deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-37249
Published: 2023-08-25
Description: Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://community.infoblox.com/t5/trending-kb-articles/nios-is-vulnerable-to-cve-2023-37249/ba-p/32190; https://infoblox.com; https://community.infoblox.com/t5/trending-kb-articles/nios-is-vulnerable-to-cve-2023-37249/ba-p/32190
CVE: CVE-2023-39600
Published: 2023-08-25
Description: IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://icewarp.com; https://medium.com/%40katikitala.sushmitha078/cross-site-scripting-reflected-xss-in-icewarp-server-cve-2023-39600-310a7e1c8817; https://icewarp.com
CVE: CVE-2023-39707
Published: 2023-08-25
Description: A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add Expense parameter under the Expense section.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/Arajawat007/b94d7ce74fcf16014e282a9b525f4555#file-cve-2023-39707; https://www.sourcecodester.com/; https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html
CVE: CVE-2023-40031
Published: 2023-08-25
Description: Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-122
References: https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/; https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/
CVE: CVE-2023-40036
Published: 2023-08-25
Description: Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `CharDistributionAnalysis::HandleOneChar`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/; https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/
CVE: CVE-2023-40568
Published: 2023-08-25
Description: Rejected reason: GitHub has been informed that the requestor is working with another CNA for these vulnerabilities.
CVE: CVE-2023-40579
Published: 2023-08-25
Description: OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. Some end users of OpenFGA v1.3.0 or earlier are vulnerable to authorization bypass when calling the ListObjects API. The vulnerability affects customers using `ListObjects` with specific models. The affected models contain expressions of type `rel1 from type1`. This issue has been patched in version 1.3.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/openfga/openfga/releases/tag/v1.3.1; https://github.com/openfga/openfga/security/advisories/GHSA-jcf2-mxr2-gmqp; https://github.com/openfga/openfga/releases/tag/v1.3.1
CVE: CVE-2023-40580
Published: 2023-08-25
Description: Freighter is a Stellar chrome extension. It may be possible for a malicious website to access the recovery mnemonic phrase when the Freighter wallet is unlocked. This vulnerability impacts access control to the mnemonic recovery phrase. This issue was patched in version 5.3.1.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200
References: https://github.com/stellar/freighter/commit/81f78ba008c41ce631a3d0f9e4449f4bbd90baee; https://github.com/stellar/freighter/pull/948; https://github.com/stellar/freighter/security/advisories/GHSA-vqr6-hwg2-775w
CVE: CVE-2023-2906
Published: 2023-08-25
Description: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369, CWE-369
References: https://gitlab.com/wireshark/wireshark/-/issues/19229; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HCUPLDY7HLPO46PHMGIJSUBJFTT237C/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4AVRUYSHDNEAJILVSGY5W6MPOMG2YRF/
CVE: CVE-2023-32678
Published: 2023-08-25
Description: Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. Users who used to be subscribed to a private stream and have been removed from it since retain the ability to edit messages/topics, move messages to other streams, and delete messages that they used to have access to, if other relevant organization permissions allow these actions. For example, a user may be able to edit or delete their old messages they posted in such a private stream. An administrator will be able to delete old messages (that they had access to) from the private stream. This issue was fixed in Zulip Server version 7.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://github.com/zulip/zulip/security/advisories/GHSA-q3wg-jm9p-35fj; https://zulip.readthedocs.io/en/latest/overview/changelog.html#zulip-server-7-3; https://github.com/zulip/zulip/security/advisories/GHSA-q3wg-jm9p-35fj
CVE: CVE-2023-38710
Published: 2023-08-25
Description: An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1, an error notify INVALID_SPI is sent back. The notify payload's protocol ID is copied from the incoming packet, but the code that verifies outgoing packets fails an assertion that the protocol ID must be ESP (2) or AH(3) and causes the pluto daemon to crash and restart. NOTE: the earliest affected version is 3.20.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/libreswan/libreswan/tags; https://libreswan.org/security/CVE-2023-38710/; https://github.com/libreswan/libreswan/tags
CVE: CVE-2023-38711
Published: 2023-08-25
Description: An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN, a NULL pointer dereference causes a crash and restart of the pluto daemon. NOTE: the earliest affected version is 4.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/libreswan/libreswan/tags; https://libreswan.org/security/CVE-2023-38711/; https://github.com/libreswan/libreswan/tags
CVE: CVE-2023-38712
Published: 2023-08-25
Description: An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the deleted state causes the pluto daemon to crash and restart.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/libreswan/libreswan/tags; https://libreswan.org/security/CVE-2023-38712/; https://github.com/libreswan/libreswan/tags
CVE: CVE-2023-40164
Published: 2023-08-25
