Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0385 State: PUBLISHED Published: 2023-01-18T14:18:55.171Z Last Updated: 2025-01-13T17:11:39.586Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: kunalnagar Products: Custom 404 Pro Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Custom 404 Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.1. This is due to missing or incorrect nonce validation on the custom_404_pro_admin_init function. This makes it possible for unauthenticated attackers to delete logs, via forged request granted they can trick a site administrator into performing an action such as clicking on
elete logs, via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/968920b9-febf-4d76-a16b-f27954cd72e5 - https://plugins.trac.wordpress.org/browser/custom-404-pro/tags/3.7.1/admin/AdminClass.php#L114
CVE ID: CVE-2023-0386 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-10-21T23:15:22.744Z Vendors: n/a Products: Kernel Problem Types: CWE-282 Description: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a - https:
hment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a - https://security.netapp.com/advisory/ntap-20230420-0004/ - https://www.debian.org/security/2023/dsa-5402 - https://lists.debian.org/debian-lts-announce/2023/06/msg00008.html - http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE ID: CVE-2023-0387 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2023-0388 State: PUBLISHED Published: 2023-04-24T18:30:54.683Z Last Updated: 2025-02-04T18:33:41.863Z Vendors: Unknown Products: Random Text Problem Types: CWE-89 SQL Injection Description: The Random Text WordPress plugin through 0.3.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/77861a2e-879a-4bd0-b4c0-cd19481ace5d
CVE ID: CVE-2023-0389 State: PUBLISHED Published: 2024-01-16T15:56:07.623Z Last Updated: 2025-06-11T16:34:26.582Z Vendors: Unknown Products: Calculated Fields Form Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/090a3922-febc-4294-82d2-d8339d461893/
CVE ID: CVE-2023-0391 State: PUBLISHED Published: 2023-03-21T19:25:25.895Z Last Updated: 2025-02-26T16:34:47.683Z Vendors: MGT-COMMERCE Products: CloudPanel Problem Types: CWE-321 Description: MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, shared across every installation of CloudPanel. This behavior was observed in version 2.2.0. There has been no indication from the vendor this has been addressed in version 2.2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/2023/03/21/cve-2023-0391-mgt-commerce-cloudpanel-shared-certificate-vulnerability-and
- https://www.rapid7.com/blog/post/2023/03/21/cve-2023-0391-mgt-commerce-cloudpanel-shared-certificate-vulnerability-and-weak-installation-procedures/ - https://www.bleepingcomputer.com/news/security/cloudpanel-installations-use-the-same-ssl-certificate-private-key/
CVE ID: CVE-2023-0392 State: PUBLISHED Published: 2023-11-08T20:37:14.786Z Last Updated: 2024-09-04T16:02:49.750Z Vendors: Okta Products: LDAP Agent Problem Types: CWE-428 Description: The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://trust.okta.com/security-advisories/okta-ldap-agent-cve-2023-0392
CVE ID: CVE-2023-0394 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-03-31T14:48:07.833Z Vendors: n/a Products: Kernel Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cb3e9864cdbe35ff6378966660edbcbac955fe17 - https://security.netapp.com/advisory/ntap-20230302-0005/ - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https
ity.netapp.com/advisory/ntap-20230302-0005/ - https://lists.debian.org/debian-lts-announce/2023/03/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE ID: CVE-2023-0395 State: PUBLISHED Published: 2023-03-27T15:37:46.234Z Last Updated: 2025-02-19T15:11:34.491Z Vendors: Unknown Products: menu shortcode Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The menu shortcode WordPress plugin through 1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3f2565cd-7050-4ebd-9a50-cd9b9f7c3341
CVE ID: CVE-2023-0396 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T19:58:53.292Z Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-126 Description: A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8rpp-6vxq-pqg3
CVE ID: CVE-2023-0397 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T17:03:20.150Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-703 Description: A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wc2h-h868-q7hj
CVE ID: CVE-2023-0398 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T17:02:35.080Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: modoboa Products: modoboa/modoboa Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/0a852351-00ed-44d2-a650-9055b7beed58 - https://github.com/modoboa/modoboa/commit/8e14ac93669df4f35fcdebd55dc9d2f0fed3ed48
CVE ID: CVE-2023-0399 State: PUBLISHED Published: 2023-04-03T14:38:29.299Z Last Updated: 2025-02-14T19:18:27.612Z Vendors: Unknown Products: Image Over Image For WPBakery Page Builder Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Image Over Image For WPBakery Page Builder WordPress plugin before 3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/702d7bbe-93cc
