Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
" and won't initiate a handshake, but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication, and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.python.org/dev/security/ - https://mail.python.org/archives/list/security-announce%40python.
: References: - https://www.python.org/dev/security/ - https://mail.python.org/archives/list/security-announce%40python.org/thread/PEPLII27KYHLF4AK3ZQGKYNCRERG4YXY/ - https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html - https://security.netapp.com/advisory/ntap-20231006-0014/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
CVE ID: CVE-2023-40218 State: PUBLISHED Published: 2023-09-12T00:00:00 Last Updated: 2024-09-26T14:30:28.286Z Severity: LOW (CVSS 2 CVSS:3.1/AC:L/AV:L/A:L/C:N/I:N/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-40219 State: PUBLISHED Published: 2023-09-26T08:13:16.447Z Last Updated: 2024-09-24T14:33:19.982Z Vendors: Collne Inc. Products: Welcart e-Commerce Problem Types: Unrestricted Upload of File with Dangerous Type Description: Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.welcart.com/archives/20106.html - https://jvn.jp/en/jp/JVN97197972/
CVE ID: CVE-2023-40220 State: PUBLISHED Published: 2023-11-14T19:05:05.694Z Last Updated: 2024-08-14T20:02:05.993Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) NUC BIOS firmware Problem Types: information disclosure, CWE-92 Description: Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01001.html
CVE ID: CVE-2023-40221 State: PUBLISHED Published: 2023-09-18T19:59:17.900Z Last Updated: 2024-08-02T18:24:55.947Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Socomec Products: MODULYS GP (MOD3GP-SY-120K) Problem Types: CWE-94 Description: The absence of filters when loading some sections in the web application of the vulnerable device allows potential attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section (MAIL SERVER) where the information is displayed. Injection can be done on parameter MAIL_RCV. When a legitimate user attempts to review NOTIFICATION/MAIL SERVER, the injected code will be executed. Ad
ter MAIL_RCV. When a legitimate user attempts to review NOTIFICATION/MAIL SERVER, the injected code will be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03
CVE ID: CVE-2023-40222 State: PUBLISHED Published: 2025-02-04T22:13:12.592Z Last Updated: 2025-02-05T19:44:07.344Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ashlar-Vellum Products: Cobalt, Cobalt Share, Xenon, Argon, Lithium Problem Types: CWE-122 Description: In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing CO files. This could lead to a heap-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ci
e in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-03
CVE ID: CVE-2023-40223 State: REJECTED Published: 2024-07-18T16:23:18.410Z Last Updated: 2025-04-09T20:23:56.551Z Description: No description available.
CVE ID: CVE-2023-40224 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-12-03T16:54:45.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP 2.4.174 allows XSS in app/View/Events/index.ctp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/MISP/MISP/commit/0274f8b6332e82317c9529b583d03897adf5883e
CVE ID: CVE-2023-40225 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:14:29.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110 section 8.6. In uncommon cases, an HTTP/1 server behind HAProxy may interpret the payload as an extra request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/haproxy/haproxy/issues/2237 - https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea
erences: - https://github.com/haproxy/haproxy/issues/2237 - https://github.com/haproxy/haproxy/commit/6492f1f29d738457ea9f382aca54537f35f9d856 - https://www.haproxy.org/download/2.8/src/CHANGELOG - https://www.haproxy.org/download/2.7/src/CHANGELOG - https://www.haproxy.org/download/2.6/src/CHANGELOG - https://cwe.mitre.org/data/definitions/436.html
CVE ID: CVE-2023-40235 State: PUBLISHED Published: 2023-08-10T00:00:00 Last Updated: 2024-10-09T20:13:49.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share server that does not accept a guest account, the host will try to authenticate on the share by using the current user's session. NOTE: this issue occurs because Archi uses an unsafe configuration of the Eclipse Modeling Framework. Addi
er's session. NOTE: this issue occurs because Archi uses an unsafe configuration of the Eclipse Modeling Framework. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/archimatetool/archi/issues/946 - https://github.com/eclipse-emf/org.eclipse.emf/issues/8 - https://github.com/archimatetool/archi/commit/bcab676beddfbeddffecacf755b6692f0b0151f1 - https://github.com/archimatetool/archi/compare/release_5.0.2...release_5.1.0