Description: Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/; https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/
CVE: CVE-2023-40166
Published: 2023-08-25
Description: Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in `FileManager::detectLanguageFromTextBegining `. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120, CWE-122
References: https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/; https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/
CVE: CVE-2023-40571
Published: 2023-08-25
Description: weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the data returned by the server without verifying it. At the same time, the classloader loads a lot of deserialization calls. In this case, the malicious serialized data returned by the server will cause remote code execution. Version 0.2.4 contains a patch for this issue.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/dream0x01/weblogic-framework/releases/tag/v0.2.4; https://github.com/dream0x01/weblogic-framework/security/advisories/GHSA-hjwj-4f3q-44h3; https://github.com/dream0x01/weblogic-framework/releases/tag/v0.2.4
CVE: CVE-2023-40583
Published: 2023-08-25
Description: libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to use. In go-libp2p, by using signed peer records a malicious actor can store an arbitrary amount of data in a remote node’s memory. This memory does not get garbage collected and so the victim can run out of memory and crash. If users of go-libp2p in production are not monitoring memory consumption over time, it could be a silent attack i.e. the attacker could bring down nodes over a period of time (how long depends on the node resources i.e. a go-libp2p node on a virtual server with 4 gb of memory takes about 90 sec to bring down; on a larger server, it might take a bit longer.) This issue was patched in version 0.27.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/libp2p/go-libp2p/commit/45d3c6fff662ddd6938982e7e9309ad5fa2ad8dd; https://github.com/libp2p/go-libp2p/releases/tag/v0.27.4; https://github.com/libp2p/go-libp2p/releases/tag/v0.27.7
CVE: CVE-2023-40585
Published: 2023-08-25
Description: ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is not deployed with TLS and it does not have API and Conductor split into separate services, access to the API is not protected by any authentication. Ironic API is also listening in host network. In case the node is not behind a firewall, the API could be accessed by anyone via network without authentication. By default, Ironic API in Metal3 is protected by TLS and basic authentication, so this vulnerability requires operator to configure API without TLS for it to be vulnerable. TLS and authentication however should not be coupled as they are in versions prior to capm3-v1.4.3. A patch exists in versions capm3-v1.4.3 and newer. Some workarounds are available. Either configure TLS for Ironic API (`deploy.sh -t ...`, `IRONIC_TLS_SETUP=true`) or split Ironic API and Conductor via configuration change (old implementation, not recommended). With both workarounds, services are configured with httpd front-end, which has proper authentication configuration in place.
CVSS Score: 7.3 (HIGH)
CWE: CWE-306
References: https://github.com/metal3-io/ironic-image/commit/f64bb6ce0945bbfb30d9965f98149ea183311de9; https://github.com/metal3-io/ironic-image/security/advisories/GHSA-jwpr-9fwh-m4g7; https://github.com/metal3-io/ironic-image/commit/f64bb6ce0945bbfb30d9965f98149ea183311de9
CVE: CVE-2023-40586
Published: 2023-08-25
Description: OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of `log.Fatalf`, the application using coraza crashed after receiving crafted requests from attackers. The application will immediately crash after receiving a malicious request that triggers an error in `mime.ParseMediaType`. This issue was patched in version 3.0.1.

CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/corazawaf/coraza/commit/a5239ba3ce839e14d9b4f9486e1b4a403dcade8c; https://github.com/corazawaf/coraza/security/advisories/GHSA-c2pj-v37r-2p6h; https://github.com/corazawaf/coraza/commit/a5239ba3ce839e14d9b4f9486e1b4a403dcade8c
CVE: CVE-2023-40587
Published: 2023-08-25
Description: Pyramid is an open source Python web framework. A path traversal vulnerability in Pyramid versions 2.0.0 and 2.0.1 impacts users of Python 3.11 that are using a Pyramid static view with a full filesystem path and have a `index.html` file that is located exactly one directory above the location of the static view's file system path. No further path traversal exists, and the only file that could be disclosed accidentally is `index.html`. Pyramid version 2.0.2 rejects any path that contains a null-byte out of caution. While valid in directory/file names, we would strongly consider it a mistake to use null-bytes in naming files/directories. Secondly, Python 3.11, and 3.12 has fixed the underlying issue in `os.path.normpath` to no longer truncate on the first `0x00` found, returning the behavior to pre-3.11 Python, un an as of yet unreleased version. Fixes will be available in:Python 3.12.0rc2 and 3.11.5. Some workarounds are available. Use a version of Python 3 that is not affected, downgrade to Python 3.10 series temporarily, or wait until Python 3.11.5 is released and upgrade to the latest version of Python 3.11 series.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/Pylons/pyramid/commit/347d7750da6f45c7436dd0c31468885cc9343c85; https://github.com/Pylons/pyramid/security/advisories/GHSA-j8g2-6fc7-q8f8; https://github.com/python/cpython/issues/106242
CVE: CVE-2023-41080
Published: 2023-08-25
Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.
