stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2023-33095 (severity: HIGH, weakness: CWE-617)
Transient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
CVE-2023-33096 (severity: HIGH, weakness: CWE-617)
Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
CVE-2023-33097 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while processing a FTMR frame.
CVE-2023-33098 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVE-2023-33099 (severity: HIGH, weakness: CWE-20)
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
CVE-2023-3310 (severity: HIGH, weakness: CWE-89)
A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue is some unknown functionality of the file loaddata.php. The manipulation of the argument subject/course leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-231806 is the identifier assigned to this vulnerability.
CVE-2023-33100 (severity: HIGH, weakness: CWE-20)
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
CVE-2023-33101 (severity: HIGH, weakness: CWE-704)
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
CVE-2023-33103 (severity: HIGH, weakness: CWE-20)
Transient DOS while processing CAG info IE received from NW.
CVE-2023-33104 (severity: HIGH, weakness: CWE-20)
Transient DOS while processing PDU Release command with a parameter PDU ID out of range.
CVE-2023-33105 (severity: HIGH, weakness: CWE-16)
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
CVE-2023-33106 (severity: HIGH, weakness: CWE-823)
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVE-2023-33107 (severity: HIGH, weakness: CWE-190)
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVE-2023-33108 (severity: HIGH, weakness: CWE-416)
Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.
CVE-2023-33109 (severity: HIGH, weakness: CWE-476)
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
CVE-2023-3311 (severity: MEDIUM, weakness: CWE-79)
A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231807.
CVE-2023-33110 (severity: HIGH, weakness: CWE-823)
The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
CVE-2023-33111 (severity: MEDIUM, weakness: CWE-129)
Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
CVE-2023-33112 (severity: HIGH, weakness: CWE-126)
Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
CVE-2023-33113 (severity: HIGH, weakness: CWE-120)
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
CVE-2023-33114 (severity: HIGH, weakness: CWE-416)
Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
CVE-2023-33115 (severity: HIGH, weakness: CWE-126)
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
CVE-2023-33116 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
CVE-2023-33117 (severity: HIGH, weakness: CWE-416)
Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.
CVE-2023-33118 (severity: HIGH, weakness: CWE-416)
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
CVE-2023-33119 (severity: HIGH, weakness: CWE-367)
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
CVE-2023-3312 (severity: HIGH, weakness: CWE-415)
A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double release problem leading to denial of service.
CVE-2023-33120 (severity: HIGH, weakness: CWE-416)
Memory corruption in Audio when memory map command is executed consecutively in ADSP.
CVE-2023-33121 (severity: MEDIUM, weakness: CWE-476)
A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVE-2023-33122 (severity: MEDIUM, weakness: CWE-125)
A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted CGM file. This vulnerability could allow an attacker to disclose sensitive information.
CVE-2023-33123 (severity: HIGH, weakness: CWE-125)
A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-33124 (severity: HIGH, weakness: CWE-119)
A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a memory corruption vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
CVE-2023-33126 (severity: HIGH, weakness: NVD-CWE-Other)
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-33127 (severity: HIGH, weakness: CWE-1220)
.NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-33128 (severity: HIGH, weakness: CWE-416)
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-33129 (severity: MEDIUM, weakness: CWE-122)
Microsoft SharePoint Server Denial of Service Vulnerability
CVE-2023-3313 (severity: HIGH, weakness: CWE-78)
An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system command injection for the purpose of privilege escalation or to execute arbitrary commands.
CVE-2023-33130 (severity: HIGH, weakness: CWE-79)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-33131 (severity: HIGH, weakness: CWE-94)
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-33132 (severity: MEDIUM, weakness: CWE-79)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-33133 (severity: HIGH, weakness: CWE-122)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33134 (severity: HIGH, weakness: CWE-502)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-33135 (severity: HIGH, weakness: NVD-CWE-Other)
.NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-33136 (severity: HIGH, weakness: CWE-77)
Azure DevOps Server Remote Code Execution Vulnerability
CVE-2023-33137 (severity: HIGH, weakness: CWE-415)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33139 (severity: MEDIUM, weakness: CWE-125)
Visual Studio Information Disclosure Vulnerability
CVE-2023-3314 (severity: HIGH, weakness: CWE-78)
A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.
