yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-29296: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to modify a minor functionality of another user's data. Exploitation of this issue does not require user interaction.
Key phrases: security feature bypass, incorrect authorization, feature bypass,
CVE-2023-29297: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction.
Key phrases: improper neutralization of special elements used in a template engine, arbitrary code execution
CVE-2023-29298: Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
Key phrases: Security feature bypass, improper access control, security feature bypass, exploitation, feature bypass,
CVE-2023-29299: Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Untrusted Search Path vulnerability that could lead to Application denial-of-service. An attacker could leverage this vulnerability if the default PowerShell Set-ExecutionPolicy is set to Unrestricted, making the attack complexity high. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: untrusted search path, application denial-of-service, denial of service
CVE-2023-2930: Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: use after free, heap corruption, convince
CVE-2023-29300: Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Key phrases: deserialization of untrusted data, arbitrary code execution
CVE-2023-29301: Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.
Key phrases: Security feature bypass, improper restriction of excessive authentication attempts, security feature bypass, confidentiality of the user, feature bypass,
CVE-2023-29302: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Key phrases: reflected cross-site scripting (xss), convince
CVE-2023-29303: Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, use after free, disclosure
CVE-2023-29304: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Key phrases: reflected cross-site scripting (xss), convince
CVE-2023-29305: Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Key phrases: reflected cross-site scripting (xss), convince
CVE-2023-29306: Adobe Connect versions 12.3 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Key phrases: reflected cross-site scripting (xss), convince
CVE-2023-29307: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
Key phrases: url redirection to untrusted site
CVE-2023-29308: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: out-of-bounds write, arbitrary code execution, out of bounds write
CVE-2023-29309: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-2931: Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)
Key phrases: use after free, heap corruption
CVE-2023-29310: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29311: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29312: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29313: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29314: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29315: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29316: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29317: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29318: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-29319: Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: bypass mitigations such as ASLR, out-of-bounds read, out of bounds read, disclosure
CVE-2023-2932: Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)
Key phrases: use after free, heap corruption
CVE-2023-29320: Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Violation of Secure Design Principles vulnerability that could result in arbitrary code execution in the context of the current user by bypassing the API blacklisting feature. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: violation of secure design principles, arbitrary code execution
CVE-2023-29321: Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Key phrases: use after free, arbitrary code execution
CVE-2023-29322: Adobe Experience Manager versions 6.5.16.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Key phrases: reflected cross-site scripting (xss), convince
CVE-2023-29323: ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address.
Key phrases: ascii_load_sockaddr
CVE-2023-29324: Windows MSHTML Platform Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows mshtml platform security feature bypass
CVE-2023-29325: Windows OLE Remote Code Execution Vulnerability
Key phrases: windows ole remote code execution
CVE-2023-29326: .NET Framework Remote Code Execution Vulnerability
Key phrases: .net framework remote code execution
CVE-2023-29328: Microsoft Teams Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-2933: Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)
Key phrases: use after free, heap corruption
CVE-2023-29330: Microsoft Teams Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29331: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Key phrases: denial of service
CVE-2023-29332: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-29333: Microsoft Access Denial of Service Vulnerability
Key phrases: access denial of service
CVE-2023-29334: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Key phrases: spoofing
CVE-2023-29335: Microsoft Word Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-29336: Win32k Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-29337: NuGet Client Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29338: Visual Studio Code Spoofing Vulnerability
Key phrases: visual studio code spoofing
CVE-2023-2934: Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: out of bounds memory access, heap corruption
CVE-2023-29340: AV1 Video Extension Remote Code Execution Vulnerability
Key phrases: video extension remote code execution
CVE-2023-29341: AV1 Video Extension Remote Code Execution Vulnerability
Key phrases: video extension remote code execution
CVE-2023-29343: SysInternals Sysmon for Windows Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-29344: Microsoft Office Remote Code Execution Vulnerability
Key phrases: microsoft office remote code execution
CVE-2023-29345: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-29346: NTFS Elevation of Privilege Vulnerability
Key phrases: ntfs elevation of privilege
CVE-2023-29347: Windows Admin Center Spoofing Vulnerability
Key phrases: spoofing
CVE-2023-29348: Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2023-29349: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-2935: Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: type confusion, heap corruption
CVE-2023-29350: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-29351: Windows Group Policy Elevation of Privilege Vulnerability
Key phrases: windows group policy elevation of privilege
CVE-2023-29352: Windows Remote Desktop Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows remote desktop security feature bypass
CVE-2023-29353: Sysinternals Process Monitor for Windows Denial of Service Vulnerability
Key phrases: windows denial of service
CVE-2023-29354: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, security feature bypass
CVE-2023-29355: DHCP Server Service Information Disclosure Vulnerability
Key phrases: dhcp server service information disclosure
CVE-2023-29356: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29357: Microsoft SharePoint Server Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-29358: Windows GDI Elevation of Privilege Vulnerability
Key phrases: windows gdi elevation of privilege
CVE-2023-29359: GDI Elevation of Privilege Vulnerability
Key phrases: gdi elevation of privilege
CVE-2023-2936: Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: type confusion, heap corruption
CVE-2023-29360: Microsoft Streaming Service Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-29361: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Key phrases: windows cloud files mini filter driver elevation of privilege
CVE-2023-29362: Remote Desktop Client Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29363: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29364: Windows Authentication Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2023-29365: Windows Media Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29366: Windows Geolocation Service Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29367: iSCSI Target WMI Provider Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29368: Windows Filtering Platform Elevation of Privilege Vulnerability
Key phrases: windows filtering platform elevation of privilege
CVE-2023-29369: Remote Procedure Call Runtime Denial of Service Vulnerability
Key phrases: remote procedure call runtime denial of service
CVE-2023-2937: Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
Key phrases: spoofing
CVE-2023-29370: Windows Media Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29371: Windows GDI Elevation of Privilege Vulnerability
Key phrases: windows gdi elevation of privilege
CVE-2023-29372: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29373: Microsoft ODBC Driver Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2023-29374: In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
Key phrases: execute arbitrary code, prompt injection attacks that can execute arbitrary code
CVE-2023-29375: An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.
