE-2023-44157 State: PUBLISHED Published: 2023-09-27T12:01:02.383Z Last Updated: 2024-09-23T18:08:04.787Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-276 Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-3956
CVE ID: CVE-2023-44158 State: PUBLISHED Published: 2023-09-27T12:01:12.850Z Last Updated: 2024-09-23T18:07:34.572Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-522 Description: Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-4071
CVE ID: CVE-2023-44159 State: PUBLISHED Published: 2023-09-27T12:02:06.679Z Last Updated: 2024-09-23T18:06:19.272Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-312 Description: Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-5787
CVE ID: CVE-2023-44160 State: PUBLISHED Published: 2023-09-27T12:01:23.677Z Last Updated: 2024-08-02T19:59:50.995Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-352 Description: Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-4083
CVE ID: CVE-2023-44161 State: PUBLISHED Published: 2023-09-27T12:01:35.358Z Last Updated: 2024-09-23T18:07:11.537Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-352 Description: Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-4084
CVE ID: CVE-2023-44162 State: REJECTED Published: 2023-10-27T02:06:31.736Z Last Updated: 2024-01-02T19:11:41.417Z Description: No description available.
CVE ID: CVE-2023-44163 State: PUBLISHED Published: 2023-09-28T21:42:30.346Z Last Updated: 2024-09-23T18:46:50.289Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Online Movie Ticket Booking System Products: Online Movie Ticket Booking System Problem Types: CWE-89 Description: The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/starr - https://projectworlds.in/
CVE ID: CVE-2023-44164 State: PUBLISHED Published: 2023-09-28T21:44:23.019Z Last Updated: 2024-09-23T18:45:14.355Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Online Movie Ticket Booking System Products: Online Movie Ticket Booking System Problem Types: CWE-89 Description: The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/starr - https://projectworlds.in/
CVE ID: CVE-2023-44165 State: REJECTED Published: 2023-09-28T21:48:38.838Z Last Updated: 2024-01-02T21:49:59.743Z Description: No description available.
CVE ID: CVE-2023-44166 State: PUBLISHED Published: 2023-09-28T21:51:51.812Z Last Updated: 2024-09-23T18:42:18.913Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Online Movie Ticket Booking System Products: Online Movie Ticket Booking System Problem Types: CWE-89 Description: The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/starr - https://projectworlds.in/
CVE ID: CVE-2023-44167 State: REJECTED Published: 2023-09-28T21:54:23.748Z Last Updated: 2024-01-02T21:50:59.239Z Description: No description available.
CVE ID: CVE-2023-44168 State: REJECTED Published: 2023-09-28T21:55:31.951Z Last Updated: 2024-01-02T21:52:13.275Z Description: No description available.
CVE ID: CVE-2023-44169 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T14:54:36.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE ID: CVE-2023-44170 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T14:53:46.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE ID: CVE-2023-44171 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T14:47:40.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE ID: CVE-2023-44172 State: PUBLISHED Published: 2023-09-26T00:00:00 Last Updated: 2024-09-24T14:46:14.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE ID: CVE-2023-44173 State: PUBLISHED Published: 2023-09-28T20:55:48.677Z Last Updated: 2024-09-23T18:56:26.943Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Online Movie Ticket Booking System Products: Online Movie Ticket Booking System Problem Types: CWE-79 Description: Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/harrison - https://projectworlds.in/
CVE ID: CVE-2023-44174 State: PUBLISHED Published: 2023-09-28T21:14:38.526Z Last Updated: 2024-09-23T18:48:01.565Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Online Movie Ticket Booking System Products: Online Movie Ticket Booking System Problem Types: CWE-79 Description: Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/mccartney - https://projectworlds.in/
CVE ID: CVE-2023-44175 State: PUBLISHED Published: 2023-10-12T22:59:53.340Z Last Updated: 2024-09-19T13:10:45.668Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS, Junos OS Evolved Problem Types: CWE-617, Denial of Service (DoS) Description: A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the device resulting in rpd to crash causing a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. Note: This issue is not noticed when al
essing of this packet will create a sustained Denial of Service (DoS) condition. Note: This issue is not noticed when all the devices in the network are Juniper devices. This issue affects Juniper Networks: Junos OS: * All versions prior to 20.4R3-S7; * 21.2 versions prior to 21.2R3-S5; * 21.3 versions prior to 21.3R3-S4; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3; * 22.3 versions prior to 22.3R3; * 22.4 versions prior to 22.4R3. Junos OS Evolved: * All versions prior to 22.3R3-EVO; * 22.4-EVO versions prior to 22.4R3-EVO; * 23.2-EVO versions prior to 23.2R1-EVO. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
.4R3-EVO; * 23.2-EVO versions prior to 23.2R1-EVO. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportportal.juniper.net/JSA73141
CVE ID: CVE-2023-44176 State: PUBLISHED Published: 2023-10-12T23:00:51.422Z Last Updated: 2024-09-19T13:09:58.159Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: CWE-787, CWE-121, Denial of Service (DoS) Description: A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos OS allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks: Junos OS: * All versions prior to 20.4R3-S8; * 21.2 versions prior to 21.2R3-S
ion. This issue affects Juniper Networks: Junos OS: * All versions prior to 20.4R3-S8; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 22.1 versions prior to 22.1R3-S3; * 22.3 versions prior to 22.3R3; * 22.4 versions prior to 22.4R3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportportal.juniper.net/JSA73140
CVE ID: CVE-2023-44177 State: PUBLISHED Published: 2023-10-12T23:00:43.889Z Last Updated: 2024-09-19T13:10:23.081Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS, Junos OS Evolved Problem Types: CWE-787, CWE-121, Denial of Service (DoS) Description: A Stack-based Buffer Overflow vulnerability in the CLI command of Juniper Networks Junos and Junos EVO allows a low privileged attacker to execute a specific CLI commands leading to Denial of Service. Repeated actions by the attacker will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks: Junos OS: * All versions prior to 19.1R3-S10; * 1
enial of Service (DoS) condition. This issue affects Juniper Networks: Junos OS: * All versions prior to 19.1R3-S10; * 19.2 versions prior to 19.2R3-S7; * 19.3 versions prior to 19.3R3-S8; * 19.4 versions prior to 19.4R3-S12; * 20.2 versions prior to 20.2R3-S8; * 20.4 versions prior to 20.4R3-S8; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S1; * 22.3 versions prior to 22.3R3; * 22.4 versions prior to 22.4R2. Junos OS Evolved: * All versions prior to 20.4R3-S8-EVO; * 21.2 versions prior to 21.2R3-S6-EVO; * 21.3 versions prior to 21.3R3-S5-EVO; * 21.4 versions pri
or to 20.4R3-S8-EVO; * 21.2 versions prior to 21.2R3-S6-EVO; * 21.3 versions prior to 21.3R3-S5-EVO; * 21.4 versions prior to 21.4R3-S4-EVO; * 22.1 versions prior to 22.1R3-S3-EVO; * 22.2 versions prior to 22.2R3-S1-EVO; * 22.3 versions prior to 22.3R3-EVO; * 22.4 versions prior to 22.4R2-EVO. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportportal.juniper.net/JSA73140