deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-23896
Published: 2024-01-17
Description: Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/mts-url-shortener/wordpress-url-shortener-by-mythemeshop-plugin-1-0-16-broken-access-control-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/mts-url-shortener/wordpress-url-shortener-by-mythemeshop-plugin-1-0-16-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2023-50950
Published: 2024-01-17
Description: IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules.  IBM X-Force ID:  275709.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/275709; https://www.ibm.com/support/pages/node/7108657; https://exchange.xforce.ibmcloud.com/vulnerabilities/275709
CVE: CVE-2024-20251
Published: 2024-01-17
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-XSS-bL4VTML; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-XSS-bL4VTML
CVE: CVE-2024-20270
Published: 2024-01-17
Description: A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
 This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-xss-6syj82Ju; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-broadworks-xss-6syj82Ju
CVE: CVE-2024-20272
Published: 2024-01-17
Description: A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by uploading arbitrary files to an affected system. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434, CWE-434
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuc-unauth-afu-FROYsCsD; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuc-unauth-afu-FROYsCsD
CVE: CVE-2024-20277
Published: 2024-01-17
Description: A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-thouseyes-privesc-DmzHG3Qv; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-thouseyes-privesc-DmzHG3Qv
CVE: CVE-2024-20287
Published: 2024-01-17
Description: A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) with Single Point Setup could allow an authenticated, remote attacker to perform command injection attacks against an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the device. To exploit this vulnerability, the attacker must have valid administrative credentials for the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-88, CWE-77, CWE-88
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-inject-bHStWgXO; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-inject-bHStWgXO
CVE: CVE-2022-41786
Published: 2024-01-17
Description: Missing Authorization vulnerability in WP Job Portal WP Job Portal – A Complete Job Board.This issue affects WP Job Portal – A Complete Job Board: from n/a through 2.0.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wp-job-portal/wordpress-wp-job-portal-plugin-1-1-9-unauthorized-plugin-settings-change-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-job-portal/wordpress-wp-job-portal-plugin-1-1-9-unauthorized-plugin-settings-change-vulnerability?_s_id=cve
CVE: CVE-2022-41790
Published: 2024-01-17
Description: Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wp-time-slots-booking-form/wordpress-wp-time-slots-booking-form-plugin-1-1-76-missing-authorization-leading-to-feedback-submission-vulnerability; https://patchstack.com/database/vulnerability/wp-time-slots-booking-form/wordpress-wp-time-slots-booking-form-plugin-1-1-76-missing-authorization-leading-to-feedback-submission-vulnerability
CVE: CVE-2024-22714
Published: 2024-01-17
Description: Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/RumblingIsOccupied/cms/blob/main/2.md; https://github.com/RumblingIsOccupied/cms/blob/main/2.md
CVE: CVE-2024-22715
Published: 2024-01-17
Description: Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/RumblingIsOccupied/cms/blob/main/1.md; https://github.com/RumblingIsOccupied/cms/blob/main/1.md
CVE: CVE-2022-42884
Published: 2024-01-17
Description: Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a through 1.2.7.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/wip-custom-login/wordpress-wip-custom-login-plugin-1-2-7-multiple-broken-access-control-vulnerabilities?_s_id=cve; https://patchstack.com/database/vulnerability/wip-custom-login/wordpress-wip-custom-login-plugin-1-2-7-multiple-broken-access-control-vulnerabilities?_s_id=cve
CVE: CVE-2023-7031
Published: 2024-01-17
Description: Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may allow partial information disclosure to an authenticated non-privileged user. Affected versions include 8.0.x and 8.1.x, prior to 8.1.2 patch 0402. Versions prior to 8.0 are end of manufacturer support.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200, CWE-639
References: https://support.avaya.com/css/public/documents/101088063; https://support.avaya.com/css/public/documents/101088063