CVE-2023-33140 (severity: MEDIUM, weakness: CWE-290)
Microsoft OneNote Spoofing Vulnerability
CVE-2023-33141 (severity: HIGH, weakness: CWE-400)
Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
CVE-2023-33142 (severity: MEDIUM, weakness: CWE-285)
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-33143 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-33144 (severity: MEDIUM, weakness: CWE-23)
Visual Studio Code Spoofing Vulnerability
CVE-2023-33145 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2023-33146 (severity: HIGH, weakness: CWE-122)
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-33148 (severity: HIGH, weakness: CWE-59)
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33149 (severity: HIGH, weakness: CWE-416)
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-3315 (severity: MEDIUM, weakness: CWE-862)
Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
CVE-2023-33150 (severity: CRITICAL, weakness: CWE-693)
Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-33151 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Outlook Spoofing Vulnerability
CVE-2023-33152 (severity: HIGH, weakness: CWE-122)
Microsoft ActiveX Remote Code Execution Vulnerability
CVE-2023-33153 (severity: HIGH, weakness: CWE-416)
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-33154 (severity: CRITICAL, weakness: CWE-367)
Windows Partition Management Driver Elevation of Privilege Vulnerability
CVE-2023-33155 (severity: HIGH, weakness: CWE-284)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-33156 (severity: HIGH, weakness: CWE-367)
Microsoft Defender Elevation of Privilege Vulnerability
CVE-2023-33157 (severity: HIGH, weakness: CWE-94)
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2023-33158 (severity: HIGH, weakness: CWE-191)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33159 (severity: HIGH, weakness: CWE-79)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-3316 (severity: MEDIUM, weakness: CWE-476)
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
CVE-2023-33160 (severity: HIGH, weakness: CWE-502)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-33161 (severity: HIGH, weakness: CWE-415)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33162 (severity: MEDIUM, weakness: CWE-125)
Microsoft Excel Information Disclosure Vulnerability
CVE-2023-33163 (severity: HIGH, weakness: CWE-591)
Windows Network Load Balancing Remote Code Execution Vulnerability
CVE-2023-33164 (severity: MEDIUM, weakness: CWE-125)
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33165 (severity: HIGH, weakness: CWE-200)
Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2023-33166 (severity: HIGH, weakness: CWE-126)
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33167 (severity: HIGH, weakness: CWE-126)
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33168 (severity: HIGH, weakness: CWE-126)
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33169 (severity: HIGH, weakness: CWE-126)
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-3317 (severity: HIGH, weakness: CWE-416)
A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem.
CVE-2023-33170 (severity: HIGH, weakness: CWE-362)
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
CVE-2023-33171 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-33172 (severity: HIGH, weakness: CWE-126)
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33173 (severity: HIGH, weakness: CWE-126)
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-33174 (severity: MEDIUM, weakness: CWE-200)
Windows Cryptographic Information Disclosure Vulnerability
CVE-2023-33175 (severity: HIGH, weakness: CWE-914)
ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.
CVE-2023-33176 (severity: MEDIUM, weakness: CWE-918)
BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery (SSRF) vulnerability. In an `insertDocument` API request the user is able to supply a URL from which the presentation should be downloaded. This URL was being used without having been successfully validated first. An update to the `followRedirect` method in the `PresentationUrlDownloadService` has been made to validate all URLs to be used for presentation download. Two new properties `presentationDownloadSupportedProtocols` and `presentationDownloadBlockedHosts` have also been added to `bigbluebutton.properties` to allow administrators to define what protocols a URL must use and to explicitly define hosts that a presentation cannot be downloaded from. All URLs passed to `insertDocument` must conform to the requirements of the two previously mentioned properties. Additionally, these URLs must resolve to valid addresses, and these addresses must not be local or loopback addresses. There are no workarounds. Users are advised to upgrade to a patched version of BigBlueButton.
CVE-2023-33177 (severity: HIGH, weakness: CWE-22)
Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outside of the CMS library directory as the webserver user. This can be used to upload a PHP webshell inside the web root directory and achieve remote code execution as the webserver user. Users should upgrade to version 2.3.17 or 3.3.5, which fix this issue. Customers who host their CMS with Xibo Signage have already received an upgrade or patch to resolve this issue regardless of the CMS version that they are running.
