deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-40755
Published: 2023-08-28
Description: There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widget v1.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/callback-widget/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40756
Published: 2023-08-28
Description: User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-203
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/callback-widget/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40757
Published: 2023-08-28
Description: User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/food-delivery-script/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40758
Published: 2023-08-28
Description: User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/document-creator/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40759
Published: 2023-08-28
Description: User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/restaurant-booking-system/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40760
Published: 2023-08-28
Description: User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/hotel-booking-system/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40761
Published: 2023-08-28
Description: User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/yacht-listing-script/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40762
Published: 2023-08-28
Description: User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/fundraising-script/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40763
Published: 2023-08-28
Description: User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/taxi-booking-script/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40764
Published: 2023-08-28
Description: User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/car-rental-script/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40765
Published: 2023-08-28
Description: User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/event-booking-calendar/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40766
Published: 2023-08-28
Description: User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/ticket-support-script/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-40767
Published: 2023-08-28
Description: User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209
References: https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f; https://www.phpjabbers.com/make-an-offer-widget/; https://medium.com/%40mfortinsec/multiple-vulnerabilities-in-phpjabbers-part-3-40fc3565982f
CVE: CVE-2023-39708
Published: 2023-08-28
Description: A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/Arajawat007/6c544ae8bebd2a36926fd3fdc8d4d5c2#file-cve-2023-39708; https://www.sourcecodester.com; https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html
CVE: CVE-2023-40846
Published: 2023-08-28
Description: Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/9/9.md; https://github.com/XYIYM/Digging/blob/main/Tenda/AC6/bof/9/9.md
CVE: CVE-2023-1997
Published: 2023-08-28
Description: An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.3ds.com/vulnerability/advisories; https://www.3ds.com/vulnerability/advisories
CVE: CVE-2023-39560
Published: 2023-08-28
Description: ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\insert.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Luci4n555/cve_ectouch; https://github.com/Luci4n555/cve_ectouch
CVE: CVE-2020-27366
Published: 2023-08-28
Description: Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pastebin.com/sr0JR1ys; https://pastebin.com/sr0JR1ys
CVE: CVE-2023-39062
Published: 2023-08-28
Description: Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/afine-com/CVE-2023-39062; https://github.com/sectroyer/CVEs/tree/main/CVE-2023-39062; https://github.com/spipu/html2pdf/blob/92afd81823d62ad95eb9d034858311bb63aeb4ac/CHANGELOG.md
CVE: CVE-2023-40590
Published: 2023-08-28
Description:  GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the `git` command, if a user runs GitPython from a repo has a `git.exe` or `git` executable, that program will be run instead of the one in the user's `PATH`. This is more of a problem on how Python interacts with Windows systems, Linux and any other OS aren't affected by this. But probably people using GitPython usually run it from the CWD of a repo. An attacker can trick a user to download a repository with a malicious `git` executable, if the user runs/imports GitPython from that directory, it allows the attacker to run any arbitrary commands. There is no fix currently available for windows users, however there are a few mitigations. 1: Default to an absolute path for the git program on Windows, like `C:\\Program Files\\Git\\cmd\\git.EXE` (default git path installation). 2: Require users to set the `GIT_PYTHON_GIT_EXECUTABLE` environment variable on Windows systems. 3: Make this problem prominent in the documentation and advise users to never run GitPython from an untrusted repo, or set the `GIT_PYTHON_GIT_EXECUTABLE` env var to an absolute path. 4: Resolve the executable manually by only looking into the `PATH` environment variable.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://docs.python.org/3/library/subprocess.html#popen-constructor; https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wfm5-v35h-vwf4; https://docs.python.org/3/library/subprocess.html#popen-constructor
CVE: CVE-2023-39562
Published: 2023-08-28
Description: GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/ChanStormstout/Pocs/blob/master/gpac_POC/id%3A000000%2Csig%3A06%2Csrc%3A003771%2Ctime%3A328254%2Cexecs%3A120473%2Cop%3Ahavoc%2Crep%3A8; https://github.com/gpac/gpac/issues/2537; https://github.com/ChanStormstout/Pocs/blob/master/gpac_POC/id%3A000000%2Csig%3A06%2Csrc%3A003771%2Ctime%3A328254%2Cexecs%3A120473%2Cop%3Ahavoc%2Crep%3A8
CVE: CVE-2023-39709
Published: 2023-08-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Member section.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/Arajawat007/4cb86f9239c73ccfeaf466352513b188#file-cve-2023-39709; https://www.sourcecodester.com/; https://www.sourcecodester.com/php/16741/free-and-open-source-inventory-management-system-php-source-code.html
CVE: CVE-2023-39810
Published: 2023-08-28
Description: An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://busybox.com; https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability/; http://busybox.com
CVE: CVE-2023-35785
Published: 2023-08-28
Description: Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange Reporter Plus 5709 and below, Log360 5315 and below, Log360 UEBA 4045 and below, M365 Manager Plus 4529 and below, M365 Security Plus 4529 and below, Recovery Manager Plus 6061 and below, ServiceDesk Plus 14204 and below and 143xx 14302 and below, ServiceDesk Plus MSP 14300 and below, SharePoint Manager Plus 4402 and below, and Support Center Plus 14300 and below are vulnerable to 2FA bypass via a few TOTP authenticators. Note: A valid pair of username and password is required to leverage this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://manageengine.com; https://www.manageengine.com/security/advisory/CVE/CVE-2023-35785.html; https://manageengine.com
CVE: CVE-2023-39348
Published: 2023-08-28
Description: Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always.  It's recommended to apply the patch and rotate the GitHub token used for github status notifications.  Given that this would output github tokens to a log system, the risk is slightly higher than a "low" since token exposure could grant elevated access to repositories outside of control.  If using READ restricted tokens, the exposure is such that the token itself could be used to access resources otherwise restricted from reads. This only affects users of GitHub Status Notifications. This issue has been addressed in pull request 1316. Users are advised to upgrade. Users unable to upgrade should disable GH Status Notifications, Filter their logs for Echo log data and use read-only tokens that are limited in scope.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-532
References: https://github.com/spinnaker/echo/pull/1316; https://github.com/spinnaker/spinnaker/security/advisories/GHSA-rq5c-hvw6-8pr7; https://github.com/spinnaker/echo/pull/1316
CVE: CVE-2023-39578
Published: 2023-08-28
Description: A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu navigation text field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/anh91/Zenario-xss/issues/1; https://panda002.hashnode.dev/a-stored-cross-site-scripting-xss-vulnerability-in-the-create-the-function-of-zenario-cms-v94; https://github.com/anh91/Zenario-xss/issues/1
CVE: CVE-2023-41109
Published: 2023-08-28
Description: SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/175945/SmartNode-SN200-3.21.2-23021-OS-Command-Injection.html; http://seclists.org/fulldisclosure/2023/Nov/12; https://www.syss.de/
CVE: CVE-2020-24165
Published: 2023-08-28
Description: An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug and not a valid security issue by multiple third parties.