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/702d7bbe-93cc-4bc2-b41d-cb66e08c99a7
CVE ID: CVE-2023-0400 State: PUBLISHED Published: 2023-02-01T16:34:09.911Z Last Updated: 2025-03-26T14:30:54.816Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: Trellix Products: Data Loss Prevention (DLP) Problem Types: CWE-670 Description: The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9 correctly detected and blocked the attempted upload of sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA
y detected and blocked the attempted upload of sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10394&locale=en_US
CVE ID: CVE-2023-0401 State: PUBLISHED Published: 2023-02-08T19:00:53.435Z Last Updated: 2025-11-04T19:14:37.338Z Vendors: OpenSSL Products: OpenSSL Problem Types: NULL pointer deference Description: A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail. There is a missing check for the return value from the initialization function which later leads to invalid usage of the digest API most likely leading to a crash. The unavailability of an algorithm can be
later leads to invalid usage of the digest API most likely leading to a crash. The unavailability of an algorithm can be caused by using FIPS enabled configuration of providers or more commonly by not loading the legacy provider. PKCS7 data is processed by the SMIME library calls and also by the time stamp (TS) library calls. The TLS implementation in OpenSSL does not call these functions however third party applications would be affected if they call these functions to verify signatures on untrusted data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20230207.txt - https://git.openssl.org/gitweb/?p=openssl.git;a
chment: References: - https://www.openssl.org/news/secadv/20230207.txt - https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674 - https://security.gentoo.org/glsa/202402-08
CVE ID: CVE-2023-0402 State: PUBLISHED Published: 2023-01-19T14:07:08.694Z Last Updated: 2025-01-13T17:11:28.167Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: warfareplugins Products: Social Sharing Plugin – Social Warfare Problem Types: CWE-862 Missing Authorization Description: The Social Warfare plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several AJAX actions in versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete post meta information and reset network access tokens. Additional Analyst Notes: - CVE Program Con
and above, to delete post meta information and reset network access tokens. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc4ba2c-32eb-46c5-bb40-7c0150fc1ca4 - https://plugins.trac.wordpress.org/browser/social-warfare/trunk/lib/options/SWP_Options_Page.php?rev=2364155#L923 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844092%40social-warfare&new=2844092%40social-warfare&sfp_email=&sfph_mail=
CVE ID: CVE-2023-0403 State: PUBLISHED Published: 2023-01-19T14:07:59.775Z Last Updated: 2025-01-13T17:11:18.783Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: warfareplugins Products: Social Sharing Plugin – Social Warfare Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Social Warfare plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.0. This is due to missing or incorrect nonce validation on several AJAX actions. This makes it possible for unauthenticated attackers to delete post meta information and reset network access tokens, via forged request granted they can trick a site
ckers to delete post meta information and reset network access tokens, via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a36d1bb1-9446-4042-a1ec-08a3ffdcb744 - https://plugins.trac.wordpress.org/browser/social-warfare/trunk/lib/options/SWP_Options_Page.php?rev=2364155#L923
CVE ID: CVE-2023-0404 State: PUBLISHED Published: 2023-01-19T14:25:17.678Z Last Updated: 2025-01-13T17:11:09.004Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: liedekef Products: Events Made Easy Problem Types: CWE-862 Missing Authorization Description: The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions related to AJAX actions in versions up to, and including, 2.3.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those functions intended for administrator use. While the plugin is still pending review from the Word
above, to invoke those functions intended for administrator use. While the plugin is still pending review from the WordPress repository, site owners can download a copy of the patched version directly from the developer's Github at https://github.com/liedekef/events-made-easy Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5a9e62de-3e70-424f-b8e5-2a5f07ca182d - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2836308%40events-made-easy&new=2836308%40events-made-easy&sfp_email=&sfph_mail=
