Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-34106 State: PUBLISHED Published: 2023-07-05T17:48:32.727Z Last Updated: 2024-10-24T19:03:48.145Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-284, CWE-863 Description: GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user. This allows access to the list of all users and their personal information. Users should upgrade to version 10.0.8 to receive a patch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
n 10.0.8 to receive a patch. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-923r-hqh4-wj7c - https://github.com/glpi-project/glpi/releases/tag/10.0.8
CVE ID: CVE-2023-34107 State: PUBLISHED Published: 2023-07-05T19:15:31.060Z Last Updated: 2024-10-24T17:59:56.346Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-284, CWE-863 Description: GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user, allows access to the view all KnowbaseItems. Version 10.0.8 has a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/a
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-966h-xrf5-pmj4 - https://github.com/glpi-project/glpi/releases/tag/10.0.8
CVE ID: CVE-2023-34108 State: PUBLISHED Published: 2023-06-07T17:16:54.206Z Last Updated: 2025-01-06T20:11:10.109Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mailcow Products: mailcow-dockerized Problem Types: CWE-78 Description: mailcow is a mail server suite based on Dovecot, Postfix and other open source software, that provides a modern web UI for user/server administration. A vulnerability has been discovered in mailcow which allows an attacker to manipulate internal Dovecot variables by using specially crafted passwords during the authentication process. The issue arises from the behavior of the `passwd-verify.lua` script, which is responsible for ve
uthentication process. The issue arises from the behavior of the `passwd-verify.lua` script, which is responsible for verifying user passwords during login attempts. Upon a successful login, the script returns a response in the format of "password=<valid-password>", indicating the successful authentication. By crafting a password with additional key-value pairs appended to it, an attacker can manipulate the returned string and influence the internal behavior of Dovecot. For example, using the password "123 mail_crypt_save_version=0" would cause the `passwd-verify.lua` script to return the string "password=123 mail_crypt_save_version=0". Consequently, Dovecot will interpret this string and se
t to return the string "password=123 mail_crypt_save_version=0". Consequently, Dovecot will interpret this string and set the internal variables accordingly, leading to unintended consequences. This vulnerability can be exploited by an authenticated attacker who has the ability to set their own password. Successful exploitation of this vulnerability could result in unauthorized access to user accounts, bypassing security controls, or other malicious activities. This issue has been patched in version `2023-05a`. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
r this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-mhh4-qchc-pv22 - https://github.com/mailcow/mailcow-dockerized/commit/f80940efdccd393bf5fccec2886795372a38c445 - https://github.com/VladimirBorisov/CVE_proposal/blob/main/MailcowUserPassword.md
CVE ID: CVE-2023-34109 State: PUBLISHED Published: 2023-06-07T17:11:21.949Z Last Updated: 2025-01-06T20:12:26.819Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: zxcvbn-ts Products: zxcvbn Problem Types: CWE-400 Description: zxcvbn-ts is an open source password strength estimator written in typescript. This vulnerability affects users running on the nodeJS platform which are using the second argument of the zxcvbn function. It can result in an unbounded resource consumption as the user inputs array is extended with every function call. Browsers are impacted, too but a single user need to do a lot of input changes so that it affects the browser, while the no
wsers are impacted, too but a single user need to do a lot of input changes so that it affects the browser, while the node process gets the inputs of every user of a platform and can be killed that way. This problem has been patched in version 3.0.2. Users are advised to upgrade. Users unable to upgrade should stop using the second argument of the zxcvbn function and use the zxcvbnOptions.setOptions function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zxcvbn-ts/zxcvbn/security/advisories/GHSA-38hx-x5hq-5fg4 - https://github.com/zxcvbn-ts/zxcvbn/commit/3f9bed21b5d01f6f6863476822ca857355fba22f
CVE ID: CVE-2023-34110 State: PUBLISHED Published: 2023-06-22T22:34:39.865Z Last Updated: 2024-12-06T15:28:20.356Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: dpgaspar Products: Flask-AppBuilder Problem Types: CWE-209 Description: Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated malicious actor with Admin privileges, could by adding a special character on the add, edit User forms trigger a database error, this error is surfaced back to this actor on the UI. On certain database engines this error can include the entire user row including the pbkdf2:sha256 hashed password. This vulnerabi
database engines this error can include the entire user row including the pbkdf2:sha256 hashed password. This vulnerability has been fixed in version 4.3.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-jhpr-j7cq-3jp3 - https://github.com/dpgaspar/Flask-AppBuilder/pull/2045 - https://github.com/dpgaspar/Flask-AppBuilder/commit/ae25ad4c87a9051ebe4a4e8f02aee73232642626 - https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.3.2
CVE ID: CVE-2023-34111 State: PUBLISHED Published: 2023-06-06T16:29:21.279Z Last Updated: 2025-01-07T18:42:27.861Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: taosdata Products: grafanaplugin Problem Types: CWE-20 Description: The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of `${{ github.event.pull_request.title }}` in a bash command within the GitHub workflow. Attackers can inject malicious commands which will be executed by the workflow. This happens because `${{ github.event.pull
ackers can inject malicious commands which will be executed by the workflow. This happens because `${{ github.event.pull_request.title }}` is directly passed to bash command on like 25 of the workflow. This may allow an attacker to gain access to secrets which the github action has access to or to otherwise make use of the compute resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/taosdata/grafanaplugin/security/advisories/GHSA-23wp-p848-hcgr - https://github.com/taosdata/grafanaplugin/blob/master/.github/workflows/release-pr-merged.yaml#L25 - https://securitylab.github.com/research/github-actions-untrusted-input/
CVE ID: CVE-2023-34112 State: PUBLISHED Published: 2023-06-08T23:05:36.423Z Last Updated: 2025-01-06T19:43:42.532Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: bytedeco Products: javacpp-presets Problem Types: CWE-94 Description: JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the `bytedeco/javacpp-presets` use the `github.event.head_commit.message​` parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection vulnerability due to string interpolation. No exploitation has been reported. This issue has been addressed in version 1.5.9. Users
y due to string interpolation. No exploitation has been reported. This issue has been addressed in version 1.5.9. Users of JavaCPP Presets are advised to upgrade as a precaution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bytedeco/javacpp-presets/security/advisories/GHSA-36rx-hq22-jm5x - https://securitylab.github.com/research/github-actions-untrusted-input/
CVE ID: CVE-2023-34113 State: REJECTED Published: 2023-06-13T17:56:19.872Z Last Updated: 2024-09-04T18:22:06.192Z Description: No description available.
