rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-1619 WAGO: DoS in multiple versions of multiple products
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a malformed packet.
Problem types: cwe_id: CWE-1288
description: CWE-1288 Improper Validation of Consistency within Input
Affected products: vendor: Wago
product: 750-8202/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8203/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8204/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8206/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8207/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8208/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8210/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8211/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8212/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8213/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8214/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8216/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8217/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-823
default_status: unaffected
vendor: Wago
product: 750-332
default_status: unaffected
vendor: Wago
product: 750-832/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-862
default_status: unaffected
vendor: Wago
product: 750-890/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-891
default_status: unaffected
vendor: Wago
product: 750-893
default_status: unaffected
vendor: Wago
product: 750-331
default_status: unaffected
vendor: Wago
product: 750-829
default_status: unaffected
vendor: Wago
product: 750-831/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-852
default_status: unaffected
vendor: Wago
product: 750-880/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-881
default_status: unaffected
vendor: Wago
product: 750-882
default_status: unaffected
vendor: Wago
product: 750-885/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-889
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Daniel dos Santos from Forescout
lang: en
value: Abdelrahman Hassanien from Forescout
Published: 2023-06-26T06:18:33.981Z
CVE-2023-1620 WAGO: DoS in multiple products in multiple versions using Codesys
Multiple WAGO devices in multiple versions may allow an authenticated remote attacker with high privileges to DoS the device by sending a specifically crafted packet to the CODESYS V2 runtime.
Problem types: cwe_id: CWE-1288
description: CWE-1288 Improper Validation of Consistency within Input
Affected products: vendor: Wago
product: 750-8202/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8203/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8204/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8206/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8207/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8208/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8210/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8211/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8212/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8213/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8214/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8216/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-8217/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-823
default_status: unaffected
vendor: Wago
product: 750-332
default_status: unaffected
vendor: Wago
product: 750-832/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-862
default_status: unaffected
vendor: Wago
product: 750-890/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-891
default_status: unaffected
vendor: Wago
product: 750-893
default_status: unaffected
vendor: Wago
product: 750-331
default_status: unaffected
vendor: Wago
product: 750-829
default_status: unaffected
vendor: Wago
product: 750-831/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-852
default_status: unaffected
vendor: Wago
product: 750-880/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-881
default_status: unaffected
vendor: Wago
product: 750-882
default_status: unaffected
vendor: Wago
product: 750-885/xxx-xxx
default_status: unaffected
vendor: Wago
product: 750-889
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Daniel dos Santos from Forescout
lang: en
value: Abdelrahman Hassanien from Forescout
Published: 2023-06-26T06:19:30.928Z
CVE-2023-1621 
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1. A malicious group member may continue to commit to projects even from a restricted IP address.
Problem types: description: Missing authorization in GitLab
Affected products: vendor: GitLab
product: GitLab
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
Credits: lang: en
value: Thanks [js_noob](https://hackerone.com/js_noob) for reporting this vulnerability through our HackerOne bug bounty program
Published: 2023-06-06T00:00:00.000Z
CVE-2023-1623 Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRF
The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers to make a logged in admin send such information to an arbitrary email address via a CSRF attack.
Problem types: description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Custom Post Type UI
default_status: unaffected
Credits: lang: en
value: Erwan LR (WPScan)
lang: en
value: WPScan
Published: 2023-04-24T18:31:01.462Z
CVE-2023-1624 WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to make users with the wpcode_activate_snippets capability delete arbitrary log files on the server, including outside of the blog folders
Problem types: description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: WPCode
default_status: unaffected
Credits: lang: en
value: Erwan LR (WPScan)
lang: en
value: WPScan
Published: 2023-04-24T18:30:56.651Z
CVE-2023-1625 Information leak in api
An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system.
Problem types: cwe_id: CWE-202
description: Exposure of Sensitive Information Through Data Queries
Affected products: vendor: n/a
product: openstack-heat
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 13 (Queens)
cpes: cpe:/a:redhat:openstack:13
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 16.1
cpes: cpe:/a:redhat:openstack:16.1
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
cpes: cpe:/a:redhat:openstack:16.2
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 17.0
cpes: cpe:/a:redhat:openstack:17.0
default_status: affected
vendor: RDO
product: OpenStack RDO
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Red Hat would like to thank Chengen Du (Canonical) for reporting this issue.
Published: 2023-09-24T00:08:12.738Z
CVE-2023-1626 Jianming Antivirus IoControlCode kvcore.sys memory corruption
A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224008.
Problem types: cwe_id: CWE-119
description: CWE-119 Memory Corruption
Affected products: vendor: Jianming
product: Antivirus
CVSS v3.1: version: 3.1
baseScore: 5.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
Published: 2023-03-25T10:31:03.515Z
CVE-2023-1627 Jianming Antivirus IoControlCode kvcore.sys denial of service
A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier VDB-224009 was assigned to this vulnerability.
