stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2023-21590 (severity: HIGH, weakness: CWE-787)
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21591 (severity: MEDIUM, weakness: CWE-125)
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21592 (severity: MEDIUM, weakness: CWE-125)
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21593 (severity: MEDIUM, weakness: CWE-476)
Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21594 (severity: HIGH, weakness: CWE-122)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21595 (severity: HIGH, weakness: CWE-787)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21596 (severity: HIGH, weakness: CWE-20)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21597 (severity: HIGH, weakness: CWE-787)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21598 (severity: MEDIUM, weakness: CWE-416)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21599 (severity: MEDIUM, weakness: CWE-125)
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-2160 (severity: CRITICAL, weakness: CWE-521)
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
CVE-2023-21601 (severity: MEDIUM, weakness: CWE-416)
Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21603 (severity: MEDIUM, weakness: CWE-125)
Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21604 (severity: HIGH, weakness: CWE-121)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21605 (severity: HIGH, weakness: CWE-122)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21606 (severity: HIGH, weakness: CWE-787)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21607 (severity: HIGH, weakness: CWE-20)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21608 (severity: HIGH, weakness: CWE-416)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21609 (severity: HIGH, weakness: CWE-787)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-2161 (severity: MEDIUM, weakness: CWE-611)
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized read access to the file system when a malicious configuration file is loaded on to the software by a local user.
CVE-2023-21610 (severity: HIGH, weakness: CWE-121)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21611 (severity: HIGH, weakness: CWE-379)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21612 (severity: HIGH, weakness: CWE-379)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21613 (severity: MEDIUM, weakness: CWE-125)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21614 (severity: MEDIUM, weakness: CWE-125)
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21615 (severity: MEDIUM, weakness: CWE-79)
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVE-2023-21616 (severity: MEDIUM, weakness: CWE-79)
Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
CVE-2023-21618 (severity: HIGH, weakness: CWE-824)
Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21619 (severity: HIGH, weakness: CWE-787)
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-2162 (severity: MEDIUM, weakness: CWE-416)
A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an attacker could leak kernel internal information.
CVE-2023-21620 (severity: MEDIUM, weakness: CWE-125)
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21621 (severity: HIGH, weakness: CWE-20)
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21622 (severity: HIGH, weakness: CWE-787)
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2023-21624 (severity: MEDIUM, weakness: CWE-200)
Information disclosure in DSP Services while loading dynamic module.
CVE-2023-21625 (severity: HIGH, weakness: CWE-126)
Information disclosure in Network Services due to buffer over-read while the device receives DNS response.
CVE-2023-21626 (severity: HIGH, weakness: CWE-320)
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
CVE-2023-21627 (severity: HIGH, weakness: CWE-20)
Memory corruption in Trusted Execution Environment while calling service API with invalid address.
CVE-2023-21628 (severity: HIGH, weakness: CWE-119)
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
CVE-2023-21629 (severity: MEDIUM, weakness: CWE-415)
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
CVE-2023-2163 (severity: HIGH, weakness: CWE-682)
Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
CVE-2023-21630 (severity: HIGH, weakness: CWE-191)
Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.
CVE-2023-21631 (severity: CRITICAL, weakness: CWE-20)
Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
CVE-2023-21632 (severity: HIGH, weakness: CWE-121)
Memory corruption in Automotive GPU while querying a gsl memory node.
CVE-2023-21633 (severity: HIGH, weakness: CWE-119)
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
CVE-2023-21634 (severity: HIGH, weakness: CWE-119)
Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.
CVE-2023-21635 (severity: HIGH, weakness: CWE-120)
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
CVE-2023-21636 (severity: HIGH, weakness: CWE-129)
Memory Corruption due to improper validation of array index in Linux while updating adn record.
CVE-2023-21637 (severity: HIGH, weakness: CWE-119)
Memory corruption in Linux while calling system configuration APIs.
CVE-2023-21638 (severity: HIGH, weakness: CWE-704)
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.
CVE-2023-21639 (severity: HIGH, weakness: CWE-120)
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
CVE-2023-2164 (severity: MEDIUM, weakness: CWE-79)
An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to trigger a stored XSS vulnerability via user interaction with a crafted URL in the WebIDE beta.
CVE-2023-21640 (severity: HIGH, weakness: CWE-120)
Memory corruption in Linux when the file upload API is called with parameters having large buffer.
CVE-2023-21641 (severity: HIGH, weakness: CWE-264)
An app with non-privileged access can change global system brightness and cause undesired system behavior.
CVE-2023-21642 (severity: HIGH, weakness: CWE-284)
Memory corruption in HAB Memory management due to broad system privileges via physical address.
CVE-2023-21643 (severity: HIGH, weakness: CWE-822)
Memory corruption due to untrusted pointer dereference in automotive during system call.
