Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-0130 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-03-20T20:51:21.997Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1370028 - https://security.gentoo.org/glsa/202305-10 - https://se
le-channel-update-for-desktop.html - https://crbug.com/1370028 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0131 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-03-20T20:50:30.045Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1357366 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/gls
-desktop.html - https://crbug.com/1357366 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0132 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-03-20T20:49:24.229Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1371215 - https://security.gentoo.org/glsa/202305-10 - https://se
le-channel-update-for-desktop.html - https://crbug.com/1371215 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0133 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-03-20T20:48:34.178Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1375132 - https://security.gentoo.org/glsa/202305-10 - https://s
ble-channel-update-for-desktop.html - https://crbug.com/1375132 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0134 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-05T16:10:37.613Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1385709 - https://security.gentoo.org/glsa/202305-10
2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1385709 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0135 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-05T16:10:28.244Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1385831 - https://security.gentoo.org/glsa/202305-10
2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1385831 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0136 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-05T16:10:19.516Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1356987 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.
ate-for-desktop.html - https://crbug.com/1356987 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0137 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-05T16:10:11.072Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1399904 - https://security.gentoo.org/glsa/
eblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1399904 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0138 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-05T16:10:00.863Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1346675 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0139 State: PUBLISHED Published: 2023-01-10T00:00:00 Last Updated: 2024-08-02T05:02:43.611Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1367632 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/20231
p.html - https://crbug.com/1367632 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0140 State: PUBLISHED Published: 2023-01-10T00:00:00 Last Updated: 2024-08-02T05:02:43.767Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1326788 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0141 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-03-20T20:57:24.667Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop.html - https://crbug.com/1362331 - https://security.gentoo.org/glsa/202305-10 - https://security.gentoo.org/glsa/202311-11
CVE ID: CVE-2023-0142 State: PUBLISHED Published: 2023-06-13T06:52:50.745Z Last Updated: 2025-01-03T01:55:23.191Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Synology Products: DiskStation Manager (DSM), Unified Controller (DSMUC), Synology Router Manager (SRM) Problem Types: CWE-427 Description: Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
write arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/en-global/security/advisory/Synology_SA_23_05 - https://www.synology.com/en-global/security/advisory/Synology_SA_23_06
CVE ID: CVE-2023-0143 State: PUBLISHED Published: 2023-02-06T19:59:17.384Z Last Updated: 2025-03-25T20:40:57.442Z Vendors: Unknown Products: Send PDF for Contact Form 7 Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c4cd3d98-
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c4cd3d98-9678-49cb-9d1a-551ef8a810b9
CVE ID: CVE-2023-0144 State: PUBLISHED Published: 2023-02-06T19:59:26.720Z Last Updated: 2025-03-26T13:27:51.585Z Vendors: Unknown Products: Event Manager and Tickets Selling Plugin for WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin before 3.8.0 does not validate and escape some of its post meta before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d7b3917a-d11f-4216-9d2c
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d7b3917a-d11f-4216-9d2c-30771d83a7b4
CVE ID: CVE-2023-0145 State: PUBLISHED Published: 2023-03-20T15:52:12.480Z Last Updated: 2025-02-26T14:40:18.855Z Vendors: Unknown Products: Saan World Clock Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Saan World Clock WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f4e4b4a2-c7cb-42ce-9d5b-bd84efcbf54d
CVE ID: CVE-2023-0146 State: PUBLISHED Published: 2023-02-06T19:59:35.389Z Last Updated: 2025-03-25T17:39:34.816Z Vendors: Unknown Products: Naver Map Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Naver Map WordPress plugin through 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d1218c69-4f6a-4b2d-a537-5cc16a46ba7b
CVE ID: CVE-2023-0147 State: PUBLISHED Published: 2023-02-06T19:59:41.302Z Last Updated: 2025-03-25T19:57:39.690Z Vendors: Unknown Products: Flexible Captcha Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Flexible Captcha WordPress plugin through 4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/af9cbb4a-42fc-43c5-88f3-349b417f1a6a
CVE ID: CVE-2023-0148 State: PUBLISHED Published: 2023-02-06T19:59:22.291Z Last Updated: 2025-03-25T18:12:10.418Z Vendors: Unknown Products: Gallery Factory Lite Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Gallery Factory Lite WordPress plugin through 2.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f15f2f2c-2053-4b93-8064-15b5243a4021
CVE ID: CVE-2023-0149 State: PUBLISHED Published: 2023-02-06T19:59:30.480Z Last Updated: 2025-03-25T20:36:25.062Z Vendors: Unknown Products: WordPrezi Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPrezi WordPress plugin before 0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6b6f9e42-7f7f-4daa-99c9-14a24a6d76b0
CVE ID: CVE-2023-0150 State: PUBLISHED Published: 2023-02-06T19:59:36.221Z Last Updated: 2025-03-25T18:07:30.837Z Vendors: Unknown Products: Cloak Front End Email Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Cloak Front End Email WordPress plugin before 1.9.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/517154dc-d6bd-462d-b955-061a7b7f8da5
CVE ID: CVE-2023-0151 State: PUBLISHED Published: 2023-02-13T14:32:22.947Z Last Updated: 2025-03-21T15:23:13.947Z Vendors: Unknown Products: uTubeVideo Gallery Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The uTubeVideo Gallery WordPress plugin before 2.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d9fc6f5f-efc1-4e23-899b-e9a49330ed13
CVE ID: CVE-2023-0152 State: PUBLISHED Published: 2023-06-05T13:39:00.208Z Last Updated: 2025-01-08T16:53:34.190Z Vendors: Unknown Products: WP Multi Store Locator Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8281fce2-6f24-4d3f-895f-4d8694806609
CVE ID: CVE-2023-0153 State: PUBLISHED Published: 2023-02-06T19:59:28.523Z Last Updated: 2025-03-25T19:53:12.152Z Vendors: Unknown Products: Vimeo Video Autoplay Automute Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Vimeo Video Autoplay Automute WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f3459868-28aa-4a5d-94d8-bbc17e3ce653
CVE ID: CVE-2023-0154 State: PUBLISHED Published: 2023-02-06T19:59:11.729Z Last Updated: 2025-03-25T20:46:10.158Z Vendors: Unknown Products: GamiPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The GamiPress WordPress plugin before 1.0.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5e66e173-776d-4423-b4a2-eb7316b2502f
CVE ID: CVE-2023-0155 State: PUBLISHED Published: 2023-05-03T00:00:00.000Z Last Updated: 2025-02-12T16:06:37.397Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L) Vendors: GitLab Products: GitLab Problem Types: Url redirection to untrusted site ('open redirect') in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitrary content on any page allowing user controlled markdown Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/387638 - https://hackerone.com/reports/1817250
ulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/387638 - https://hackerone.com/reports/1817250 - https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0155.json
CVE ID: CVE-2023-0156 State: PUBLISHED Published: 2023-04-10T13:17:59.914Z Last Updated: 2025-02-11T15:08:29.605Z Vendors: Unknown Products: All-In-One Security (AIOS) Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admin+) to view the contents of arbitrary files and list directories anywhere on the server (to which the web server has access). The plugin only displays the last 50 lines of the file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
ly displays the last 50 lines of the file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/caf1dbb5-197e-41e9-8f48-ba1f2360a759
CVE ID: CVE-2023-0157 State: PUBLISHED Published: 2023-04-10T13:18:06.543Z Last Updated: 2025-02-11T21:09:07.430Z Vendors: Unknown Products: All-In-One Security (AIOS) Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting it to the plugin admin page, allowing an authorized user (admin+) to plant bogus log files containing malicious JavaScript code that will be executed in the context of any administrator visiting this page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8248b550-6485-4108-a7
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8248b550-6485-4108-a701-8446ffa35f06
CVE ID: CVE-2023-0158 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-04T18:49:52.823Z Vendors: NLnet Labs Products: Krill Problem Types: CWE-248 Description: NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp" endpoint. Prior to 0.12.1 a direct query for any existing directory under "/rrdp/", rather than an RRDP file such as "/rrdp/notification.xml" as would be expected, causes Krill to crash. If the built-in "/rrdp" endpoint is exposed directly to the internet, then malicious remote parties can cause the publication server to crash. The repository content is not affected by this, but the availabili
te parties can cause the publication server to crash. The repository content is not affected by this, but the availability of the server and repository can cause issues if this attack is persistent and is not mitigated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nlnetlabs.nl/downloads/krill/CVE-2023-0158.txt
CVE ID: CVE-2023-0159 State: PUBLISHED Published: 2023-02-13T14:32:03.338Z Last Updated: 2024-08-02T05:02:43.688Z Vendors: Unknown Products: Extensive VC Addons for WPBakery page builder Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files from the hosts file system. This may be escalated to RCE using PHP filter chains. Additional Analyst Notes: - CVE Program Container: References: - https://wpsca
escalated to RCE using PHP filter chains. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/239ea870-66e5-4754-952e-74d4dd60b809
CVE ID: CVE-2023-0160 State: PUBLISHED Published: 2023-07-18T16:08:23.653Z Last Updated: 2024-09-26T19:33:49.046Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a, Red Hat, Fedora Products: kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-833 Description: A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-0160 - https://bugzilla.redhat.com/show_bug.cg