deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-27916
Published: 2023-06-06
Description: 














The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process. 

 

 



 








CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04; https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE: CVE-2023-28653
Published: 2023-06-06
Description: 
















The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. 

 

 

 



 








CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04; https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE: CVE-2023-29503
Published: 2023-06-06
Description: 






The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. 








CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04; https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE: CVE-2023-2132
Published: 2023-06-06
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A DollarMathPostFilter Regular Expression Denial of Service in was possible by sending crafted payloads to the preview_markdown endpoint.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2132.json; https://gitlab.com/gitlab-org/gitlab/-/issues/407586; https://hackerone.com/reports/1934711
CVE: CVE-2023-31244
Published: 2023-06-06
Description: 


















The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer. 

 

 

 

 



 








CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04; https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE: CVE-2023-31278
Published: 2023-06-06
Description: Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04; https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE: CVE-2023-31606
Published: 2023-06-06
Description: A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/e23e/CVE-2023-31606#readme; https://github.com/jgarber/redcloth; https://github.com/jgarber/redcloth/issues/73
CVE: CVE-2023-32203
Published: 2023-06-06
Description: Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e374b. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04; https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04
CVE: CVE-2023-34111
Published: 2023-06-06
Description: The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of `${{ github.event.pull_request.title }}` in a bash command within the GitHub workflow. Attackers can inject malicious commands which will be executed by the workflow. This happens because `${{ github.event.pull_request.title }}` is directly passed to bash command on like 25 of the workflow. This may allow an attacker to gain access to secrets which the github action has access to or to otherwise make use of the compute resources.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-77
References: https://github.com/taosdata/grafanaplugin/blob/master/.github/workflows/release-pr-merged.yaml#L25; https://github.com/taosdata/grafanaplugin/security/advisories/GHSA-23wp-p848-hcgr; https://securitylab.github.com/research/github-actions-untrusted-input/
CVE: CVE-2022-46165
Published: 2023-06-06
Description: Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync malicious files which contain arbitrary HTML and JavaScript in the name. If the owner of another device looks over the shared folder settings and moves the mouse over the latest sync, a script could be executed to change settings for shared folders or add devices automatically. Additionally adding a new device with a malicious name could embed HTML or JavaScript inside parts of the page. As a result the webUI may be subject to a stored cross site scripting attack. This issue has been addressed in version 1.23.5. Users are advised to upgrade. Users unable to upgrade should avoid sharing folders with untrusted users.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/syncthing/syncthing/commit/73c52eafb6566435dffd979c3c49562b6d5a4238; https://github.com/syncthing/syncthing/security/advisories/GHSA-9rp6-23gf-4c3h; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IRYGBFJPVBW6PPTETNIBWQJE4HJSA5PJ/
CVE: CVE-2023-27126
Published: 2023-06-06
Description: The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the victim.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-522, CWE-522
References: http://tapo.com; http://tp-link.com; https://www.claranet.fr/blog/dans-les-entrailles-dune-camera-connectee-tp-link-14
CVE: CVE-2023-33613
Published: 2023-06-06
Description: axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to cause a Denial of Service (DoS) when parsing a private key.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://sourceforge.net/p/axtls/mailman/message/37843071/; https://sourceforge.net/p/axtls/mailman/message/37843071/
CVE: CVE-2023-33747
Published: 2023-06-06
Description: CloudPanel v2.2.2 allows attackers to execute a path traversal.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/172768/CloudPanel-2.2.2-Privilege-Escalation-Path-Traversal.html; https://cwe.mitre.org/data/definitions/264.html; https://cwe.mitre.org/data/definitions/269.html
CVE: CVE-2023-34104
Published: 2023-06-06
Description: fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in entity names, which are not escaped or sanitized. Since the entity name is used for creating a regex for searching and replacing entities in the XML body, an attacker can abuse it for denial of service (DoS) attacks. By crafting an entity name that results in an intentionally bad performing regex and utilizing it in the entity replacement step of the parser, this can cause the parser to stall for an indefinite amount of time. This problem has been resolved in v4.2.4. Users are advised to upgrade. Users unable to upgrade should avoid using DOCTYPE parsing by setting the `processEntities: false` option.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-1333, CWE-1333
References: https://github.com/NaturalIntelligence/fast-xml-parser/commit/39b0e050bb909e[PII_REDACTED]f84a3076e39ce76c; https://github.com/NaturalIntelligence/fast-xml-parser/commit/a4bdced80369892ee413bf08e28b78795a2b0d5b; https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-6w63-h3fj-q4vw
CVE: CVE-2023-22833
Published: 2023-06-06
Description: Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.
CVSS Score: 7.6 (HIGH)
CWE: CWE-304, CWE-863
References: https://palantir.safebase.us/?tcuUid=7f1fd834-805d-4679-85d0-9d779fa064ae; https://palantir.safebase.us/?tcuUid=7f1fd834-805d-4679-85d0-9d779fa064ae
CVE: CVE-2023-2183
Published: 2023-06-06
Description: Grafana is an open-source platform for monitoring and observability. 

