diff --git a/CVE-2023/CVE-2023-311xx/CVE-2023-31100.json b/CVE-2023/CVE-2023-311xx/CVE-2023-31100.json new file mode 100644 index 00000000000..068c7c5d323 --- /dev/null +++ b/CVE-2023/CVE-2023-311xx/CVE-2023-31100.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-31100", + "sourceIdentifier": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", + "published": "2023-11-15T00:15:07.573", + "lastModified": "2023-11-15T00:15:07.573", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Improper Access Control in SMI handler vulnerability in Phoenix SecureCore\u2122 Technology\u2122 4 allows SPI flash modification.\nThis issue affects SecureCore\u2122 Technology\u2122 4:\n\n\n * from 4.3.0.0 before 4.3.0.203\n * \n\nfrom \n\n4.3.1.0 before 4.3.1.163\n * \n\nfrom \n\n4.4.0.0 before 4.4.0.217\n * \n\nfrom \n\n4.5.0.0 before 4.5.0.138\n\n\n\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 8.4, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 5.8 + } + ] + }, + "weaknesses": [ + { + "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://https://www.phoenix.com/security-notifications/", + "source": "22d9ba52-f336-4b0d-bf1f-0efbdcc3c1de" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-350xx/CVE-2023-35080.json b/CVE-2023/CVE-2023-350xx/CVE-2023-35080.json new file mode 100644 index 00000000000..a8fae6ee34a --- /dev/null +++ b/CVE-2023/CVE-2023-350xx/CVE-2023-35080.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-35080", + "sourceIdentifier": "support@hackerone.com", + "published": "2023-11-15T00:15:07.787", + "lastModified": "2023-11-15T00:15:07.787", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, denial of service, or information disclosure." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "support@hackerone.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 8.8, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 6.0 + } + ] + }, + "references": [ + { + "url": "https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release", + "source": "support@hackerone.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-380xx/CVE-2023-38043.json b/CVE-2023/CVE-2023-380xx/CVE-2023-38043.json new file mode 100644 index 00000000000..637d9839cdf --- /dev/null +++ b/CVE-2023/CVE-2023-380xx/CVE-2023-38043.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-38043", + "sourceIdentifier": "support@hackerone.com", + "published": "2023-11-15T00:15:07.940", + "lastModified": "2023-11-15T00:15:07.940", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "When a specific component is loaded a local attacker and is able to send a specially crafted request to this component, the attacker could gain elevated privileges on the affected system." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "support@hackerone.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 8.8, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 6.0 + } + ] + }, + "references": [ + { + "url": "https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release", + "source": "support@hackerone.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-385xx/CVE-2023-38543.json b/CVE-2023/CVE-2023-385xx/CVE-2023-38543.json new file mode 100644 index 00000000000..3a73d3c18b6 --- /dev/null +++ b/CVE-2023/CVE-2023-385xx/CVE-2023-38543.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-38543", + "sourceIdentifier": "support@hackerone.com", + "published": "2023-11-15T00:15:08.090", + "lastModified": "2023-11-15T00:15:08.090", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "When a specific component is loaded a local attacker and is able to send a specially crafted request to this component, the attacker could gain elevated privileges on the affected system." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "support@hackerone.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 8.8, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.0, + "impactScore": 6.0 + } + ] + }, + "references": [ + { + "url": "https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release", + "source": "support@hackerone.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-385xx/CVE-2023-38544.json b/CVE-2023/CVE-2023-385xx/CVE-2023-38544.json new file mode 100644 index 00000000000..a9a2f96792f --- /dev/null +++ b/CVE-2023/CVE-2023-385xx/CVE-2023-38544.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-38544", + "sourceIdentifier": "support@hackerone.com", + "published": "2023-11-15T00:15:08.237", + "lastModified": "2023-11-15T00:15:08.237", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "support@hackerone.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseScore": 5.3, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.4 + } + ] + }, + "references": [ + { + "url": "https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release", + "source": "support@hackerone.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-391xx/CVE-2023-39199.json b/CVE-2023/CVE-2023-391xx/CVE-2023-39199.json new file mode 100644 index 00000000000..264f764e4b5 --- /dev/null +++ b/CVE-2023/CVE-2023-391xx/CVE-2023-39199.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-39199", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-14T23:15:08.090", + "lastModified": "2023-11-14T23:15:08.090", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via network access." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseScore": 4.9, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-310" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-392xx/CVE-2023-39202.json b/CVE-2023/CVE-2023-392xx/CVE-2023-39202.json new file mode 100644 index 00000000000..0bc66dfb806 --- /dev/null +++ b/CVE-2023/CVE-2023-392xx/CVE-2023-39202.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-39202", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-14T23:15:08.310", + "lastModified": "2023-11-14T23:15:08.310", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseScore": 3.1, + "baseSeverity": "LOW" + }, + "exploitabilityScore": 0.6, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-426" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-392xx/CVE-2023-39203.json b/CVE-2023/CVE-2023-392xx/CVE-2023-39203.json new file mode 100644 index 00000000000..31889311937 --- /dev/null +++ b/CVE-2023/CVE-2023-392xx/CVE-2023-39203.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-39203", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-14T23:15:08.493", + "lastModified": "2023-11-14T23:15:08.493", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW", + "baseScore": 4.3, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-392xx/CVE-2023-39204.json b/CVE-2023/CVE-2023-392xx/CVE-2023-39204.json new file mode 100644 index 00000000000..e36a345e2d0 --- /dev/null +++ b/CVE-2023/CVE-2023-392xx/CVE-2023-39204.