Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-33833 State: PUBLISHED Published: 2023-08-31T12:59:32.142Z Last Updated: 2024-09-27T14:18:50.204Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Information Queue Problem Types: CWE-311 Description: IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be read by a local user. IBM X-Force ID: 256013. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/256013
CVE ID: CVE-2023-33834 State: PUBLISHED Published: 2023-08-31T13:01:07.514Z Last Updated: 2024-09-27T14:18:27.832Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Information Queue Problem Types: CWE-209 Description: IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-force ID: 256014. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/256014
CVE ID: CVE-2023-33835 State: PUBLISHED Published: 2023-08-31T13:04:05.059Z Last Updated: 2024-09-27T14:17:56.342Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Information Queue Problem Types: CWE-209 Description: IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 256015. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7029584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/256015
CVE ID: CVE-2023-33836 State: PUBLISHED Published: 2023-10-16T00:26:57.050Z Last Updated: 2024-09-16T19:14:46.287Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-798 Description: IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 256016. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047640 - https://https://exchange
tainer: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047640 - https://https://exchange.xforce.ibmcloud.com/vulnerabilities/256016
CVE ID: CVE-2023-33837 State: PUBLISHED Published: 2023-10-23T19:47:41.708Z Last Updated: 2024-09-19T15:16:11.497Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-319 Description: IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before storage or transmission. IBM X-Force ID: 256020. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7057377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/256020
CVE ID: CVE-2023-33838 State: PUBLISHED Published: 2025-01-29T01:22:19.102Z Last Updated: 2025-02-12T16:46:40.574Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-759 Description: IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7172200
CVE ID: CVE-2023-33839 State: PUBLISHED Published: 2023-10-23T19:45:31.624Z Last Updated: 2024-09-11T14:51:31.170Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-78 Description: IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7057377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/256036
CVE ID: CVE-2023-33840 State: PUBLISHED Published: 2023-10-23T19:36:04.866Z Last Updated: 2024-09-11T14:31:53.854Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-79 Description: IBM Security Verify Governance 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256037. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/70573
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7057377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/256037
CVE ID: CVE-2023-33842 State: PUBLISHED Published: 2023-06-22T01:34:35.994Z Last Updated: 2024-12-04T21:39:34.767Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: SPSS Modeler Problem Types: 296 Improper Following of a Certificate's Chain of Trust Description: IBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user to decrypt and obtain sensitive information. IBM X-Force ID: 256117. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7004299 - https://exchange
tainer: - CISA ADP Vulnrichment: References: - https://https://www.ibm.com/support/pages/node/7004299 - https://exchange.xforce.ibmcloud.com/vulnerabilities/256117
CVE ID: CVE-2023-33843 State: PUBLISHED Published: 2024-02-21T14:29:16.455Z Last Updated: 2024-08-02T15:54:12.696Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256544. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7116607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/256544
CVE ID: CVE-2023-33844 State: PUBLISHED Published: 2025-04-09T14:03:58.894Z Last Updated: 2025-08-16T23:42:11.334Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Security Verify Governance Problem Types: CWE-79 Description: IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7230443
CVE ID: CVE-2023-33846 State: PUBLISHED Published: 2023-06-08T00:39:37.275Z Last Updated: 2025-01-06T20:02:42.285Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: TXSeries for Multiplatforms, CICS TX Standard, CICS TX Advanced Problem Types: CWE-79 Description: IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 257100. Additional Analyst Notes: - CV
ially leading to credentials disclosure within a trusted session. IBM X-Force ID: 257100. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/257100 - https://www.ibm.com/support/pages/node/7001601 - https://www.ibm.com/support/pages/node/7001629 - https://www.ibm.com/support/pages/node/7001633
CVE ID: CVE-2023-33847 State: PUBLISHED Published: 2023-06-08T00:35:17.555Z Last Updated: 2025-01-06T20:03:05.260Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: TXSeries for Multiplatforms, CICS TX Standard, CICS TX Advanced Problem Types: 614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute Description: IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be
ookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 257102. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/257102 - https://www.ibm.com/support/pages/node/7001645 - https://www.ibm.com/support/pages/node/7001641 - https://www.ibm.com/support/pages/node/7001635
CVE ID: CVE-2023-33848 State: PUBLISHED Published: 2023-06-07T20:13:51.039Z Last Updated: 2025-01-06T20:01:22.246Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: TXSeries for Multiplatforms, CICS TX Standard, CICS TX Advanced Problem Types: CWE-200 Description: IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could allow a privileged user to obtain highly sensitive information by enabling debug mode. IBM X-Force ID: 257104. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7001681 - https://www.ibm.com/support/pa
: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7001681 - https://www.ibm.com/support/pages/node/7001683 - https://www.ibm.com/support/pages/node/7001647 - https://exchange.xforce.ibmcloud.com/vulnerabilities/257104
CVE ID: CVE-2023-33849 State: PUBLISHED Published: 2023-06-07T21:24:24.895Z Last Updated: 2025-01-06T21:22:49.352Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: TXSeries for Multiplatforms, CICS TX Standard, CICS TX Advanced Problem Types: CWE-311 Description: IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques. IBM X-Force ID: 257105. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/257