CVE ID: CVE-2023-40236 State: PUBLISHED Published: 2023-12-25T00:00:00.000Z Last Updated: 2025-04-23T16:14:02.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authentication bypass. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2023-40238 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T18:24:55.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of UEFI execution. This occurs because of an integer signedness error involving PixelHeight and PixelWidth during RLE4/RLE8 compression. Additional Analyst Notes: - CVE Program Container: References: - https://www.ins
ixelWidth during RLE4/RLE8 compression. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.kb.cert.org/vuls/id/811862 - https://www.insyde.com/security-pledge/SA-2023053 - https://binarly.io/posts/finding_logofail_the_dangers_of_image_parsing_during_system_boot/index.html - https://security.netapp.com/advisory/ntap-20240105-0002/
CVE ID: CVE-2023-40239 State: PUBLISHED Published: 2023-09-01T00:00:00 Last Updated: 2024-10-01T14:26:17.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.P246, i.e., '*' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://publications.lexmark.com/publications/security-alerts/CVE-2023-40239.pdf
CVE ID: CVE-2023-40250 State: PUBLISHED Published: 2024-01-12T01:31:06.291Z Last Updated: 2024-11-14T14:34:52.139Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hancom Products: HCell Problem Types: CWE-120 Description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCell: 12.0.0.893. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hancom.com/cs_center/csDownload.do?gnb0=25gnb1=80
CVE ID: CVE-2023-40251 State: PUBLISHED Published: 2023-08-17T06:54:14.152Z Last Updated: 2024-10-01T18:14:56.097Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Genians Products: Genian NAC V4.0, Genian NAC V5.0, Genian NAC Suite V5.0, Genian ZTNA Problem Types: CWE-311 Description: Missing Encryption of Sensitive Data vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Man in the Middle Attack.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA
NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.genians.com/nac/5.0/release/ko/advisories/GN-SA-2023-001.html
CVE ID: CVE-2023-40252 State: PUBLISHED Published: 2023-08-17T06:41:53.096Z Last Updated: 2024-10-01T18:17:21.582Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: Genians Products: Genian NAC V4.0, Genian NAC V5.0, Genian NAC Suite V5.0, Genian ZTNA Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through
gh V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.genians.com/nac/5.0/release/ko/advisories/GN-SA-2023-001.html
CVE ID: CVE-2023-40253 State: PUBLISHED Published: 2023-08-11T05:34:48.443Z Last Updated: 2024-10-01T20:45:41.739Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: Genians Products: Genian NAC V4.0, Genian NAC V5.0, Genian NAC Suite V5.0, Genian ZTNA Problem Types: CWE-78 Description: Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 throug
0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.genians.com/nac/5.0/release/ko/advisories/GN-SA-2023-001.html
CVE ID: CVE-2023-40254 State: PUBLISHED Published: 2023-08-11T06:08:19.709Z Last Updated: 2024-10-10T14:58:22.730Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Genians Products: Genian NAC V4.0, Genian NAC V5.0, Genian NAC Suite V5.0, Genian ZTNA Problem Types: CWE-89 Description: Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZT
n NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.genians.com/nac/5.0/release/ko/advisories/GN-SA-2023-001.html
CVE ID: CVE-2023-40256 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-10T15:46:51.486Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This was caused by improper validation of the client certificate due to misconfiguration of the RabbitMQ service. Exploiting this impacts the confidentiality and integrity of messages controlling the backup and restore jobs, and could result in the service becoming unavailable. This impacts only the
es controlling the backup and restore jobs, and could result in the service becoming unavailable. This impacts only the jobs controlling the backup and restore activities, and does not allow access to (or deletion of) the backup snapshot data itself. This vulnerability is confined to the NetBackup Snapshot Manager feature and does not impact the RabbitMQ instance on the NetBackup primary servers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veritas.com/content/support/en_US/security/VTS23-011
CVE ID: CVE-2023-40260 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-10T15:45:50.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first factor (username and password) is known, because the first factor is sufficient to change an account's email address, and the product would then send MFA codes to the new email address (which may be attacker-controlled). NOTE: this is different from CVE-2023-4177, which claims to be about "some unknown processing of the component Multi-Factor Authentication Code Handler" and thus cannot be correlated with othe
