deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-34354
Published: 2023-10-11
Description: A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to execution of arbitrary javascript in another user's browser. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 3.4 (LOW)
CWE: CWE-80, CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1781; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1781; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1781
CVE: CVE-2023-34356
Published: 2023-10-11
Description: An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1778; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1778; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1778
CVE: CVE-2023-34365
Published: 2023-10-11
Description: A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a buffer overflow. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1763; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1763; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1763
CVE: CVE-2023-34426
Published: 2023-10-11
Description: A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to stack-based buffer overflow. An attacker can send a network request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1766; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1766; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1766
CVE: CVE-2023-35055
Published: 2023-10-11
Description: A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the gozila_cgi function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1761; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1761; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1761
CVE: CVE-2023-35056
Published: 2023-10-11
Description: A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to command execution. An attacker can send a network request to trigger this vulnerability.This buffer overflow is in the next_page parameter in the cgi_handler function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-120
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1761; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1761; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1761
CVE: CVE-2023-35193
Published: 2023-10-11
Description: An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability is specifically for the `system` call in the file `/web/MANGA/cgi-bin/api.cgi` for firmware version 6.3.5 at offset 0x4bddb8.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1782; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1782; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1782
CVE: CVE-2023-35194
Published: 2023-10-11
Description: An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability is specifically for the `system` call in the file `/web/MANGA/cgi-bin/api.cgi` for firmware version 6.3.5 at offset `0x4bde44`.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1782; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1782; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1782
CVE: CVE-2023-35965
Published: 2023-10-11
Description: Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is used as argument for the malloc function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1787; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1787; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1787
CVE: CVE-2023-35966
Published: 2023-10-11
Description: Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is used as argument for the realloc function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1787; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1787; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1787
CVE: CVE-2023-35967
Published: 2023-10-11
Description: Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is used as argument for the malloc function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1788; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1788; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1788
CVE: CVE-2023-35968
Published: 2023-10-11
Description: Two heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is used as argument for the realloc function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1788; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1788; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1788
CVE: CVE-2023-4936
Published: 2023-10-11
Description: It is possible to sideload a compromised DLL during the installation at elevated privilege.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269, CWE-427
References: https://www.synaptics.com/; https://www.synaptics.com/products/displaylink-graphics/downloads/windows; https://www.synaptics.com/sites/default/files/nr-154525-tc-synaptics_displaylink_windows_driver_security_brief_-_oct2023.pdf
CVE: CVE-2023-23930
Published: 2023-10-11
Description: vantage6 is privacy preserving federated learning infrastructure. Versions prior to 4.0.0 use pickle, which has known security issue, as a default serialization module but that has known security issues. All users of vantage6 that post tasks with the default serialization are affected. Version 4.0.0 contains a patch. Users may specify JSON serialization as a workaround.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-502
References: https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400; https://github.com/vantage6/vantage6/commit/e62f03bacf2247bd59eed217e2e7338c3a01a5f0; https://github.com/vantage6/vantage6/security/advisories/GHSA-5m22-cfq9-86x6
CVE: CVE-2023-43960
Published: 2023-10-11
Description: An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://hackmd.io/%40tahaafarooq/dlink-dph-400se-cwe-200; https://www.exploit-db.com/exploits/51709; https://hackmd.io/%40tahaafarooq/dlink-dph-400se-cwe-200
CVE: CVE-2023-35645
Published: 2023-10-11
Description: In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-38817
Published: 2023-10-11
Description: An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echo_driver.sys component. NOTE: the vendor's position is that the reported ability for user-mode applications to execute code as NT AUTHORITY\SYSTEM was "deactivated by Microsoft itself."
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://ioctl.fail/echo-ac-writeup/; https://ioctl.fail/echo-ac-writeup/
CVE: CVE-2023-44961
Published: 2023-10-11
Description: SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the intranet/cgi bin/cataloging/ysearch.pl. component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/ggb0n/CVE-2023-44961; https://github.com/ggb0n/CVE-2023-44961
CVE: CVE-2023-44962
Published: 2023-10-11
Description: File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover-image.pl component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/ggb0n/CVE-2023-44962; https://github.com/ggb0n/CVE-2023-44962
CVE: CVE-2023-28635
Published: 2023-10-11
Description: vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to run algorithms on their node. This may be defined by username or user id. Now, for example, if user id 13 is allowed to run tasks, and an attacker creates a username with username '13', they would be wrongly allowed to run an algorithm. There may also be other places in the code where such a mixup of resource ID or name leads to issues. Version 4.0.0 contains a patch for this issue. The best solution is to check when resources are created or modified, that the resource name always starts with a character.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400; https://github.com/vantage6/vantage6/pull/744; https://github.com/vantage6/vantage6/security/advisories/GHSA-7x94-6g2m-3hp2
CVE: CVE-2023-35646
Published: 2023-10-11
Description: In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35647
Published: 2023-10-11
Description: In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35648
Published: 2023-10-11
Description: In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35649
Published: 2023-10-11
Description: In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35652
Published: 2023-10-11
Description: In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.


CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35653
Published: 2023-10-11
Description: In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 4.4 (MEDIUM)
CWE: CWE-863
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35654
Published: 2023-10-11
Description: In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35655
Published: 2023-10-11
Description: In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35660
Published: 2023-10-11
Description: In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35661
Published: 2023-10-11
Description: In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-35662
Published: 2023-10-11
Description: there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-40141
Published: 2023-10-11
Description: In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-40142
Published: 2023-10-11
Description: In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-41881
Published: 2023-10-11
Description: vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources (such as tasks from that collaboration) should be deleted. This is partly to manage data properly, but also to prevent a potential (but unlikely) side-effect that affects versions prior to 4.0.0, where if a collaboration with id=10 is deleted, and subsequently a new collaboration is created with id=10, the authenticated users in that collaboration could potentially see results of the deleted collaboration in some cases. Version 4.0.0 contains a patch for this issue. There are no known workarounds.
CVSS Score: 3.7 (LOW)
CWE: CWE-200, CWE-708
References: https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400; https://github.com/vantage6/vantage6/pull/748; https://github.com/vantage6/vantage6/security/advisories/GHSA-rf54-7qrr-96j6
CVE: CVE-2023-41882
Published: 2023-10-11
Description: vantage6 is privacy preserving federated learning infrastructure. The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, prior to version 4.0.0, it is only checked if the user has permission to view the collaboration. Version 4.0.0 contains a patch. There are no known workarounds.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://github.com/vantage6/vantage6/blob/0682c4288f43fee5bcc72dc448cdd99bd7e57f76/docs/release_notes.rst#400; https://github.com/vantage6/vantage6/pull/711; https://github.com/vantage6/vantage6/security/advisories/GHSA-gc57-xhh5-m94r
CVE: CVE-2023-43661
Published: 2023-10-11
Description: Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb043e109d2a262ce3974e863c54e9e5f5e0587 of the 2.4 branch contains a patch for this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-74
References: https://github.com/cachethq/cachet/commit/6fb043e109d2a262ce3974e863c54e9e5f5e0587; https://github.com/cachethq/cachet/security/advisories/GHSA-hv79-p62r-wg3p; https://github.com/cachethq/cachet/commit/6fb043e109d2a262ce3974e863c54e9e5f5e0587
CVE: CVE-2023-5535
Published: 2023-10-11
Description: Use After Free in GitHub repository vim/vim prior to v9.0.2010.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/vim/vim/commit/41e6f7d6ba67b61d911f9b1d76325cd79224753d; https://huntr.dev/bounties/2c2d85a7-1171-4014-bf7f-a[PII_REDACTED]f; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VDDWD25AZIHBAA44HQT75OWLQ5UMDKU3/
CVE: CVE-2023-3781
Published: 2023-10-11
Description: there is a possible use-after-free write due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


CVSS Score: 7.8 (HIGH)
CWE: CWE-667
References: https://source.android.com/security/bulletin/pixel/2023-10-01; https://source.android.com/security/bulletin/pixel/2023-10-01
CVE: CVE-2023-44186
Published: 2023-10-11
Description: 
An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update message with an AS PATH containing a large number of 4-byte ASes, leading to a Denial of Service (DoS). Continued receipt and processing of these BGP updates will create a sustained Denial of Service (DoS) condition.

This issue is hit when the router has Non-Stop Routing (NSR) enabled, has a non-4-byte-AS capable BGP neighbor, receives a BGP update message with a prefix that includes a long AS PATH containing large number of 4-byte ASes, and has to advertise the prefix towards the non-4-byte-AS capable BGP neighbor.

Note: NSR is not supported on the SRX Series and is therefore not affected by this vulnerability.
This issue affects:

Juniper Networks Junos OS:



  *  All versions prior to 20.4R3-S8;
  *  21.1 versions 21.1R1 and later;
  *  21.2 versions prior to 21.2R3-S6;
  *  21.3 versions prior to 21.3R3-S5;
  *  21.4 versions prior to 21.4R3-S5;
  *  22.1 versions prior to 22.1R3-S4;
  *  22.2 versions prior to 22.2R3-S2;
  *  22.3 versions prior to 22.3R2-S2, 22.3R3-S1;
  *  22.4 versions prior to 22.4R2-S1, 22.4R3.




Juniper Networks Junos OS Evolved



  *  All versions prior to 20.4R3-S8-EVO;
  *  21.1 versions 21.1R1-EVO and later;
  *  21.2 versions prior to 21.2R3-S6-EVO;
  *  21.3 versions prior to 21.3R3-S5-EVO;
  *  21.4 versions prior to 21.4R3-S5-EVO;
  *  22.1 versions prior to 22.1R3-S4-EVO;
  *  22.2 versions prior to 22.2R3-S2-EVO;
  *  22.3 versions prior to 22.3R2-S2-EVO, 22.3R3-S1-EVO;
  *  22.4 versions prior to 22.4R2-S1-EVO, 22.4R3-EVO.







CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-755
References: https://supportportal.juniper.net/JSA73150; https://supportportal.juniper.net/JSA73150