deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-3326
Published: 2023-06-22
Description: pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the network, as a way to verify the password. However, if a keytab is not provisioned on the system, pam_krb5 has no way to validate the response from the KDC, and essentially trusts the tgt provided over the network as being valid. In a non-default FreeBSD installation that leverages pam_krb5 for authentication and does not have a keytab provisioned, an attacker that is able to control both the password and the KDC responses can return a valid tgt, allowing authentication to occur for any user on the system.

CVSS Score: 9.8 (CRITICAL)
CWE: CWE-303, CWE-287
References: https://security.FreeBSD.org/advisories/FreeBSD-SA-23:04.pam_krb5.asc; https://security.FreeBSD.org/advisories/FreeBSD-SA-23:09.pam_krb5.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-34796
Published: 2023-06-22
Description: Cross site scripting (XSS) vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru commit 8a1d882b4c481a05e296e9b38a7961e912146a0f, allows unauthenticated attackers to execute arbitrary code via the org_name or domain values.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/techsneeze/dmarcts-report-viewer/pull/88; https://xmit.xyz/security/dmarcd-for-death/; https://github.com/techsneeze/dmarcts-report-viewer/pull/88
CVE: CVE-2023-34923
Published: 2023-06-22
Description: XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response manipulation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://char49.com/articles/topdesk-vulnerable-to-xml-signature-wrapping-attacks; https://my.topdesk.com/tas/public/ssp/content/detail/knowledgeitem?unid=56a16ba1c2824e9a82655892ba75d3c0; https://char49.com/articles/topdesk-vulnerable-to-xml-signature-wrapping-attacks
CVE: CVE-2023-36239
Published: 2023-06-22
Description: libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/libming/libming/issues/273; https://github.com/libming/libming/issues/273
CVE: CVE-2023-36243
Published: 2023-06-22
Description: FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only function at dump_xml.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/noirotm/flvmeta/issues/19; https://github.com/noirotm/flvmeta/issues/19
CVE: CVE-2023-27083
Published: 2023-06-22
Description: An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code via manage file functionality.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://medium.com/%40syed.pentester/authenticated-remote-code-execution-rce-on-pluckcms-4-7-15-c309ac1bd145; https://medium.com/%40syed.pentester/authenticated-remote-code-execution-rce-on-pluckcms-4-7-15-c309ac1bd145
CVE: CVE-2023-28799
Published: 2023-06-22
Description: A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token to the redirected domain.
CVSS Score: 8.2 (HIGH)
CWE: CWE-1287, CWE-601
References: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.4&deployment_date=2022-10-31&id=1420246; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Android&applicable_version=1.10.2&deployment_date=2023-03-09&id=1447706; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Chrome%20OS&applicable_version=1.10.1&deployment_date=2023-03-10&id=1447771
CVE: CVE-2023-28800
Published: 2023-06-22
Description: When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS attack providing admin login.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.4&deployment_date=2022-10-31&id=1420246; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Android&applicable_version=1.10.2&deployment_date=2023-03-09&id=1447706; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Chrome%20OS&applicable_version=1.10.1&deployment_date=2023-03-10&id=1447771
CVE: CVE-2023-2989
Published: 2023-06-22
Description: Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://kb.globalscape.com/Knowledgebase/11586/Is-EFT-susceptible-to-the-Authentication-Bypass-via-Outofbounds-Memory-Read-vulnerability; https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/; https://kb.globalscape.com/Knowledgebase/11586/Is-EFT-susceptible-to-the-Authentication-Bypass-via-Outofbounds-Memory-Read-vulnerability
CVE: CVE-2023-2990
Published: 2023-06-22
Description: Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service

CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-674
References: https://kb.globalscape.com/Knowledgebase/11588/Is-EFT-susceptible-to-the-Denial-of-service-via-recursive-Deflate-Stream-vulnerability; https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/; https://kb.globalscape.com/Knowledgebase/11588/Is-EFT-susceptible-to-the-Denial-of-service-via-recursive-Deflate-Stream-vulnerability
CVE: CVE-2023-2991
Published: 2023-06-22
Description: Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://kb.globalscape.com/Knowledgebase/11589/Is-EFT-susceptible-to-the-Remotely-obtain-HDD-serial-number-vulnerability; https://www.rapid7.com/blog/post/2023/06/22/multiple-vulnerabilities-in-fortra-globalscape-eft-administration-server-fixed/; https://kb.globalscape.com/Knowledgebase/11589/Is-EFT-susceptible-to-the-Remotely-obtain-HDD-serial-number-vulnerability
CVE: CVE-2023-32571
Published: 2023-06-22
Description: Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-697
References: https://github.com/zzzprojects/System.Linq.Dynamic.Core; https://research.nccgroup.com/2023/06/13/dynamic-linq-injection-remote-code-execution-vulnerability-cve-2023-32571/; https://github.com/zzzprojects/System.Linq.Dynamic.Core
CVE: CVE-2023-36354
Published: 2023-06-22
Description: TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/7/TL-WR940N_TL-WR841N_TL-WR740N_TL-WR941ND_userRpm_AccessCtrlTimeSchedRpm.md; https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/7/TL-WR940N_TL-WR841N_TL-WR740N_TL-WR941ND_userRpm_AccessCtrlTimeSchedRpm.md
CVE: CVE-2023-36355
Published: 2023-06-22
Description: TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-120
References: http://packetstormsecurity.com/files/173294/TP-Link-TL-WR940N-4-Buffer-Overflow.html; https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/9/TP-Link%20TL-WR940N%20wireless%20router%20userRpmWanDynamicIpV6CfgRpm%20buffer%20write%20out-of-bounds%20vulnerability.md; http://packetstormsecurity.com/files/173294/TP-Link-TL-WR940N-4-Buffer-Overflow.html
CVE: CVE-2023-36356
Published: 2023-06-22
Description: TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
CVSS Score: 7.7 (HIGH)
CWE: CWE-125
References: https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/4/TL-WR941ND_TL-WR940N_TL-WR740N_userRpm_VirtualServerRpm.md; https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/4/TL-WR941ND_TL-WR940N_TL-WR740N_userRpm_VirtualServerRpm.md
CVE: CVE-2023-36357
Published: 2023-06-22
Description: An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND V5 allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
CVSS Score: 7.7 (HIGH)
CWE: CWE-770
References: https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/5/TL-WR941ND_TL-WR940N_TL-WR841N_userRpm_LocalManageControlRpm.md; https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/5/TL-WR941ND_TL-WR940N_TL-WR841N_userRpm_LocalManageControlRpm.md
CVE: CVE-2023-36358
Published: 2023-06-22
Description: TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
CVSS Score: 7.7 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/6/TL-WR940N_WR941ND_WR743ND_WR841N_userRpm_AccessCtrlAccessTargetsRpm.md; https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/6/TL-WR940N_WR941ND_WR743ND_WR841N_userRpm_AccessCtrlAccessTargetsRpm.md
CVE: CVE-2023-36359
Published: 2023-06-22
Description: TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/QoSRuleListRpm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/8/TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds%20vulnerability.md; https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/8/TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds%20vulnerability.md; https://github.com/a101e-IoTvul/iotvul/blob/main/tp-link/8/TP-Link%20TL-WR940N%20TL-WR841N%20TL-WR941ND%20wireless%20router%20userRpmQoSRuleListRpm%20buffer%20read%20out-of-bounds%20vulnerability.md
CVE: CVE-2023-28094
Published: 2023-06-22
Description: Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials.
CVSS Score: 8.1 (HIGH)
CWE: CWE-1393
References: https://support.pega.com/support-doc/pega-security-advisory-%E2%80%93-c23-vulnerability-default-operators?; https://support.pega.com/support-doc/pega-security-advisory-%E2%80%93-c23-vulnerability-default-operators?
CVE: CVE-2023-30347
Published: 2023-06-22
Description: Cross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the serach_sms_api_name parameter to the SMA API search.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/huzefa2212/CVE-2023-30347/blob/main/poc.txt; https://github.com/huzefa2212/CVE-2023-30347/blob/main/poc.txt
CVE: CVE-2023-32320
Published: 2023-06-22
Description: Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the amount of faulty requests succeeded the limit by the time the response was sent to the client. This allowed someone to send as many requests the server could handle in parallel to bruteforce protected details instead of the configured limit, default 8. Nextcloud Server versions 25.0.7 and 26.0.2 and Nextcloud Enterprise Server versions 21.0.9.12, 22.2.10.12, 23.0.12.7, 24.0.12.2, 25.0.7 and 26.0.2 contain patches for this issue.

CVSS Score: 8.7 (HIGH)
CWE: CWE-307
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qphh-6xh7-vffg; https://github.com/nextcloud/server/pull/38274; https://hackerone.com/reports/1918525
CVE: CVE-2023-34553
Published: 2023-06-22
Description: An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-294
References: https://ashallen.net/wireless-smart-lock-vulnerability-disclosure; https://ashallen.net/wireless-smart-lock-vulnerability-disclosure
CVE: CVE-2023-35131
Published: 2023-06-22
Description: Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to 3.11.14.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=2214369; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A72KX4WU6GK2CX4TKYFGFASPKOEOJFC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5QAEAGJ44NVXLAJFJXKARKC45OGEDXT/
CVE: CVE-2023-35132
Published: 2023-06-22
Description: A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://bugzilla.redhat.com/show_bug.cgi?id=2214371; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A72KX4WU6GK2CX4TKYFGFASPKOEOJFC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5QAEAGJ44NVXLAJFJXKARKC45OGEDXT/
CVE: CVE-2023-35133
Published: 2023-06-22
Description: An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://bugzilla.redhat.com/show_bug.cgi?id=2214373; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7A72KX4WU6GK2CX4TKYFGFASPKOEOJFC/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5QAEAGJ44NVXLAJFJXKARKC45OGEDXT/
CVE: CVE-2023-3128
Published: 2023-06-22
Description: Grafana is validating Azure AD accounts based on the email claim. 

