Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-49950 State: PUBLISHED Published: 2024-02-03T00:00:00.000Z Last Updated: 2025-06-17T15:27:38.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being displayed when using a custom Jinja template in the Alert view. A remote attacker can craft a cross-site scripting (XSS) payload and send it to any system or device that sends logs to the SIEM. If an alert is created, the payload will execute upon the alert data being viewed with that template, which can lead to sensitive data disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contain
e, which can lead to sensitive data disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://servicedesk.logpoint.com/hc/en-us/articles/14124495377437-Stored-XSS-Vulnerability-in-Alerts-via-Log-Injection - https://github.com/shrikeinfosec/cve-2023-49950/blob/main/cve-2023-49950.md
CVE ID: CVE-2023-49952 State: PUBLISHED Published: 2024-11-18T00:00:00 Last Updated: 2024-11-19T15:39:43.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mastodon/mastodon/security - https://github.com/mastodon/mastodon/security/advisories/GHSA-c2r5-cfqr-c553
CVE ID: CVE-2023-49954 State: PUBLISHED Published: 2023-12-25T00:00:00.000Z Last Updated: 2025-04-23T16:10:37.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cve-2023-49954.github.io/
CVE ID: CVE-2023-49955 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T22:09:49.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It does not validate the length of the chargePointVendor field in a BootNotification message, potentially leading to server instability and a denial of service when processing excessively large inputs. NOTE: the vendor's perspective is "OCPP.Core is intended for use in a protected environment/network." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dallmann-consulting/OCPP
t/network." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dallmann-consulting/OCPP.Core/issues/32
CVE ID: CVE-2023-49956 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T22:09:49.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. A StopTransaction message with any random transactionId terminates active transactions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dallmann-consulting/OCPP.Core/issues/34
CVE ID: CVE-2023-49957 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T22:09:48.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It permits multiple transactions with the same connectorId and idTag, contrary to the expected ConcurrentTx status. This could result in critical transaction management and billing errors. NOTE: the vendor's perspective is "Imagine you've got two cars in your family and want to charge both in parallel on the same account/token? Why should that be rejected?" Additional Analyst Notes: - CVE Program Container: R
n parallel on the same account/token? Why should that be rejected?" Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dallmann-consulting/OCPP.Core/issues/35
CVE ID: CVE-2023-49958 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-10-09T14:58:11.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. The server processes mishandle StartTransaction messages containing additional, arbitrary properties, or duplicate properties. The last occurrence of a duplicate property is accepted. This could be exploited to alter transaction records or impact system integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dallmann-consulting/OCPP.Core/issues/
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/dallmann-consulting/OCPP.Core/issues/36
CVE ID: CVE-2023-49959 State: PUBLISHED Published: 2024-02-26T00:00:00 Last Updated: 2024-08-29T17:56:37.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Indo-Sol PROFINET-INspektor NT through 2.4.0, a command injection vulnerability in the gedtupdater service of the firmware allows remote attackers to execute arbitrary system commands with root privileges via a crafted filename parameter in POST requests to the /api/updater/ctrl/start_update endpoint. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.indu-sol.com/en/products/profinet/diagnostics/profinet-inspektorr-nt/ - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-49960 State: PUBLISHED Published: 2024-02-26T00:00:00.000Z Last Updated: 2025-04-22T16:14:10.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmware allows remote attackers to write to arbitrary files via a crafted filename parameter in requests to the /upload endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.indu-sol.com/en/products/profinet/diagnostics/profinet-inspektorr-nt/ - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2023-49961 State: PUBLISHED Published: 2024-01-08T00:00:00.000Z Last Updated: 2025-06-18T16:02:55.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead to sensitive data exposure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wallix.com/support/alerts/
CVE ID: CVE-2023-49963 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-22T18:14:22.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: DYMO LabelWriter Print Server through 2.366 contains a backdoor hard-coded password that could allow an attacker to take control. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://loudmouth.io - https://gitlab.com/loudmouth-security/vulnerability-disclosures/cve-2023-49963
CVE ID: CVE-2023-49964 State: PUBLISHED Published: 2023-12-11T00:00:00 Last Updated: 2024-08-02T22:09:49.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI (Server-Side Template Injection) attacks, which can leverage FreeMarker exposed objects to bypass restrictions and achieve RCE (Remote Code Execution). NOTE: this issue exists because of an incomplete fix for CVE-2020-12873. Additional Analyst Notes: - CVE Program Container: References: - https://www.alfresco.com/products/community/download - https://github.co
t Notes: - CVE Program Container: References: - https://www.alfresco.com/products/community/download - https://github.com/mbadanoiu/CVE-2023-49964
