deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-6204
Published: 2023-11-21
Description: On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1841050; https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html; https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html
CVE: CVE-2023-6205
Published: 2023-11-21
Description: It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1854076; https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html; https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html
CVE: CVE-2023-6206
Published: 2023-11-21
Description: The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1021
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1857430; https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html; https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html
CVE: CVE-2023-6207
Published: 2023-11-21
Description: Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1861344; https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html; https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html
CVE: CVE-2023-6208
Published: 2023-11-21
Description: When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.
*This bug only affects Firefox on X11. Other systems are unaffected.* This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
CVSS Score: 8.8 (HIGH)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1855345; https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html; https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html
CVE: CVE-2023-6209
Published: 2023-11-21
Description: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1858570; https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html; https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html
CVE: CVE-2023-6210
Published: 2023-11-21
Description: When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1801501; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-49/
CVE: CVE-2023-6211
Published: 2023-11-21
Description: If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into clicking to grant an HTTPS-only exception if they could get the user to participate in a clicking game. This vulnerability affects Firefox < 120.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1021
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1850200; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-49/
CVE: CVE-2023-6212
Published: 2023-11-21
Description: Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1658432%2C1820983%2C1829252%2C1856072%2C1856091%2C1859030%2C1860943%2C1862782; https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html; https://lists.debian.org/debian-lts-announce/2023/11/msg00030.html
CVE: CVE-2023-6213
Published: 2023-11-21
Description: Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 120.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1849265%2C1851118%2C1854911; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-49/
CVE: CVE-2023-46377
Published: 2023-11-21
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2021-27502
Published: 2023-11-21
Description: Texas Instruments TI-RTOS, when configured to use HeapMem heap(default),
 malloc returns a valid pointer to a small buffer on extremely large 
values, which can trigger an integer overflow vulnerability in 
'HeapMem_allocUnprotected' and result in code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-190, CWE-190
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04; https://www.ti.com/tool/TI-RTOS-MCU; https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04
CVE: CVE-2021-27504
Published: 2023-11-21
Description: Texas Instruments devices running FREERTOS, malloc returns a valid 
pointer to a small buffer on extremely large values, which can trigger 
an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in
 code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-190, CWE-190
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04; https://www.ti.com/tool/TI-RTOS-MCU; https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04
CVE: CVE-2023-22516
Published: 2023-11-21
Description: This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamboo Data Center and Server.

This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 8.5, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.

Atlassian recommends that Bamboo Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:
 Bamboo Data Center and Server 9.2: Upgrade to a release greater than or equal to 9.2.7.
  JDK 1.8u121+ should be used in case Java 8 used to run Bamboo Data Center and Server. See Bamboo 9.2 Upgrade notes (https://confluence.atlassian.com/bambooreleases/bamboo-9-2-upgrade-notes[PII_REDACTED].html)

 Bamboo Data Center and Server 9.3: Upgrade to a release greater than or equal to 9.3.4

See the release notes ([https://confluence.atlassian.com/bambooreleases/bamboo-release-notes[PII_REDACTED].html]). You can download the latest version of Bamboo Data Center and Server from the download center ([https://www.atlassian.com/software/bamboo/download-archives]).

This vulnerability was discovered by a private user and reported via our Bug Bounty program
CVSS Score: 8.8 (HIGH)
References: https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://jira.atlassian.com/browse/BAM-25168; https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]
CVE: CVE-2023-22521
Published: 2023-11-21
Description: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server.

This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 8.0, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.

Atlassian recommends that Crowd Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:
 Crowd Data Center and Server 3.4: Upgrade to a release greater than or equal to 5.1.6
 Crowd Data Center and Server 5.2: Upgrade to a release greater than or equal to 5.2.1

See the release notes ([https://confluence.atlassian.com/crowd/crowd-release-notes-199094.html]). You can download the latest version of Crowd Data Center and Server from the download center ([https://www.atlassian.com/software/crowd/download-archive]).