Older, EOL versions may also be affected.


The vulnerability is limited to the ROOT (default) web application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f; https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f; https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
CVE: CVE-2023-34723
Published: 2023-08-25
Description: An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information via /config/system.conf.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html; https://www.exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725; https://www.jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570
CVE: CVE-2023-39287
Published: 2023-08-25
Description: A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-88
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0010; https://www.mitel.com/support/security-advisories
CVE: CVE-2023-39288
Published: 2023-08-25
Description: A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit could allow an attacker to access network information and to generate excessive network traffic.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-88
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0011; https://www.mitel.com/support/security-advisories
CVE: CVE-2023-39289
Published: 2023-08-25
Description: A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0011; https://www.mitel.com/support/security-advisories
CVE: CVE-2023-39290
Published: 2023-08-25
Description: A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.
CVSS Score: 4.9 (MEDIUM)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0012; https://www.mitel.com/support/security-advisories
CVE: CVE-2023-39291
Published: 2023-08-25
Description: A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.
CVSS Score: 4.9 (MEDIUM)
References: https://www.mitel.com/support/security-advisories; https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0013; https://www.mitel.com/support/security-advisories
CVE: CVE-2023-41121
Published: 2023-08-25
Description: Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://semonto.com/tools/website-reachability-check?test=325b4e588e64536b21664d24640f547; https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Denial_of_Service_ID-144162.pdf; https://semonto.com/tools/website-reachability-check?test=325b4e588e64536b21664d24640f547
CVE: CVE-2023-4524
Published: 2023-08-25
Description: Rejected reason: CVE reject in favor of CVE-2023-40547
CVE: CVE-2023-4542
Published: 2023-08-25
Description: A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-238047. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://github.com/PumpkinBridge/cve/blob/main/rce.md; https://vuldb.com/?ctiid.238047; https://vuldb.com/?id.238047
CVE: CVE-2023-4543
Published: 2023-08-25
Description: A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. This vulnerability affects unknown code of the file ?r=recruit/contact/export&contactids=x. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238048. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/spcck/cve/blob/main/sql.md; https://vuldb.com/?ctiid.238048; https://vuldb.com/?id.238048
CVE: CVE-2023-36741
Published: 2023-08-26
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 8.3 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36741; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36741; https://security.gentoo.org/glsa/202402-05
CVE: CVE-2023-4544
Published: 2023-08-26
Description: A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238049 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-425
References: https://github.com/jo1995hn/cve/blob/main/s856.md; https://vuldb.com/?ctiid.238049; https://vuldb.com/?id.238049
CVE: CVE-2023-4545
Published: 2023-08-26
Description: A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is an unknown function of the file ?r=recruit/bgchecks/export&checkids=x. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238056. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/siyu15/cve/blob/main/sql.md; https://vuldb.com/?ctiid.238056; https://vuldb.com/?id.238056
CVE: CVE-2023-4546
Published: 2023-08-26
Description: A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230816. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation leads to improper access controls. The exploit has been disclosed to the public and may be used. The identifier VDB-238057 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-284
References: https://github.com/hutianshuai/CVE/blob/main/information_disclosure.md; https://vuldb.com/?ctiid.238057; https://vuldb.com/?id.238057
CVE: CVE-2023-4547
Published: 2023-08-26
Description: A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filter[brandid]/filter[price] leads to cross site scripting. The attack may be launched remotely. VDB-238058 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/174343/SPA-Cart-eCommerce-CMS-1.9.0.3-Cross-Site-Scripting.html; https://vuldb.com/?ctiid.238058; https://vuldb.com/?id.238058
CVE: CVE-2023-4548
Published: 2023-08-26
Description: A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unknown part of the file /search of the component GET Parameter Handler. The manipulation of the argument filter[brandid] leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-238059.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/174344/SPA-Cart-eCommerce-CMS-1.9.0.3-SQL-Injection.html; https://vuldb.com/?ctiid.238059; https://vuldb.com/?id.238059