deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-4201
Published: 2023-08-07
Description: A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file ex_catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236291.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Yesec/Inventory-Management-System/blob/main/SQL%20Injection%20in%20ex_catagory_data.php/vuln.md; https://vuldb.com/?ctiid.236291; https://vuldb.com/?id.236291
CVE: CVE-2023-39523
Published: 2023-08-07
Description: ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible command injection vulnerability in the docker fetch process as it allows to append malicious commands in the `docker_reference` parameter.

In the function `scanpipe/pipes/fetch.py:fetch_docker_image` the parameter `docker_reference` is user controllable. The `docker_reference` variable is then passed to the vulnerable function `get_docker_image_platform`.  However, the `get_docker_image_plaform` function constructs a shell command with the passed `docker_reference`. The `pipes.run_command` then executes the shell command without any prior sanitization, making the function vulnerable to command injections. A malicious user who is able to create or add inputs to a project can inject commands. Although the command injections are blind and the user will not receive direct feedback without logs, it is still possible to cause damage to the server/container. The vulnerability appears for example if a malicious user adds a semicolon after the input of `docker://;`, it would allow appending malicious commands.

Version 32.5.1 contains a patch for this issue. The `docker_reference` input should be sanitized to avoid command injections and, as a workaround, one may avoid creating commands with user controlled input directly.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-77, CWE-77
References: https://github.com/nexB/scancode.io/blob/main/scanpipe/pipes/fetch.py#L185; https://github.com/nexB/scancode.io/commit/07ec0de1964b14bf085a1c9a27ece2b61ab6105c; https://github.com/nexB/scancode.io/releases/tag/v32.5.1
CVE: CVE-2023-39525
Published: 2023-08-07
Description: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compromised using path traversal by replaying the import file deletion query with a specified file path that uses the traversal path. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/PrestaShop/PrestaShop/commit/c7c9a5110421bb2856f4d312ecce192d079b5ec7; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-m9r4-3fg7-pqm2; https://github.com/PrestaShop/PrestaShop/commit/c7c9a5110421bb2856f4d312ecce192d079b5ec7
CVE: CVE-2023-39526
Published: 2023-08-07
Description: PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-gf46-prm4-56pc; https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09
CVE: CVE-2023-39527
Published: 2023-08-07
Description: PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79, CWE-116
References: https://github.com/PrestaShop/PrestaShop/commit/afc14f8eaa058b3e6a20ac43e033ee2656fb88b4; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-xw2r-f8xv-c8xp; https://github.com/PrestaShop/PrestaShop/commit/afc14f8eaa058b3e6a20ac43e033ee2656fb88b4
CVE: CVE-2023-39528
Published: 2023-08-07
Description: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, the `displayAjaxEmailHTML` method can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: https://github.com/PrestaShop/PrestaShop/commit/11de3a84322fa4ecd0995ac40d575db61804724c; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-hpf4-v7v2-95p2; https://github.com/PrestaShop/PrestaShop/commit/11de3a84322fa4ecd0995ac40d575db61804724c
CVE: CVE-2023-39529
Published: 2023-08-07
Description: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete a file from the server by using the Attachments controller and the Attachments API. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://github.com/PrestaShop/PrestaShop/commit/b08c647305dc1e9e6a2445b724d13a9733b6ed82; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-2rf5-3fw8-qm47; https://github.com/PrestaShop/PrestaShop/commit/b08c647305dc1e9e6a2445b724d13a9733b6ed82
CVE: CVE-2023-39530
Published: 2023-08-07
Description: PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the CustomerMessage API. Version 8.1.1 contains a patch for this issue. There are no known workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/PrestaShop/PrestaShop/commit/6ce750b2367a7309b6bf50166f1873cb86ad57e9; https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-v4gr-v679-42p7; https://github.com/PrestaShop/PrestaShop/commit/6ce750b2367a7309b6bf50166f1873cb86ad57e9
CVE: CVE-2023-33993
Published: 2023-08-08
Description: B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data. On successful exploitation, the attacker can cause high impact on confidentiality, integrity and availability of the application.


CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: https://me.sap.com/notes/3337797; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3337797
CVE: CVE-2023-36923
Published: 2023-08-08
Description: SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be executed by the application. An attacker could thereby control the behavior of the application.


CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://me.sap.com/notes/3341599; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3341599
CVE: CVE-2023-36926
Published: 2023-08-08
Description: Due to missing authentication check in SAP Host Agent - version 7.22, an unauthenticated attacker can set an undocumented parameter to a particular compatibility value and in turn call read functions. This allows the attacker to gather some non-sensitive information about the server.  There is no impact on integrity or availability.
CVSS Score: 3.7 (LOW)
CWE: CWE-306, CWE-287
References: https://me.sap.com/notes/3358328; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3358328
CVE: CVE-2023-37483
Published: 2023-08-08
Description: SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end database via Proxy.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://me.sap.com/notes/3341460; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3341460
CVE: CVE-2023-37484
Published: 2023-08-08
Description: SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during login attempt, which might allow an attacker to access password hashes from the client's memory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-327
References: https://me.sap.com/notes/3341460; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3341460
CVE: CVE-2023-37486
Published: 2023-08-08
Description: Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which would otherwise be restricted. On successful exploitation there could be a high impact on confidentiality with no impact on integrity and availability of the application.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-524
References: https://me.sap.com/notes/3341934; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3341934
CVE: CVE-2023-37487
Published: 2023-08-08
Description: SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over the network which could lead to high impact on confidentiality with no impact on integrity and availability of the application
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://me.sap.com/notes/3333616; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3333616
CVE: CVE-2023-37488
Published: 2023-08-08
Description: In SAP NetWeaver Process Integration - versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, user-controlled inputs, if not sufficiently encoded, could result in Cross-Site Scripting (XSS) attack. On successful exploitation the attacker can cause limited impact on confidentiality and integrity of the system.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://me.sap.com/notes/3350494; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3350494
CVE: CVE-2023-37490
Published: 2023-08-08
Description: SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the confidentiality, integrity, and availability of the system


CVSS Score: 7.6 (HIGH)
CWE: CWE-427
References: https://me.sap.com/notes/3317710; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3317710
CVE: CVE-2023-37491
Published: 2023-08-08
Description: The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.22EXT, RNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, can be bypassed in certain conditions, which may enable an authenticated malicious user to enter the network of the SAP systems served by the attacked SAP Message server. This may lead to unauthorized read and write of data as well as rendering the system unavailable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://me.sap.com/notes/3344295; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3344295
CVE: CVE-2023-37492
Published: 2023-08-08
Description: SAP NetWeaver Application Server ABAP and ABAP Platform - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 793, SAP_BASIS 804, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This could allow an attacker to read sensitive information which can be used in a subsequent serious attack.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-863, CWE-862
References: https://me.sap.com/notes/3348000; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3348000
CVE: CVE-2023-39436
Published: 2023-08-08
Description: SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-306
References: https://me.sap.com/notes/2067220; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/2067220
CVE: CVE-2023-39437
Published: 2023-08-08
Description: SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or application and gets it delivered to the client, resulting to Cross-site scripting. This could lead to harmful action affecting the Confidentiality, Integrity and Availability of the application.