This vulnerability was discovered by m1sn0w and reported via our Bug Bounty program
CVSS Score: 8.8 (HIGH)
References: https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://jira.atlassian.com/browse/CWD-6139; https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]
CVE: CVE-2023-5055
Published: 2023-11-21
Description: Possible variant of CVE-2021-3434 in function le_ecred_reconf_req.
CVSS Score: 8.3 (HIGH)
CWE: CWE-121, CWE-787
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wr8r-7f8x-24jj; https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wr8r-7f8x-24jj
CVE: CVE-2021-38405
Published: 2023-11-21
Description: The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf; https://www.cisa.gov/news-events/ics-advisories/icsa-22-041-07; https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf
CVE: CVE-2023-20208
Published: 2023-11-21
Description: A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the web-based management interface of an affected device.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-87, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-j-KxpNynR; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-j-KxpNynR
CVE: CVE-2023-20265
Published: 2023-11-21
Description: A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to view a page containing malicious HTML or script content. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid credentials to access the web-based management interface of the affected device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uipphone-xss-NcmUykqA; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uipphone-xss-NcmUykqA
CVE: CVE-2023-20272
Published: 2023-11-21
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application. This vulnerability is due to insufficient file input validation. An attacker could exploit this vulnerability by uploading a malicious file to the web interface. A successful exploit could allow the attacker to replace files and gain access to sensitive server-side information.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-424
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-j-KxpNynR; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-j-KxpNynR
CVE: CVE-2023-20274
Published: 2023-11-21
Description: A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device.
 This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An attacker could exploit this vulnerability by modifying objects in the PHP Agent install directory, which would run with the same privileges as PHP. A successful exploit could allow a lower-privileged attacker to elevate their privileges to root on an affected device.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appd-php-authpriv-gEBwTvu5; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appd-php-authpriv-gEBwTvu5
CVE: CVE-2023-47643
Published: 2023-11-21
Description: SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. An attacker can obtain the GraphQL schema and understand the entire attack surface of the API, including sensitive fields such as UserHash. This issue is patched in version 8.4.2. There are no known workarounds.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: https://github.com/salesagility/SuiteCRM-Core/commit/117dd8172793a239f71c91222606bf00677eeb33; https://github.com/salesagility/SuiteCRM-Core/security/advisories/GHSA-fxww-jqfv-9rrr; https://www.apollographql.com/blog/graphql/security/why-you-should-disable-graphql-introspection-in-production/
CVE: CVE-2023-48226
Published: 2023-11-21
Description: OpenReplay is a self-hosted session replay suite. In version 1.14.0, due to lack of validation Name field - Account Settings (for registration looks like validation is correct), a bad actor can send emails with HTML injected code to the victims. Bad actors can use this to phishing actions for example. Email is really send from OpenReplay, but bad actors can add there HTML code injected (content spoofing). Please notice that during Registration steps for FullName looks like is validated correct - can not type there, but using this kind of bypass/workaround - bad actors can achieve own goal. As of time of publication, no known fixes or workarounds are available.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-94, CWE-94
References: https://bugcrowd.com/vulnerability-rating-taxonomy; https://capec.mitre.org/data/definitions/242.html; https://cwe.mitre.org/data/definitions/20.html
CVE: CVE-2023-48228
Published: 2023-11-21
Description: authentik is an open-source identity provider. When initialising a oauth2 flow with a `code_challenge` and `code_method` (thus requesting PKCE), the single sign-on provider (authentik) must check if there is a matching and existing `code_verifier` during the token step. Prior to versions 2023.10.4 and 2023.8.5, authentik checks if the contents of `code_verifier` is matching only when it is provided. When it is left out completely, authentik simply accepts the token request with out it; even when the flow was started with a `code_challenge`. authentik 2023.8.5 and 2023.10.4 fix this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/goauthentik/authentik/blob/dd4e9030b4e667d3720be2feda24c[PII_REDACTED]4/authentik/providers/oauth2/views/token.py#L225; https://github.com/goauthentik/authentik/commit/3af77ab3821fe9c7df8055ba5eade3d1ecea03a6; https://github.com/goauthentik/authentik/commit/6b9afed21f7c39f171a4a445654cfe415bba37d5
CVE: CVE-2023-48230
Published: 2023-11-21
Description: Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ HTTP library with WebSocket compression enabled, a buffer underrun can be caused by a remote peer. The underrun always writes a constant value that is not attacker-controlled, likely resulting in a crash, enabling a remote denial-of-service attack. Most Cap'n Proto and KJ users are unlikely to have this functionality enabled and so unlikely to be affected. Maintainers suspect only the Cloudflare Workers Runtime is affected.