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-39204", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-14T23:15:08.687", + "lastModified": "2023-11-14T23:15:08.687", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW", + "baseScore": 4.3, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-392xx/CVE-2023-39205.json b/CVE-2023/CVE-2023-392xx/CVE-2023-39205.json new file mode 100644 index 00000000000..07f1e0af74c --- /dev/null +++ b/CVE-2023/CVE-2023-392xx/CVE-2023-39205.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-39205", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-14T23:15:08.887", + "lastModified": "2023-11-14T23:15:08.887", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE", + "baseScore": 4.3, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-754" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-392xx/CVE-2023-39206.json b/CVE-2023/CVE-2023-392xx/CVE-2023-39206.json new file mode 100644 index 00000000000..776cf4c05f3 --- /dev/null +++ b/CVE-2023/CVE-2023-392xx/CVE-2023-39206.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-39206", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-14T23:15:09.073", + "lastModified": "2023-11-14T23:15:09.073", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW", + "baseScore": 3.7, + "baseSeverity": "LOW" + }, + "exploitabilityScore": 2.2, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-393xx/CVE-2023-39335.json b/CVE-2023/CVE-2023-393xx/CVE-2023-39335.json new file mode 100644 index 00000000000..dfc8dac75a0 --- /dev/null +++ b/CVE-2023/CVE-2023-393xx/CVE-2023-39335.json @@ -0,0 +1,20 @@ +{ + "id": "CVE-2023-39335", + "sourceIdentifier": "support@hackerone.com", + "published": "2023-11-15T00:15:08.390", + "lastModified": "2023-11-15T00:15:08.390", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potential misuse of user accounts and resources." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://forums.ivanti.com/s/article/CVE-2023-39335?language=en_US", + "source": "support@hackerone.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-393xx/CVE-2023-39337.json b/CVE-2023/CVE-2023-393xx/CVE-2023-39337.json new file mode 100644 index 00000000000..61dbe7fe34f --- /dev/null +++ b/CVE-2023/CVE-2023-393xx/CVE-2023-39337.json @@ -0,0 +1,20 @@ +{ + "id": "CVE-2023-39337", + "sourceIdentifier": "support@hackerone.com", + "published": "2023-11-15T00:15:08.437", + "lastModified": "2023-11-15T00:15:08.437", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious security risk, potentially exposing confidential data and system integrity." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://forums.ivanti.com/s/article/CVE-2023-39337?language=en_US", + "source": "support@hackerone.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-415xx/CVE-2023-41570.json b/CVE-2023/CVE-2023-415xx/CVE-2023-41570.json new file mode 100644 index 00000000000..2e0a856388b --- /dev/null +++ b/CVE-2023/CVE-2023-415xx/CVE-2023-41570.json @@ -0,0 +1,20 @@ +{ + "id": "CVE-2023-41570", + "sourceIdentifier": "cve@mitre.org", + "published": "2023-11-14T23:15:09.270", + "lastModified": "2023-11-14T23:15:09.270", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://www.enricobassetti.it/2023/11/cve-2023-41570-access-control-vulnerability-in-mikrotik-rest-api/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-417xx/CVE-2023-41718.json b/CVE-2023/CVE-2023-417xx/CVE-2023-41718.json new file mode 100644 index 00000000000..36bda9cf5ae --- /dev/null +++ b/CVE-2023/CVE-2023-417xx/CVE-2023-41718.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-41718", + "sourceIdentifier": "support@hackerone.com", + "published": "2023-11-15T00:15:08.527", + "lastModified": "2023-11-15T00:15:08.527", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "support@hackerone.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.8, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "references": [ + { + "url": "https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release", + "source": "support@hackerone.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-42xx/CVE-2023-4295.json b/CVE-2023/CVE-2023-42xx/CVE-2023-4295.json index c7f3f8ca676..2ca6f3e5857 100644 --- a/CVE-2023/CVE-2023-42xx/CVE-2023-4295.json +++ b/CVE-2023/CVE-2023-42xx/CVE-2023-4295.json @@ -2,8 +2,8 @@ "id": "CVE-2023-4295", "sourceIdentifier": "arm-security@arm.com", "published": "2023-11-07T16:15:29.340", - "lastModified": "2023-11-14T21:29:25.807", - "vulnStatus": "Analyzed", + "lastModified": "2023-11-14T23:15:12.123", + "vulnStatus": "Modified", "descriptions": [ { "lang": "en", @@ -35,26 +35,6 @@ }, "exploitabilityScore": 1.8, "impactScore": 5.9 - }, - { - "source": "arm-security@arm.com", - "type": "Secondary", - "cvssData": { - "version": "3.1", - "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", - "attackVector": "LOCAL", - "attackComplexity": "LOW", - "privilegesRequired": "NONE", - "userInteraction": "NONE", - "scope": "CHANGED", - "confidentialityImpact": "HIGH", - "integrityImpact": "HIGH", - "availabilityImpact": "HIGH", - "baseScore": 9.3, - "baseSeverity": "CRITICAL" - }, - "exploitabilityScore": 2.5, - "impactScore": 6.0 } ] }, diff --git a/CVE-2023/CVE-2023-435xx/CVE-2023-43582.json b/CVE-2023/CVE-2023-435xx/CVE-2023-43582.json new file mode 100644 index 00000000000..1d5130d4ae2 --- /dev/null +++ b/CVE-2023/CVE-2023-435xx/CVE-2023-43582.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-43582", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-15T00:15:08.673", + "lastModified": "2023-11-15T00:15:08.673", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseScore": 5.5, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 2.1, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-435xx/CVE-2023-43588.json b/CVE-2023/CVE-2023-435xx/CVE-2023-43588.json new file mode 100644 index 00000000000..b66f9ce1ce6 --- /dev/null +++ b/CVE-2023/CVE-2023-435xx/CVE-2023-43588.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-43588", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-15T00:15:08.860", + "lastModified": "2023-11-15T00:15:08.860", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE", + "baseScore": 3.5, + "baseSeverity": "LOW" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-691" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-435xx/CVE-2023-43590.json b/CVE-2023/CVE-2023-435xx/CVE-2023-43590.json new file mode 100644 index 00000000000..90fa90e5c33 --- /dev/null +++ b/CVE-2023/CVE-2023-435xx/CVE-2023-43590.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-43590", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-15T00:15:09.050", + "lastModified": "2023-11-15T00:15:09.050", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.8, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-59" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-435xx/CVE-2023-43591.json b/CVE-2023/CVE-2023-435xx/CVE-2023-43591.json new file mode 100644 index 00000000000..4b6805c69de --- /dev/null +++ b/CVE-2023/CVE-2023-435xx/CVE-2023-43591.