alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2023-22312 (published 2023-05-10)
Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: intel
Affected products: lapkc51e, lapkc51e_firmware, lapkc71e, lapkc71e_firmware, lapkc71f, lapkc71f_firmware, nuc11btmi7, nuc11btmi7_firmware, nuc11btmi9, nuc11btmi9_firmware, nuc11dbbi7, nuc11dbbi7_firmware, nuc11dbbi9, nuc11dbbi9_firmware, nuc_11_compute_element_cm11ebc4w, nuc_11_compute_element_cm11ebc4w_firmware, nuc_11_compute_element_cm11ebi38w, nuc_11_compute_element_cm11ebi38w_firmware, nuc_11_compute_element_cm11ebi58w, nuc_11_compute_element_cm11ebi58w_firmware, nuc_11_compute_element_cm11ebi716w, nuc_11_compute_element_cm11ebi716w_firmware, nuc_11_enthusiast_kit_nuc11phki7c, nuc_11_enthusiast_kit_nuc11phki7c_firmware, nuc_11_enthusiast_mini_pc_nuc11phki7caa
CVE-2023-22313 (published 2023-11-14)
Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-92
Affected vendors: intel
Affected products: qat_driver, qat_driver_firmware, quickassist_technology_driver, quickassist_technology_driver_firmware, quickassist_technology_library
CVE-2023-22314 (published 2023-08-03)
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: omron
Affected products: cx-programmer
CVE-2023-22315 (published 2023-01-30)

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does not verify updates to the device. An attacker could upload a malformed update file to the device and execute arbitrary code. 





Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-345
Affected vendors: snapav
Affected products: wattbox_wb-300-ip-3, wattbox_wb-300-ip-3_firmware
CVE-2023-22316 (published 2023-01-17)
Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker to access the product via undocumented Telnet or SSH services.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-912
Affected vendors: pixela
Affected products: pix-rt100, pix-rt100_firmware
CVE-2023-22317 (published 2023-08-03)
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22314.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: omron
Affected products: cx-programmer
CVE-2023-22318 (published 2023-05-15)
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-412
Affected vendors: tribe29
Affected products: checkmk_appliance_firmware
CVE-2023-22319 (published 2023-07-06)
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a malicious packet to trigger this vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: milesight
Affected products: milesightvpn
CVE-2023-2232 (published 2023-06-28)
An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-1333
Affected vendors: gitlab
Affected products: gitlab
CVE-2023-22320 (published 2023-01-10)
OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: openam
Affected products: openam
CVE-2023-22321 (published 2023-04-20)



Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. 

 


Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: datakit
Affected products: crosscadware
CVE-2023-22322 (published 2023-01-30)
Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: omron
Affected products: cx-motion_pro
CVE-2023-22323 (published 2023-02-01)
In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: f5
Affected products: big-ip_access_policy_manager, big-ip_advanced_firewall_manager, big-ip_analytics, big-ip_application_acceleration_manager, big-ip_application_security_manager, big-ip_ddos_hybrid_defender, big-ip_domain_name_system, big-ip_fraud_protection_service, big-ip_link_controller, big-ip_local_traffic_manager, big-ip_policy_enforcement_manager, big-ip_ssl_orchestrator
CVE-2023-22324 (published 2023-01-30)
SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: contec
Affected products: conprosys_hmi_system
CVE-2023-22325 (published 2023-10-12)
A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-835
Affected vendors: softether
Affected products: vpn
CVE-2023-22326 (published 2023-02-01)
In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iControl REST and TMOS shell (tmsh) dig command which may allow an authenticated attacker with resource administrator or administrator role privileges to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-732
Affected vendors: f5
Affected products: big-ip_access_policy_manager, big-ip_advanced_firewall_manager, big-ip_analytics, big-ip_application_acceleration_manager, big-ip_application_security_manager, big-ip_ddos_hybrid_defender, big-ip_domain_name_system, big-ip_fraud_protection_service, big-ip_link_controller, big-ip_local_traffic_manager, big-ip_policy_enforcement_manager, big-ip_ssl_orchestrator
CVE-2023-22327 (published 2023-11-14)
Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-787
Affected vendors: intel
Affected products: agilex_7_fpga_f-series_006, agilex_7_fpga_f-series_006_firmware, agilex_7_fpga_f-series_008, agilex_7_fpga_f-series_008_firmware, agilex_7_fpga_f-series_012, agilex_7_fpga_f-series_012_firmware, agilex_7_fpga_f-series_014, agilex_7_fpga_f-series_014_firmware, agilex_7_fpga_f-series_019, agilex_7_fpga_f-series_019_firmware, agilex_7_fpga_f-series_022, agilex_7_fpga_f-series_022_firmware, agilex_7_fpga_f-series_023, agilex_7_fpga_f-series_023_firmware, agilex_7_fpga_f-series_027, agilex_7_fpga_f-series_027_firmware, agilex_7_fpga_i-series_019, agilex_7_fpga_i-series_019_firmware, agilex_7_fpga_i-series_022, agilex_7_fpga_i-series_022_firmware, agilex_7_fpga_i-series_023, agilex_7_fpga_i-series_023_firmware, agilex_7_fpga_i-series_027, agilex_7_fpga_i-series_027_firmware, agilex_7_fpga_i-series_035
CVE-2023-22329 (published 2023-11-14)
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-20
Affected vendors: intel
Affected products: atom_x6200fe, atom_x6200fe_firmware, atom_x6211e, atom_x6211e_firmware, atom_x6212re, atom_x6212re_firmware, atom_x6413e, atom_x6413e_firmware, atom_x6414re, atom_x6414re_firmware, atom_x6425e, atom_x6425e_firmware, atom_x6425re, atom_x6425re_firmware, atom_x6427fe, atom_x6427fe_firmware, celeron_1000m, celeron_1000m_firmware, celeron_1005m, celeron_1005m_firmware, celeron_1007u, celeron_1007u_firmware, celeron_1017u, celeron_1017u_firmware, celeron_1019y
CVE-2023-2233 (published 2023-09-29)
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-862
Affected vendors: gitlab
Affected products: gitlab
CVE-2023-22330 (published 2023-08-11)
Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-908
Affected vendors: intel
Affected products: nuc_11_compute_element_cm11ebc4w, nuc_11_compute_element_cm11ebc4w_firmware, nuc_11_compute_element_cm11ebi38w, nuc_11_compute_element_cm11ebi38w_firmware, nuc_11_compute_element_cm11ebi58w, nuc_11_compute_element_cm11ebi58w_firmware, nuc_11_compute_element_cm11ebi716w, nuc_11_compute_element_cm11ebi716w_firmware, nuc_11_performance_kit_nuc11pahi3, nuc_11_performance_kit_nuc11pahi30z, nuc_11_performance_kit_nuc11pahi30z_firmware, nuc_11_performance_kit_nuc11pahi3_firmware, nuc_11_performance_kit_nuc11pahi5, nuc_11_performance_kit_nuc11pahi50z, nuc_11_performance_kit_nuc11pahi50z_firmware, nuc_11_performance_kit_nuc11pahi5_firmware, nuc_11_performance_kit_nuc11pahi7, nuc_11_performance_kit_nuc11pahi70z, nuc_11_performance_kit_nuc11pahi70z_firmware, nuc_11_performance_kit_nuc11pahi7_firmware, nuc_11_performance_kit_nuc11paki3, nuc_11_performance_kit_nuc11paki3_firmware, nuc_11_performance_kit_nuc11paki5, nuc_11_performance_kit_nuc11paki5_firmware, nuc_11_performance_kit_nuc11paki7
CVE-2023-22331 (published 2023-01-20)
Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-269
Affected vendors: contec
Affected products: conprosys_hmi_system
CVE-2023-22332 (published 2023-01-30)
Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 series), All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3.4 series, and All versions of 3.3 series. A specific database user's authentication information may be obtained by another database user. As a result, the information stored in the database may be altered and/or database may be suspended by a remote attacker who successfully logged in the product with the obtained credentials.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: pgpool
Affected products: pgpool-ii
CVE-2023-22333 (published 2023-01-30)
Cross-site scripting vulnerability in EasyMail 2.00.130 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: mubag
Affected products: easymail
CVE-2023-22334 (published 2023-01-20)
Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to obtain user credentials information via a man-in-the-middle attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-287
Affected vendors: contec
Affected products: conprosys_hmi_system
CVE-2023-22335 (published 2023-03-06)
Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directory where the product runs. As a result of exploiting this vulnerability with CVE-2023-22336 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-284
Affected vendors: dos-osaka
Affected products: rakuraku_pc_cloud_agent, ss1
CVE-2023-22336 (published 2023-03-06)
Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: dos-osaka
Affected products: rakuraku_pc_cloud_agent, ss1
CVE-2023-22337 (published 2023-11-14)
Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: apple, google, intel, microsoft
Affected products: android, iphone_os, unison_software, windows
CVE-2023-22338 (published 2023-08-11)
Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: fedoraproject, intel
Affected products: fedora, onevpl_gpu_runtime
CVE-2023-22339 (published 2023-01-20)
Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass access restriction and obtain the server certificate including the private key of the product.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-284
Affected vendors: contec
Affected products: conprosys_hmi_system
CVE-2023-2234 (published 2023-07-10)
Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-843
Affected vendors: zephyrproject
Affected products: zephyr
CVE-2023-22340 (published 2023-02-01)
On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: f5
Affected products: big-ip_access_policy_manager, big-ip_advanced_firewall_manager, big-ip_analytics, big-ip_application_acceleration_manager, big-ip_application_security_manager, big-ip_ddos_hybrid_defender, big-ip_domain_name_system, big-ip_fraud_protection_service, big-ip_link_controller, big-ip_local_traffic_manager, big-ip_policy_enforcement_manager, big-ip_ssl_orchestrator
CVE-2023-22341 (published 2023-02-01)
On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate:

