deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-41844
Published: 2023-12-13
Description: A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0.4 and above allows attacker to execute unauthorized code or commands via crafted HTTP requests in capture traffic endpoint.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-23-214; https://fortiguard.com/psirt/FG-IR-23-214
CVE: CVE-2023-45587
Published: 2023-12-13
Description: An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.2, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions allows attacker to execute unauthorized code or commands via crafted HTTP requests
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-23-360; https://fortiguard.com/psirt/FG-IR-23-360
CVE: CVE-2023-46671
Published: 2023-12-13
Description: An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana 8.11.1 which resolves this issue. The error message recorded in the log may contain account credentials for the kibana_system user, API Keys, and credentials of Kibana end-users. The issue occurs infrequently, only if an error is returned from an Elasticsearch cluster, in cases where there is user interaction and an unhealthy cluster (for example, when returning circuit breaker or no shard exceptions).

CVSS Score: 8.0 (HIGH)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/8-11-1-7-17-15-security-update-esa-2023-25/347149; https://discuss.elastic.co/t/8-11-1-7-17-15-security-update-esa-2023-25/347149
CVE: CVE-2023-46675
Published: 2023-12-13
Description: An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has released Kibana 8.11.2 which resolves this issue. The messages recorded in the log may contain Account credentials for the kibana_system user, API Keys, and credentials of Kibana end-users, Elastic Security package policy objects which can contain private keys, bearer token, and sessions of 3rd-party integrations and finally Authorization headers, client secrets, local file paths, and stack traces. The issue may occur in any Kibana instance running an affected version that could potentially receive an unexpected error when communicating to Elasticsearch causing it to include sensitive data into Kibana error logs. It could also occur under specific circumstances when debug level logging is enabled in Kibana. Note: It was found that the fix for ESA-2023-25 in Kibana 8.11.1 for a similar issue was incomplete.

CVSS Score: 8.0 (HIGH)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/kibana-8-11-2-7-17-16-security-update-esa-2023-27/349182/2; https://discuss.elastic.co/t/kibana-8-11-2-7-17-16-security-update-esa-2023-27/349182/2
CVE: CVE-2023-46713
Published: 2023-12-13
Description: An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 and 7.4.0 may allow an attacker to forge traffic logs via a crafted URL of the web application.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117
References: https://fortiguard.com/psirt/FG-IR-23-256; https://fortiguard.com/psirt/FG-IR-23-256
CVE: CVE-2023-48782
Published: 2023-12-13
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-450; https://fortiguard.com/psirt/FG-IR-23-450
CVE: CVE-2023-48791
Published: 2023-12-13
Description: An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPortal version 7.2.0, version 7.0.6 and below may allow a remote authenticated attacker with at least R/W permission to execute unauthorized commands via specifically crafted arguments in the Schedule System Backup page field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://fortiguard.com/psirt/FG-IR-23-425; https://fortiguard.com/psirt/FG-IR-23-425
CVE: CVE-2023-6377
Published: 2023-12-13
Description: A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/errata/RHSA-2023:7886; https://access.redhat.com/errata/RHSA-2024:0006; https://access.redhat.com/errata/RHSA-2024:0009
CVE: CVE-2023-6478
Published: 2023-12-13
Description: A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-190, CWE-190
References: https://access.redhat.com/errata/RHSA-2023:7886; https://access.redhat.com/errata/RHSA-2024:0006; https://access.redhat.com/errata/RHSA-2024:0009
CVE: CVE-2023-45725
Published: 2023-12-13
Description: Design document functions which receive a user http request object may expose authorization or session cookie headers of the user who accesses the document.

These design document functions are:
  *    list
  *    show
  *    rewrite
  *    update

An attacker can leak the session component using an HTML-like output, insert the session as an external resource (such as an image), or store the credential in a _local document with an "update" function.

For the attack to succeed the attacker has to be able to insert the design documents into the database, then manipulate a user to access a function from that design document.

