yahoo-inc/cve-impacts huggingface dataset:
CVE-2023-35648: In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
Key phrases: out of bounds read, missing bounds check, remote information disclosure
CVE-2023-35649: In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds write, missing bounds check, remote code execution
CVE-2023-3565: Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
Key phrases: cross-site scripting (xss)
CVE-2023-35652: In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
Key phrases: out of bounds read, missing bounds check, remote information disclosure
CVE-2023-35653: In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Key phrases: permissions bypass, local information disclosure, exploitation, permission bypass
CVE-2023-35654: In ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds read, incorrect bounds check, local escalation of privilege, escalation privilege
CVE-2023-35655: In CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds read, heap buffer overflow, local escalation of privilege, escalation privilege
CVE-2023-35656:  In multiple functions of protocolembmsadapter.cpp, there is a possible out    of bounds read due to a missing bounds check. This could lead to remote    information disclosure with no additional execution privileges needed. User    interaction is not needed for exploitation.
Key phrases: out of bounds read, missing bounds check, remote information disclosure
CVE-2023-35658: In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: privilege escalation, use after free, code execution
CVE-2023-3566: A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233359. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Key phrases: allocation of resources, disclosure
CVE-2023-35660: In lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Key phrases: use after free, local escalation of privilege, corrupt memory, escalation privilege
CVE-2023-35661: In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds read, missing bounds check, remote information disclosure
CVE-2023-35662: there is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds write, buffer overflow, remote code execution
CVE-2023-35663:   In Init of protocolnetadapter.cpp, there is a possible out of bounds read    due to a missing bounds check. This could lead to remote information    disclosure with no additional execution privileges needed. User interaction    is not needed for exploitation.
Key phrases: out of bounds read, missing bounds check, remote information disclosure
CVE-2023-35664: In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds read, missing bounds check, local information disclosure
CVE-2023-35665: In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: missing permission check, local escalation of privilege, exploitation, escalation privilege
CVE-2023-35666: In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: use after free, logic error, local escalation of privilege, escalation privilege
CVE-2023-35667: In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: logic error, local escalation of privilege, escalation privilege
CVE-2023-35668: In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: confused deputy, local information disclosure, exploitation
CVE-2023-35669: In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: unsafe deserialization, local escalation of privilege, escalation privilege
CVE-2023-3567: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.
Key phrases: cause a system crash or leak internal kernel, use-after-free flaw, use after free
CVE-2023-35670: In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: path traversal error, local escalation of privilege, escalation privilege
CVE-2023-35671: In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details when the device is in locked screen mode due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: logic error, local information disclosure
CVE-2023-35673: In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds write, integer overflow, code execution
CVE-2023-35674: In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: logic error, local escalation of privilege, escalation privilege
CVE-2023-35675: In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user on the same device due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: logic error, local information disclosure
CVE-2023-35676: In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: unsafe pendingintent, escalation privilege
CVE-2023-35677: In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. This could lead to local denial of service (factory reset or continuous locking) with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: denial of service (factory reset or continuous locking), permission check, local denial of service
CVE-2023-35679: In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Key phrases: out of bounds read, uninitialized data, local information disclosure
CVE-2023-3568: Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
Key phrases: open redirect
CVE-2023-35680: In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: confused deputy, local information disclosure
CVE-2023-35681: In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds write, integer overflow, remote code execution
CVE-2023-35682: In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Key phrases: start arbitrary components, confused deputy, local escalation of privilege, escalation privilege
CVE-2023-35683: In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: sql injection, local information disclosure
CVE-2023-35684: In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds write, integer overflow, escalation privilege
CVE-2023-35687: In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: memory corruption, use after free, local escalation of privilege, escalation privilege
CVE-2023-35689: In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: insecure default value, escalation privilege
CVE-2023-3569: In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2  as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote attacker with admin privileges could upload a crafted XML file which causes a denial-of-service.