  *  An OAuth Server that references an OAuth Provider
  *  An OAuth profile with the Authorization Endpoint set to '/'
  *  An access profile that references the above OAuth profile and is associated with an HTTPS virtual server 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.



Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: f5
Affected products: big-ip_access_policy_manager
CVE-2023-22342 (published 2024-02-14)
Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L)
Weakness: CWE-20
Affected vendors: intel
Affected products: thunderbolt_dch_driver
CVE-2023-22344 (published 2023-03-06)
Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: dos-osaka
Affected products: rakuraku_pc_cloud_agent, ss1
CVE-2023-22345 (published 2023-02-13)
Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process when out of specification errors are detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: jtekt
Affected products: screen_creator_advance_2
CVE-2023-22346 (published 2023-02-13)
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing template information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: jtekt
Affected products: screen_creator_advance_2
CVE-2023-22347 (published 2023-02-13)
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing file structure information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: jtekt
Affected products: screen_creator_advance_2
CVE-2023-22348 (published 2023-05-17)
Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-285
Affected vendors: checkmk, tribe29
Affected products: checkmk
CVE-2023-22349 (published 2023-02-13)
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing screen management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: jtekt
Affected products: screen_creator_advance_2
CVE-2023-2235 (published 2023-05-01)
A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation.



The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remove_on_exec made it possible to call list_del_event() on before detaching from their group, making it possible to use a dangling pointer causing a use-after-free vulnerability.



We recommend upgrading past commit fd0815f632c24878e325821943edccc7fde947a2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: linux
Affected products: linux_kernel
CVE-2023-22350 (published 2023-02-13)
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing parts management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: jtekt
Affected products: screen_creator_advance_2
CVE-2023-22351 (published 2024-09-16)
Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L)
Weakness: CWE-787
CVE-2023-22353 (published 2023-02-13)
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing control management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: jtekt
Affected products: screen_creator_advance_2
CVE-2023-22354 (published 2023-04-20)





Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. 

