Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-1504 State: PUBLISHED Published: 2023-03-20T08:31:03.956Z Last Updated: 2024-08-02T05:49:11.654Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Alphaware Simple E-Commerce System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Alphaware Simple E-Commerce System 1.0. This vulnerability affects unknown code. The manipulation of the argument email/password with the input test1%40test.com ' AND (SELECT 6077 FROM (SELECT(SLEEP(5)))dltn) AND 'PhRa'='PhRa leads to sql injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploi
hRa leads to sql injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223408. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223408 - https://vuldb.com/?ctiid.223408
CVE ID: CVE-2023-1505 State: PUBLISHED Published: 2023-03-20T09:00:06.223Z Last Updated: 2024-08-02T05:49:11.667Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: E-Commerce System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue affects some unknown processing of the file /ecommerce/admin/settings/setDiscount.php. The manipulation of the argument id with the input 201737 AND (SELECT 8973 FROM (SELECT(SLEEP(5)))OoAD) leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitat
leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-223409 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223409 - https://vuldb.com/?ctiid.223409
CVE ID: CVE-2023-1506 State: PUBLISHED Published: 2023-03-20T09:31:04.091Z Last Updated: 2024-08-02T05:49:11.644Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: E-Commerce System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-2
er high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-223410 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223410 - https://vuldb.com/?ctiid.223410
CVE ID: CVE-2023-1507 State: PUBLISHED Published: 2023-03-20T10:00:04.240Z Last Updated: 2024-08-02T05:49:11.670Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: E-Commerce System Problem Types: CWE-79 Description: A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ecommerce/admin/category/controller.php of the component Category Name Handler. The manipulation of the argument CATEGORY leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifi
e attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223411. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.223411 - https://vuldb.com/?ctiid.223411
CVE ID: CVE-2023-1508 State: PUBLISHED Published: 2023-05-23T20:00:41.023Z Last Updated: 2025-01-17T15:23:27.650Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adam Retail Automation Systems Products: Mobilmen Terminal Software Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection.This issue affects Mobilmen Terminal Software: before 3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0284
CVE ID: CVE-2023-1509 State: PUBLISHED Published: 2023-03-29T10:14:35.275Z Last Updated: 2025-01-13T16:56:58.907Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: gmdragonx Products: GMAce Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.2. This is due to missing nonce validation on the gmace_manager_server function called via the wp_ajax_gmace_manager AJAX action. This makes it possible for unauthenticated attackers to modify arbitrary files and achieve remote code execution via a forged request granted they can trick a site adm
ckers to modify arbitrary files and achieve remote code execution via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/826b3913-9a37-4e15-80fd-b35cefb51af8?source=cve - https://plugins.trac.wordpress.org/browser/gmace/trunk/gmace.php?rev=1583327#L84 - https://plugins.trac.wordpress.org/browser/gmace/trunk/inc/filemanager.php?rev=1583319#L27
CVE ID: CVE-2023-1513 State: PUBLISHED Published: 2023-03-23T00:00:00.000Z Last Updated: 2025-02-25T19:33:10.636Z Vendors: n/a Products: Linux kernel (KVM) Problem Types: CWE-665 Description: A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2179892 - https://lore.kernel.org/kvm/20230214103304.3689213-1-gregkh%40linuxfoundation.org/ - https://github.com/torvalds/linux/commit/2c10b61421a28e
org/kvm/20230214103304.3689213-1-gregkh%40linuxfoundation.org/ - https://github.com/torvalds/linux/commit/2c10b61421a28e95a46ab489fd56c0f442ff6952 - https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2023-1514 State: PUBLISHED Published: 2023-12-19T14:22:37.619Z Last Updated: 2024-08-02T05:49:11.678Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Hitachi Energy Products: RTU500 Scripting Interface Problem Types: CWE-295 Description: A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a certificate. This certificate links a public key to the identity of the service and is signed by a Certification Authority (CA), allowing the client to validate that the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certif
hat the remote service can be trusted and is not malicious. If the client does not validate the parameters of the certificate, then attackers could be able to spoof the identity of the service. An attacker could exploit the vulnerability by using faking the identity of a RTU500 device and intercepting the messages initiated via the RTU500 Scripting interface. Additional Analyst Notes: - CVE Program Container: References: - https://publisher.hitachienergy.com/preview?DocumentId=8DBD000152&languageCode=en&Preview=true
CVE ID: CVE-2023-1515 State: PUBLISHED Published: 2023-03-20T00:00:00.000Z Last Updated: 2025-02-26T19:23:25.873Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282 - https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964
CVE ID: CVE-2023-1516 State: PUBLISHED Published: 2023-03-28T20:34:52.453Z Last Updated: 2025-01-16T21:37:33.820Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: RoboDK Products: RoboDK Problem Types: CWE-732 Description: RoboDK versions 5.5.3 and prior contain an insecure permission assignment to critical directories vulnerability, which could allow a local user to escalate privileges and write files to the RoboDK process and achieve code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-01 - https://robodk.com/contact
CVE ID: CVE-2023-1517 State: PUBLISHED Published: 2023-03-20T00:00:00.000Z Last Updated: 2025-02-26T19:22:56.581Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d - https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7
CVE ID: CVE-2023-1518 State: PUBLISHED Published: 2023-03-28T20:51:54.826Z Last Updated: 2025-01-16T21:37:26.642Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CP Plus Products: KVMS Pro Problem Types: CWE-522 Description: CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently protected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-02