If KJ HTTP is used with WebSocket compression enabled, a malicious peer may be able to cause a buffer underrun on a heap-allocated buffer. KJ HTTP is an optional library bundled with Cap'n Proto, but is not directly used by Cap'n Proto. WebSocket compression is disabled by default. It must be enabled via a setting passed to the KJ HTTP library via `HttpClientSettings` or `HttpServerSettings`. The bytes written out-of-bounds are always a specific constant 4-byte string `{ 0x00, 0x00, 0xFF, 0xFF }`. Because this string is not controlled by the attacker, maintainers believe it is unlikely that remote code execution is possible. However, it cannot be ruled out. This functionality first appeared in Cap'n Proto 1.0. Previous versions are not affected.

This issue is fixed in Cap'n Proto 1.0.1.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-124, CWE-787
References: https://github.com/capnproto/capnproto/commit/75c5c1499aa6e7690b741204ff9af91cce526c59; https://github.com/capnproto/capnproto/commit/e7f22da9c01286a2b0e1e5fbdf3ec9ab3aa128ff; https://github.com/capnproto/capnproto/security/advisories/GHSA-r89h-f468-62w3
CVE: CVE-2023-48239
Published: 2023-11-21
Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and starting in version 20.0.0 and prior to versions 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Enterprise Server, a malicious user could update any personal or global external storage, making them inaccessible for everyone else as well. Nextcloud Server 25.0.13, 26.0.8, and 27.1.3 and Nextcloud Enterprise Server is upgraded to 20.0.14.16, 21.0.9.13, 22.2.10.15, 23.0.12.12, 24.0.12.8, 25.0.13, 26.0.8, and 27.1.3 contain a patch for this issue. As a workaround, disable app files_external. This workaround also makes the external storage inaccessible but retains the configurations until a patched version has been deployed.
CVSS Score: 8.5 (HIGH)
CWE: CWE-284
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-f962-hw26-g267; https://github.com/nextcloud/server/pull/41123; https://hackerone.com/reports/2212627
CVE: CVE-2023-48299
Published: 2023-11-21
Description: TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to version 0.9.0, using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are extracted to any location on the filesystem that is within the process permissions. Leveraging this issue could aid third-party actors in hiding harmful code in open-source/public models, which can be downloaded from the internet, and take advantage of machines running Torchserve. The ZipSlip issue in TorchServe has been fixed by validating the paths of files contained within a zip archive before extracting them. TorchServe release 0.9.0 includes fixes to address the ZipSlip vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/pytorch/serve/commit/bfb3d[PII_REDACTED]4aef625143b4381e64142f9bb; https://github.com/pytorch/serve/pull/2634; https://github.com/pytorch/serve/releases/tag/v0.9.0
CVE: CVE-2023-6238
Published: 2023-11-21
Description: A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://access.redhat.com/security/cve/CVE-2023-6238; https://bugzilla.redhat.com/show_bug.cgi?id=2250834; https://access.redhat.com/security/cve/CVE-2023-6238
CVE: CVE-2023-48301
Published: 2023-11-21
Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles name that would be opened when clicking the circle name in a search filter. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app circles.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/nextcloud/circles/pull/1415; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-wgpw-qqq2-gwv6; https://hackerone.com/reports/2210038
CVE: CVE-2023-48302
Published: 2023-11-21
Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, when a user is tricked into copy pasting HTML code without markup (Ctrl+Shift+V) the markup will actually render. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.13, 26.0.8, and 27.1.3 contain a fix for this issue. As a workaround, disable app text.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p7g9-x25m-4h87; https://github.com/nextcloud/text/pull/4877; https://hackerone.com/reports/2211561
CVE: CVE-2023-48303
Published: 2023-11-21
Description: Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud Enterprise Server, admins can change authentication details of user configured external storage. Nextcloud Server and Nextcloud Enterprise Server versions 25.0.11, 26.0.6, and 27.1.0 contain a patch for this issue. No known workarounds are available.
CVSS Score: 2.4 (LOW)
CWE: CWE-284
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2448-44rp-c7hh; https://github.com/nextcloud/server/pull/39895; https://hackerone.com/reports/2107934