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/257105 - https://www.ibm.com/support/pages/node/7001687 - https://www.ibm.com/support/pages/node/7001697 - https://www.ibm.com/support/pages/node/7001695
CVE ID: CVE-2023-33850 State: PUBLISHED Published: 2023-08-22T20:31:25.923Z Last Updated: 2025-11-03T21:48:43.280Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: TXSeries for Multiplatforms, CICS TX Standard, CICS TX Advanced Problem Types: CWE-203 Description: IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
obtain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7010369 - https://www.ibm.com/support/pages/node/7022413 - https://www.ibm.com/support/pages/node/7022414
CVE ID: CVE-2023-33851 State: PUBLISHED Published: 2024-02-04T00:16:46.075Z Last Updated: 2024-08-02T15:54:12.791Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: PowerVM Hypervisor Problem Types: CWE-200 Description: IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could reveal sensitive partition data to a system administrator. IBM X-Force ID: 257135. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7114491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/257135
CVE ID: CVE-2023-33852 State: PUBLISHED Published: 2023-08-27T22:46:35.785Z Last Updated: 2024-10-01T15:47:06.415Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: IBM Products: Security Guardium Problem Types: CWE-89 Description: IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 257614. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7028514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
nt: References: - https://www.ibm.com/support/pages/node/7028514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/257614
CVE ID: CVE-2023-33855 State: PUBLISHED Published: 2024-03-26T14:04:37.274Z Last Updated: 2024-08-05T16:12:49.907Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Common Cryptographic Architecture Problem Types: CWE-385 Description: Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack. IBM X-Force ID: 257676. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7145168 - http
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7145168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/257676
CVE ID: CVE-2023-33857 State: PUBLISHED Published: 2023-07-16T23:38:08.778Z Last Updated: 2024-10-31T15:34:55.083Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-200 Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7007059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/257695
CVE ID: CVE-2023-33859 State: PUBLISHED Published: 2024-07-10T15:26:49.293Z Last Updated: 2024-08-02T15:54:12.616Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security QRadar EDR Problem Types: CWE-204 Description: IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy. IBM X-Force ID: 257697. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/257697
CVE ID: CVE-2023-33860 State: PUBLISHED Published: 2024-07-10T15:28:42.347Z Last Updated: 2025-05-19T15:16:20.172Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security QRadar EDR Problem Types: CWE-614 Description: IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Conta
obtain the cookie value by snooping the traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7159770
CVE ID: CVE-2023-33861 State: PUBLISHED Published: 2025-05-20T14:51:23.748Z Last Updated: 2025-08-16T23:42:45.090Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: IBM Products: Security ReaQta EDR Problem Types: CWE-295 Description: IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7233972
CVE ID: CVE-2023-33863 State: PUBLISHED Published: 2023-06-07T00:00:00.000Z Last Updated: 2025-11-03T21:48:44.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://renderdoc.org/ - https://www.qualys.com/2023/06/06/renderdoc/renderdoc.txt - http://seclists.org/fulldisclosure/2023/Jun/2 - http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Exec
sure/2023/Jun/2 - http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html - https://lists.debian.org/debian-lts-announce/2023/07/msg00023.html - https://security.gentoo.org/glsa/202311-10
CVE ID: CVE-2023-33864 State: PUBLISHED Published: 2023-06-07T00:00:00.000Z Last Updated: 2025-11-03T21:48:46.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize) even though m_InputSize can exceed m_BufferSize. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://renderdoc.org/ - https://www.qualys.com/2023/06/06/renderdoc/renderdoc.txt - http://seclists.org/fulldisclosure/2023/Jun/2 - http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-C
lldisclosure/2023/Jun/2 - http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html - https://lists.debian.org/debian-lts-announce/2023/07/msg00023.html - https://security.gentoo.org/glsa/202311-10
CVE ID: CVE-2023-33865 State: PUBLISHED Published: 2023-06-07T00:00:00.000Z Last Updated: 2025-11-03T21:48:47.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://renderdoc.org/ - https://www.qualys.com/2023/06/06/renderdoc/renderdoc.txt - http://seclists.org/fulldisclosure/2023/Jun/2 - http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html - https://lists.debian.org/debian-lts-announc
72804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html - https://lists.debian.org/debian-lts-announce/2023/07/msg00023.html - https://security.gentoo.org/glsa/202311-10
CVE ID: CVE-2023-33866 State: PUBLISHED Published: 2023-07-19T13:16:37.327Z Last Updated: 2025-11-04T19:16:29.026Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Foxit Products: Foxit Reader Problem Types: CWE-416 Description: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated with pages, a specially crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user vi
trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1757
CVE ID: CVE-2023-33867 State: PUBLISHED Published: 2023-08-11T02:37:25.812Z Last Updated: 2024-10-03T20:46:28.101Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA Problem Types: escalation of privilege, CWE-92 Description: Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-ce
CVE ID: CVE-2023-33868 State: PUBLISHED Published: 2023-07-06T22:53:59.468Z Last Updated: 2024-10-24T13:31:39.537Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: PiiGAB Products: M-Bus SoftwarePack Problem Types: CWE-307 Description: The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-187-01
CVE ID: CVE-2023-33869 State: PUBLISHED Published: 2023-06-20T19:43:46.809Z Last Updated: 2024-12-06T21:34:11.282Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Enphase Products: Envoy Problem Types: CWE-78 Description: Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-171-01