deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-40998
Published: 2023-08-28
Description: Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://jira.o-ran-sc.org/browse/RIC-989; https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html; https://jira.o-ran-sc.org/browse/RIC-989
CVE: CVE-2023-41005
Published: 2023-08-28
Description: An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in UpdateController.php
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/pagekit/pagekit/issues/977; https://github.com/pagekit/pagekit/issues/977
CVE: CVE-2023-4569
Published: 2023-08-28
Description: A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-402, CWE-401
References: https://access.redhat.com/security/cve/CVE-2023-4569; https://bugzilla.redhat.com/show_bug.cgi?id=2235470; https://patchwork.ozlabs.org/project/netfilter-devel/patch/[PII_REDACTED]0526.49808-1-fw@strlen.de/
CVE: CVE-2023-39650
Published: 2023-08-28
Description: Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://security.friendsofpresta.org/modules/2023/08/24/tvcmsblog.html; https://themevolty.com/; https://security.friendsofpresta.org/modules/2023/08/24/tvcmsblog.html
CVE: CVE-2023-1995
Published: 2023-08-29
Description: Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, 

before 09-66-17, 

before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before 10-06-02; HiRDB Server With Addtional Function: before 09-60-2M, before 09-65-/W

, before 09-66-/Q

; HiRDB Structured Data Access Facility: before 09-60-39, before 10-03-12, before 10-04-06, before 10-06-02.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-778
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-133/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-133/index.html
CVE: CVE-2023-41358
Published: 2023-08-29
Description: An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/FRRouting/frr/pull/14260; https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
CVE: CVE-2023-41359
Published: 2023-08-29
Description: An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/FRRouting/frr/pull/14232; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMJNX44SMJM25JZO7XWHDQCOB4SNJPIE/
CVE: CVE-2023-41360
Published: 2023-08-29
Description: An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://github.com/FRRouting/frr/pull/14245; https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
CVE: CVE-2023-41361
Published: 2023-08-29
Description: An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/FRRouting/frr/pull/14241; https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html; https://github.com/FRRouting/frr/pull/14241
CVE: CVE-2023-41363
Published: 2023-08-29
Description: In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users.
CVSS Score: 4.3 (MEDIUM)
References: https://github.com/cerebrate-project/cerebrate/commit/8e616180ba0d6a1fcb8326dbe39307960ee1946c; https://github.com/cerebrate-project/cerebrate/commit/8e616180ba0d6a1fcb8326dbe39307960ee1946c
CVE: CVE-2023-32457
Published: 2023-08-29
Description: 
Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privileges could potentially exploit this vulnerability, leading to escalation of privileges.


CVSS Score: 7.5 (HIGH)
CWE: CWE-267, CWE-269
References: https://www.dell.com/support/kbdoc/en-us/000216916/dsa-2023-277-security-update-for-dell-powerscale-onefs-for-improper-privilege-management-vulnerability; https://www.dell.com/support/kbdoc/en-us/000216916/dsa-2023-277-security-update-for-dell-powerscale-onefs-for-improper-privilege-management-vulnerability
CVE: CVE-2023-23770
Published: 2023-08-29
Description: Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface (MMI), allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-259, CWE-798
References: https://tetraburst.com/; https://tetraburst.com/
CVE: CVE-2023-23771
Published: 2023-08-29
Description: Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface (MMI), allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled.
CVSS Score: 8.4 (HIGH)
CWE: CWE-259, CWE-798
References: https://tetraburst.com/; https://tetraburst.com/
CVE: CVE-2023-23772
Published: 2023-08-29
Description: Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.
CVSS Score: 7.2 (HIGH)
CWE: CWE-347, CWE-347
References: https://tetraburst.com/; https://tetraburst.com/
CVE: CVE-2023-23773
Published: 2023-08-29
Description: Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent implant on the device.
CVSS Score: 7.2 (HIGH)
CWE: CWE-347, CWE-347
References: https://tetraburst.com/; https://tetraburst.com/
CVE: CVE-2023-23774
Published: 2023-08-29
Description: Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extract secret key material and/or gain arbitrary code execution on the device.
CVSS Score: 8.4 (HIGH)
CWE: CWE-248, CWE-755
References: https://tetraburst.com/; https://tetraburst.com/
CVE: CVE-2023-40787
Published: 2023-08-29
Description: In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/kaliwin/9d6cf58bb6ec06765cdf7b75e13ee460; https://sword.bladex.cn/; https://gist.github.com/kaliwin/9d6cf58bb6ec06765cdf7b75e13ee460
CVE: CVE-2023-0238
Published: 2023-08-29
Description: Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which allowed a malicious app installed on a victim's device to exploit a peculiarity in an Android function, wherein under certain conditions, the malicious app could dictate the task behaviour of the WARP app.
CVSS Score: 3.9 (LOW)
CWE: CWE-200
References: https://developers.cloudflare.com/warp-client/; https://github.com/cloudflare/advisories/security/advisories/GHSA-23rx-f69w-g75c; https://developers.cloudflare.com/warp-client/
CVE: CVE-2021-32050
Published: 2023-08-29
Description: Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.