CVE ID: CVE-2023-34114 State: PUBLISHED Published: 2023-06-13T18:37:22.969Z Last Updated: 2025-01-02T19:57:07.764Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom for Windows Client, Zoom for MacOS Client Problem Types: CWE-668 Description: Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-34115 State: PUBLISHED Published: 2023-06-13T18:40:14.005Z Last Updated: 2024-11-06T18:59:34.182Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Meeting SDK Problem Types: CWE-120 Description: Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to be restarted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-34116 State: PUBLISHED Published: 2023-07-11T16:56:16.132Z Last Updated: 2024-10-22T20:41:18.163Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Desktop Client for Windows Problem Types: CWE-78 Description: Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-34117 State: PUBLISHED Published: 2023-07-11T16:59:20.228Z Last Updated: 2024-10-22T20:34:50.419Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Zoom Video Communications, Inc. Products: Zoom Client SDK Problem Types: CWE-23 Description: Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-34118 State: PUBLISHED Published: 2023-07-11T17:01:56.053Z Last Updated: 2024-10-22T20:34:26.157Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms for Windows Problem Types: CWE-250 Description: Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-34119 State: PUBLISHED Published: 2023-07-11T17:05:11.530Z Last Updated: 2024-11-07T17:17:10.421Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Zoom Video Communications, Inc. Products: Zoom Rooms for Windows Problem Types: CWE-426 Description: Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-34120 State: PUBLISHED Published: 2023-06-13T17:38:52.940Z Last Updated: 2025-01-02T20:10:14.414Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: Zoom Video Communications, Inc. Products: Zoom for Windows Client, Zoom Rooms Client for Windows, Zoom VDI for Windows Meeting Clients Problem Types: CWE-347 Description: Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by the Zoom client to spawn processes wit
ccess. Users may potentially utilize higher level system privileges maintained by the Zoom client to spawn processes with escalated privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-34121 State: PUBLISHED Published: 2023-06-13T17:42:17.823Z Last Updated: 2025-01-02T20:00:09.588Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: Zoom Video Communications, Inc., ZoomZoom Video Communications, Inc. Products: Zoom for Windows, Zoom Rooms Client for Windows, Zoom VDI for Windows Meeting Clients Problem Types: CWE-79 Description: Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
ivilege via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://explore.zoom.us/en/trust/security/security-bulletin/
CVE ID: CVE-2023-34122 State: REJECTED Published: 2023-06-13T17:45:41.908Z Last Updated: 2024-09-04T18:21:14.441Z Description: No description available.
CVE ID: CVE-2023-34123 State: PUBLISHED Published: 2023-07-12T23:16:31.146Z Last Updated: 2024-11-06T17:01:05.956Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-321 Description: Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34124 State: PUBLISHED Published: 2023-07-13T00:14:16.861Z Last Updated: 2025-04-08T15:23:32.589Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-305 Description: The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060 - http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9
https://www.sonicwall.com/support/notices/230710150218060 - http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html
CVE ID: CVE-2023-34125 State: PUBLISHED Published: 2023-07-13T00:21:21.095Z Last Updated: 2024-11-05T15:34:52.319Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-27 Description: Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34126 State: PUBLISHED Published: 2023-07-13T00:44:10.845Z Last Updated: 2024-10-31T17:58:17.736Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-434 Description: Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34127 State: PUBLISHED Published: 2023-07-13T00:47:58.798Z Last Updated: 2025-04-23T16:20:27.112Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com
Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060 - http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html
CVE ID: CVE-2023-34128 State: PUBLISHED Published: 2023-07-13T00:58:35.946Z Last Updated: 2024-10-31T17:55:48.342Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-260 Description: Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34129 State: PUBLISHED Published: 2023-07-13T01:03:51.894Z Last Updated: 2024-10-30T18:53:10.286Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenticated remote attacker to traverse the directory and extract arbitrary files using Zip Slip method to any location on the underlying filesystem with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://p
nd earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34130 State: PUBLISHED Published: 2023-07-13T01:06:27.492Z Last Updated: 2024-10-30T19:55:38.482Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-327 Description: SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34131 State: PUBLISHED Published: 2023-07-13T02:20:39.413Z Last Updated: 2024-10-30T19:18:21.598Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-200 Description: Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker to access restricted web pages. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34132 State: PUBLISHED Published: 2023-07-13T02:24:25.820Z Last Updated: 2025-02-13T16:55:19.088Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-836 Description: Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060 - http://packetstormsecurity.com/files/174571/Sonicwall-
010 - https://www.sonicwall.com/support/notices/230710150218060 - http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html
CVE ID: CVE-2023-34133 State: PUBLISHED Published: 2023-07-13T02:28:35.751Z Last Updated: 2025-04-23T16:20:21.156Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an unauthenticated attacker to extract sensitive information from the application database. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall
ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060 - http://packetstormsecurity.com/files/174571/Sonicwall-GMS-9.9.9320-Remote-Code-Execution.html