CVSS Score: 7.6 (HIGH)
CWE: CWE-79
References: https://me.sap.com/notes/3358300; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3358300
CVE: CVE-2023-39439
Published: 2023-08-08
Description: SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.
CVSS Score: 8.8 (HIGH)
CWE: CWE-258
References: https://me.sap.com/notes/3346500; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3346500
CVE: CVE-2023-39440
Published: 2023-08-08
Description: In SAP BusinessObjects Business Intelligence - version 420,  If a user logs in to a particular program, under certain specific conditions memory might not be cleared up properly, due to which attacker might be able to get access to user credentials. For a successful attack, the attacker needs to have local access to the system. There is no impact on availability and integrity.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-312
References: https://me.sap.com/notes/3312586; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://me.sap.com/notes/3312586
CVE: CVE-2023-39976
Published: 2023-08-08
Description: log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/ClusterLabs/libqb/commit/1bbaa929b[PII_REDACTED]5c408dd1b41cd0521ffc8; https://github.com/ClusterLabs/libqb/compare/v2.0.7...v2.0.8; https://github.com/ClusterLabs/libqb/pull/490
CVE: CVE-2023-39977
Published: 2023-08-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3268. Reason: This candidate is a reservation duplicate of CVE-2023-3268. Notes: All CVE users should reference CVE-2023-3268 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2023-39978
Published: 2023-08-08
Description: ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.
CVSS Score: 3.3 (LOW)
CWE: CWE-401
References: https://github.com/ImageMagick/ImageMagick6/commit/c90e79b3b22fec309cab55af2ee606f71b027b12; https://github.com/ImageMagick/ImageMagick6/compare/6.9.12-90...6.9.12-91; https://github.com/rmagick/rmagick/pull/1406/files
CVE: CVE-2023-3526
Published: 2023-08-08
Description: In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote attacker could use a reflective XSS within the license viewer page of the devices in order to execute code in the context of the user's browser.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: http://packetstormsecurity.com/files/174152/Phoenix-Contact-TC-Cloud-TC-Router-2.x-XSS-Memory-Consumption.html; http://seclists.org/fulldisclosure/2023/Aug/12; https://cert.vde.com/en/advisories/VDE-2023-017
CVE: CVE-2023-3569
Published: 2023-08-08
Description: In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2  as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-776, CWE-776
References: http://packetstormsecurity.com/files/174152/Phoenix-Contact-TC-Cloud-TC-Router-2.x-XSS-Memory-Consumption.html; http://seclists.org/fulldisclosure/2023/Aug/12; https://cert.vde.com/en/advisories/VDE-2023-017
CVE: CVE-2023-3570
Published: 2023-08-08
Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://cert.vde.com/en/advisories/VDE-2023-018/; https://cert.vde.com/en/advisories/VDE-2023-018/
CVE: CVE-2023-3571
Published: 2023-08-08
Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://cert.vde.com/en/advisories/VDE-2023-018/; https://cert.vde.com/en/advisories/VDE-2023-018/
CVE: CVE-2023-3572
Published: 2023-08-08
Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://cert.vde.com/en/advisories/VDE-2023-018/; https://cert.vde.com/en/advisories/VDE-2023-018/
CVE: CVE-2023-3573
Published: 2023-08-08
Description: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operations to gain full access to the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://cert.vde.com/en/advisories/VDE-2023-018/; https://cert.vde.com/en/advisories/VDE-2023-018/
CVE: CVE-2023-37569
Published: 2023-08-08
Description: This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system.

Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on targeted system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/174084/Emagic-Data-Center-Management-Suite-6.0-Remote-Command-Execution.html; https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0226; http://packetstormsecurity.com/files/174084/Emagic-Data-Center-Management-Suite-6.0-Remote-Command-Execution.html
CVE: CVE-2023-37570
Published: 2023-08-08
Description: This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. 
By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system.

CVSS Score: 7.2 (HIGH)
CWE: CWE-613, CWE-613
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0226; https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0226
CVE: CVE-2023-3898
Published: 2023-08-08
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mAyaNet E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 1.1.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0440; https://www.usom.gov.tr/bildirim/tr-23-0440
CVE: CVE-2023-4009
Published: 2023-08-08
Description: In MongoDB Ops Manager v5.0 prior to 5.0.22 and v6.0 prior to 6.0.17 it is possible for an authenticated user with project owner or project user admin access to generate an API key with the privileges of org owner resulting in privilege escalation.
CVSS Score: 7.2 (HIGH)
CWE: CWE-648, CWE-269
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.mongodb.com/docs/ops-manager/current/release-notes/application/#onprem-server-6-0; https://www.mongodb.com/docs/ops-manager/v5.0/release-notes/application/#onprem-server-5-0-22
CVE: CVE-2021-41544
Published: 2023-08-08
Description: A vulnerability has been identified in Siemens Software Center (All versions < V3.0). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://cert-portal.siemens.com/productcert/pdf/ssa-188491.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-188491.pdf
CVE: CVE-2022-39062
Published: 2023-08-08
Description: A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://cert-portal.siemens.com/productcert/pdf/ssa-975961.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-975961.pdf
CVE: CVE-2022-40510
Published: 2023-08-08
Description: Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-457, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21625
Published: 2023-08-08
Description: Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVSS Score: 8.2 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21626
Published: 2023-08-08
Description: Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
CVSS Score: 7.1 (HIGH)
CWE: CWE-320, CWE-287
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21627
Published: 2023-08-08
Description: Memory corruption in Trusted Execution Environment while calling service API with invalid address.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-704
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin
CVE: CVE-2023-21643
Published: 2023-08-08
Description: Memory corruption due to untrusted pointer dereference in automotive during system call.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-822, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/august-2023-bulletin