Without due care, an application may inadvertently expose this sensitive information, e.g., by writing it to a log file. This issue only arises if an application enables the command listener feature (this is not enabled by default).

This issue affects the MongoDB C Driver 1.0.0 prior to 1.17.7, MongoDB PHP Driver 1.0.0 prior to 1.9.2, MongoDB Swift Driver 1.0.0 prior to 1.1.1, MongoDB Node.js Driver 3.6 prior to 3.6.10, MongoDB Node.js Driver 4.0 prior to 4.17.0 and MongoDB Node.js Driver 5.0 prior to 5.8.0. This issue also affects users of the MongoDB C++ Driver dependent on the C driver 1.0.0 prior to 1.17.7 (C++ driver prior to 3.7.0).
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-200, CWE-532
References: https://jira.mongodb.org/browse/CDRIVER-3797; https://jira.mongodb.org/browse/CXX-2028; https://jira.mongodb.org/browse/NODE-3356
CVE: CVE-2023-0654
Published: 2023-08-29
Description: Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the event that an attacker built a malicious application and managed to install it on a victim's device, the attacker would be able to trick the user into believing that the app shown on the screen was the WARP client when in reality it was the attacker's app.


CVSS Score: 3.9 (LOW)
CWE: CWE-1021, CWE-1021
References: https://developers.cloudflare.com/warp-client/; https://github.com/cloudflare/advisories/security/advisories/GHSA-5r97-pqv6-xpx7; https://developers.cloudflare.com/warp-client/
CVE: CVE-2023-38283
Published: 2023-08-29
Description: In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by a potentially distant remote actor may cause the system to incorrectly reset a session. This is fixed in OpenBSD 7.3 errata 006.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-754
References: https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling; https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/006_bgpd.patch.sig; https://github.com/openbgpd-portable/openbgpd-portable/releases/tag/8.1
CVE: CVE-2023-38802
Published: 2023-08-29
Description: FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation).
CVSS Score: 7.5 (HIGH)
CWE: CWE-354
References: https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling; https://lists.debian.org/debian-lts-announce/2023/09/msg00020.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JLG64IF3FU7V76K4TKCCXVNEE6P2VUDO/
CVE: CVE-2023-41362
Published: 2023-08-29
Description: MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use eval, and there was some validation of the input to eval, but type juggling interfered with this when using PCRE within PHP.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://blog.sorcery.ie/posts/mybb_acp_rce/; https://github.com/mybb/mybb/commit/a43a6f22944e769a6eabc58c39e7bc18c1cab4ca.patch; https://github.com/mybb/mybb/security/advisories/GHSA-pr74-wvp3-q6f5
CVE: CVE-2023-41376
Published: 2023-08-29
Description: Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670
References: https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling; https://news.ycombinator.com/item?id=37305800; https://www.nokia.com/networks/technologies/service-router-operating-system/
CVE: CVE-2023-24548
Published: 2023-08-29
Description: On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089; https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089
CVE: CVE-2023-39615
Published: 2023-08-29
Description: Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://gitlab.gnome.org/GNOME/libxml2/-/issues/535; https://gitlab.gnome.org/GNOME/libxml2/-/issues/535; https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html
CVE: CVE-2023-39616
Published: 2023-08-29
Description: AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://bugs.chromium.org/p/aomedia/issues/detail?id=3372#c3; https://bugs.chromium.org/p/aomedia/issues/detail?id=3372#c3
CVE: CVE-2023-3646
Published: 2023-08-29
Description: On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.

CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.arista.com/en/support/advisories-notices/security-advisory/18042-security-advisory-0088; https://www.arista.com/en/support/advisories-notices/security-advisory/18042-security-advisory-0088
CVE: CVE-2023-40889
Published: 2023-08-29
Description: A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://hackmd.io/%40cspl/B1ZkFZv23; https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/
CVE: CVE-2023-40890
Published: 2023-08-29
Description: A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://hackmd.io/%40cspl/H1PxPAUnn; https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/
CVE: CVE-2023-41037
Published: 2023-08-29
Description: OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In affected versions OpenPGP Cleartext Signed Messages are cryptographically signed messages where the signed text is readable without special tools. These messages typically contain a "Hash: ..." header declaring the hash algorithm used to compute the signature digest. OpenPGP.js up to v5.9.0 ignored any data preceding the "Hash: ..." texts when verifying the signature. As a result, malicious parties could add arbitrary text to a third-party Cleartext Signed Message, to lead the victim to believe that the arbitrary text was signed. A user or application is vulnerable to said attack vector if it verifies the CleartextMessage by only checking the returned `verified` property, discarding the associated `data` information, and instead _visually trusting_ the contents of the original message. Since `verificationResult.data` would always contain the actual signed data, users and apps that check this information are not vulnerable. Similarly, given a CleartextMessage object, retrieving the data using `getText()` or the `text` field returns only the contents that are considered when verifying the signature. Finally, re-armoring a CleartextMessage object (using `armor()` will also result in a "sanitised" version, with the extraneous text being removed. This issue has been addressed in version 5.10.1 (current stable version) which will reject messages when calling `openpgp.readCleartextMessage()` and in version 4.10.11 (legacy version) which will will reject messages when calling `openpgp.cleartext.readArmored()`. Users are advised to upgrade. Users unable to upgrade should check the contents of `verificationResult.data` to see what data was actually signed, rather than visually trusting the contents of the armored message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-347
References: https://github.com/openpgpjs/openpgpjs/commit/6b43e02a254853f5ff508ebd1b07541f78b7c566; https://github.com/openpgpjs/openpgpjs/security/advisories/GHSA-ch3c-v47x-4pgp; https://github.com/openpgpjs/openpgpjs/commit/6b43e02a254853f5ff508ebd1b07541f78b7c566
CVE: CVE-2023-20890
Published: 2023-08-29
Description: Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://www.vmware.com/security/advisories/VMSA-2023-0018.html; https://www.vmware.com/security/advisories/VMSA-2023-0018.html
CVE: CVE-2023-34039
Published: 2023-08-29
Description: Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327
References: http://packetstormsecurity.com/files/174452/VMWare-Aria-Operations-For-Networks-Remote-Code-Execution.html; http://packetstormsecurity.com/files/175320/VMWare-Aria-Operations-For-Networks-SSH-Private-Key-Exposure.html; https://www.vmware.com/security/advisories/VMSA-2023-0018.html
CVE: CVE-2023-39522
Published: 2023-08-29
Description: goauthentik is an open-source Identity Provider. In affected versions using a recovery flow with an identification stage an attacker is able to determine if a username exists. Only setups configured with a recovery flow are impacted by this. Anyone with a user account on a system with the recovery flow described above is susceptible to having their username/email revealed as existing. An attacker can easily enumerate and check users' existence using the recovery flow, as a clear message is shown when a user doesn't exist. Depending on configuration this can either be done by username, email, or both. This issue has been addressed in versions 2023.5.6 and 2023.6.2. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/goauthentik/authentik/commit/aa874dd92a770d5f8cd8f265b7cdd31cd73a4599; https://github.com/goauthentik/authentik/security/advisories/GHSA-vmf9-6pcv-xr87; https://github.com/goauthentik/authentik/commit/aa874dd92a770d5f8cd8f265b7cdd31cd73a4599
CVE: CVE-2023-3251
Published: 2023-08-29
Description: 
A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0.








CVSS Score: 4.1 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.tenable.com/security/tns-2023-29; https://www.tenable.com/security/tns-2023-29
CVE: CVE-2023-3252
Published: 2023-08-29
Description: 
An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-427
References: https://www.tenable.com/security/tns-2023-29; https://www.tenable.com/security/tns-2023-29
CVE: CVE-2021-3262
Published: 2023-08-29
Description: TripSpark VEO Transportation-2.2.x-XP_BB-20[PII_REDACTED]84 NovusEDU-2.2.x-XP_BB-20[PII_REDACTED]84 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was possible to inject custom SQL commands into the "Student Busing Information" search queries.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://tripspark.com; http://veo.com; https://susos.co/blog/f/cve-disclosureuncovered-sql-injection-in-tripspark-veo-transport
CVE: CVE-2023-39266
Published: 2023-08-29
Description: A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.



CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt
CVE: CVE-2023-39267
Published: 2023-08-29
Description: An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful exploitation results in a Denial-of-Service (DoS) condition in the switch.





CVSS Score: 6.6 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt
CVE: CVE-2023-39268
Published: 2023-08-29
Description: A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving specially crafted packets. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-787
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-013.txt
CVE: CVE-2023-39663
Published: 2023-08-29
Description: Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/mathjax/MathJax/issues/3074; https://github.com/mathjax/MathJax/issues/3074