Workaround: Avoid using design documents from untrusted sources which may attempt to access or manipulate request object's headers

CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: https://docs.couchdb.org/en/stable/cve/2023-45725.html; https://lists.apache.org/thread/pqjq9zt8vq9rsobkc1cow9sqm9vozlrg; https://docs.couchdb.org/en/stable/cve/2023-45725.html
CVE: CVE-2023-47536
Published: 2023-12-13
Description: An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below may allow a remote unauthenticated attacker to bypass the firewall deny geolocalisation policy via timing the bypass with a GeoIP database update.
CVSS Score: 3.1 (LOW)
CWE: CWE-284
References: https://fortiguard.com/psirt/FG-IR-23-432; https://fortiguard.com/psirt/FG-IR-23-432
CVE: CVE-2022-22942
Published: 2023-12-13
Description: The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/vmware/photon/wiki/Security-Update-3.0-356; https://github.com/vmware/photon/wiki/Security-Update-4.0-148; https://www.openwall.com/lists/oss-security/2022/01/27/4
CVE: CVE-2023-31210
Published: 2023-12-13
Description: Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries
CVSS Score: 8.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://checkmk.com/werk/16226; https://checkmk.com/werk/16226
CVE: CVE-2023-44251
Published: 2023-12-13
Description: ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1. through 5.1.2 may allow an authenticated attacker to read and delete arbitrary file of the system via crafted HTTP or HTTPs requests.
CVSS Score: 8.3 (HIGH)
CWE: CWE-22
References: https://fortiguard.com/psirt/FG-IR-23-265; https://fortiguard.com/psirt/FG-IR-23-265
CVE: CVE-2023-44252
Published: 2023-12-13
Description: ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://fortiguard.com/psirt/FG-IR-23-061; https://fortiguard.com/psirt/FG-IR-23-061
CVE: CVE-2023-6534
Published: 2023-12-13
Description: In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter incorrectly validates TCP sequence numbers.  This could allow a malicious actor to execute a denial-of-service attack against hosts behind the firewall.
CVSS Score: 7.5 (HIGH)
References: https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-23:17.pf.asc
CVE: CVE-2023-6660
Published: 2023-12-13
Description: When a program running on an affected system appends data to a file via an NFS client mount, the bug can cause the NFS client to fail to copy in the data to be written but proceed as though the copy operation had succeeded.  This means that the data to be written is instead replaced with whatever data had been in the packet buffer previously.  Thus, an unprivileged user with access to an affected system may abuse the bug to trigger disclosure of sensitive information.  In particular, the leak is limited to data previously stored in mbufs, which are used for network transmission and reception, and for certain types of inter-process communication.

The bug can also be triggered unintentionally by system applications, in which case the data written by the application to an NFS mount may be corrupted.  Corrupted data is written over the network to the NFS server, and thus also susceptible to being snooped by other hosts on the network.