On Azure AD, the profile email field is not unique and can be easily modified. 

This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-290, CWE-290
References: https://github.com/grafana/bugbounty/security/advisories/GHSA-gxh2-6vvc-rrgp; https://grafana.com/security/security-advisories/cve-2023-3128/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-23343
Published: 2023-06-22
Description: A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a user into clicking on a button or link on another page to perform a redirect to an attacker-controlled domain.

CVSS Score: 2.4 (LOW)
CWE: CWE-1021
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601
CVE: CVE-2023-3114
Published: 2023-06-22
Description: Terraform Enterprise since v202207-1 did not properly implement authorization rules for agent pools, allowing the workspace to be targeted by unauthorized agents. This authorization flaw could potentially allow a workspace to access resources from a separate, higher-privileged workspace in the same organization that targeted an agent pool. This vulnerability, CVE-2023-3114, is fixed in Terraform Enterprise v202306-1.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-266, CWE-863
References: https://discuss.hashicorp.com/t/hcsec-2023-18-terraform-enterprise-agent-pool-controls-allowed-unauthorized-workspaces-to-target-an-agent-pool/55329; https://discuss.hashicorp.com/t/hcsec-2023-18-terraform-enterprise-agent-pool-controls-allowed-unauthorized-workspaces-to-target-an-agent-pool/55329
CVE: CVE-2023-28006
Published: 2023-06-22
Description: The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure.

CVSS Score: 7.0 (HIGH)
CWE: CWE-327
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601
CVE: CVE-2023-28016
Published: 2023-06-22
Description: Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Bare Metal Server to perform a redirect to an attacker-controlled domain.

CVSS Score: 3.1 (LOW)
CWE: CWE-74
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105601
CVE: CVE-2023-34110
Published: 2023-06-22
Description: Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated malicious actor with Admin privileges, could by adding a special character on the add, edit User forms trigger a database error, this error is surfaced back to this actor on the UI. On certain database engines this error can include the entire user row including the pbkdf2:sha256 hashed password. This vulnerability has been fixed in version 4.3.2.

CVSS Score: 2.7 (LOW)
CWE: CWE-209
References: https://github.com/dpgaspar/Flask-AppBuilder/commit/ae25ad4c87a9051ebe4a4e8f02aee[PII_REDACTED]6; https://github.com/dpgaspar/Flask-AppBuilder/pull/2045; https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.3.2
CVE: CVE-2023-34241
Published: 2023-06-22
Description: OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed, when it should have logged the data right before. This is a use-after-free bug that impacts the entire cupsd process.

The exact cause of this issue is the function `httpClose(con->http)` being called in `scheduler/client.c`. The problem is that httpClose always, provided its argument is not null, frees the pointer at the end of the call, only for cupsdLogClient to pass the pointer to httpGetHostname. This issue happens in function `cupsdAcceptClient` if LogLevel is warn or higher and in two scenarios: there is a double-lookup for the IP Address (HostNameLookups Double is set in `cupsd.conf`) which fails to resolve, or if CUPS is compiled with TCP wrappers and the connection is refused by rules from `/etc/hosts.allow` and `/etc/hosts.deny`.

Version 2.4.6 has a patch for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2023/06/23/10; http://www.openwall.com/lists/oss-security/2023/06/26/1; https://github.com/OpenPrinting/cups/commit/9809947a959e18409dcf562a3466ef246cb90cb2
CVE: CVE-2023-34462
Published: 2023-06-22
Description: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/netty/netty/commit/535da17e45201ae4278c0479e6162bb4127d4c32; https://github.com/netty/netty/security/advisories/GHSA-6mjq-h674-j845; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-33141
Published: 2023-06-23
Description: Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33141; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33141
CVE: CVE-2023-36191
Published: 2023-06-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-36192
Published: 2023-06-23
Description: Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/irontec/sngrep/issues/438; https://github.com/irontec/sngrep/issues/438
CVE: CVE-2023-36193
Published: 2023-06-23
Description: Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguity_error component at /src/clp.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/kohler/gifsicle/issues/191; https://github.com/kohler/gifsicle/issues/191
CVE: CVE-2023-23344
Published: 2023-06-23
Description: A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page.

CVSS Score: 3.0 (LOW)
CWE: CWE-276, CWE-862
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105705; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105705
CVE: CVE-2023-35801
Published: 2023-06-23
Description: A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have access to a user account with write privileges. FME Flow 2023.0 is also a fixed version.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://community.safe.com/s/; https://community.safe.com/s/article/Known-Issue-FME-Flow-Directory-Traversal-Vulnerability; https://downloads.safe.com/fme/2023/whatsnew_server_2023_0_0_3.txt