The option to send a test alert is not available from the user panel UI for users having the Viewer role. It is still possible for a user with the Viewer role to send a test alert using the API as the API does not check access to this function.

This might enable malicious users to abuse the functionality by sending multiple alert messages to e-mail and Slack, spamming users, prepare Phishing attack or block SMTP server.

Users may upgrade to version 9.5.3, 9.4.12, 9.3.15, 9.2.19 and 8.5.26 to receive a fix.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://github.com/grafana/bugbounty/security/advisories/GHSA-cvm3-pp2j-chr3; https://grafana.com/security/security-advisories/cve-2023-2183/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-2801
Published: 2023-06-06
Description: Grafana is an open-source platform for monitoring and observability. 

Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.

The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly.

This might enable malicious users to crash Grafana instances through that endpoint.

Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.
CVSS Score: 7.5 (HIGH)
CWE: CWE-820, CWE-662
References: https://grafana.com/security/security-advisories/cve-2023-2801/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://grafana.com/security/security-advisories/cve-2023-2801/
CVE: CVE-2023-32682
Published: 2023-06-06
Description: Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be possible for a deactivated user to login when using uncommon configurations. This only applies if any of the following are true: 1. JSON Web Tokens are enabled for login via the `jwt_config.enabled` configuration setting. 2. The local password database is enabled via the `password_config.enabled` and `password_config.localdb_enabled` configuration settings *and* a user's password is updated via an admin API after a user is deactivated. Note that the local password database is enabled by default, but it is uncommon to set a user's password after they've been deactivated. Installations that are configured to only allow login via Single Sign-On (SSO) via CAS, SAML or OpenID Connect (OIDC); or via an external password provider (e.g. LDAP) are not affected. If not using JSON Web Tokens, ensure that deactivated users do not have a password set. This issue has been addressed in version 1.85.0. Users are advised to upgrade.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://github.com/matrix-org/synapse/pull/15624; https://github.com/matrix-org/synapse/pull/15634; https://github.com/matrix-org/synapse/security/advisories/GHSA-26c5-ppr8-f33p
CVE: CVE-2023-32683
Published: 2023-06-06
Description: Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A discovered oEmbed or image URL can bypass the `url_preview_url_blacklist` setting potentially allowing server side request forgery or bypassing network policies. Impact is limited to IP addresses allowed by the `url_preview_ip_range_blacklist` setting (by default this only allows public IPs) and by the limited information returned to the client: 1. For discovered oEmbed URLs, any non-JSON response or a JSON response which includes non-oEmbed information is discarded. 2. For discovered image URLs, any non-image response is discarded. Systems which have URL preview disabled (via the `url_preview_enabled` setting) or have not configured a `url_preview_url_blacklist` are not affected. This issue has been addressed in version 1.85.0. Users are advised to upgrade. User unable to upgrade may also disable URL previews.
CVSS Score: 3.5 (LOW)
CWE: CWE-863, CWE-918
References: https://github.com/matrix-org/synapse/pull/15601; https://github.com/matrix-org/synapse/security/advisories/GHSA-98px-6486-j7qc; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6DH5A5YEB5LRIPP32OUW25FCGZFCZU2/
CVE: CVE-2023-33651
Published: 2023-06-06
Description: An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-863
References: https://blog.assetnote.io/2023/05/10/sitecore-round-two/; https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1002925; https://blog.assetnote.io/2023/05/10/sitecore-round-two/
CVE: CVE-2023-33652
Published: 2023-06-06
Description: Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /sitecore/shell/Invoke.aspx.
CVSS Score: 8.8 (HIGH)
CWE: CWE-470, CWE-470
References: https://blog.assetnote.io/2023/05/10/sitecore-round-two/; https://blog.assetnote.io/2023/05/10/sitecore-round-two/
CVE: CVE-2023-33653
Published: 2023-06-06
Description: Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /Applications/Content%20Manager/Execute.aspx?cmd=convert&mode=HTML.
CVSS Score: 8.8 (HIGH)
References: https://blog.assetnote.io/2023/05/10/sitecore-round-two/; https://blog.assetnote.io/2023/05/10/sitecore-round-two/
CVE: CVE-2023-33957
Published: 2023-06-06
Description: notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of service of services on the machine, if a user runs notation inspect command on the same machine. The problem has been fixed in the release v1.0.0-rc.6. Users should upgrade their notation packages to v1.0.0-rc.6 or above. Users are advised to upgrade. Users unable to upgrade may restrict container registries to a set of secure and trusted container registries.
CVSS Score: 2.6 (LOW)
CWE: CWE-400