CVE-2023-33178 (severity: MEDIUM, weakness: CWE-89)
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API route inside the CMS starting in version 1.4.0 and prior to versions 2.3.17 and 3.3.5. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the `filter` parameter. Values allowed in the filter parameter are checked against a deny list of commands that should not be allowed, however this checking was done in a case sensitive manor and so it is possible to bypass these checks by using unusual case combinations. Users should upgrade to version 2.3.17 or 3.3.5, which fix this issue. There are no workarounds aside from upgrading.
CVE-2023-33179 (severity: MEDIUM, weakness: CWE-89)
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.5 in the `nameFilter` function used throughout the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values for logical operators. Users should upgrade to version 3.3.5 which fixes this issue. There are no known workarounds aside from upgrading.
CVE-2023-3318 (severity: MEDIUM, weakness: CWE-79)
A vulnerability was found in SourceCodester Resort Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231937 was assigned to this vulnerability.
CVE-2023-33180 (severity: MEDIUM, weakness: CWE-89)
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.2 in the `/display/map` API route inside the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the `bounds` parameter. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.
CVE-2023-33181 (severity: MEDIUM, weakness: CWE-209)
Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace when called with missing or invalid parameters revealing sensitive information about the locations of paths that the server is using. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.
CVE-2023-33182 (severity: MEDIUM, weakness: CWE-20)
Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is converted to a JavaScript blob (in memory data) that the Avatar can't render. Due to this constellation the missing sanitization does not seem to be exploitable. It is recommended that the Contacts app is upgraded to 5.0.3 or 4.2.4
CVE-2023-33183 (severity: MEDIUM, weakness: CWE-285)
Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4.2.3
CVE-2023-33184 (severity: MEDIUM, weakness: CWE-918)
Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.
CVE-2023-33185 (severity: MEDIUM, weakness: CWE-347)
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests are signed by AWS and are verified by django_ses, however the verification of this signature was found to be flawed as it allowed users to specify arbitrary public certificates. This issue was patched in version 3.5.0.
CVE-2023-33186 (severity: MEDIUM, weakness: CWE-79)
Zulip is an open-source team collaboration tool with unique topic-based threading that combines the best of email and chat to make remote work productive and delightful. The main development branch of Zulip Server from May 2, 2023 and later, including beta versions 7.0-beta1 and 7.0-beta2, is vulnerable to a cross-site scripting vulnerability in tooltips on the message feed. An attacker who can send messages could maliciously craft a topic for the message, such that a victim who hovers the tooltip for that topic in their message feed triggers execution of JavaScript code controlled by the attacker.
CVE-2023-33187 (severity: MEDIUM, weakness: CWE-319)
Highlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when a password html input is switched to `type="text"` via a javascript "Show Password" button. This differs from the expected behavior which always obfuscates `type="password"` inputs. A customer may assume that switching to `type="text"` would also not record this input; hence, they would not add additional `highlight-mask` css-class obfuscation to this part of the DOM, resulting in unintentional recording of a password value when a `Show Password` button is used. This issue was patched in version 6.0.0. This patch tracks changes to the `type` attribute of an input to ensure an input that used to be a `type="password"` continues to be obfuscated.
CVE-2023-33188 (severity: MEDIUM, weakness: CWE-441)
Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path validation vulnerability when displaying the details of a note received through an externally-provided intent. The paths of the note's attachments were not properly validated, allowing malicious or compromised applications in the same device to force Omni-notes to copy files from its internal storage to its external storage directory, where they would have become accessible to any component with permission to read the external storage. Updating to the newest version (6.2.7) of Omni-notes Android fixes this vulnerability.
CVE-2023-33189 (severity: CRITICAL, weakness: CWE-285)
Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.
CVE-2023-3319 (severity: MEDIUM, weakness: CWE-79)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iDisplay PlatPlay DS allows Stored XSS.This issue affects PlatPlay DS: before 3.14.
CVE-2023-33190 (severity: CRITICAL, weakness: CWE-287)
Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluster control permissions, which could control the entire cluster deployed with Sealos, as well as hundreds of pods and other resources within the cluster. This issue has been addressed in version 4.2.1-rc4. Users are advised to upgrade. There are no known workarounds for this vulnerability.