deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-33979
Published: 2023-05-31
Description: gpt_academic provides a graphical interface for ChatGPT/GLM. A vulnerability was found in gpt_academic 3.37 and prior. This issue affects some unknown processing of the component Configuration File Handler. The manipulation of the argument file leads to information disclosure. Since no sensitive files are configured to be off-limits, sensitive information files in some working directories can be read through the `/file` route, leading to sensitive information leakage. This affects users that uses file configurations via `config.py`, `config_private.py`, `Dockerfile`. A patch is available at commit 1dcc2873d2168ad2d3d70afcb453ac1695fbdf02. As a workaround, one may use environment variables instead of `config*.py` files to configure this project, or use docker-compose installation to configure this project.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/binary-husky/gpt_academic/commit/1dcc2873d2168ad2d3d70afcb453ac1695fbdf02; https://github.com/binary-husky/gpt_academic/security/advisories/GHSA-pg65-p24m-wf5g; https://github.com/binary-husky/gpt_academic/commit/1dcc2873d2168ad2d3d70afcb453ac1695fbdf02
CVE: CVE-2023-34088
Published: 2023-05-31
Description: Collabora Online is a collaborative online office suite. A stored cross-site scripting (XSS) vulnerability was found in Collabora Online prior to versions 22.05.13, 21.11.9.1, and 6.4.27. An attacker could create a document with an XSS payload as a document name. Later, if an administrator opened the admin console and navigated to the history page, the document name was injected as unescaped HTML and executed as a script inside the context of the admin console. The administrator JSON web token (JWT) used for the websocket connection could be leaked through this flaw. Users should upgrade to Collabora Online 22.05.13 or higher; Collabora Online 21.11.9.1 or higher; Collabora Online 6.4.27 or higher to receive a patch.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/CollaboraOnline/online/security/advisories/GHSA-7582-pwfh-3pwr; https://github.com/CollaboraOnline/online/security/advisories/GHSA-7582-pwfh-3pwr
CVE: CVE-2021-45039
Published: 2023-05-31
Description: Multiple models of the Uniview IP Camera (e.g., IPC_G6103 B6103.16.10.B25.201218, IPC_G61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPC_HCMN) offer an undocumented UDP service on port 7788 that allows a remote unauthenticated attacker to overflow an internal buffer and achieve code execution. By using this buffer overflow, a remote attacker can start the telnetd service. This service has a hardcoded default username and password (root/123456). Although it has a restrictive shell, this can be easily bypassed via the built-in ECHO shell command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://ssd-disclosure.com/ssd-advisory--uniview-preauth-rce/; https://www.uniview.com/About_Us/Security/Notice/202112/920471_140493_0.htm; https://ssd-disclosure.com/ssd-advisory--uniview-preauth-rce/
CVE: CVE-2022-48502
Published: 2023-05-31
Description: An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0e8235d28f3a0e9eda9f02ff67ee566d5f42b66b; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-26278
Published: 2023-05-31
Description: IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges on the system.  IBM X-Force ID:  248158.
CVSS Score: 8.2 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/248158; https://www.ibm.com/support/pages/node/6999341; https://exchange.xforce.ibmcloud.com/vulnerabilities/248158
CVE: CVE-2023-33287
Published: 2023-05-31
Description: A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arbitrary JavaScript via a crafted payload injected into the tables.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://actonic.de/produkte/inline-table-editing/; https://marketplace.atlassian.com/apps/1217271/inline-table-editing/version-history; https://marketplace.atlassian.com/apps/1217271/inline-table-editing?hosting=server&tab=versions
CVE: CVE-2023-33730
Published: 2023-05-31
Description: Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319, CWE-319
References: https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md; https://github.com/sahiloj/CVE-2023-33730/blob/main/CVE-2023-33730.md
CVE: CVE-2023-33732
Published: 2023-05-31
Description: Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/sahiloj/CVE-2023-33733/blob/main/CVE-2023-33733.md; https://github.com/sahiloj/CVE-2023-33733/blob/main/CVE-2023-33733.md
CVE: CVE-2023-33735
Published: 2023-05-31
Description: D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/DIR-846/vul.md; https://www.dlink.com/en/security-bulletin/; https://github.com/Tyaoo/IoT-Vuls/blob/main/dlink/DIR-846/vul.md
CVE: CVE-2023-34255
Published: 2023-05-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2124. Reason: This candidate is a duplicate of CVE-2023-2124. Notes: All CVE users should reference CVE-2023-2124 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2023-34256
Published: 2023-05-31
Description: An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://bugzilla.suse.com/show_bug.cgi?id=1211895; https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.3; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f04351888a83e595571de672e0a4a8b74f4fb31
CVE: CVE-2023-34257
Published: 2023-05-31
Description: An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified (and, by default, authentication is not required). Some configuration fields related to SNMP (e.g., masterAgentName or masterAgentStartLine) result in code execution when the agent is restarted. NOTE: the vendor's perspective is "These are not vulnerabilities for us as we have provided the option to implement the authentication."
CVSS Score: 9.8 (CRITICAL)
References: https://www.errno.fr/PatrolAdvisory.html#remote-code-excution-using-patrols-pconfig; https://www.errno.fr/PatrolAdvisory.html#remote-code-excution-using-patrols-pconfig
CVE: CVE-2023-34258
Published: 2023-05-31
Description: An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://gist.github.com/gquere/045638b9959f4b3e119ea01d8d6ff856; https://www.errno.fr/PatrolAdvisory.html#remote-secrets-leak-using-patrols-pconfig-22100; https://gist.github.com/gquere/045638b9959f4b3e119ea01d8d6ff856
CVE: CVE-2023-3006
Published: 2023-05-31
Description: A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim's hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-226, CWE-212
References: https://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git/commit/?id=0e5d5ae837c8; https://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git/commit/?id=0e5d5ae837c8
CVE: CVE-2023-33627
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/UpdateSnat; https://hackmd.io/%400dayResearch/UpdateSnat
CVE: CVE-2023-33628
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/DelvsList_R300; https://hackmd.io/%400dayResearch/DelvsList_R300
CVE: CVE-2023-33629
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/r1UjggZfh; https://hackmd.io/%400dayResearch/r1UjggZfh
CVE: CVE-2023-33630
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EditvsList interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/HkUA31-Mh; https://hackmd.io/%400dayResearch/HkUA31-Mh
CVE: CVE-2023-33631
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelSTList interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/DelSTList; https://hackmd.io/%400dayResearch/DelSTList
CVE: CVE-2023-33632
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/r1N7fg-fn; https://hackmd.io/%400dayResearch/r1N7fg-fn
CVE: CVE-2023-33633
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/UpdateWanParams; https://hackmd.io/%400dayResearch/UpdateWanParams
CVE: CVE-2023-33634
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/r1g5bl-Mn; https://hackmd.io/%400dayResearch/r1g5bl-Mn
CVE: CVE-2023-33635
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/UpdateMacClone; https://hackmd.io/%400dayResearch/UpdateMacClone
CVE: CVE-2023-33636
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/HyX6mgWz2; https://hackmd.io/%400dayResearch/HyX6mgWz2
CVE: CVE-2023-33637
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/r1azLeWz3; https://hackmd.io/%400dayResearch/r1azLeWz3
CVE: CVE-2023-33638
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/ryyALdiV3; https://hackmd.io/%400dayResearch/ryyALdiV3
CVE: CVE-2023-33639
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/Bk2hvYkH3; https://hackmd.io/%400dayResearch/Bk2hvYkH3
CVE: CVE-2023-33640
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/S1twOtyrh; https://hackmd.io/%400dayResearch/S1twOtyrh
CVE: CVE-2023-33641
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/SycYkOj42; https://hackmd.io/%400dayResearch/SycYkOj42
CVE: CVE-2023-33642
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/Skg0zOsVh; https://hackmd.io/%400dayResearch/Skg0zOsVh
CVE: CVE-2023-33643
Published: 2023-05-31
Description: H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%400dayResearch/S1N5bdsE2; https://hackmd.io/%400dayResearch/S1N5bdsE2
CVE: CVE-2023-23952
Published: 2023-06-01
Description: Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217
CVE: CVE-2023-23953
Published: 2023-06-01
Description: Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability.
CVSS Score: 7.8 (HIGH)
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217
CVE: CVE-2023-23954
Published: 2023-06-01
Description: Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217
CVE: CVE-2023-23955
Published: 2023-06-01
Description: Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-918, CWE-918
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217
CVE: CVE-2023-2598
Published: 2023-06-01
Description: A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-787
References: http://www.openwall.com/lists/oss-security/2024/04/24/3; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.openwall.com/lists/oss-security/2023/05/08/3
CVE: CVE-2023-2977
Published: 2023-06-01
Description: A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package. The attacker can supply a smart card package with malformed ASN1 context. The cardos_have_verifyrc_package function scans the ASN1 buffer for 2 tags, where remaining length is wrongly caculated due to moved starting pointer. This leads to possible heap-based buffer oob read. In cases where ASAN is enabled while compiling this causes a crash. Further info leak or more damage is possible.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119, CWE-125
References: https://access.redhat.com/security/cve/CVE-2023-2977; https://bugzilla.redhat.com/show_bug.cgi?id=2211088; https://github.com/OpenSC/OpenSC/issues/2785
CVE: CVE-2023-2985
Published: 2023-06-01
Description: A use after free flaw was found in hfsplus_put_super in fs/hfsplus/super.c in the Linux Kernel. This flaw could allow a local user to cause a denial of service problem.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=07db5e247ab5858439b14dd7cc1fe538b9efcf32; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=07db5e247ab5858439b14dd7cc1fe538b9efcf32
CVE: CVE-2023-3026
Published: 2023-06-01
Description: Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 21.2.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jgraph/drawio/commit/c7ac634055c3edfabc7729fc4298a5ab7bfbf384; https://huntr.dev/bounties/9bbcc127-1e69-4c88-b318-d2afef48eff0; https://github.com/jgraph/drawio/commit/c7ac634055c3edfabc7729fc4298a5ab7bfbf384
CVE: CVE-2022-35742
Published: 2023-06-01
Description: Microsoft Outlook Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35742; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35742
CVE: CVE-2023-28399
Published: 2023-06-01
Description: Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC where the affected product is installed. As a result, the user may be able to destroy the system and/or execute a malicious program.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://jvn.jp/en/vu/JVNVU93372935/; https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf; https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf
CVE: CVE-2023-28651
Published: 2023-06-01
Description: Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can access the affected product with an administrative privilege configures specially crafted settings, an arbitrary script may be executed on the web browser of the other user who is accessing the affected product with an administrative privilege.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/vu/JVNVU93372935/; https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf; https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf
CVE: CVE-2023-28657
Published: 2023-06-01
Description: Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained and/or altered by the user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://jvn.jp/en/vu/JVNVU93372935/; https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf; https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf
CVE: CVE-2023-28713
Published: 2023-06-01
Description: Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in a local file in plaintext, a user who can access the PC where the affected product is installed can obtain the information. As a result, information in the database may be obtained and/or altered by the user.
CVSS Score: 8.1 (HIGH)
CWE: CWE-312, CWE-312
References: https://jvn.jp/en/vu/JVNVU93372935/; https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf; https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf
CVE: CVE-2023-28824
Published: 2023-06-01
Description: Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may bypass the database restriction set on the query setting page, and connect to a user unintended database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://jvn.jp/en/vu/JVNVU93372935/; https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_en.pdf; https://www.contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_chs_230531_jp.pdf
CVE: CVE-2023-28937
Published: 2023-06-01
Description: DataSpider Servista version 4.4 and earlier uses a hard-coded cryptographic key. DataSpider Servista is data integration software. ScriptRunner and ScriptRunner for Amazon SQS are used to start the configured processes on DataSpider Servista. The cryptographic key is embedded in ScriptRunner and ScriptRunner for Amazon SQS, which is common to all users. If an attacker who can gain access to a target DataSpider Servista instance and obtain a Launch Settings file of ScriptRunner and/or ScriptRunner for Amazon SQS, the attacker may perform operations with the user privilege encrypted in the file. Note that DataSpider Servista and some of the OEM products are affected by this vulnerability. For the details of affected products and versions, refer to the information listed in [References].
CVSS Score: 8.8 (HIGH)
CWE: CWE-798, CWE-798
References: https://cs.wingarc.com/ja/download/000016244; https://cs.wingarc.com/ja/download/000022448; https://cs.wingarc.com/ja/download/000023565