Key phrases: denial-of-service, denial of service
CVE-2023-35690:  In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: arbitrary code execution, uncaught exception, local escalation of privilege, escalation privilege
CVE-2023-35691: there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds read, missing bounds check, remote denial of service
CVE-2023-35692: In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: improper input validation, local escalation of privilege, escalation privilege
CVE-2023-35693: In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Key phrases: memory corruption, use after free, local escalation of privilege, escalation privilege
CVE-2023-35694: In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Key phrases: out of bounds read, missing bounds check, remote information disclosure
CVE-2023-35695: A remote attacker could leverage a vulnerability in Trend Micro Mobile Security (Enterprise) 9.8 SP5 to download a particular log file which may contain sensitive information regarding the product.
Key phrases: sensitive information
CVE-2023-35696: Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticatedremote attacker to retrieve sensitive information about the device via HTTP requests.
Key phrases: retrieve sensitive information about the device via HTTP, unauthenticated endpoints
CVE-2023-35697: Improper Restriction of Excessive Authentication Attempts in the SICK ICR890-4could allow a remote attacker to brute-force user credentials.
Key phrases: brute-force user credentials, improper restriction of excessive authentication attempts
CVE-2023-35698: Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed loginattempt.
Key phrases: identify valid usernames for the FTP server from, observable response discrepancy
CVE-2023-35699: Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card.
Key phrases: the device to disclose sensitive information by accessing, cleartext storage
CVE-2023-3570: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain full access to the device.
Key phrases: gain full access, http delete request
CVE-2023-35702: Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint32 function.
Key phrases: stack-based buffer overflow, arbitrary code execution, stack based buffer overflow
CVE-2023-35703: Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint64 function.
Key phrases: stack-based buffer overflow, arbitrary code execution, stack based buffer overflow
CVE-2023-35704: Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint32WithSkip function.
Key phrases: stack-based buffer overflow, arbitrary code execution, stack based buffer overflow
CVE-2023-35708: In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content. These are fixed versions of the DLL drop-in: 2020.1.10 (12.1.10), 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3).
Key phrases: gain unauthorized access, gain unauthorized access to MOVEit Transfer's database, sql injection, disclosure
CVE-2023-3571: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certificate operations to gain full access to the device.
Key phrases: gain full access, http post
CVE-2023-35719: ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of ManageEngine ADSelfService Plus. Authentication is not required to exploit this vulnerability.The specific flaw exists within the Password Reset Portal used by the GINA client. The issue results from the lack of proper authentication of data received via HTTP. An attacker can leverage this vulnerability to bypass authentication and execute code in the context of SYSTEM. Was ZDI-CAN-17009.
Key phrases: execute arbitrary code, bypass authentication, Authentication Bypass, execute arbitrary code on affected installations of ManageEngine, authentication bypass, execute code
CVE-2023-3572: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST request releated to date/time operations to gain full access to the device.
Key phrases: gain full access
CVE-2023-3573: In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST request releated to font configuration operationsto gain full access to the device.
Key phrases: gain full access, command injection
CVE-2023-3574: Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.
Key phrases: improper authorization
CVE-2023-3575: The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks
Key phrases: perform Stored Cross-Site Scripting attacks, stored cross-site scripting
CVE-2023-35759: In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS.
Key phrases: execute arbitrary code, execute arbitrary code in a victim's browser, xss
CVE-2023-3576: A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.
Key phrases: pass a crafted TIFF image file to tiffcrop, memory leak flaw, denial of service, application crash
CVE-2023-35762: Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system (OS) command injection, which could allow remote code execution.
Key phrases: remote code execution, operating system (os) command injection, os command injection
CVE-2023-35763: Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext.
Key phrases: decrypt encrypted passwords into plaintext, cryptographic
CVE-2023-35764: Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting.
Key phrases: spoof an IP address when posting, insufficient verification of data authenticity issue, spoofing
CVE-2023-35765: PiiGAB M-Bus stores credentials in a plaintext file, which could allow a low-level user to gain admin credentials.
Key phrases: gain admin credentials, plaintext file
CVE-2023-35767: In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified.  Reported by Jason Geffner. 
Key phrases: Denial of Service (DoS), unauthenticated remote denial of service (dos)
CVE-2023-35769: Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalation of privilege via local access.
Key phrases: potentially enable escalation of privilege via local access, uncontrolled search path, escalation privilege
CVE-2023-3577: Mattermost fails to properly restrict requests tolocalhost/intranet during the interactive dialog, which could allow an attacker to perform a limitedblind SSRF.
