deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-20135
Published: 2023-09-13
Description: A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system.
 This vulnerability is due to a time-of-check, time-of-use (TOCTOU) race condition when an install query regarding an ISO image is performed during an install operation that uses an ISO image. An attacker could exploit this vulnerability by modifying an ISO image and then carrying out install requests in parallel. A successful exploit could allow the attacker to execute arbitrary code on an affected device.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-347, CWE-367
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lnt-L9zOkBz5; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lnt-L9zOkBz5
CVE: CVE-2023-20190
Published: 2023-09-13
Description: A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on an affected device.
 This vulnerability is due to incorrect destination address range encoding in the compression module of an ACL that is applied to an interface of an affected device. An attacker could exploit this vulnerability by sending traffic through the affected device that should be denied by the configured ACL. A successful exploit could allow the attacker to bypass configured ACL protections on the affected device, allowing the attacker to access trusted networks that the device might be protecting.
   There are workarounds that address this vulnerability.
   
  This advisory is part of the September 2023 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2023 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication .
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264, CWE-863
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-comp3acl-vGmp6BQ3; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-comp3acl-vGmp6BQ3
CVE: CVE-2023-20191
Published: 2023-09-13
Description: A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL.
 This vulnerability is due to incomplete support for this feature. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.
   There are workarounds that address this vulnerability.
   