 

 


Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: datakit
Affected products: crosscadware
CVE-2023-22355 (published 2023-05-10)
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: intel
Affected products: advisor, cpu_runtime, distribution_for_python, dpc\+\+_compatibility_tool, embree_ray_tracing_kernel_library, fortran_compiler, implicit_spmd_program_compiler, inspector, integrated_performance_primitives, integrated_performance_primitives_cryptography, mpi_library, oneapi_base_toolkit, oneapi_data_analytics_library, oneapi_deep_neural_network_library, oneapi_dpc\+\+\/c\+\+_compiler, oneapi_dpc\+\+_library, oneapi_hpc_toolkit, oneapi_iot_toolkit, oneapi_math_kernel_library, oneapi_rendering_toolkit, oneapi_threading_building_blocks, oneapi_toolkit_and_component_software_installers, oneapi_video_processing_library, open_image_denoise, open_volume_kernel_library
CVE-2023-22356 (published 2023-08-11)
Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-665
Affected vendors: intel
Affected products: nuc_11_compute_element_cm11ebc4w, nuc_11_compute_element_cm11ebc4w_firmware, nuc_11_compute_element_cm11ebi38w, nuc_11_compute_element_cm11ebi38w_firmware, nuc_11_compute_element_cm11ebi58w, nuc_11_compute_element_cm11ebi58w_firmware, nuc_11_compute_element_cm11ebi716w, nuc_11_compute_element_cm11ebi716w_firmware, nuc_11_performance_kit_nuc11pahi3, nuc_11_performance_kit_nuc11pahi30z, nuc_11_performance_kit_nuc11pahi30z_firmware, nuc_11_performance_kit_nuc11pahi3_firmware, nuc_11_performance_kit_nuc11pahi5, nuc_11_performance_kit_nuc11pahi50z, nuc_11_performance_kit_nuc11pahi50z_firmware, nuc_11_performance_kit_nuc11pahi5_firmware, nuc_11_performance_kit_nuc11pahi7, nuc_11_performance_kit_nuc11pahi70z, nuc_11_performance_kit_nuc11pahi70z_firmware, nuc_11_performance_kit_nuc11pahi7_firmware, nuc_11_performance_kit_nuc11paki3, nuc_11_performance_kit_nuc11paki3_firmware, nuc_11_performance_kit_nuc11paki5, nuc_11_performance_kit_nuc11paki5_firmware, nuc_11_performance_kit_nuc11paki7
CVE-2023-22357 (published 2023-01-17)
Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the firmware, causing a denial-of-service (DoS) condition, and/or arbitrary code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-489
Affected vendors: omron
Affected products: cp1l-el20dr-d, cp1l-el20dr-d_firmware
CVE-2023-22358 (published 2023-02-01)
In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: f5
Affected products: big-ip_access_policy_manager, big-ip_edge
CVE-2023-22359 (published 2023-06-26)
User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-203
Affected vendors: checkmk
Affected products: checkmk
CVE-2023-2236 (published 2023-05-01)
A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.

Both io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a use-after-free vulnerability.

We recommend upgrading past commit 9d94c04c0db024922e886c9fd429659f22f48ea4.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: linux, netapp
Affected products: hci_baseboard_management_controller, linux_kernel
CVE-2023-22360 (published 2023-02-13)
Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even when an error was detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: jtekt
Affected products: screen_creator_advance_2
CVE-2023-22361 (published 2023-05-10)
Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker to alter a WebUI password of the product.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: seiko-sol
Affected products: skybridge_mb-a100, skybridge_mb-a100_firmware, skybridge_mb-a110, skybridge_mb-a110_firmware
CVE-2023-22362 (published 2023-02-13)
SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: akindo-sushiro
Affected products: hong_kong_sushiro, singapore_sushiro, sushiro, taiwan_sushiro, thailand_sushiro
CVE-2023-22363 (published 2023-07-25)

A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders to an Access Group.