Key phrases: dangerous file upload
CVE-2023-29376: An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potential XSS by privileged users in Sitefinity to media libraries.
Key phrases: xss
CVE-2023-2938: Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
Key phrases: spoofing
CVE-2023-29380: Warpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.
Key phrases: remote file deletion via directory traversal in top_dir_basenames
CVE-2023-29381: An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information via the password and 2FA parameters.
Key phrases: obtain sensitive information, escalate privileges and obtain sensitive information via the
CVE-2023-29382: An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.
Key phrases: execute arbitrary code, execute arbitrary code via the sfdc_preauth.jsp component
CVE-2023-29383: In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\\\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\\\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that "cat /etc/passwd" shows a rogue user account.
Key phrases: control characters, social-engineered denial of service, convince
CVE-2023-29384: Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin  JobWP.This issue affects WordPress Job Board and Recruitment Plugin  JobWP: from n/a through 2.0.
Key phrases: unrestricted upload of file with dangerous type
CVE-2023-29385: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <=2.6.2 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-29386: Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0.
Key phrases: unrestricted upload of file with dangerous type
CVE-2023-29387: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Julien Crego Manager for Icomoon plugin <=2.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-29388: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <=1.6.17 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-29389: Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated" messages via CAN Injection, as exploited in the wild in (for example) July 2022.
Key phrases: drive a vehicle by accessing the control CAN, can injection, exploited in the wild
CVE-2023-2939: Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. (Chromium security severity: Medium)
Key phrases: insufficient data validation, privilege escalation
CVE-2023-2940: Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Key phrases: bypass file access restrictions, convince
CVE-2023-29400: Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
Key phrases: injection of arbitrary attributes into tags
CVE-2023-29401: The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. For example, a filename of "setup.bat&quot;;x=.txt" will be sent as a file named "setup.bat". If the FileAttachment function is called with names provided by an untrusted source, this may permit an attacker to cause a file to be served with a name different than provided. Maliciously crafted attachment file name can modify the Content-Disposition header.
CVE-2023-29402: The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which uses cgo. This may occur when running an untrusted module which contains directories with newline characters in their names. Modules which are retrieved using the go command, i.e. via "go get", are not affected (modules retrieved using GOPATH-mode, i.e. GO111MODULE=off, may be affected).
Key phrases: untrusted module
CVE-2023-29403: On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.
CVE-2023-29404: The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo LDFLAGS" directive. The arguments for a number of flags which are non-optional are incorrectly considered optional, allowing disallowed flags to be smuggled through the LDFLAGS sanitization. This affects usage of both the gc and gccgo compilers.
Key phrases: execute arbitrary code, be smuggled through the LDFLAGS sanitization, untrusted code, usage, run commands
CVE-2023-29405: The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo LDFLAGS" directive. Flags containing embedded spaces are mishandled, allowing disallowed flags to be smuggled through the LDFLAGS sanitization by including them in the argument of another flag. This only affects usage of the gccgo compiler.
Key phrases: execute arbitrary code, be smuggled through the LDFLAGS sanitization by including, untrusted code, run commands
CVE-2023-29406: The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVE-2023-29407: A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
Key phrases: cpu consumption, tiled image
CVE-2023-29408: The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height, and encoded size) to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU.
CVE-2023-29409: Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable.
Key phrases: breakage
CVE-2023-2941: Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low)
Key phrases: convince, spoofing
CVE-2023-29410: A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticatedattacker to gain the same privilege as the application on the server when a malicious payload isprovided over HTTP for the server to execute.  