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: Jianming
product: Antivirus
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Published: 2023-03-25T10:31:04.462Z
CVE-2023-1628 Jianming Antivirus IoControlCode kvcore.sys null pointer dereference
A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability.
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: Jianming
product: Antivirus
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Published: 2023-03-25T11:00:04.340Z
CVE-2023-1629 JiangMin Antivirus IOCTL kvcore.sys 0x222010 memory corruption
A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224011.
Problem types: cwe_id: CWE-119
description: CWE-119 Memory Corruption
Affected products: vendor: JiangMin
product: Antivirus
CVSS v3.1: version: 3.1
baseScore: 5.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-25T11:00:05.644Z
CVE-2023-1630 JiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service
A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012.
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: JiangMin
product: Antivirus
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-25T11:31:03.145Z
CVE-2023-1631 JiangMin Antivirus IOCTL kvcore.sys 0x222010 null pointer dereference
A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224013 was assigned to this vulnerability.
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: JiangMin
product: Antivirus
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-25T12:00:04.318Z
CVE-2023-1633 Insecure barbican configuration file leaking credential
A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.
Problem types: cwe_id: CWE-200
description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: openstack-barbican
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 13 (Queens)
cpes: cpe:/a:redhat:openstack:13
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 16.1
cpes: cpe:/a:redhat:openstack:16.1
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
cpes: cpe:/a:redhat:openstack:16.2
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 17.0
cpes: cpe:/a:redhat:openstack:17.0
default_status: affected
vendor: RDO
product: OpenStack RDO
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
version: 3.1
Credits: lang: en
value: This issue was discovered by Ade Lee (Red Hat) and Grzegorz Grasza (Red Hat).
Published: 2023-09-24T00:09:50.215Z
CVE-2023-1634 OTCMS URL Parameter info_deal.php UseCurl server-side request forgery
A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224016.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery
Affected products: vendor: n/a
product: OTCMS
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
Credits: lang: en
value: fzh1613 (VulDB User)
Published: 2023-03-25T18:31:03.362Z
CVE-2023-1635 OTCMS apiRun.php AutoRun cross site scripting
A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the file apiRun.php. The manipulation of the argument mode leads to cross site scripting. The attack can be launched remotely. The identifier VDB-224017 was assigned to this vulnerability.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross Site Scripting
Affected products: vendor: n/a
product: OTCMS
CVSS v3.1: version: 3.1
baseScore: 3.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
baseSeverity: LOW
Credits: lang: en
value: fzh1613 (VulDB User)
Published: 2023-03-25T19:00:05.453Z
CVE-2023-1636 Incomplete container isolation
A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is compromised, it could gain access to the data transmitted to and from Barbican.
Problem types: cwe_id: CWE-653
description: Improper Isolation or Compartmentalization
Affected products: vendor: n/a
product: openstack-barbican
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 13 (Queens)
cpes: cpe:/a:redhat:openstack:13
default_status: unaffected
vendor: Red Hat
product: Red Hat OpenStack Platform 16.1
cpes: cpe:/a:redhat:openstack:16.1
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
cpes: cpe:/a:redhat:openstack:16.2
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 17.0
cpes: cpe:/a:redhat:openstack:17.0
default_status: affected
vendor: RDO
product: OpenStack RDO
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Red Hat would like to thank ANSSI and Amossys for reporting this issue.
Published: 2023-09-24T00:09:03.770Z
CVE-2023-1637 
A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.
Problem types: cwe_id: CWE-226
description: CWE-226 -> CWE-385 -> CWE-200
Affected products: vendor: n/a
product: Kernel
Published: 2023-03-27T00:00:00.000Z
CVE-2023-1638 IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of service
A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue is the function 0x8001E024/0x8001E040 in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-224018 is the identifier assigned to this vulnerability.
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: IObit
product: Malware Fighter
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-26T20:31:03.608Z
CVE-2023-1639 IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of service
A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224019.
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: IObit
product: Malware Fighter
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-26T20:31:04.595Z
CVE-2023-1640 IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of service
A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224020.
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: IObit
product: Malware Fighter
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-26T21:00:04.960Z
CVE-2023-1641 IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of service
A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affects the function 0x222018 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224021 was assigned to this vulnerability.
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: IObit
product: Malware Fighter
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-26T21:00:06.025Z
CVE-2023-1642 IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222040 denial of service
A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the function 0x222034/0x222038/0x22203C/0x222040 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-224022 is the identifier assigned to this vulnerability.
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: IObit
product: Malware Fighter
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-26T21:31:03.521Z
CVE-2023-1643 IObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of service
A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulnerability is the function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224023.
Problem types: cwe_id: CWE-404
description: CWE-404 Denial of Service
Affected products: vendor: IObit
product: Malware Fighter
CVSS v3.1: version: 3.1
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
baseSeverity: MEDIUM
Credits: lang: en
value: Zeze7w (VulDB User)
Published: 2023-03-26T21:31:04.496Z