Key phrases: perform a limitedblind SSRF, ssrf
CVE-2023-35772: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alain Gonzalez Google Map Shortcode plugin <=3.1.2 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-35773: Cross-Site Request Forgery (CSRF) vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin <=3.1.2 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-35774: Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <=2.4.1 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-35775: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Backup Solutions WP Backup Manager plugin <=1.13.1 versions.
Key phrases: reflected cross-site scripting (xss)
CVE-2023-35776: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Beplus Sermon'e  Sermons Online plugin <=1.0.0 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-35778: Cross-Site Request Forgery (CSRF) vulnerability in Neha Goel Recent Posts Slider plugin <=1.1 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-35779: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Seed Webs Seed Fonts plugin <=2.3.1 versions.
Key phrases: stored cross-site scripting (xss)
CVE-2023-3578: A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The manipulation of the argument rssurl leads to server-side request forgery. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233371.
Key phrases: server side request forgery
CVE-2023-35780: Cross-Site Request Forgery (CSRF) vulnerability in Andy Whalen Galleria plugin <=1.0.3 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-35781: Cross-Site Request Forgery (CSRF) vulnerability in LWS Cleaner plugin <=2.3.0 versions.
Key phrases: cross-site request forgery (csrf)
CVE-2023-35782: The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.
Key phrases: SQL Injection, sql injection
CVE-2023-35783: The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.
Key phrases: XSS via indexed data, xss
CVE-2023-35784: A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.
Key phrases: double free, use after free
CVE-2023-35785: Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4161 and below, Data Security Plus 6110 and below, Eventlog Analyzer 12301 and below, Exchange Reporter Plus 5709 and below, Log360 5315 and below, Log360 UEBA 4045 and below, M365 Manager Plus 4529 and below, M365 Security Plus 4529 and below, Recovery Manager Plus 6061 and below, ServiceDesk Plus 14204 and below and 143xx 14302 and below, ServiceDesk Plus MSP 14300 and below, SharePoint Manager Plus 4402 and below, and Support Center Plus 14300 and below are vulnerable to 2FA bypass via a few TOTP authenticators. Note: A valid pair of username and password is required to leverage this vulnerability.
Key phrases: bypass via a few TOTP authenticators, 2FA bypass
CVE-2023-35786: Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.
Key phrases: exploit an XXE issue to view files, xxe issue
CVE-2023-35788: An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
Key phrases: an out-of-bounds write in, denial of service, privilege escalation, out of bounds write
CVE-2023-35789: An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.
Key phrases: credentials
CVE-2023-3579: A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-233372.
Key phrases: cross site request forgery
CVE-2023-35790: An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
Key phrases: integer underflow, denial of service, infinite loop
CVE-2023-35791: Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerability.
Key phrases: open redirect
CVE-2023-35792: Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-site Scripting (XSS).
Key phrases: cross-site scripting (xss)
CVE-2023-35793: An issue was discovered in Cassia Access Controller 2.1.1.2303271039. Establishing a web SSH session to gateways is vulnerable to Cross Site Request Forgery (CSRF) attacks.
Key phrases: web ssh session, cross site request forgery (csrf)
CVE-2023-35794: An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) can be accessed without authentication. Specifically, there is no session cookie validation on the Access Controller; instead, there is only Basic Authentication to the SSH console.
CVE-2023-35796: A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting (XSS) attack that may lead to arbitrary code execution with `SYSTEM` privileges on the application server. (ZDI-CAN-19823)
Key phrases: arbitrary code execution
CVE-2023-35797: Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Apache Hive Provider: before 6.1.1.Before version 6.1.1 it waspossible to bypass the security check to RCE viaprincipal parameter. For this to beexploited it requires access to modifying the connection details.It is recommended updating provider version to 6.1.1 in order to avoid thisvulnerability.
Key phrases: bypass the security check, improper input validation, rce, bypass security
CVE-2023-35798: Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.Thisvulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specificallyupdating the connection to exploit it.This issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.It is recommended toupgrade to a version that is not affected
Key phrases: input validation
CVE-2023-35799: Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary files with local system privileges.
Key phrases: create arbitrary files, insecure permissions
CVE-2023-3580: Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.