This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2)


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-121
Affected vendors: gallagher
Affected products: command_centre
CVE-2023-22365 (published 2023-07-06)
An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially crafted set of network packets can lead to command execution. An attacker can send a network request to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: milesight
Affected products: ur32l, ur32l_firmware
CVE-2023-22366 (published 2023-01-17)
CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: omron
Affected products: cx-motion-mch, cx-motion-mch_firmware
CVE-2023-22367 (published 2023-02-13)
Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-295
Affected vendors: ichiranusa
Affected products: ichiran
CVE-2023-22368 (published 2023-02-15)
Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: elecom, microsoft
Affected products: camera_assistant, quickfiledealer, windows
CVE-2023-2237 (published 2023-06-09)
The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the post_id parameter in versions up to, and including, 4.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for contributor-level attackers or higher to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: yudiz
Affected products: wp_replicate_post
CVE-2023-22370 (published 2023-02-14)
Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent authenticated attacker to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: planex
Affected products: cs-wmv02g
CVE-2023-22371 (published 2023-07-06)
An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: milesight
Affected products: milesightvpn
CVE-2023-22372 (published 2023-05-03)

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-924
Affected vendors: apple, f5, microsoft
Affected products: big-ip_access_policy_manager, macos, windows
CVE-2023-22373 (published 2023-01-20)
Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an arbitrary script and obtain the sensitive information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: contec
Affected products: conprosys_hmi_system
CVE-2023-22374 (published 2023-02-01)

A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.
 Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.



Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-134
Affected vendors: f5
Affected products: big-ip_access_policy_manager, big-ip_advanced_firewall_manager, big-ip_analytics, big-ip_application_acceleration_manager, big-ip_application_security_manager, big-ip_ddos_hybrid_defender, big-ip_domain_name_system, big-ip_fraud_protection_service, big-ip_link_controller, big-ip_local_traffic_manager, big-ip_policy_enforcement_manager, big-ip_ssl_orchestrator
CVE-2023-22375 (published 2023-02-14)
Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations by having a logged-in user to view a malicious page. NOTE: This vulnerability only affects products that are no longer supported by the developer.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: planex
Affected products: cs-wmv02g, cs-wmv02g_firmware
CVE-2023-22376 (published 2023-02-14)
Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to inject arbitrary script to inject an arbitrary script. NOTE: This vulnerability only affects products that are no longer supported by the developer.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: planex
Affected products: cs-wmv02g, cs-wmv02g_firmware
CVE-2023-22377 (published 2023-02-15)
Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to v1.4.0) and tsClinical Metadata Desktop Tools Version 1.0.3 to Version 1.1.0. If this vulnerability is exploited, an attacker may obtain an arbitrary file which meets a certain condition by reading a specially crafted XML file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-611
Affected vendors: fujitsu
Affected products: tsclinical_define.xml_generator, tsclinical_metadata_desktop_tools
CVE-2023-22378 (published 2023-08-09)
A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application.

Authenticated users may be able to extract arbitrary information from the DBMS in an uncontrolled way, alter its structure and data, and/or affect its availability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: nozominetworks
Affected products: cmc, guardian
CVE-2023-22379 (published 2023-05-10)
Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: intel
Affected products: server_system_d50tnp1mhcpac, server_system_d50tnp1mhcpac_firmware, server_system_d50tnp1mhcrac, server_system_d50tnp1mhcrac_firmware, server_system_d50tnp1mhcrlc, server_system_d50tnp1mhcrlc_firmware, server_system_d50tnp2mfalac, server_system_d50tnp2mfalac_firmware, server_system_d50tnp2mhstac, server_system_d50tnp2mhstac_firmware, server_system_d50tnp2mhsvac, server_system_d50tnp2mhsvac_firmware, server_system_m50cyp1ur204, server_system_m50cyp1ur204_firmware, server_system_m50cyp1ur212, server_system_m50cyp1ur212_firmware, server_system_m50cyp2ur208, server_system_m50cyp2ur208_firmware, server_system_m50cyp2ur312, server_system_m50cyp2ur312_firmware
CVE-2023-22380 (published 2023-02-16)
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.6. This vulnerability was reported via the GitHub Bug Bounty program.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: github
Affected products: enterprise_server
CVE-2023-22381 (published 2023-03-02)
A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single environment variable value in GitHub Actions when using a Windows based runner. To exploit this vulnerability, an attacker would need existing permission to control the value of environment variables for use with GitHub Actions. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.8.0 and was fixed in versions 3.4.15, 3.5.12, 3.6.8, 3.7.5. This vulnerability was reported via the GitHub Bug Bounty program.





Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: github
Affected products: enterprise_server
CVE-2023-22382 (published 2023-10-03)
Weak configuration in Automotive while VM is processing a listener request from TEE.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: apq8064au, apq8064au_firmware, msm8996au, msm8996au_firmware, qam8295p, qam8295p_firmware, qam8650p, qam8650p_firmware, qamsrv1h, qamsrv1h_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6584au, qca6584au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696
CVE-2023-22383 (published 2023-12-05)
Memory Corruption in camera while installing a fd for a particular DMA buffer.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, c-v2x_9150, c-v2x_9150_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, qam8295p, qam8295p_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6574au
CVE-2023-22384 (published 2023-10-03)
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: qca6574au, qca6574au_firmware, qca6696, qca6696_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155p, sa6155p_firmware, sa8145p, sa8145p_firmware, sa8150p, sa8150p_firmware, sa8155p, sa8155p_firmware, sa8195p, sa8195p_firmware
CVE-2023-22385 (published 2023-10-03)
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, 9205_lte_modem, 9205_lte_modem_firmware, 9206_lte_modem, 9206_lte_modem_firmware, 9207_lte_modem, 9207_lte_modem_firmware, apq5053-aa, apq5053-aa_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053-aa, apq8053-aa_firmware, apq8053-ac, apq8053-ac_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, c-v2x_9150, c-v2x_9150_firmware, csra6620
CVE-2023-22386 (published 2023-07-04)
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: 215, 215_firmware, ar8035, ar8035_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, fastconnect_6200, fastconnect_6200_firmware, fastconnect_6700, fastconnect_6700_firmware, fastconnect_6800, fastconnect_6800_firmware, fastconnect_6900, fastconnect_6900_firmware, fastconnect_7800, fastconnect_7800_firmware, flight_rb5_5g, flight_rb5_5g_firmware, immersive_home_214, immersive_home_214_firmware, immersive_home_216
CVE-2023-22387 (published 2023-07-04)
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-823
Affected vendors: qualcomm
Affected products: 205, 205_firmware, 215, 215_firmware, 315_5g_iot, 315_5g_iot_firmware, apq8017, apq8017_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, c-v2x_9150, c-v2x_9150_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024
CVE-2023-22388 (published 2023-11-07)
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-823
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, 9205_lte_modem, 9205_lte_modem_firmware, 9206_lte_modem, 9206_lte_modem_firmware, 9207_lte_modem, 9207_lte_modem_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, c-v2x_9150, c-v2x_9150_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, fastconnect_6200
CVE-2023-22389 (published 2023-01-30)

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–>Backup Settings, which could be read by any user accessing the file.  





Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-256
Affected vendors: snapav
Affected products: wattbox_wb-300-ip-3, wattbox_wb-300-ip-3_firmware
CVE-2023-2239 (published 2023-04-22)
Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-359
Affected vendors: microweber
Affected products: microweber
CVE-2023-22390 (published 2024-02-14)
Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-92
Affected vendors: intel
Affected products: thunderbolt_dch_driver
CVE-2023-22391 (published 2023-01-13)
A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). Specific packets are being incorrectly routed to a queue used for other high-priority traffic such as BGP, PIM, ICMP, ICMPV6 ND and ISAKMP. Due to this misclassification of traffic, receipt of a high rate of these specific packets will cause delays in the processing of other traffic, leading to a Denial of Service (DoS). Continued receipt of this amount of traffic will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on ACX2K Series: All versions prior to 19.4R3-S9; All 20.2 versions; 20.3 versions prior to 20.3R3-S6 on ACX2K Series; 20.4 versions prior to 20.4R3-S4 on ACX2K Series; All 21.1 versions; 21.2 versions prior to 21.2R3-S3 on ACX2K Series. Note: This issues affects legacy ACX2K Series PPC-based devices. This platform reached Last Supported Version (LSV) as of the Junos OS 21.2 Release.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: juniper
Affected products: junos