Key phrases: gain the same privilege, gain the same privilege as the application on, cwe-20: improper input validation, gain privileges
CVE-2023-29411: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allowchanges to administrative credentials, leading to potential remote code execution withoutrequiring prior authentication on the Java RMI interface. 
Key phrases: cwe-306, remote code execution
CVE-2023-29412: A CWE-78: Improper Handling of Case Sensitivity vulnerability exists that could cause remotecode execution when manipulating internal methods through Java RMI interface. 
Key phrases: cwe-78, remotecode execution
CVE-2023-29413: A CWE-306: Missing Authentication for Critical Function vulnerability exists that could causeDenial-of-Service when accessed by an unauthenticated user on the Schneider UPS Monitorservice.  
Key phrases: cwe-306
CVE-2023-29414: A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerabilityexists that could cause user privilege escalation if a local user sends specific string input to alocal function call.
Key phrases: cwe-120, classic buffer overflow, user privilege escalation
CVE-2023-29415: An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A denial of service (process hang) can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.
Key phrases: denial of service (process hang)
CVE-2023-29416: An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3_decode_block out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.
Key phrases: out-of-bounds write, out of bounds write
CVE-2023-29417: An issue was discovered in libbzip3.a in bzip3 1.2.2. There is a bz3_decompress out-of-bounds read in certain situations where buffers passed to bzip3 do not contain enough space to be filled with decompressed data. NOTE: the vendor's perspective is that the observed behavior can only occur for a contract violation, and thus the report is invalid.
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-29418: An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an xwrite out-of-bounds read.
Key phrases: xwrite out-of-bounds read, out of bounds read
CVE-2023-29419: An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a bz3_decode_block out-of-bounds read.
Key phrases: out-of-bounds read, out of bounds read
CVE-2023-2942: Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1.
Key phrases: improper input validation
CVE-2023-29420: An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.
Key phrases: invalid memmove, crash
CVE-2023-29421: An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block.
Key phrases: out-of-bounds write, out of bounds write
CVE-2023-29423: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PI Websolution Cancel order request / Return order / Repeat Order / Reorder for WooCommerce plugin <=1.3.2 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-29424: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Plainware ShiftController Employee Shift Scheduling plugin <=4.9.23 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-29425: Cross-Site Request Forgery (CSRF) vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin <=4.9.23 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-29426: Cross-Site Request Forgery (CSRF) vulnerability in Robert Schulz (sprd.Net AG) Spreadshop plugin <=1.6.5 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-29427: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar  Amelia plugin <=1.0.75 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-29428: Cross-Site Request Forgery (CSRF) vulnerability in SuPlugins Superb Social Media Share Buttons and Follow Buttons for WordPress plugin <=1.1.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-2943: Code Injection in GitHub repository openemr/openemr prior to 7.0.1.
Key phrases: code injection
CVE-2023-29430: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <=1.0.3 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-29432: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme.This issue affects Houzez - Real Estate WordPress Theme: from n/a before 2.8.3.
Key phrases: sql command, sql injection
CVE-2023-29434: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in FancyThemes Optin Forms  Simple List Building Plugin for WordPress plugin <=1.3.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-29435: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Zwaply Cryptocurrency All-in-One plugin <=3.0.19 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-29436: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Flyn San IFrame Shortcode plugin <=1.0.5 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-29437: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Steven A. Zahm Connections Business Directory plugin <=10.4.36 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-29438: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Martin SimpleModal Contact Form (SMCF) plugin <=1.2.9 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-29439: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <=2.2.35 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-2944: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.
Key phrases: improper access control
CVE-2023-29440: Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Job Board plugin <=2.10.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-29441: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Robert Heller WebLibrarian plugin <=3.5.8.1 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-29442: Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS.
Key phrases: proxy.html DOM XSS, proxy.html dom xss
CVE-2023-29443: Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer before 6989 allow SDAdmin attackers to conduct XXE attacks via a crafted server that sends malformed XML from a Reports integration API endpoint.
Key phrases: conduct XXE attacks via a crafted server that, xxe
CVE-2023-29444: An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.
Key phrases: gain initial access, escalate privileges to SYSTEM, uncontrolled search path element, dll hijacking, code execution
CVE-2023-29445: An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.
Key phrases: escalate privileges to SYSTEM, uncontrolled search path element, dll hijacking
CVE-2023-29446: An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a malicious project file. This allows an adversary to capture NLTMv2 hashes and potentially crack them offline.
Key phrases: inject a UNC path via a malicious project, capture NLTMv2 hashes and potentially crack them offline, input validation, improper input validation
CVE-2023-29447: An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication.