CVE ID: CVE-2023-49965 State: PUBLISHED Published: 2024-04-05T00:00:00.000Z Last Updated: 2025-03-27T16:57:40.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-eng/
CVE ID: CVE-2023-49967 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-28T17:17:28.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/typecho/typecho/issues/1648
CVE ID: CVE-2023-49968 State: PUBLISHED Published: 2024-03-04T00:00:00 Last Updated: 2024-08-29T14:05:15.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/manage_department.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49968
CVE ID: CVE-2023-49969 State: PUBLISHED Published: 2024-03-04T00:00:00 Last Updated: 2024-08-02T22:09:49.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_support/index.php?page=edit_customer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49969
CVE ID: CVE-2023-49970 State: PUBLISHED Published: 2024-03-04T00:00:00 Last Updated: 2024-08-19T17:51:36.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customer_support/ajax.php?action=save_ticket. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49970
CVE ID: CVE-2023-49971 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-06T14:10:12.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customer_support/index.php?page=customer_list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49971
CVE ID: CVE-2023-49973 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-11-01T15:26:10.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customer_support/index.php?page=customer_list. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49973
CVE ID: CVE-2023-49974 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-15T20:35:26.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customer_support/index.php?page=customer_list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49974
CVE ID: CVE-2023-49976 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-11-01T19:05:16.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the subject parameter at /customer_support/index.php?page=new_ticket. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49976
CVE ID: CVE-2023-49977 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-20T19:46:12.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customer_support/index.php?page=new_customer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49977
CVE ID: CVE-2023-49978 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-03T19:46:53.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49978
CVE ID: CVE-2023-49979 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-06T15:06:53.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15653/best-student-result-management-system-project-source-code-php-and-mysql-free-download - https://github.com/geraldoalcantara/CVE-2023-49979
CVE ID: CVE-2023-49980 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-07T13:34:36.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15653/best-student-result-management-system-project-source-code-php-and-mysql-free-download - https://github.com/geraldoalcantara/CVE-2023-49980
CVE ID: CVE-2023-49981 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-05T17:02:55.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49981
CVE ID: CVE-2023-49982 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-10-28T19:03:26.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49982
CVE ID: CVE-2023-49983 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-06T13:42:13.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49983
CVE ID: CVE-2023-49984 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-05T15:02:48.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49984
CVE ID: CVE-2023-49985 State: PUBLISHED Published: 2024-03-06T00:00:00 Last Updated: 2024-08-04T11:14:24.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49985
CVE ID: CVE-2023-49986 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-05T16:04:50.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49986
CVE ID: CVE-2023-49987 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-12-05T20:05:05.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html - https://github.com/geraldoalcantara/CVE-2023-49987
CVE ID: CVE-2023-49988 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-16T17:32:30.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pratham-jaiswal/HotelBookingManagement - https://github.com/geraldoalcantara/CVE-2023-49988
CVE ID: CVE-2023-49989 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-28T14:18:58.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/pratham-jaiswal/HotelBookingManagement - https://github.com/geraldoalcantara/CVE-2023-49989
CVE ID: CVE-2023-49990 State: PUBLISHED Published: 2023-12-12T00:00:00.000Z Last Updated: 2025-11-04T18:20:18.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/espeak-ng/espeak-ng/issues/1824 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5WW6RKHRWLEMCKCQ6UZCXWC5J7UWMUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS4/
CVE ID: CVE-2023-49991 State: PUBLISHED Published: 2023-12-12T00:00:00.000Z Last Updated: 2025-11-04T18:20:21.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/espeak-ng/espeak-ng/issues/1825 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5WW6RKHRWLEMCKCQ6UZCXWC5J7UWMUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS4/
CVE ID: CVE-2023-49992 State: PUBLISHED Published: 2023-12-12T00:00:00.000Z Last Updated: 2025-11-04T18:20:23.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espeak-ng/espeak-ng/issues/1827 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5WW6RKHRWLEMCKCQ6UZCXWC5J7UWMUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS4/
CVE ID: CVE-2023-49993 State: PUBLISHED Published: 2023-12-12T00:00:00.000Z Last Updated: 2025-11-04T18:20:26.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/espeak-ng/espeak-ng/issues/1826 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5WW6RKHRWLEMCKCQ6UZCXWC5J7UWMUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS4/