References: https://github.com/notaryproject/notation/commit/ed22fde52f6d70ae0b53521bd28c9ccafa868c24; https://github.com/notaryproject/notation/security/advisories/GHSA-9m3v-v4r5-ppx7; https://github.com/notaryproject/notation/commit/ed22fde52f6d70ae0b53521bd28c9ccafa868c24
CVE: CVE-2023-33958
Published: 2023-06-06
Description: notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of service of services on the machine, if a user runs notation verify command on the same machine. The problem has been fixed in the release v1.0.0-rc.6. Users should upgrade their notation packages to v1.0.0-rc.6 or above. Users unable to upgrade may restrict container registries to a set of secure and trusted container registries.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-400
References: https://github.com/notaryproject/notation/releases/tag/v1.0.0-rc.6; https://github.com/notaryproject/notation/security/advisories/GHSA-rvrx-rrwh-r9p6; https://github.com/notaryproject/notation/releases/tag/v1.0.0-rc.6
CVE: CVE-2023-33959
Published: 2023-06-06
Description: notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to verify the wrong artifact. The problem has been fixed in the release v1.0.0-rc.6. Users should upgrade their notation-go library to v1.0.0-rc.6 or above. Users unable to upgrade may restrict container registries to a set of secure and trusted container registries.
CVSS Score: 8.3 (HIGH)
CWE: CWE-347
References: https://github.com/notaryproject/notation-go/security/advisories/GHSA-xhg5-42rf-296r; https://github.com/notaryproject/notation-go/security/advisories/GHSA-xhg5-42rf-296r
CVE: CVE-2023-33977
Published: 2023-06-06
Description: Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potentially dangerous files from being uploaded and Content-Security-Policy definition to prevent cross-site-scripting attacks. The upload validation checks were not 100% robust which left the possibility to circumvent them and upload a potentially dangerous file which allows execution of arbitrary JavaScript in the browser. Additionally we've discovered that Nginx's `proxy_pass` directive will strip some headers negating protections built into Kiwi TCMS when served behind a reverse proxy. This issue has been addressed in version 12.4. Users are advised to upgrade. Users unable to upgrade who are serving Kiwi TCMS behind a reverse proxy should make sure that additional header values are still passed to the client browser. If they aren't redefining them inside the proxy configuration.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/kiwitcms/Kiwi/blob/master/etc/nginx.conf#L66-L68; https://github.com/kiwitcms/Kiwi/blob/master/etc/nginx.conf#L87; https://github.com/kiwitcms/Kiwi/commit/d789f4b51025de4f8c747c037d02e1b0da80b034
CVE: CVE-2023-1621
Published: 2023-06-06
Description: An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to commit to projects even from a restricted IP address.
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-1621.json; https://gitlab.com/gitlab-org/gitlab/-/issues/399774; https://hackerone.com/reports/1914049
CVE: CVE-2023-29632
Published: 2023-06-06
Description: PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmspagebuilder.html; https://friends-of-presta.github.io/security-advisories/modules/2023/03/13/jmspagebuilder.html
CVE: CVE-2023-2157
Published: 2023-06-06
Description: A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=2208537; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45DUUXYMAEEAW55GSLAXN25VPKCRAIDA/; https://bugzilla.redhat.com/show_bug.cgi?id=2208537
CVE: CVE-2023-2253
Published: 2023-06-06
Description: A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for `n,` causing the allocation of a massive string array, possibly causing a denial of service through excessive use of memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-475, CWE-770
References: https://bugzilla.redhat.com/show_bug.cgi?id=2189886; https://lists.debian.org/debian-lts-announce/2023/06/msg00035.html; https://bugzilla.redhat.com/show_bug.cgi?id=2189886
CVE: CVE-2023-2602
Published: 2023-06-06
Description: A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.
CVSS Score: 3.3 (LOW)
CWE: CWE-401, CWE-401
References: https://bugzilla.redhat.com/show_bug.cgi?id=2209114; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPEGCFMCN5KGCFX5Y2VTKR732TTD4ADW/
CVE: CVE-2023-2603
Published: 2023-06-06
Description: A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=2209113; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ57ICDLMVYEREXQGZWL4GWI7FRJCRQT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPEGCFMCN5KGCFX5Y2VTKR732TTD4ADW/
CVE: CVE-2023-2961
Published: 2023-06-06
Description: A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=2210768; https://bugzilla.redhat.com/show_bug.cgi?id=2210768
CVE: CVE-2023-33477
Published: 2023-06-06
Description: In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/Skr11lex/CVE-2023-33477; https://github.com/Skr11lex/CVE-2023-33477
CVE: CVE-2023-33569
Published: 2023-06-06
Description: Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=update_user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/Cr4at0r/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/RCE-1.md; https://github.com/Cr4at0r/bug_report/blob/main/vendors/oretnom23/faculty-evaluation-system/RCE-1.md
CVE: CVE-2023-33684
Published: 2023-06-06
Description: Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.
CVSS Score: 5.7 (MEDIUM)
References: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php