CVE: CVE-2024-0647
Published: 2024-01-17
Description: A vulnerability, which was classified as problematic, was found in Sparksuite SimpleMDE up to 1.11.2. This affects an unknown part of the component iFrame Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251373 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?ctiid.251373; https://vuldb.com/?id.251373; https://www.youtube.com/watch?v=KtDjoJlrpAc
CVE: CVE-2023-44077
Published: 2024-01-17
Description: Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347, CWE-347
References: https://khronokernel.com/macos/2024/01/18/CVE-2023-44077.html; https://support.studionetworksolutions.com/hc/en-us/articles/[PII_REDACTED]0244-ShareBrowser-v-7-0-Released; https://khronokernel.com/macos/2024/01/18/CVE-2023-44077.html
CVE: CVE-2023-48858
Published: 2024-01-17
Description: A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject arbitrary web script or HTML via the login.php? URL part.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://abocms.ru/about/versions/version59/; https://github.com/Shumerez/CVE-2023-48858; https://abocms.ru/about/versions/version59/
CVE: CVE-2023-6548
Published: 2024-01-17
Description: Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6548
CVE: CVE-2023-6549
Published: 2024-01-17
Description: Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read
CVSS Score: 8.2 (HIGH)
CWE: CWE-119, CWE-119
References: https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6549
CVE: CVE-2024-22410
Published: 2024-01-17
Description: Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files directory it is possible to replace these DLLs and execute arbitrary code. It is the view of the blockchain development team that the threat posed by a hypothetical binary planting attack is minimal and represents a low-security risk. The vulnerable DLL files are from the Windows networking subsystem, the Visual C++ runtime, and low-level cryptographic primitives. Collectively these dependencies are required for a large ecosystem of applications, ranging from enterprise-level security applications to game engines, and don’t represent a fundamental lack of security or oversight in the design and implementation of Creditcoin. The blockchain team takes the stance that running Creditcoin on Windows is officially unsupported and at best should be thought of as experimental.
CVSS Score: 3.3 (LOW)
CWE: CWE-426
References: https://github.com/gluwa/creditcoin/security/advisories/GHSA-cx5c-xwcv-vhmq; https://owasp.org/www-community/attacks/Binary_planting; https://github.com/gluwa/creditcoin/security/advisories/GHSA-cx5c-xwcv-vhmq
CVE: CVE-2024-22414
Published: 2024-01-17
Description: flaskBlog is a simple blog app built with Flask. Improper storage and rendering of the `/user/<user>` page allows a user's comments to execute arbitrary javascript code. The html template `user.html` contains the following code snippet to render comments made by a user: `<div class="content" tag="content">{{comment[2]|safe}}</div>`. Use of the "safe" tag causes flask to _not_ escape the rendered content. To remediate this, simply remove the `|safe` tag from the HTML above. No fix is is available and users are advised to manually edit their installation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/DogukanUrker/flaskBlog/security/advisories/GHSA-mrcw-j96f-p6v6; https://github.com/DogukanUrker/flaskBlog/security/advisories/GHSA-mrcw-j96f-p6v6
CVE: CVE-2024-0648
Published: 2024-01-17
Description: A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251374 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-434
References: https://note.zhaoj.in/share/FO8AL78oAeTS; https://vuldb.com/?ctiid.251374; https://vuldb.com/?id.251374
CVE: CVE-2024-0649
Published: 2024-01-17
Description: A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function download_network_image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251375.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://note.zhaoj.in/share/jC6NMe5TRSys; https://vuldb.com/?ctiid.251375; https://vuldb.com/?id.251375
CVE: CVE-2023-6340
Published: 2024-01-18
Description: SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfpmonitor.sys driver.  The driver has been found to be vulnerable to Denial-of-Service (DoS) caused by Stack-based Buffer Overflow vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0019
CVE: CVE-2024-0650
Published: 2024-01-18
