deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-26378
Published: 2023-04-12
Description: Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-27.html; https://helpx.adobe.com/security/products/dimension/apsb23-27.html
CVE: CVE-2023-26379
Published: 2023-04-12
Description: Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-27.html; https://helpx.adobe.com/security/products/dimension/apsb23-27.html
CVE: CVE-2023-26380
Published: 2023-04-12
Description: Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-27.html; https://helpx.adobe.com/security/products/dimension/apsb23-27.html
CVE: CVE-2023-26381
Published: 2023-04-12
Description: Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-27.html; https://helpx.adobe.com/security/products/dimension/apsb23-27.html
CVE: CVE-2023-26382
Published: 2023-04-12
Description: Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-27.html; https://helpx.adobe.com/security/products/dimension/apsb23-27.html
CVE: CVE-2023-26400
Published: 2023-04-12
Description: Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-27.html; https://helpx.adobe.com/security/products/dimension/apsb23-27.html
CVE: CVE-2023-26401
Published: 2023-04-12
Description: Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-27.html; https://helpx.adobe.com/security/products/dimension/apsb23-27.html
CVE: CVE-2023-26404
Published: 2023-04-12
Description: Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb23-27.html; https://helpx.adobe.com/security/products/dimension/apsb23-27.html
CVE: CVE-2022-3404
Published: 2023-04-12
Description: Rejected reason: This candidate is unused by its CNA.
CVE: CVE-2022-4463
Published: 2023-04-12
Description: Rejected reason: This candidate is unused by its CNA.
CVE: CVE-2023-1706
Published: 2023-04-12
Description: Rejected reason: This candidate is unused by its CNA.
CVE: CVE-2023-1992
Published: 2023-04-12
Description: RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1992.json; https://gitlab.com/wireshark/wireshark/-/issues/18852; https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html
CVE: CVE-2023-1993
Published: 2023-04-12
Description: LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-834, CWE-834
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1993.json; https://gitlab.com/wireshark/wireshark/-/issues/18900; https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html
CVE: CVE-2023-24511
Published: 2023-04-12
Description: On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process. This may result in the snmpd processing being terminated (causing SNMP requests to time out until snmpd is automatically restarted) and potential memory resource exhaustion for other processes on the switch. The vulnerability does not have any confidentiality or integrity impacts to the system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://www.arista.com/en/support/advisories-notices/security-advisory/17239-security-advisory-0084; https://www.arista.com/en/support/advisories-notices/security-advisory/17239-security-advisory-0084
CVE: CVE-2023-24545
Published: 2023-04-12
Description: On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085; https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085
CVE: CVE-2023-26395
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26396
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-379
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26397
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26405
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26406
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26407
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26408
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26417
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26418
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26419
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26420
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26421
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Integer Underflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26422
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26423
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26424
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-26425
Published: 2023-04-12
Description: Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb23-24.html; https://helpx.adobe.com/security/products/acrobat/apsb23-24.html
CVE: CVE-2023-28121
Published: 2023-04-12
Description: An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the plugin activated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/; https://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/; https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/
CVE: CVE-2023-1906
Published: 2023-04-12
Description: A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122, CWE-787, CWE-787
References: https://access.redhat.com/security/cve/CVE-2023-1906; https://bugzilla.redhat.com/show_bug.cgi?id=2185714; https://github.com/ImageMagick/ImageMagick/commit/d7a8bdd7bb33cf8e58bc01b4a4f2ea5466f8c6b3
CVE: CVE-2023-1994
Published: 2023-04-12
Description: GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-400, CWE-476
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1994.json; https://gitlab.com/wireshark/wireshark/-/issues/18947; https://lists.debian.org/debian-lts-announce/2023/04/msg00029.html
CVE: CVE-2023-21582
Published: 2023-04-12
Description: Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/Digital-Editions/apsb23-04.html; https://helpx.adobe.com/security/products/Digital-Editions/apsb23-04.html
CVE: CVE-2023-22235
Published: 2023-04-12
Description: InCopy versions 18.1 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/incopy/apsb23-13.html; https://helpx.adobe.com/security/products/incopy/apsb23-13.html
CVE: CVE-2023-26383
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html
CVE: CVE-2023-26384
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html
CVE: CVE-2023-26385
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html
CVE: CVE-2023-26386
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html
CVE: CVE-2023-26387
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html
CVE: CVE-2023-26388
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html
CVE: CVE-2023-26389
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html
CVE: CVE-2023-26390
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html
CVE: CVE-2023-26391
Published: 2023-04-12
Description: Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html; https://helpx.adobe.com/security/products/substance3d_stager/apsb23-26.html