Note that the bug exists only in the NFS client; the version and implementation of the server has no effect on whether a given system is affected by the problem.
CVSS Score: 6.5 (MEDIUM)
References: https://security.freebsd.org/advisories/FreeBSD-SA-23:18.nfsclient.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.freebsd.org/advisories/FreeBSD-SA-23:18.nfsclient.asc
CVE: CVE-2023-6718
Published: 2023-12-13
Description: An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authentication method, resulting in the alteration or creation of users.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-288, CWE-306
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox
CVE: CVE-2023-47063
Published: 2023-12-13
Description: Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb23-68.html; https://helpx.adobe.com/security/products/illustrator/apsb23-68.html
CVE: CVE-2023-47074
Published: 2023-12-13
Description: Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb23-68.html; https://helpx.adobe.com/security/products/illustrator/apsb23-68.html
CVE: CVE-2023-47075
Published: 2023-12-13
Description: Adobe Illustrator versions 28.0 (and earlier) and 27.9 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/illustrator/apsb23-68.html; https://helpx.adobe.com/security/products/illustrator/apsb23-68.html
CVE: CVE-2023-47076
Published: 2023-12-13
Description: Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/indesign/apsb23-70.html; https://helpx.adobe.com/security/products/indesign/apsb23-70.html
CVE: CVE-2023-47077
Published: 2023-12-13
Description: Adobe InDesign versions 19.0 (and earlier) and 17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb23-70.html; https://helpx.adobe.com/security/products/indesign/apsb23-70.html
CVE: CVE-2023-6719
Published: 2023-12-13
Description: An XSS vulnerability has been detected in Repox, which allows an attacker to compromise interactions between a user and the vulnerable application, and can be exploited by a third party by sending a specially crafted JavaScript payload to a user, and thus gain full control of their session.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox
CVE: CVE-2023-6720
Published: 2023-12-13
Description: An XSS vulnerability stored in Repox has been identified, which allows a local attacker to store a specially crafted JavaScript payload on the server, due to the lack of proper sanitisation of field elements, allowing the attacker to trigger the malicious payload when the application loads.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox
CVE: CVE-2023-6721
Published: 2023-12-13
Description: An XEE vulnerability has been found in Repox, which allows a remote attacker to interfere with the application's XML data processing in the fileupload function, resulting in interaction between the attacker and the server's file system.
CVSS Score: 8.3 (HIGH)
CWE: CWE-611
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox
CVE: CVE-2023-6722
Published: 2023-12-13
Description: A path traversal vulnerability has been detected in Repox, which allows an attacker to read arbitrary files on the running server, resulting in a disclosure of sensitive information. An attacker could access files such as application code or data, backend credentials, operating system files...
CVSS Score: 7.5 (HIGH)
CWE: CWE-23
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox
CVE: CVE-2023-6379
Published: 2023-12-13
Description: Cross-site scripting (XSS) vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of the 'Mercury' template. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to a victim and partially take control of their browsing session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-alkacon-software-opencms; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-alkacon-software-opencms
CVE: CVE-2023-6380
Published: 2023-12-13
Description: Open redirect vulnerability has been found in the Open CMS product affecting versions 14 and 15 of the 'Mercury' template. An attacker could create a specially crafted URL and send it to a specific user to redirect them to a malicious site and compromise them. Exploitation of this vulnerability is possible due to the fact that there is no proper sanitization of the 'URI' parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-alkacon-software-opencms; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-alkacon-software-opencms
CVE: CVE-2023-6381
Published: 2023-12-13
Description: Improper input validation vulnerability in Newsletter Software SuperMailer affecting version 11.20.0.2204. An attacker could exploit this vulnerability by sending a malicious configuration file (file with SMB extension) to a user via a link or email attachment and persuade the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to crash the application when attempting to load the malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://www.incibe.es/en/incibe-cert/notices/aviso/improper-input-validation-newsletter-software-supermailer; https://www.incibe.es/en/incibe-cert/notices/aviso/improper-input-validation-newsletter-software-supermailer
CVE: CVE-2023-6723
Published: 2023-12-13
Description: An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox
CVE: CVE-2023-44362
Published: 2023-12-13
Description: Adobe Prelude versions 22.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/prelude/apsb23-67.html; https://helpx.adobe.com/security/products/prelude/apsb23-67.html
CVE: CVE-2023-42495
Published: 2023-12-13
Description: 
Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-47061
Published: 2023-12-13
Description: Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-71.html; https://helpx.adobe.com/security/products/dimension/apsb23-71.html
CVE: CVE-2023-47062
Published: 2023-12-13
Description: Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-71.html; https://helpx.adobe.com/security/products/dimension/apsb23-71.html
CVE: CVE-2023-47078
Published: 2023-12-13
Description: Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-71.html; https://helpx.adobe.com/security/products/dimension/apsb23-71.html
CVE: CVE-2023-47079
Published: 2023-12-13
Description: Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-71.html; https://helpx.adobe.com/security/products/dimension/apsb23-71.html
CVE: CVE-2023-6755
Published: 2023-12-13
Description: A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/content_batchup_action.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247883. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/ycwxy/test/issues/1; https://vuldb.com/?ctiid.247883; https://vuldb.com/?id.247883
CVE: CVE-2023-27171
Published: 2023-12-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-34194
Published: 2023-12-13
Description: StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a crafted XML document with a '\0' located after whitespace.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://lists.debian.org/debian-lts-announce/2023/12/msg00024.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QCR5PIOBGDIDS6SYRESTMDJSEDFSCOE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOMBSHRIW5Q34SQSXYURYAOYDZD2NQF6/