Key phrases: additional special element
CVE-2023-35800: Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.
Key phrases: read data, information reserved to administrators, insecure permissions
CVE-2023-35801: A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation when editing a network-based resource connection, resulting in the unauthorized reading and writing of arbitrary files. Successful exploitation requires an attacker to have access to a user account with write privileges. FME Flow 2023.0 is also a fixed version.
Key phrases: bypass validation, bypass validation when editing a network-based, directory traversal, arbitrary file
CVE-2023-35802: IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit.
Key phrases: obtain elevated privileges, buffer overflow, remote code execution
CVE-2023-35803: IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.
Key phrases: buffer overflow
CVE-2023-35808: An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been identified in the Notes module. By using crafted requests, custom PHP code can be injected and executed through the Notes module because of missing input validation. Regular user privileges can be used to exploit this vulnerability. Editions other than Enterprise are also affected.
Key phrases: unrestricted file upload
CVE-2023-35809: An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified in the REST API. By using a crafted request, custom PHP code can be injected through the REST API because of missing input validation. Regular user privileges can be used to exploit this vulnerability. Editions other than Enterprise are also affected.
Key phrases: bean manipulation
CVE-2023-3581: Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.
Key phrases: access the websocket APIs
CVE-2023-35810: An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has been identified in the DocuSign module. By using crafted requests, custom PHP code can be injected and executed through the DocuSign module because of missing input validation. Admin user privileges are required to exploit this vulnerability. Editions other than Enterprise are also affected.
Key phrases: second-order php object injection
CVE-2023-35811: An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the REST API. By using crafted requests, custom SQL code can be injected through the REST API because of missing input validation. Regular user privileges can use used for exploitation. Editions other than Enterprise are also affected.
Key phrases: sql injection vectors, missing input validation
CVE-2023-35812: An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an incomplete fix for CVE-2019-6111 within these specific packages. The fix had only covered cases where an absolute path is passed to scp. When a relative path is used, there is no verification that the name of a file received by the client matches the file requested. Fixed packages are available with numbers 7.4p1-22.78.amzn1 and 7.4p1-22.amzn2.0.2.
CVE-2023-35813: Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
Key phrases: remote code execution
CVE-2023-35818: An issue was discovered on Espressif ESP32 3.0 (ESP32_rev300 ROM) devices. An EMFI attack on ECO3 provides the attacker with a capability to influence the PC value at the CPU context level, regardless of Secure Boot and Flash Encryption status. By using this capability, the attacker can exploit another behavior in the chip to gain unauthorized access to the ROM download mode. Access to ROM download mode may be further exploited to read the encrypted flash content in cleartext format or execute stub code.
Key phrases: gain unauthorized access, emfi
CVE-2023-3582: Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to,
Key phrases: link a Board to a private channel they
CVE-2023-35823: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.
Key phrases: use-after-free, use after free
CVE-2023-35824: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.
Key phrases: use-after-free, use after free
CVE-2023-35826: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.
Key phrases: use-after-free, use after free
CVE-2023-35827: An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.
Key phrases: use-after-free, use after free
CVE-2023-35828: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.
Key phrases: use-after-free, use after free
CVE-2023-35829: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.
Key phrases: use-after-free, use after free
CVE-2023-35830: STW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module DeploymentPackage_v3.03r0-Impala and DeploymentPackage_v3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackage_v3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for authentication, giving an attacker arbitrary remote code execution over LTE / 4G network via SMS.
Key phrases: gain full remote access, gain full remote access with root privileges without, remote code execution
CVE-2023-35833: An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be (re)entered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the vendor originally reported this as a security issue but then reconsidered because of the requirement for Admin access in order to change the configuration.
Key phrases: cleartext credentials
CVE-2023-35835: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi network provided has no network authentication (such as an encryption key) and persists permanently, including after enrollment and setup is complete. The WiFi network serves a web-based configuration utility, as well as an unauthenticated ModBus protocol interface.
CVE-2023-35836: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.
Key phrases: obtain a cleartext copy of the network configuration, rf range
CVE-2023-35837: An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default password, equal to the registration ID of the device. This same registration ID is used as the WiFi SSID name. No routine is in place to force a change to this password on first use or bring its default state to the attention of the user. Once authenticated, an attacker can reconfigure the device or upload new firmware, both of which can lead to Denial of Service, code execution, or Escalation of Privileges.