Key phrases: capture user credentials as the web server uses
CVE-2023-29449: JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Preprocessing/webhook/global script configuration and testing are only available to Administrative roles (Admin and Superadmin). Administrative privileges should be typically granted to users who need to perform tasks that require more control over the system. The security risk is limited because not all users have this level of access.
CVE-2023-2945: Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1.
Key phrases: missing authorization
CVE-2023-29450: JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of user "zabbix") on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data.
Key phrases: gain access, javascript pre-processing, unauthorized access, sensitive data
CVE-2023-29451: Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server or a Zabbix Proxy.
Key phrases: buffer overrun, crash
CVE-2023-29452: Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field Attribution text when selected Other Tile provider.
Key phrases: using HTML in the field Attribution text when
CVE-2023-29453: Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g., "var a = {{.}}"), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml. With fix, Template. Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported but will be exported in the release of Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution.
Key phrases: injecting arbitrary Javascript code, this behavior
CVE-2023-29454:  Stored or persistent cross-site scripting (XSS) is a type of XSS where the attacker first sends the payload to the web application, then the application saves the payload (e.g., in a database or server-side text files), and finally, the application unintentionally executes the payload for every victim visiting its web pages.
CVE-2023-29455: Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script is activated through a link, which sends a request to a website with a vulnerability that enables execution of malicious scripts.
Key phrases: reflected xss, execution
CVE-2023-29456: URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards.
CVE-2023-29457: Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form fields, which can be sent as request to a website with a vulnerability that enables execution of malicious scripts.
Key phrases: reflected xss
CVE-2023-29458: Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too many values in valstack JavaScript will crash. This issue occurs due to bug in Duktape 2.6 which is an 3rd-party solution that we use.
Key phrases: crash
CVE-2023-29459: The laola.redbull application through 5.1.9-R for Android exposes the exported activity at.redbullsalzburg.android.AppMode.Default.Splash.SplashActivity, which accepts a data: URI. The target of this URI is subsequently loaded into the application's webview, thus allowing the loading of arbitrary content into the context of the application. This can occur via the fcrbs schema or an explicit intent invocation.
Key phrases: the loading of arbitrary content into the context
CVE-2023-2946: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.
Key phrases: improper access control
CVE-2023-29460: An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow potentiallyresulting in a complete loss of confidentiality, integrity, and availability.
Key phrases: commit unauthorized arbitrary code to the software by, arbitrary code execution, memory buffer overflow, complete loss of confidentiality, integrity, and availability, confidentiality and integrity, integrity and availability
CVE-2023-29461: An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow in the heap.  potentiallyresulting in a complete loss of confidentiality, integrity, and availability.
Key phrases: commit unauthorized arbitrary code to the software by, arbitrary code execution, memory buffer overflow, complete loss of confidentiality, integrity, and availability, confidentiality and integrity, integrity and availability
CVE-2023-29462: An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow in the heap.  potentiallyresulting in a complete loss of confidentiality, integrity, and availability.
Key phrases: commit unauthorized arbitrary code to the software by, arbitrary code execution, memory buffer overflow, complete loss of confidentiality, integrity, and availability, confidentiality and integrity, integrity and availability
CVE-2023-29463: The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users session data and or log users out of their session.
CVE-2023-29464: FactoryTalk Linx, in the Rockwell Automation PanelView Plus, allows an unauthenticated threat actor to read data from memory via crafted malicious packets. Sending a size larger than the buffer size results in leakage of data from memory resulting in an information disclosure. If the size is large enough, it causes communications over the common industrial protocol to become unresponsive to any type of packet, resulting in a denial-of-service to FactoryTalk Linx over the common industrial protocol.
Key phrases: read data from memory via crafted malicious packets, leakage of data, information disclosure, denial-of-service, denial of service
CVE-2023-29465: SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privileges of a different user (who is running FlintQS).
Key phrases: overwrite files with the privileges of a different, world-writable
CVE-2023-29468: The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote code execution. This affects WILINK8-WIFI-MCP8 version 8.5_SP3 and earlier.
Key phrases: buffer overflow, remote code execution
CVE-2023-29469: An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the '\\\\0' value).
Key phrases: double free
CVE-2023-2947: Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.
Key phrases: cross-site scripting (xss)
CVE-2023-29471: Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials (if plain cleartext login is configured). This occurs in akka.kafka.internal.KafkaConsumerActor.
Key phrases: plain cleartext login
CVE-2023-29473: webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.
Key phrases: run arbitrary commands, run arbitrary commands on the platform operating system, administrative access
CVE-2023-29474: inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552.
Key phrases: run arbitrary commands, run arbitrary commands on the platform operating system, administrative access
CVE-2023-29475: inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543.
Key phrases: run arbitrary commands, run arbitrary commands on the platform operating system, administrative access