Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-5828 State: PUBLISHED Published: 2023-10-27T19:31:04.802Z Last Updated: 2024-08-02T08:14:24.004Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Nanning Ontall Products: Longxing Industrial Development Zone Project Construction and Installation Management System Problem Types: CWE-89 Description: A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the argument tbxUserName leads to sql injection. The attack can be launched remote
file login.aspx. The manipulation of the argument tbxUserName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243727. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.243727 - https://vuldb.com/?ctiid.243727 - https://github.com/Echosssy/-SQL-injection/blob/main/%E5%8D%97%E5%AE%81%E5%B8%82%E5%AE%89%E6%8B%93%E8%BD%AF%E4%BB%B6%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8SQL%20injection.doc
CVE ID: CVE-2023-5829 State: PUBLISHED Published: 2023-10-27T20:00:07.256Z Last Updated: 2024-08-02T08:14:24.143Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Admission Management System Problem Types: CWE-434 Description: A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file student_avatar.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243728. Additional Analyst Notes: - CISA ADP Vulnrichme
lic and may be used. The identifier of this vulnerability is VDB-243728. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.243728 - https://vuldb.com/?ctiid.243728 - https://github.com/lxxcute/Bug/blob/main/Admission%20Management%20System%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf
CVE ID: CVE-2023-5830 State: PUBLISHED Published: 2023-10-27T20:31:06.511Z Last Updated: 2024-09-09T17:57:22.184Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: ColumbiaSoft Products: Document Locator Problem Types: CWE-287 Description: A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper authentication. It is possible to initiate the attack remotely. Upgrading to version 7.2 SP4 and 2021.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-24
SP4 and 2021.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-243729 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243729 - https://vuldb.com/?ctiid.243729
CVE ID: CVE-2023-5831 State: PUBLISHED Published: 2023-11-06T10:30:28.442Z Last Updated: 2024-10-03T06:23:16.311Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-201 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, and all versions starting from 16.5.0 before 16.5.1 which have the `super_sidebar_logged_out` feature flag enabled. Affected versions with this default-disabled feature flag enabled may unintentionally disclose GitLab version metadata to unauthorized actors. Additional Analyst Notes: - CVE Program
led may unintentionally disclose GitLab version metadata to unauthorized actors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/428919
CVE ID: CVE-2023-5832 State: PUBLISHED Published: 2023-10-30T12:24:09.831Z Last Updated: 2024-09-06T18:06:11.851Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-20 Description: Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/afee3726-571f-416e-bba5-0828c815f5df - https://github.com/mintplex-labs/anything-llm/commit/18798c5b640018aaee924e0afd941705d88df92e
CVE ID: CVE-2023-5833 State: PUBLISHED Published: 2023-10-30T12:24:14.973Z Last Updated: 2024-09-06T18:05:19.093Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-284 Description: Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/00ec6847-125b-43e9-9658-d3cace1751d6 - https://github.com/mintplex-labs/anything-llm/commit/d5b1f84a4c7991987eac3454d4f1b4067841d783
CVE ID: CVE-2023-5834 State: PUBLISHED Published: 2023-10-27T21:06:38.680Z Last Updated: 2024-09-09T17:58:26.595Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: HashiCorp Products: Vagrant Problem Types: CWE-1386 Description: HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2023-31-vagrant-s-windows-installer-allowed-directory-junction-write/59568
CVE ID: CVE-2023-5835 State: PUBLISHED Published: 2023-10-28T13:31:05.324Z Last Updated: 2024-08-02T08:14:24.270Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: hu60t Products: hu60wap6 Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file src/class/ubbparser.php. The manipulation leads to cross site scripting. The attack can be launched remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The patch is named a1cd9f12d7687243bfcb7ce295665acb83b9174e. It is recommended to apply a patch to f
es are unavailable. The patch is named a1cd9f12d7687243bfcb7ce295665acb83b9174e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-243775. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.243775 - https://vuldb.com/?ctiid.243775 - https://github.com/hu60t/hu60wap6/commit/a1cd9f12d7687243bfcb7ce295665acb83b9174e
CVE ID: CVE-2023-5836 State: PUBLISHED Published: 2023-10-28T21:00:08.118Z Last Updated: 2024-09-09T14:31:44.330Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Task Reminder System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-243800. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vul
ity is VDB-243800. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.243800 - https://vuldb.com/?ctiid.243800
CVE ID: CVE-2023-5837 State: PUBLISHED Published: 2023-10-28T21:31:04.594Z Last Updated: 2024-08-27T18:28:03.731Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: AlexanderLivanov Products: FotosCMS2 Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of the file profile.php of the component Cookie Handler. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-243802 is the identifier assigned to this vulnerability. Additional Analyst Notes: - C
o the public and may be used. VDB-243802 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.243802 - https://vuldb.com/?ctiid.243802 - https://github.com/AlexanderLivanov/FotosCMS2/issues/18
CVE ID: CVE-2023-5838 State: PUBLISHED Published: 2023-10-29T00:00:20.232Z Last Updated: 2024-09-06T19:34:28.078Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: linkstackorg Products: linkstackorg/linkstack Problem Types: CWE-613 Description: Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/8f6feca3-386d-4897-801c-39b9e3e5eb03 - https://github.com/linkstackorg/linkstack/commit/02f620092255f07e1d0252a0190fd42ef773ba05