me unknown processing of the component Multi-Factor Authentication Code Handler" and thus cannot be correlated with other vulnerability information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2023/Aug/3 - https://nvd.nist.gov/vuln/detail/CVE-2023-40260
CVE ID: CVE-2023-40261 State: PUBLISHED Published: 2024-08-08T00:00:00.000Z Last Updated: 2025-03-13T19:28:49.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorization (PBA) process. This can be exploited by a physical attacker who is able to manipulate the contents of the system's hard disk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dieboldnixdorf.com/en-us/banking/portfolio/software/security/ - https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%2
n-us/banking/portfolio/software/security/ - https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20paper.pdf
CVE ID: CVE-2023-40262 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-17T17:03:09.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting (XSS) in the administration component via Access Request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://networks.unify.com/security/advisories/OBSO-2305-02.pdf
CVE ID: CVE-2023-40263 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:41:07.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-02.pdf
CVE ID: CVE-2023-40264 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-06-17T17:05:55.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-02.pdf
CVE ID: CVE-2023-40265 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:41:30.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-03.pdf
CVE ID: CVE-2023-40266 State: PUBLISHED Published: 2024-02-08T00:00:00.000Z Last Updated: 2025-05-15T19:41:22.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows path traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://networks.unify.com/security/advisories/OBSO-2305-03.pdf
CVE ID: CVE-2023-40267 State: PUBLISHED Published: 2023-08-11T00:00:00.000Z Last Updated: 2025-11-03T21:49:24.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gitpython-developers/GitPython/pull/1609 - https://github.com/gitpython-developers/GitPython/commit/ca965ecc81853bca7675261729143f54e5bf4cdd - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF6AXUTC5BO7L
5bf4cdd - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF6AXUTC5BO7L2SBJMCVKJSPKWY52I5R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV5DV7GBLMOZT7U3Q4TDOJO5R6G3V6GH/
CVE ID: CVE-2023-40270 State: REJECTED Published: N/A Last Updated: 2023-08-23T17:00:57.613173 Description: No description available.
CVE ID: CVE-2023-40271 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T17:53:51.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function (defined during the build-time configuration phase) implemented with a dedicated function (i.e., not relying on usage of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on t
ge of multipart functions), the buffer comparison during the verification of the authentication tag does not happen on the full 16 bytes but just on the first 4 bytes, thus leading to the possibility that unauthenticated payloads might be identified as authentic. This affects TF-Mv1.6.0, TF-Mv1.6.1, TF-Mv1.7.0, and TF-Mv1.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tf-m-user-guide.trustedfirmware.org/releases/index.html - https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/cc3xx_partial_tag_compare_on_chacha20_poly1305.rst
CVE ID: CVE-2023-40272 State: PUBLISHED Published: 2023-08-17T13:52:30.647Z Last Updated: 2025-02-13T17:07:44.473Z Vendors: Apache Software Foundation Products: Apache Airflow Spark Provider Problem Types: CWE-20 Description: Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade to a version that is not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/t03gktyzyor20rh06okd91jtqmw6k1l7 - http://www.openwall.co
DP Vulnrichment: References: - https://lists.apache.org/thread/t03gktyzyor20rh06okd91jtqmw6k1l7 - http://www.openwall.com/lists/oss-security/2023/08/17/1 - http://www.openwall.com/lists/oss-security/2023/08/18/1
CVE ID: CVE-2023-40273 State: PUBLISHED Published: 2023-08-23T15:37:49.378Z Last Updated: 2024-09-27T20:29:59.422Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-384 Description: The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the session of the user. Other than manually cleaning the session database (for database session backend), or changing the secure_key and restarting the webserver, there were no mechanisms to force-logout the user (and all other users with that). With this fix implemented, when using the data