  This advisory is part of the September 2023 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2023 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication .
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnx-acl-PyzDkeYF; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnx-acl-PyzDkeYF
CVE: CVE-2023-20233
Published: 2023-09-13
Description: A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
 This vulnerability is due to incorrect processing of invalid continuity check messages (CCMs). An attacker could exploit this vulnerability by sending crafted CCMs to an affected device. A successful exploit could allow the attacker to cause the CFM service to crash when a user displays information about maintenance end points (MEPs) for peer MEPs on an affected device.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476, CWE-354
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xr-cfm-3pWN8MKt; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xr-cfm-3pWN8MKt
CVE: CVE-2023-20236
Published: 2023-09-13
Description: A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device.
 This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating the boot parameters for image verification during the iPXE boot process on an affected device. A successful exploit could allow the attacker to boot an unverified software image on the affected device.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-347, CWE-345
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB
CVE: CVE-2023-2680
Published: 2023-09-13
Description: This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2023-2680; https://bugzilla.redhat.com/show_bug.cgi?id=2203387; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-3255
Published: 2023-09-13
Description: A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://access.redhat.com/errata/RHSA-2024:2135; https://access.redhat.com/errata/RHSA-2024:2962; https://access.redhat.com/security/cve/CVE-2023-3255
CVE: CVE-2023-3280
Published: 2023-09-13
Description: A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755, CWE-755
References: https://security.paloaltonetworks.com/CVE-2023-3280; https://security.paloaltonetworks.com/CVE-2023-3280
CVE: CVE-2023-3301
Published: 2023-09-13
Description: A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-617, CWE-362
References: https://access.redhat.com/security/cve/CVE-2023-3301; https://bugzilla.redhat.com/show_bug.cgi?id=2215784; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-4155
Published: 2023-09-13
Description: A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://access.redhat.com/security/cve/CVE-2023-4155; https://bugzilla.redhat.com/show_bug.cgi?id=2213802; https://access.redhat.com/security/cve/CVE-2023-4155
CVE: CVE-2023-4785
Published: 2023-09-13
Description: Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux) allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Java, and Go are NOT affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://github.com/grpc/grpc/pull/33656; https://github.com/grpc/grpc/pull/33667; https://github.com/grpc/grpc/pull/33669
CVE: CVE-2023-3588
Published: 2023-09-13
Description: A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.3ds.com/vulnerability/advisories; https://www.3ds.com/vulnerability/advisories
CVE: CVE-2023-42469
Published: 2023-09-13
Description: The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.full.dialer.top.secure.encrypted.activities.DialerActivity component.
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://github.com/actuator/com.full.dialer.top.secure.encrypted; https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/dial.gif; https://github.com/actuator/com.full.dialer.top.secure.encrypted/blob/main/poc.apk
CVE: CVE-2023-40850
Published: 2023-09-13
Description: netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the application security gateway.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/flyyue2001/cve/blob/main/NS-ASG-bak-leakage.md; https://github.com/flyyue2001/cve/blob/main/NS-ASG-bak-leakage.md
CVE: CVE-2023-41892
Published: 2023-09-13
Description: Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94
References: http://packetstormsecurity.com/files/176303/Craft-CMS-4.4.14-Remote-Code-Execution.html; https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#4415---2023-07-03-critical; https://github.com/craftcms/cms/commit/7359d18d46389ffac86c2af1e0cd59e37c298857
CVE: CVE-2023-42468
Published: 2023-09-13
Description: The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application (without any permissions) can craft an intent targeting com.cutestudio.dialer.activities.DialerActivity via the android.intent.action.CALL action in conjunction with a tel: URI, thereby placing a phone call.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-269
References: https://github.com/actuator/com.cutestudio.colordialer/blob/main/CWE-284.md; https://github.com/actuator/com.cutestudio.colordialer/blob/main/dial.gif; https://github.com/actuator/com.cutestudio.colordialer/blob/main/dialerPOC.apk
CVE: CVE-2023-4568
Published: 2023-09-13
Description: PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.tenable.com/security/research/tra-2023-31; https://www.tenable.com/security/research/tra-2023-31
CVE: CVE-2023-40617
Published: 2023-09-13
Description: A reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start 7 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'file' parameter in 'displayPDF.php'.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-40617; https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-40617
CVE: CVE-2023-41152
Published: 2023-09-13
Description: A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the handle program field while creating a new MIME type program.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41152; https://webmin.com/tags/webmin-changelog/; https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41152
CVE: CVE-2023-41154
Published: 2023-09-13
Description: A Stored Cross-Site Scripting (XSS) vulnerability in the scheduled cron jobs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the value field parameter while creating a new environment variable.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41154; https://webmin.com/tags/webmin-changelog/; https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41154
CVE: CVE-2023-41155
Published: 2023-09-13
Description: A Stored Cross-Site Scripting (XSS) vulnerability in the mail forwarding and replies tab in Webmin and Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the forward to field while creating a mail forwarding rule.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41155; https://webmin.com/tags/webmin-changelog/; https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41155
CVE: CVE-2023-41158
Published: 2023-09-13
Description: A Stored Cross-Site Scripting (XSS) vulnerability in the MIME type programs tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the description field while creating a new MIME type program.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41158; https://webmin.com/tags/webmin-changelog/; https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41158
CVE: CVE-2023-41162
Published: 2023-09-13
Description: A Reflected Cross-site scripting (XSS) vulnerability in the file manager tab in Usermin 2.000 allows remote attackers to inject arbitrary web script or HTML via the file mask field while searching under the tools drop down.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41162; https://webmin.com/tags/webmin-changelog/; https://github.com/shindeanik/Usermin-2.000/blob/main/CVE-2023-41162
CVE: CVE-2023-23840
Published: 2023-09-13
Description: The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-697, CWE-697
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3-1_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23840; https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3-1_release_notes.htm
CVE: CVE-2023-23845
Published: 2023-09-13
Description: The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-697, CWE-697
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3-1_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23845; https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3-1_release_notes.htm
CVE: CVE-2023-4841
Published: 2023-09-14
Description: The Feeds for YouTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube-feed' shortcode in versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/feeds-for-youtube/tags/2.1/templates/feed.php#L33; https://plugins.trac.wordpress.org/changeset/2966017/feeds-for-youtube#file564; https://www.wordfence.com/threat-intel/vulnerabilities/id/376e2638-a873-4142-ad7d-067ae3333709?source=cve
CVE: CVE-2023-4944
Published: 2023-09-14
Description: The Awesome Weather Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'awesome-weather' shortcode in versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/awesome-weather/tags/3.0.2/awesome-weather.php#L117; https://plugins.trac.wordpress.org/browser/awesome-weather/tags/3.0.2/awesome-weather.php#L133; https://www.wordfence.com/threat-intel/vulnerabilities/id/3bf77988-370b-437f-83a0-18a147e3e087?source=cve
CVE: CVE-2023-4945
Published: 2023-09-14
Description: The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in versions up to, and including, 7.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/tags/7.1.0/includes/shortcodes/class-wcj-general-shortcodes.php#L1035; https://plugins.trac.wordpress.org/changeset/2966325/woocommerce-jetpack; https://www.wordfence.com/threat-intel/vulnerabilities/id/981639a3-63c4-4b3f-827f-4d770bd44806?source=cve
CVE: CVE-2023-4948
Published: 2023-09-14
Description: The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refresh_order_cvr_data AJAX action in versions up to 6.1.0. This makes it possible for authenticated attackers with contributor-level access and above, to update CVR numbers for orders.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.yanco.dk/product/woocommerce-cvr-payment-gateway/; https://www.wordfence.com/threat-intel/vulnerabilities/id/f72ba0e2-a9c4-43b0-a01f[PII_REDACTED]62?source=cve; https://plugins.yanco.dk/product/woocommerce-cvr-payment-gateway/
CVE: CVE-2023-26141
Published: 2023-09-14
Description: Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-345, CWE-400
References: https://gist.github.com/keeganparr1/1dffd3c017339b7ed5371ed3d81e6b2a; https://github.com/sidekiq/sidekiq/blob/6-x/web/assets/javascripts/dashboard.js%23L6; https://github.com/sidekiq/sidekiq/commit/62c90d7c5a7d8a378d79909859d87c2e0702bf89
CVE: CVE-2023-4814
Published: 2023-09-14
Description: 
A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for which the user does not have permission to.


CVSS Score: 7.1 (HIGH)
CWE: CWE-250, CWE-863
References: https://kcm.trellix.com/corporate/index?page=content&id=SB10407; https://kcm.trellix.com/corporate/index?page=content&id=SB10407
CVE: CVE-2023-38204
Published: 2023-09-14
Description: Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html; https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html
CVE: CVE-2023-38205
Published: 2023-09-14
Description: Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html; https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38205
CVE: CVE-2023-38206
Published: 2023-09-14
Description: Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html; https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html
CVE: CVE-2023-41267
Published: 2023-09-14
Description: In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1
CVSS Score: 7.8 (HIGH)
CWE: CWE-829
References: http://www.openwall.com/lists/oss-security/2023/09/14/3; https://github.com/apache/airflow/pull/33813; https://lists.apache.org/thread/ggthr5pn42bn6wcr25hxnykjzh4ntw7z