CVE ID: CVE-2023-5839 State: PUBLISHED Published: 2023-10-29T00:00:19.041Z Last Updated: 2024-09-06T19:32:01.256Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: hestiacp Products: hestiacp/hestiacp Problem Types: CWE-268 Description: Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/21125f12-64a0-42a3-b218-26b9945a5bc0 - https://github.com/hestiacp/hestiacp/commit/acb766e1db53de70534524b3fbc2270689112630
CVE ID: CVE-2023-5840 State: PUBLISHED Published: 2023-10-29T00:00:20.031Z Last Updated: 2024-09-06T19:33:23.795Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: linkstackorg Products: linkstackorg/linkstack Problem Types: CWE-640 Description: Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/8042d8c3-650e-4c0d-9146-d9ccf6082b30 - https://github.com/linkstackorg/linkstack/commit/fe7b99eae88f9e4c4cd4b00bab372cbf4b584b16
CVE ID: CVE-2023-5841 State: PUBLISHED Published: 2024-02-01T18:28:05.892Z Last Updated: 2025-11-04T16:10:52.466Z Vendors: Academy Software Foundation Products: OpenEXR Problem Types: CWE-122 Description: Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/CVE-2023-5841.html - https://lists.fedorap
m Container: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/CVE-2023-5841.html - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LSB6DB5LAKGPLRXEF5HDNGUMT7GIFT2C/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMINVKQLSUHECXBSQMZFCSDRIHFOJJI/
CVE ID: CVE-2023-5842 State: PUBLISHED Published: 2023-10-30T00:00:21.048Z Last Updated: 2024-09-06T18:11:31.816Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: dolibarr Products: dolibarr/dolibarr Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/aed81114-5952-46f5-ae3a-e66518e98ba3 - https://github.com/dolibarr/dolibarr/commit/f569048eb2bd823525bce4ef52316e7a83e3345c
CVE ID: CVE-2023-5843 State: PUBLISHED Published: 2023-10-30T13:48:58.150Z Last Updated: 2025-02-05T18:55:43.185Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: datafeedrcom Products: Ads by datafeedr.com Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function. This allows unauthenticated attackers to execute code on the server. The parameters of the callable function are limited, they cannot be specified arbitrarily. Additional Analyst Notes: - CVE Program Co
s of the callable function are limited, they cannot be specified arbitrarily. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5412fd87-49bc-445c-8d16-443e38933d1e?source=cve - https://plugins.trac.wordpress.org/browser/ads-by-datafeedrcom/tags/1.1.3/inc/dfads.class.php#L34
CVE ID: CVE-2023-5844 State: PUBLISHED Published: 2023-10-30T10:08:49.782Z Last Updated: 2024-09-06T18:09:13.204Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: pimcore Products: pimcore/admin-ui-classic-bundle Problem Types: CWE-620 Description: Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/b031199d-192a-46e5-8c02-f7284ad74021 - https://github.com/pimcore/admin-ui-classic-bundle/commit/498ac77e54541177be27b0c710e387c47b3836ea
CVE ID: CVE-2023-5845 State: PUBLISHED Published: 2023-11-27T16:22:02.151Z Last Updated: 2024-10-01T14:32:10.260Z Vendors: Unknown Products: Simple Social Media Share Buttons Problem Types: CWE-287 Improper Authentication Description: The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta tags Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d5b59e9e-85e5-4d26-aebe-64757c8495fa
CVE ID: CVE-2023-5846 State: PUBLISHED Published: 2023-11-02T16:47:40.389Z Last Updated: 2024-09-12T13:35:16.629Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Franklin Fueling System Products: TS-550 Problem Types: CWE-916 Description: Franklin Fueling System TS-550 versions prior to 1.9.23.8960 are vulnerable to attackers decoding admin credentials, resulting in unauthenticated access to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-306-04
CVE ID: CVE-2023-5847 State: PUBLISHED Published: 2023-11-01T15:30:55.181Z Last Updated: 2024-09-05T19:40:22.479Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Tenable Products: Nessus, Nessus Agent Problem Types: CWE-269 Description: Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/tns-2023-37 - https://www.tenable.com/security/tns-2023-38
CVE ID: CVE-2023-5849 State: PUBLISHED Published: 2023-11-01T17:14:00.170Z Last Updated: 2025-04-29T20:49:52.634Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1492384 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce
1492384 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5850 State: PUBLISHED Published: 2023-11-01T17:14:00.570Z Last Updated: 2025-02-13T17:25:52.491Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1281972 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproj
/www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5851 State: PUBLISHED Published: 2023-11-01T17:14:00.867Z Last Updated: 2025-02-13T17:25:53.137Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1473957 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.
- https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5852 State: PUBLISHED Published: 2023-11-01T17:14:01.159Z Last Updated: 2025-04-29T20:32:26.508Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1480852 - https://www.debian.org/security/2023/dsa-5546 - htt
ble-channel-update-for-desktop_31.html - https://crbug.com/1480852 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5853 State: PUBLISHED Published: 2023-11-01T17:14:01.484Z Last Updated: 2025-02-13T17:25:54.172Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1456876 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.
.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2023-5854 State: PUBLISHED Published: 2023-11-01T17:14:01.762Z Last Updated: 2025-04-29T20:27:55.220Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html - https://crbug.com/1488267 - https://www.debian.org/security/2023/dsa-5546 - htt
ble-channel-update-for-desktop_31.html - https://crbug.com/1488267 - https://www.debian.org/security/2023/dsa-5546 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EBA4KD5ZSV6XWWFLVR5UBYKKNOYMH33H/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MHLJRFWZNY6BFOW25Q4FEESVWZKS4C2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHWLT3M2AQDFD7RNAM3NJMYUC5KHMO5V/ - https://security.gentoo.org/glsa/202311-11 - https://security.gentoo.org/glsa/202312-07 - https://security.gentoo.org/glsa/202401-34