CVE-2023-21644 (severity: HIGH, weakness: CWE-680)
Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
CVE-2023-21646 (severity: HIGH, weakness: CWE-617)
Transient DOS in Modem while processing invalid System Information Block 1.
CVE-2023-21647 (severity: MEDIUM, weakness: CWE-20)
Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.
CVE-2023-21648 (severity: HIGH, weakness: CWE-680)
Memory corruption in RIL while trying to send apdu packet.
CVE-2023-21649 (severity: HIGH, weakness: CWE-120)
Memory corruption in WLAN while running doDriverCmd for an unspecific command.
CVE-2023-21650 (severity: HIGH, weakness: CWE-129)
Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
CVE-2023-21651 (severity: HIGH, weakness: CWE-704)
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
CVE-2023-21652 (severity: HIGH, weakness: CWE-320)
Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
CVE-2023-21653 (severity: HIGH, weakness: CWE-617)
Transient DOS in Modem while processing RRC reconfiguration message.
CVE-2023-21654 (severity: HIGH, weakness: CWE-119)
Memory corruption in Audio during playback session with audio effects enabled.
CVE-2023-21655 (severity: HIGH, weakness: CWE-190)
Memory corruption in Audio while validating and mapping metadata.
CVE-2023-21656 (severity: HIGH, weakness: CWE-20)
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
CVE-2023-21657 (severity: HIGH, weakness: CWE-20)
Memoru corruption in Audio when ADSP sends input during record use case.
CVE-2023-21658 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
CVE-2023-21659 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while processing frames with missing header fields.
CVE-2023-2166 (severity: MEDIUM, weakness: CWE-476)
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
CVE-2023-21660 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while parsing FT Information Elements.
CVE-2023-21661 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing WLAN beacon or probe-response frame.
CVE-2023-21662 (severity: HIGH, weakness: CWE-120)
Memory corruption in Core Platform while printing the response buffer in log.
CVE-2023-21663 (severity: HIGH, weakness: CWE-119)
Memory Corruption while accessing metadata in Display.
CVE-2023-21664 (severity: HIGH, weakness: CWE-120)
Memory Corruption in Core Platform while printing the response buffer in log.
CVE-2023-21665 (severity: HIGH, weakness: CWE-704)
Memory corruption in Graphics while importing a file.
CVE-2023-21666 (severity: HIGH, weakness: CWE-401)
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
CVE-2023-21667 (severity: MEDIUM, weakness: CWE-126)
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
CVE-2023-21669 (severity: HIGH, weakness: CWE-126)
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
CVE-2023-21670 (severity: HIGH, weakness: CWE-284)
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
CVE-2023-21671 (severity: HIGH, weakness: CWE-20)
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
CVE-2023-21672 (severity: HIGH, weakness: CWE-416)
Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
CVE-2023-21673 (severity: HIGH, weakness: CWE-284)
Improper Access to the VM resource manager can lead to Memory Corruption.
CVE-2023-21674 (severity: HIGH, weakness: CWE-416)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2023-21675 (severity: HIGH, weakness: CWE-843)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21676 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2023-21677 (severity: HIGH, weakness: CWE-822)
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21678 (severity: HIGH, weakness: CWE-59)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2023-21679 (severity: HIGH, weakness: CWE-416)
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-2168 (severity: MEDIUM, weakness: NVD-CWE-Other)
The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2023-21680 (severity: HIGH, weakness: CWE-416)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2023-21681 (severity: HIGH, weakness: CWE-191)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-21682 (severity: MEDIUM, weakness: CWE-125)
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
CVE-2023-21683 (severity: HIGH, weakness: CWE-476)
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2023-21684 (severity: HIGH, weakness: CWE-191)
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-21685 (severity: HIGH, weakness: CWE-20)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-21686 (severity: HIGH, weakness: CWE-190)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-21687 (severity: MEDIUM, weakness: CWE-125)
HTTP.sys Information Disclosure Vulnerability
CVE-2023-21688 (severity: HIGH, weakness: CWE-416)
NT OS Kernel Elevation of Privilege Vulnerability
CVE-2023-21689 (severity: CRITICAL, weakness: CWE-122)
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-2169 (severity: MEDIUM, weakness: NVD-CWE-Other)
The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2023-21690 (severity: CRITICAL, weakness: CWE-122)
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21691 (severity: HIGH, weakness: CWE-125)
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
CVE-2023-21692 (severity: CRITICAL, weakness: CWE-122)
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21693 (severity: MEDIUM, weakness: CWE-125)
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-21694 (severity: MEDIUM, weakness: CWE-122)
Windows Fax Service Remote Code Execution Vulnerability
CVE-2023-21695 (severity: HIGH, weakness: CWE-122)
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21697 (severity: MEDIUM, weakness: CWE-126)
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability
CVE-2023-21699 (severity: MEDIUM, weakness: CWE-125)
Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability