yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-33109: Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
Key phrases: transient dos, wmi listen start command
CVE-2023-3311: A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231807.
Key phrases: cross site scripting, cross-site scripting
CVE-2023-33110: The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
Key phrases: race condition, memory corruption
CVE-2023-33111: Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
Key phrases: information disclosure
CVE-2023-33112: Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
Key phrases: transient dos
CVE-2023-33113: Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Key phrases: memory corruption
CVE-2023-33114: Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Key phrases: memory corruption
CVE-2023-33115: Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
Key phrases: memory corruption
CVE-2023-33116: Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
Key phrases: transient dos
CVE-2023-33117: Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.
Key phrases: memory corruption
CVE-2023-33118: Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
Key phrases: memory corruption
CVE-2023-3312: A vulnerability was found in drivers/cpufreq/qcom-cpufreq-hw.c in cpufreq subsystem in the Linux Kernel. This flaw, during device unbind will lead to double release problem leading to denial of service.
Key phrases: double release problem, denial of service
CVE-2023-33120: Memory corruption in Audio when memory map command is executed consecutively in ADSP.
Key phrases: memory corruption
CVE-2023-33121: A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Key phrases: null pointer dereference, denial of service condition, crash
CVE-2023-33122: A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted CGM file. This vulnerability could allow an attacker to disclose sensitive information.
Key phrases: disclose sensitive information, out of bounds read
CVE-2023-33123: A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
Key phrases: execute code in the context of the current, out of bounds read
CVE-2023-33124: A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a memory corruption vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.
Key phrases: execute code in the context of the current, memory corruption
CVE-2023-33126: .NET and Visual Studio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-33127: .NET and Visual Studio Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-33128: .NET and Visual Studio Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-33129: Microsoft SharePoint Denial of Service Vulnerability
Key phrases: microsoft sharepoint denial of service
CVE-2023-3313: An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system command injection for the purpose of privilege escalation or to execute arbitrary commands.
Key phrases: execute arbitrary commands, os common injection, system command injection, privilege escalation
CVE-2023-33130: Microsoft SharePoint Server Spoofing Vulnerability
Key phrases: microsoft sharepoint server spoofing
CVE-2023-33131: Microsoft Outlook Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-33132: Microsoft SharePoint Server Spoofing Vulnerability
Key phrases: microsoft sharepoint server spoofing
CVE-2023-33133: Microsoft Excel Remote Code Execution Vulnerability
Key phrases: microsoft excel remote code execution
CVE-2023-33134: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-33135: .NET and Visual Studio Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-33136: Azure DevOps Server Remote Code Execution Vulnerability
Key phrases: azure devops server remote code execution
CVE-2023-33137: Microsoft Excel Remote Code Execution Vulnerability
Key phrases: microsoft excel remote code execution
CVE-2023-33139: Visual Studio Information Disclosure Vulnerability
Key phrases: visual studio information disclosure
CVE-2023-3314: A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.
Key phrases: execute arbitrary commands, obtain control of the .zip application to execute arbitrary commands, obtain elevation of system privileges
CVE-2023-33140: Microsoft OneNote Spoofing Vulnerability
Key phrases: microsoft onenote spoofing
CVE-2023-33141: Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability
Key phrases: reverse proxy (yarp), denial of service
CVE-2023-33142: Microsoft SharePoint Server Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-33143: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-33144: Visual Studio Code Spoofing Vulnerability
Key phrases: visual studio code spoofing
CVE-2023-33145: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-33146: Microsoft Office Remote Code Execution Vulnerability
Key phrases: microsoft office remote code execution
CVE-2023-33148: Microsoft Office Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-33149: Microsoft Office Graphics Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-3315: Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Key phrases: check for the existence of an attacker-, missing permission checks
CVE-2023-33150: Microsoft Office Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-33151: Microsoft Outlook Spoofing Vulnerability
Key phrases: spoofing
CVE-2023-33152: Microsoft ActiveX Remote Code Execution Vulnerability
Key phrases: microsoft activex remote code execution
CVE-2023-33153: Microsoft Outlook Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-33154: Windows Partition Management Driver Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-33155: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Key phrases: windows cloud files mini filter driver elevation of privilege
CVE-2023-33156: Microsoft Defender Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-33157: Microsoft SharePoint Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-33158: Microsoft Excel Remote Code Execution Vulnerability
Key phrases: microsoft excel remote code execution
CVE-2023-33159: Microsoft SharePoint Server Spoofing Vulnerability
Key phrases: microsoft sharepoint server spoofing
CVE-2023-3316: A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
Key phrases: null pointer dereference
CVE-2023-33160: Microsoft SharePoint Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-33161: Microsoft Excel Remote Code Execution Vulnerability
Key phrases: microsoft excel remote code execution
CVE-2023-33162: Microsoft Excel Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-33163: Windows Network Load Balancing Remote Code Execution Vulnerability
Key phrases: windows network load balancing remote code execution
CVE-2023-33164: Remote Procedure Call Runtime Denial of Service Vulnerability
Key phrases: remote procedure call runtime denial of service
CVE-2023-33165: Microsoft SharePoint Server Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-33166: Remote Procedure Call Runtime Denial of Service Vulnerability
Key phrases: remote procedure call runtime denial of service
CVE-2023-33167: Remote Procedure Call Runtime Denial of Service Vulnerability
Key phrases: remote procedure call runtime denial of service
CVE-2023-33168: Remote Procedure Call Runtime Denial of Service Vulnerability
Key phrases: remote procedure call runtime denial of service
CVE-2023-33169: Remote Procedure Call Runtime Denial of Service Vulnerability
Key phrases: remote procedure call runtime denial of service
CVE-2023-3317: A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem.
Key phrases: crash the system after 'features' memory, use-after-free flaw, kernel information leak, use after free, crash system
CVE-2023-33170: ASP.NET and Visual Studio Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-33171: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Key phrases: cross-site scripting
CVE-2023-33172: Remote Procedure Call Runtime Denial of Service Vulnerability
Key phrases: remote procedure call runtime denial of service
CVE-2023-33173: Remote Procedure Call Runtime Denial of Service Vulnerability
Key phrases: remote procedure call runtime denial of service
CVE-2023-33174: Windows Cryptographic Information Disclosure Vulnerability
Key phrases: windows cryptographic information disclosure
CVE-2023-33175: ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.
CVE-2023-33176: BigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery (SSRF) vulnerability. In an `insertDocument` API request the user is able to supply a URL from which the presentation should be downloaded. This URL was being used without having been successfully validated first. An update to the `followRedirect` method in the `PresentationUrlDownloadService` has been made to validate all URLs to be used for presentation download. Two new properties `presentationDownloadSupportedProtocols` and `presentationDownloadBlockedHosts` have also been added to `bigbluebutton.properties` to allow administrators to define what protocols a URL must use and to explicitly define hosts that a presentation cannot be downloaded from. All URLs passed to `insertDocument` must conform to the requirements of the two previously mentioned properties. Additionally, these URLs must resolve to valid addresses, and these addresses must not be local or loopback addresses. There are no workarounds. Users are advised to upgrade to a patched version of BigBlueButton.
Key phrases: define what protocols a URL must use and, server-side request forgery (ssrf)
CVE-2023-33177: Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outside of the CMS library directory as the webserver user. This can be used to upload a PHP webshell inside the web root directory and achieve remote code execution as the webserver user. Users should upgrade to version 2.3.17 or 3.3.5, which fix this issue. Customers who host their CMS with Xibo Signage have already received an upgrade or patch to resolve this issue regardless of the CMS version that they are running.
Key phrases: upload a PHP webshell inside the web root, path traversal, remote code execution, file upload
CVE-2023-33178: Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API route inside the CMS starting in version 1.4.0 and prior to versions 2.3.17 and 3.3.5. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the `filter` parameter. Values allowed in the filter parameter are checked against a deny list of commands that should not be allowed, however this checking was done in a case sensitive manor and so it is possible to bypass these checks by using unusual case combinations. Users should upgrade to version 2.3.17 or 3.3.5, which fix this issue. There are no workarounds aside from upgrading.
Key phrases: bypass these checks, exfiltrate data from the Xibo database by injecting, sql injection, unusual case combinations
CVE-2023-33179: Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.5 in the `nameFilter` function used throughout the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values for logical operators. Users should upgrade to version 3.3.5 which fixes this issue. There are no known workarounds aside from upgrading.
Key phrases: exfiltrate data from the Xibo database by injecting, sql injection
CVE-2023-3318: A vulnerability was found in SourceCodester Resort Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231937 was assigned to this vulnerability.
Key phrases: cross site scripting
CVE-2023-33180: Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.2 in the `/display/map` API route inside the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the `bounds` parameter. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.
Key phrases: exfiltrate data from the Xibo database by injecting, sql injection
CVE-2023-33181: Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace when called with missing or invalid parameters revealing sensitive information about the locations of paths that the server is using. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.
Key phrases: sensitive information
CVE-2023-33182: Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is converted to a JavaScript blob (in memory data) that the Avatar can't render. Due to this constellation the missing sanitization does not seem to be exploitable. It is recommended that the Contacts app is upgraded to 5.0.3 or 4.2.4
Key phrases: a JavaScript blob (in memory data), exploitable
CVE-2023-33183: Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4.2.3
Key phrases: internal paths
CVE-2023-33184: Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.
Key phrases: ssrf
CVE-2023-33185: Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests are signed by AWS and are verified by django_ses, however the verification of this signature was found to be flawed as it allowed users to specify arbitrary public certificates. This issue was patched in version 3.5.0.
Key phrases: arbitrary public certificates
CVE-2023-33186: Zulip is an open-source team collaboration tool with unique topic-based threading that combines the best of email and chat to make remote work productive and delightful. The main development branch of Zulip Server from May 2, 2023 and later, including beta versions 7.0-beta1 and 7.0-beta2, is vulnerable to a cross-site scripting vulnerability in tooltips on the message feed. An attacker who can send messages could maliciously craft a topic for the message, such that a victim who hovers the tooltip for that topic in their message feed triggers execution of JavaScript code controlled by the attacker.
Key phrases: cross-site scripting
CVE-2023-33187: Highlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when a password html input is switched to `type="text"` via a javascript "Show Password" button. This differs from the expected behavior which always obfuscates `type="password"` inputs. A customer may assume that switching to `type="text"` would also not record this input; hence, they would not add additional `highlight-mask` css-class obfuscation to this part of the DOM, resulting in unintentional recording of a password value when a `Show Password` button is used. This issue was patched in version 6.0.0.This patch tracks changes to the `type` attribute of an input to ensure an input that used to be a `type="password"` continues to be obfuscated. 
Key phrases: unintentional recording
CVE-2023-33188: Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path validation vulnerability when displaying the details of a note received through an externally-provided intent. The paths of the note's attachments were not properly validated, allowing malicious or compromised applications in the same device to force Omni-notes to copy files from its internal storage to its external storage directory, where they would have become accessible to any component with permission to read the external storage. Updating to the newest version (6.2.7) of Omni-notes Android fixes this vulnerability.
Key phrases: force Omni-notes to copy files from, insufficient path validation
CVE-2023-33189: Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.
Key phrases: incorrect authorization decisions
CVE-2023-3319: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iDisplay PlatPlay DS allows Stored XSS.This issue affects PlatPlay DS: before 3.14.
Key phrases: Stored XSS.This issue affects PlatPlay DS: before, improper neutralization of input during web page generation, cross-site scripting, stored xss
CVE-2023-33190: Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluster control permissions, which could control the entire cluster deployed with Sealos, as well as hundreds of pods and other resources within the cluster. This issue has been addressed in version 4.2.1-rc4. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: obtain cluster control permissions
CVE-2023-33191: Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validate.podSecurity` subrule in Kyverno 1.9.2 and 1.9.3 are vulnerable. This issue was patched in version 1.9.4.
CVE-2023-33192: ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes when it is not configured to handle NTS packets. The issue was caused by improper slice indexing. The indexing operations were replaced by safer alternatives that do not crash the ntpd-rs server process but instead properly handle the error condition. A patch was released in version 0.3.3.
Key phrases: crash
CVE-2023-33193: Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system, depending on certain user account settings. By spoofing certain headers which are intended for interoperation with reverse proxy servers, it may be possible to affect the local/non-local network determination to allow logging in without password or to view a list of user accounts which may have no password configured. Impacted are all Emby Server system which are publicly accessible and where the administrator hasn't tightened the account login configuration for administrative users. This issue has been patched in Emby Server Beta version 4.8.31 and Emby Server version 4.7.12.
Key phrases: an Emby Server system, view a list of user accounts which may, spoofing
CVE-2023-33194: Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload. Old CVE fixed the XSS in label HTML but didnt fix it when clicking save. This issue was patched in version 4.4.6.
Key phrases: xss payload
CVE-2023-33195: Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6.
Key phrases: xss payload
CVE-2023-33196: Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. This issue has been fixed in version 4.4.7.
Key phrases: cross site scripting (xss), review volumes
CVE-2023-33197: Craft is a CMS for creating custom digital experiences on the web. Cross-site scripting (XSS) can be triggered via the Update Asset Index utility. This issue has been patched in version 4.4.6.
Key phrases: cross-site scripting (xss)
CVE-2023-33198: tgstation-server is a production scale tool for BYOND server management. The DreamMaker API (DMAPI) chat channel cache can possibly be poisoned by a tgstation-server (TGS) restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the instance on enabled chat bots. This lasts until the instance's chat channels are updated in TGS or DreamDaemon is restarted. TGS chat commands are unaffected, custom or otherwise.
Key phrases: poisoned
CVE-2023-33199: Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of the `intoto/v0.0.2` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal. This has been fixed in v1.2.0 of Rekor. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Key phrases: malformed proposed entry, availability impact
CVE-2023-3320: The WP Sticky Social  plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing nonce validation in the ~/admin/views/admin.php file. This makes it possible for unauthenticated attackers to modify the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Key phrases: cross-site request forgery
CVE-2023-33200: A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the systems memory is carefully prepared by the user, then this in turn could give them access to already freed memory.
Key phrases: software race condition, access
CVE-2023-33201: Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation process, Bouncy Castle inserts the certificate's Subject Name into an LDAP search filter without any escaping, which leads to an LDAP injection vulnerability.
Key phrases: ldap injection
CVE-2023-33202: Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, and PKCS7 objects. Parsing a file that has crafted ASN.1 data through the PEMParser causes an OutOfMemoryError, which can enable a denial of service attack. (For users of the FIPS Java API: BC-FJA 1.0.2.3 and earlier are affected; BC-FJA 1.0.2.4 is fixed.)
Key phrases: Denial of Service (DoS), denial of service (dos) issue
CVE-2023-33203: The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker unplugs an emac based device.
Key phrases: race condition, use-after-free, use after free
CVE-2023-33204: sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix for CVE-2022-39377.
Key phrases: a multiplication integer overflow in check_overflow in common.c
CVE-2023-33207: Cross-Site Request Forgery (CSRF) vulnerability in Krzysztof Wielogrski Stop Referrer Spam plugin <=1.3.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-33208: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gsmith Cookie Monster plugin <=1.51 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-33209: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CrawlSpider SEO Change Monitor  Track Website Changes.This issue affects SEO Change Monitor  Track Website Changes: from n/a through 1.2.
Key phrases: sql injection
CVE-2023-3321: A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially craftedprograms to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.This issue affects ABB Ability zenon: from 11 build through 11 build 106404.
Key phrases: read and update the data in various directories, run on the zenon installed hosts
CVE-2023-33210: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nuajik plugin <=0.1.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-33211: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Andr Brkling WP-Matomo Integration (WP-Piwik) plugin <=1.0.27 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-33212: Cross-Site Request Forgery (CSRF) vulnerability in Crocoblock JetFormBuilder  Dynamic Blocks Form Builder plugin <=3.0.6 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-33213: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Display Custom Fields  wpView plugin <=1.3.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-33214: Cross-Site Request Forgery (CSRF) vulnerability in Tagbox Tagbox  UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox  UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1.
Key phrases: cross-site request forgery (csrf)
CVE-2023-33216: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gVectors Team WooDiscuz  WooCommerce Comments woodiscuz-woocommerce-comments allows Stored XSS.This issue affects WooDiscuz  WooCommerce Comments: from n/a through 2.2.9.
Key phrases: Stored XSS.This issue affects WooDiscuz  WooCommerce Comments, stored cross-site scripting (xss), stored xss
CVE-2023-33217: By abusing a design flaw in the firmware upgrade mechanism of the impacted terminal it's possible to cause a permanent denial of service for the terminal. the only way to recover the terminal is by sending back the terminal to the manufacturer
Key phrases: design flaw, permanent denial of service
CVE-2023-33218: The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This could potentially lead to a Remote Code execution on the targeted device.
Key phrases: a Remote Code execution on the targeted device, stack buffer overflow, remote code execution
CVE-2023-33219: The handler of the retrofit validation command doesn't properly check the boundaries when performing certain validation operations. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device
Key phrases: a potential Remote Code Execution on the targeted, stack-based buffer overflow, remote code execution, stack based buffer overflow
CVE-2023-3322: A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially craftedprograms to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.This issue affects ABB Ability zenon: from 11 build through 11 build 106404.
Key phrases: read and update the data in various directories, run on the zenon installed hosts
CVE-2023-33220: During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device
Key phrases: a potential Remote Code Execution on the targeted, stack-based buffer overflow, remote code execution, stack based buffer overflow
CVE-2023-33221: When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying internally the data received. This allows a heap based buffer overflow that could lead to a potential Remote Code Execution on the targeted device. This is especially problematic if you use Default DESFire key.
Key phrases: a potential Remote Code Execution on the targeted, heap based buffer overflow, remote code execution, problematic
CVE-2023-33222: When handling contactless cards, usage of a specific function to get additional information from the card which doesn't check the boundary on the data received while reading. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device
Key phrases: a potential Remote Code Execution on the targeted, stack-based buffer overflow, remote code execution, stack based buffer overflow
CVE-2023-33224: The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
Key phrases: execute arbitrary commands, SolarWinds Web Console to execute arbitrary commands with, incorrect behavior order
CVE-2023-33225: The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.
Key phrases: execute arbitrary commands, SolarWinds Web Console to execute arbitrary commands with, incorrect comparison
CVE-2023-33226: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability.  This vulnerability allows a low-level user to perform the actions with SYSTEM privileges.  
Key phrases: perform the actions with SYSTEM privileges, directory traversal remote code execution, system privileges
CVE-2023-33227: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges.  
Key phrases: perform the actions with SYSTEM privileges, directory traversal remote code execution, system privileges
CVE-2023-33228: The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.
Key phrases: obtain sensitive information, SolarWinds Web Console to obtain sensitive information, exposure of sensitive information
CVE-2023-33229: The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML. 
Key phrases: append URL parameters to inject passive HTML, incorrect input neutralization
CVE-2023-3323: A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially craftedprograms to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.This issue affects ABB Ability zenon: from 11 build through 11 build 106404.
Key phrases: read and update the data in various directories, run on the zenon installed hosts
CVE-2023-33231: XSS attack was possible in DPA 2023.2 due to insufficient input validation
Key phrases: xss, insufficient input validation
CVE-2023-33234: Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner. Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.
Key phrases: change xcom sidecar image and resources via Airflow, arbitrary code execution
CVE-2023-33235: MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrary code.
Key phrases: execute arbitrary code, command injection
CVE-2023-33236: MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.
Key phrases: craft arbitrary JWT tokens, bypass authentication, subsequently bypass, hardcoded credential, hardcoded credentials
CVE-2023-33237: TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API handler, allowing low-privileged APIs to execute restricted actions that only high-privileged APIs are allowed This presents a potential risk of unauthorized exploitation by malicious actors.
Key phrases: execute restricted actions that only high-privileged, improper-authentication, unauthorized exploitation, improper authentication
CVE-2023-33238: TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate input validation in the certificate management function, which could potentially allow malicious users to execute remote code on affected devices.
Key phrases: execute remote code on affected devices, command injection
CVE-2023-33239: TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Key phrases: execute remote code on affected devices, command injection, insufficient input validation
CVE-2023-3324: A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit the vulnerability by using specially craftedprograms to exploit the vulnerabilities by allowing them to run on the zenon installed hosts.This issue affects ABB Ability zenon: from 11 build through 11 build 106404.
Key phrases: read and update the data in various directories, run on the zenon installed hosts
CVE-2023-33240: Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and 10.1.11.37866 and earlier) on Windows allows Local Privilege Escalation when installed to a non-default directory because unprivileged users have access to an executable file of a system service. This is fixed in 12.1.2.
Key phrases: a non-default directory because unprivileged users, local privilege escalation
CVE-2023-33241: Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signatures or more fully exfiltrate the other parties' private key shares.
Key phrases: extract a full ECDSA private key by injecting, malicious pallier key
CVE-2023-33242: Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signature attempt (256 in total) because of not adhering to the paper's security proof's assumption regarding handling aborts after a failed signature.
Key phrases: extract the full ECDSA private key by exfiltrating
CVE-2023-33243: RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the password instead of the cleartext password. While storing password hashes instead of cleartext passwords in an application's database generally has become best practice to protect users' passwords in case of a database compromise, this is rendered ineffective when allowing to authenticate using the password hash.
Key phrases: protect users' passwords in case of a, authenticate using the password hash, database compromise, ineffective, cleartext password
CVE-2023-33244: Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page.
Key phrases: unintended APIs (for microphone access, unintended apis, camera access
CVE-2023-33245: Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.
Key phrases: allow arbitrary file overwrite, code execution
CVE-2023-33246: For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content.To prevent these attacks, users are recommended to upgrade to version 5.1.1 or abovefor using RocketMQ 5.xor 4.9.6 or above for using RocketMQ 4.x .
Key phrases: remote command execution, execute commands
CVE-2023-33247: Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed on the server. (A mitigation is that the remote harvesting server should be behind a firewall that only allows access to the Talend Data Catalog server.)
Key phrases: be deployed on the server, the Talend Data Catalog server, unauthenticated war file
CVE-2023-33248: Amazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices potentially allows attackers to deliver security-relevant commands via an audio signal between 16 and 22 kHz (often outside the range of human adult hearing). Commands at these frequencies are essentially never spoken by authorized actors, but a substantial fraction of the commands are successful.
Key phrases: deliver security-relevant commands via an audio, successful
CVE-2023-3325: The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated attackers to the plugin to change the '_cmsc_public_key' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation. This can only be exploited if the plugin has not been configured yet, however, if combined with another arbitrary plugin installation and activation vulnerability, the impact can be severe.
Key phrases: bypass due to the use of an insufficiently unique cryptographic signature, authorization bypass, privilege escalation, activation, severe
CVE-2023-33250: The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd/io_pagetable.c.
Key phrases: use-after-free, use after free
CVE-2023-33251: When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946.
Key phrases: file upload
CVE-2023-33252: iden3 snarkjs through 0.6.11 allows double spending because there is no validation that the publicSignals length is less than the field modulus.
Key phrases: double spending because there is no validation that
CVE-2023-33253: LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file (such as shell.jpg.php.shell) being sent.
Key phrases: insufficient validation of the file (such as, remote code execution
CVE-2023-33254: There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an authenticated attacker edits the user-authentication settings to specify an attacker-controlled LDAP server, clicks the Test Settings button, and captures the cleartext credentials.
Key phrases: ldap bind credentials
CVE-2023-33255: An issue was discovered in Papaya Viewer 1.0.1449. User-supplied input in form of DICOM or NIFTI images can be loaded into the Papaya web application without any kind of sanitization. This allows injection of arbitrary JavaScript code into image metadata, which is executed when that metadata is displayed in the Papaya web application.
Key phrases: injection of arbitrary JavaScript code into image metadata
CVE-2023-33257: Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.
Key phrases: html injection
CVE-2023-3326: pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the network, as a way to verify the password. However, if a keytab is not provisioned on the system, pam_krb5 has no way to validate the response from the KDC, and essentially trusts the tgt provided over the network as being valid. In a non-default FreeBSD installation that leverages pam_krb5 for authentication and does not have a keytab provisioned, an attacker that is able to control both the password and the KDC responses can return a valid tgt, allowing authentication to occur for any user on the system.
Key phrases: occur for any user on the system
CVE-2023-33263: In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006.