Description: A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file dataset.php of the component URL Handler. The manipulation of the argument name with the input "><script>alert('torada')</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-251376.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://torada.notion.site/XSS-at-datatest-php-660aabd1437d4df7a492d19a461a1f3c?pvs=4; https://vuldb.com/?ctiid.251376; https://vuldb.com/?id.251376
CVE: CVE-2024-22416
Published: 2024-01-18
Description: pyLoad is a free and open-source Download Manager written in pure Python. The `pyload` API allows any API call to be made using GET requests. Since the session cookie is not set to `SameSite: strict`, this opens the library up to severe attack possibilities via a Cross-Site Request Forgery (CSRF) attack. As a result any API call can be made via a CSRF attack by an unauthenticated user. This issue has been addressed in release `0.5.0b3.dev78`. All users are advised to upgrade.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352, CWE-352
References: https://github.com/pyload/pyload/commit/1374c824271cb7e927740664d06d2e577624ca3e; https://github.com/pyload/pyload/commit/c7cdc18ad9134a75222974b39e8b427c4af845fc; https://github.com/pyload/pyload/security/advisories/GHSA-pgpj-v85q-h5fm
CVE: CVE-2024-23525
Published: 2024-01-18
Description: The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option of XML::Twig.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: http://www.openwall.com/lists/oss-security/2024/01/18/4; https://gist.github.com/phvietan/d1c95a88ab6e17047b0248d6bf9eac4a; https://github.com/MichaelDaum/spreadsheet-parsexlsx/issues/10
CVE: CVE-2021-4433
Published: 2024-01-18
Description: A vulnerability was found in Karjasoft Sami HTTP Server 2.0. It has been classified as problematic. Affected is an unknown function of the component HTTP HEAD Rrequest Handler. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250836.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://packetstormsecurity.com/files/163138/Sami-HTTP-Server-2.0-Denial-Of-Service.html; https://vuldb.com/?ctiid.250836; https://vuldb.com/?id.250836
CVE: CVE-2023-6184
Published: 2024-01-18
Description: Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-913, CWE-79
References: https://support.citrix.com/article/CTX583930/citrix-session-recording-security-bulletin-for-cve20236184; https://support.citrix.com/article/CTX583930/citrix-session-recording-security-bulletin-for-cve20236184
CVE: CVE-2024-0651
Published: 2024-01-18
Description: A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search-visitor.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251377 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://drive.google.com/file/d/1J3YaxX9RYZ_41-AYdwrCAPMT-YTqILKr/view?usp=sharing; https://vuldb.com/?ctiid.251377; https://vuldb.com/?id.251377
CVE: CVE-2024-0652
Published: 2024-01-18
Description: A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file search-visitor.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251378 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://drive.google.com/file/d/1YHm4WtiYjbxNAd3FKo85qcdHfn1VJYEl/view?usp=sharing; https://vuldb.com/?ctiid.251378; https://vuldb.com/?id.251378
CVE: CVE-2024-0654
Published: 2024-01-18
Description: A vulnerability, which was classified as problematic, was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. Affected is an unknown function of the file mainscripts/Util.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-251382 is the identifier assigned to this vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-502
References: https://github.com/bayuncao/vul-cve-4; https://github.com/bayuncao/vul-cve-4/blob/main/picture/[PII_REDACTED]40_.pic_hd.jpg; https://vuldb.com/?ctiid.251382
CVE: CVE-2023-48339
Published: 2024-01-18
Description: In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545
CVE: CVE-2023-48340
Published: 2024-01-18
Description: In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545
CVE: CVE-2023-48341
Published: 2024-01-18
Description: In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545
CVE: CVE-2023-48342
Published: 2024-01-18
Description: In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545
CVE: CVE-2023-48343
Published: 2024-01-18
Description: In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545
CVE: CVE-2023-48344
Published: 2024-01-18
Description: In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545
CVE: CVE-2023-48345
Published: 2024-01-18
Description: In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545
CVE: CVE-2023-48346
Published: 2024-01-18
Description: In video decoder, there is a possible improper input validation. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]42220545