CVSS Score: 8.8 (HIGH)
References: https://bugs.launchpad.net/qemu/+bug/1863025; https://lists.debian.org/debian-lts-announce/2023/10/msg00006.html; https://pastebin.com/iqCbjdT8
CVE: CVE-2023-38969
Published: 2023-08-28
Description: Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter in the new book and edit book function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/anh91/uasoft-indonesia--badaso/blob/main/XSS2.md; https://panda002.hashnode.dev/badaso-version-297-has-an-xss-vulnerability-in-add-books; https://github.com/anh91/uasoft-indonesia--badaso/blob/main/XSS2.md
CVE: CVE-2023-39652
Published: 2023-08-28
Description: theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/08/24/tvcmsvideotab.html; https://themevolty.com/; https://security.friendsofpresta.org/modules/2023/08/24/tvcmsvideotab.html
CVE: CVE-2023-39968
Published: 2023-08-28
Description: jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://github.com/jupyter-server/jupyter_server/commit/290362593b2ffb23c59f8114d76f77875de4b925; https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-r726-vmfq-j9j3; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NRP7DNZYVOIA4ZB3U3ZWKTFZEPYWNGCQ/
CVE: CVE-2023-40170
Published: 2023-08-28
Description: jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on `/files/` URLs could allow exposure of certain file contents, or accessing files when opening untrusted files via  "Open image in new tab". This issue has been addressed in commit `87a49272728` which has been included in release `2.7.2`. Users are advised to upgrade. Users unable to upgrade may use the lower performance `--ContentsManager.files_handler_class=jupyter_server.files.handlers.FilesHandler`, which implements the correct checks.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284, CWE-306, CWE-79
References: https://github.com/jupyter-server/jupyter_server/commit/87a[PII_REDACTED]f0b1cae1afa4c8c86ee2da002fd; https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-64x5-55rw-9974; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NRP7DNZYVOIA4ZB3U3ZWKTFZEPYWNGCQ/
CVE: CVE-2023-34724
Published: 2023-08-28
Description: An issue was discovered in TECHView LA5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated privileges via the UART interface.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863
References: http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html; https://www.exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725; https://www.jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570
CVE: CVE-2023-34725
Published: 2023-08-28
Description: An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated privileges via a telnet connection.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-668
References: http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html; https://www.exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725; https://www.jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570
CVE: CVE-2023-39059
Published: 2023-08-28
Description: An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://gist.github.com/Alevsk/1757da24c5fb8db735d392fd4146ca3a; https://www.alevsk.com/2023/07/a-quick-story-of-security-pitfalls-with-execcommand-in-software-integrations/; https://gist.github.com/Alevsk/1757da24c5fb8db735d392fd4146ca3a
CVE: CVE-2023-40781
Published: 2023-08-28
Description: Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/libming/libming/issues/288; https://github.com/libming/libming/issues/288
CVE: CVE-2023-40825
Published: 2023-08-28
Description: An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/list.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/perfree/PerfreeBlog/issues/15; https://github.com/perfree/PerfreeBlog/issues/15
CVE: CVE-2023-40826
Published: 2023-08-28
Description: An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zippluginPath parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/pf4j/pf4j/issues/536; https://github.com/pf4j/pf4j/issues/536
CVE: CVE-2023-40827
Published: 2023-08-28
Description: An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadpluginPath parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/pf4j/pf4j/issues/536; https://github.com/pf4j/pf4j/pull/537; https://github.com/pf4j/pf4j/pull/537/commits/ed9392069fe14c6c30d9f876710e5ad40f7ea8c1
CVE: CVE-2023-40828
Published: 2023-08-28
Description: An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandIfZip method in the extract function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/pf4j/pf4j/commit/8e0aa198c4e652cfc1eb9e05ca9b64397f67cc72; https://github.com/pf4j/pf4j/pull/537; https://github.com/pf4j/pf4j/pull/538
CVE: CVE-2023-40857
Published: 2023-08-28
Description: Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the exe.c component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/VirusTotal/yara/issues/1945; https://github.com/VirusTotal/yara/issues/1945
CVE: CVE-2023-40997
Published: 2023-08-28
Description: Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://jira.o-ran-sc.org/browse/RIC-991; https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html; https://jira.o-ran-sc.org/browse/RIC-991