Key phrases: denial of service, code execution, escalation of privileges, default password
CVE-2023-35838: The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard.
Key phrases: trick the victim into blocking IP traffic to, localnet, blocking of traffic
CVE-2023-35839: A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.
Key phrases: execute arbitrary code, bypass in the component sofa-hessian of Solon, execute arbitrary code via providing crafted payload
CVE-2023-3584: Mattermost fails to properly check the authorization ofPOST /api/v4/teams when passing a team override scheme ID in the request,allowing an authenticated attacker with knowledge of a Team Override Scheme ID to create a new team with said team override scheme.
Key phrases: create a new team with said team override
CVE-2023-35840: _joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
Key phrases: path traversal in the PHP LocalVolumeDriver connector
CVE-2023-35843: NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter of the /download route. This vulnerability could allow an attacker to access sensitive files and data on the server, including configuration files, source code, and other sensitive information.
Key phrases: access arbitrary files, access arbitrary files on the server by manipulating, access sensitive files and data on the server, path traversal, sensitive information
CVE-2023-35844: packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.
Key phrases: .. directory traversal and do not ensure that, insecure file endpoints
CVE-2023-35845: Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program. This occurs because many files are installed as world-writable on Linux, ignoring umask, even when these files are installed as root. Miniconda is also affected.
Key phrases: disrupt TLS certificate validation by modifying the cacert.pem, world-writable
CVE-2023-35846: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.
CVE-2023-35847: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).
Key phrases: mss lower bound
CVE-2023-35848: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.
CVE-2023-35849: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.
Key phrases: accessing data outside of a packet
CVE-2023-3585: Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel byposting a specially crafted boards link.
Key phrases: crash a channel byposting a specially crafted boards, board link
CVE-2023-35850: SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.
Key phrases: perform arbitrary system operations or disrupt, insufficient filtering for user input, disrupt service, execute arbitrary
CVE-2023-35851: SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.
Key phrases: inject arbitrary SQL commands, obtain sensitive information, insufficient validation
CVE-2023-35852: In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolute or relative directory traversal, and lead to write access to a local filesystem. This is addressed in 6.0.13 by requiring allow-absolute-filenames and allow-write (in the datasets rules configuration section) if an installation requires traversal/writing in this situation.
Key phrases: -absolute-filenames and allow-write, -write (in the datasets rules configuration, write access, directory traversal
CVE-2023-35853: In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
Key phrases: -rules is true in the security lua
CVE-2023-35854: Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domain controller session token for identity spoofing, thereby achieving the privileges of the domain controller administrator. NOTE: the vendor's perspective is that they have "found no evidence or detail of a security vulnerability."
Key phrases: bypass that can be exploited to steal the domain controller session token, authentication bypass, spoofing
CVE-2023-35855: A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.
Key phrases: execute arbitrary code, execute arbitrary code on a remote client's, buffer overflow
CVE-2023-35856: A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machine via a crafted packet.
Key phrases: execute arbitrary code, buffer overflow
CVE-2023-35857: In Siren Investigate before 13.2.2, session keys remain active even after logging out.
Key phrases: session keys
CVE-2023-3586: Mattermost fails to disablepublic Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting inpreviously-sharedpublic Boards to remain accessible.
Key phrases: accessible
CVE-2023-35861: A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attackers to inject execute arbitrary commands as root on the BMC.
Key phrases: execute arbitrary commands, inject execute arbitrary commands as root on the, shell-injection, shell injection
CVE-2023-35862: libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.
Key phrases: buffer over-read, buffer over read
CVE-2023-35863: In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access.
Key phrases: obtain a handle to the NetFilterSDK wrapper before, exclusive access
CVE-2023-35866: In KeePassXC through 2.7.5, a local attacker can make changes to the Database security settings, including master password and second-factor authentication, within an authenticated KeePassXC Database session, without the need to authenticate these changes by entering the password and/or second-factor authentication to confirm changes. NOTE: the vendor's position is "asking the user for their password prior to making any changes to the database settings adds no additional protection against a local attacker."