CVE ID: CVE-2023-1521 State: PUBLISHED Published: 2024-11-26T11:15:59.434Z Last Updated: 2024-11-26T20:45:48.176Z Vendors: Mozilla Products: sccache Problem Types: CWE-426 Description: On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LD_PRELOAD. If the server is run as root (which is the default when installing the snap package https://snapcraft.io/sccache ), this means a user running the sccache client can get root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2023-046_ScCache - https://github.com/advisories/G
ichment: References: - https://securitylab.github.com/advisories/GHSL-2023-046_ScCache - https://github.com/advisories/GHSA-x7fr-pg8f-93f5
CVE ID: CVE-2023-1522 State: PUBLISHED Published: 2023-04-05T18:51:02.590Z Last Updated: 2025-02-12T15:45:26.199Z Vendors: Genetec Inc. Products: Genetec Security Center Problem Types: CWE-89 SQL Injection Description: SQL Injection in the Hardware Inventory report of Security Center 5.11.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.genetec.com/blog/data-protection/high-severity-vulnerability-affecting-the-hardware-inventory-report-task-of-security-center
CVE ID: CVE-2023-1523 State: PUBLISHED Published: 2023-09-01T18:41:47.820Z Last Updated: 2024-10-01T13:08:45.851Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Ltd. Products: snapd Description: Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others are not affected - this can only be exploited when snaps are run on a virtual console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
ited when snaps are run on a virtual console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ubuntu.com/security/notices/USN-6125-1 - https://github.com/snapcore/snapd/pull/12849 - https://marc.info/?l=oss-security&m=167879021709955&w=2 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1523
CVE ID: CVE-2023-1524 State: PUBLISHED Published: 2023-05-30T07:49:11.466Z Last Updated: 2025-01-10T21:06:40.440Z Vendors: Unknown Products: Download Manager Problem Types: CWE-284 Improper Access Control Description: The Download Manager WordPress plugin before 3.2.71 does not adequately validate passwords for password-protected files. Upon validation, a master key is generated and exposed to the user, which may be used to download any password-protected file on the server, allowing a user to download any file with the knowledge of any one file's password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3802d15d-9bfd
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3802d15d-9bfd-4762-ab8a-04475451868e
CVE ID: CVE-2023-1525 State: PUBLISHED Published: 2023-05-02T07:04:49.421Z Last Updated: 2025-01-30T15:02:37.909Z Vendors: Unknown Products: Site Reviews Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4ae6bf90-b100-4bb5-bdd7-8acdbd950596
CVE ID: CVE-2023-1526 State: PUBLISHED Published: 2023-04-28T16:04:13.185Z Last Updated: 2025-01-30T19:29:46.760Z Vendors: HP Inc. Products: HP DesignJet and PageWide XL Description: Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physically removed from the printer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_7869666-7869691-16/hpsbpi03837
CVE ID: CVE-2023-1527 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-27T16:43:00.904Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: tsolucio Products: tsolucio/corebos Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/f0272a31-9944-4545-8428-a26154d20348 - https://github.com/tsolucio/corebos/commit/aaaca69185bce2be6a82956c69541938dc871268
CVE ID: CVE-2023-1528 State: PUBLISHED Published: 2023-03-21T20:50:55.704Z Last Updated: 2025-02-13T16:39:24.371Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html - https://crbug.com/1421773 - https://lists.fedoraproject.org/archives/list/package-announce@list
te-for-desktop_21.html - https://crbug.com/1421773 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1529 State: PUBLISHED Published: 2023-03-21T20:50:55.930Z Last Updated: 2025-02-13T16:39:24.996Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html - https://crbug.com/1419718 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject
21.html - https://crbug.com/1419718 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1530 State: PUBLISHED Published: 2023-03-21T20:50:56.042Z Last Updated: 2025-05-05T16:06:53.874Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html - https://crbug.com/1419831 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCH
831 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1531 State: PUBLISHED Published: 2023-03-21T20:50:56.155Z Last Updated: 2025-02-13T16:39:26.162Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html - https://crbug.com/1415330 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4N
15330 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1724 - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1532 State: PUBLISHED Published: 2023-03-21T20:50:56.271Z Last Updated: 2025-02-13T16:39:26.736Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html - https://crbug.com/1421268 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CR
crbug.com/1421268 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/ - http://packetstormsecurity.com/files/171959/Chrome-media-mojom-VideoFrame-Missing-Validation.html - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1533 State: PUBLISHED Published: 2023-03-21T20:50:56.386Z Last Updated: 2025-02-13T16:39:27.493Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html - https://crbug.com/1422183 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5
om/1422183 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/ - https://security.gentoo.org/glsa/202309-17
CVE ID: CVE-2023-1534 State: PUBLISHED Published: 2023-03-21T20:50:56.608Z Last Updated: 2025-02-13T16:39:28.506Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/03/stable-channel-update-for-desktop_21.html - https://crbug.com/1422594 - https://lists.fedoraproject.org/archives/list/package-announce@
update-for-desktop_21.html - https://crbug.com/1422594 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FG3CRADL7IL5IHK4NCHG4LAYLKHFXETX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3QZY4UQFP4XNF43ILMVVOABMB7KAQ5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NGWWGQULJ7QRNP4GY57HE7OO7VMRWMPN/ - http://packetstormsecurity.com/files/171961/Chrome-GL_ShaderBinary-Untrusted-Process-Exposure.html - http://packetstormsecurity.com/files/171965/Chrome-SpvGetMappedSamplerName-Out-Of-Bounds-String-Copy.html - https://security.gentoo.org/glsa/202309-1
m/files/171965/Chrome-SpvGetMappedSamplerName-Out-Of-Bounds-String-Copy.html - https://security.gentoo.org/glsa/202309-17