CVE ID: CVE-2023-0405 State: PUBLISHED Published: 2023-02-13T14:32:23.773Z Last Updated: 2025-03-21T19:34:19.279Z Vendors: Unknown Products: GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training Problem Types: CWE-862 Missing Authorization Description: The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3ca9ac21-2bce-4480-9079-b4045b261
ram Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3ca9ac21-2bce-4480-9079-b4045b261273
CVE ID: CVE-2023-0406 State: PUBLISHED Published: 2023-01-19T00:00:00.000Z Last Updated: 2025-04-03T17:02:11.385Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: modoboa Products: modoboa/modoboa Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d7007f76-3dbc-48a7-a2fb-377040fe100c - https://github.com/modoboa/modoboa/commit/7f0573e917227686d2cc127be1364e2908740807
CVE ID: CVE-2023-0410 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-02T14:33:12.146Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: builderio Products: builderio/qwik Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository builderio/qwik prior to 0.1.0-beta5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/2da583f0-7f66-4ba7-9bed-8e7229aa578e - https://github.com/builderio/qwik/commit/4b2f89dbbd2bc0a2c92eae1a49bdd186e589151a
CVE ID: CVE-2023-0411 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-11-03T21:46:51.602Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Excessive iteration in Wireshark Description: Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-06.html - https://gitlab.com/wireshark/wireshark/-/issues/18711 - https://gitlab.com/wireshark/wiresha
ity/wnpa-sec-2023-06.html - https://gitlab.com/wireshark/wireshark/-/issues/18711 - https://gitlab.com/wireshark/wireshark/-/issues/18720 - https://gitlab.com/wireshark/wireshark/-/issues/18737 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0411.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html
CVE ID: CVE-2023-0412 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-11-03T21:46:53.070Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Uncontrolled recursion in Wireshark Description: TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-07.html - https://gitlab.com/wireshark/wireshark/-/issues/18770 - https://gitlab.com/gitlab-org/cves/-/blob/master/20
23-07.html - https://gitlab.com/wireshark/wireshark/-/issues/18770 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0412.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html
CVE ID: CVE-2023-0413 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-11-03T21:46:54.535Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Null pointer dereference in Wireshark Description: Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-03.html - https://gitlab.com/wireshark/wireshark/-/issues/18766 - https://gitlab.com/gitlab-org/cves/-/blob/master
-2023-03.html - https://gitlab.com/wireshark/wireshark/-/issues/18766 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0413.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html
CVE ID: CVE-2023-0414 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T15:13:53.483Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Expired pointer dereference in Wireshark Description: Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-01.html - https://gitlab.com/wireshark/wireshark/-/issues/18622 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0
https://gitlab.com/wireshark/wireshark/-/issues/18622 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0414.json
CVE ID: CVE-2023-0415 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-11-03T21:46:56.010Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Null pointer dereference in Wireshark Description: iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-05.html - https://gitlab.com/wireshark/wireshark/-/issues/18796 - https://gitlab.com/gitlab-org/cves/-/blob/master
-2023-05.html - https://gitlab.com/wireshark/wireshark/-/issues/18796 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0415.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html
CVE ID: CVE-2023-0416 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-11-03T21:46:57.494Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Expired pointer dereference in Wireshark Description: GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-04.html - https://gitlab.com/wireshark/wireshark/-/issues/18779 - https://gitlab.com/gitlab-org/cves/-/blob/maste
c-2023-04.html - https://gitlab.com/wireshark/wireshark/-/issues/18779 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0416.json
CVE ID: CVE-2023-0417 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-11-03T21:46:58.960Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Uncontrolled memory allocation in Wireshark Description: Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2023-02.html - https://gitlab.com/wireshark/wireshark/-/issues/18628 - https://gitlab.com/gitlab-org/c
security/wnpa-sec-2023-02.html - https://gitlab.com/wireshark/wireshark/-/issues/18628 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0417.json - https://lists.debian.org/debian-lts-announce/2023/02/msg00007.html