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-43591", + "sourceIdentifier": "security@zoom.us", + "published": "2023-11-15T00:15:09.237", + "lastModified": "2023-11-15T00:15:09.237", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.8, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 1.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "security@zoom.us", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://explore.zoom.us/en/trust/security/security-bulletin/", + "source": "security@zoom.us" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45614.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45614.json new file mode 100644 index 00000000000..debc70ebf11 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45614.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45614", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:09.313", + "lastModified": "2023-11-14T23:15:09.313", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 9.8, + "baseSeverity": "CRITICAL" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45615.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45615.json new file mode 100644 index 00000000000..fac437c8e0d --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45615.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45615", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:09.487", + "lastModified": "2023-11-14T23:15:09.487", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 9.8, + "baseSeverity": "CRITICAL" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45616.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45616.json new file mode 100644 index 00000000000..5eac37d1684 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45616.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45616", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:09.663", + "lastModified": "2023-11-14T23:15:09.663", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's access point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 9.8, + "baseSeverity": "CRITICAL" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45617.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45617.json new file mode 100644 index 00000000000..d68bae4f3dc --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45617.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45617", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:09.827", + "lastModified": "2023-11-14T23:15:09.827", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH", + "baseScore": 8.2, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.2 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45618.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45618.json new file mode 100644 index 00000000000..b04b47198bb --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45618.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45618", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:09.997", + "lastModified": "2023-11-14T23:15:09.997", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH", + "baseScore": 8.2, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.2 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45619.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45619.json new file mode 100644 index 00000000000..03e90852919 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45619.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45619", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:10.167", + "lastModified": "2023-11-14T23:15:10.167", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH", + "baseScore": 8.2, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.2 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45620.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45620.json new file mode 100644 index 00000000000..3dabbcde029 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45620.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45620", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:10.333", + "lastModified": "2023-11-14T23:15:10.333", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45621.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45621.json new file mode 100644 index 00000000000..155090b7e20 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45621.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45621", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:10.497", + "lastModified": "2023-11-14T23:15:10.497", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45622.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45622.json new file mode 100644 index 00000000000..3fc2490d017 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45622.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45622", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:10.660", + "lastModified": "2023-11-14T23:15:10.660", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45623.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45623.json new file mode 100644 index 00000000000..692af0eecc3 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45623.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45623", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:10.883", + "lastModified": "2023-11-14T23:15:10.883", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45624.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45624.json new file mode 100644 index 00000000000..37f4a60eda4 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45624.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45624", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:11.077", + "lastModified": "2023-11-14T23:15:11.077", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH", + "baseScore": 7.5, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45625.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45625.json new file mode 100644 index 00000000000..0f6e49f28ba --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45625.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45625", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:11.243", + "lastModified": "2023-11-14T23:15:11.243", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH", + "baseScore": 7.2, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45626.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45626.json new file mode 100644 index 00000000000..2c4dac5eca6 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45626.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45626", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:11.410", + "lastModified": "2023-11-14T23:15:11.410", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW", + "baseScore": 5.5, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 1.2, + "impactScore": 4.2 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-456xx/CVE-2023-45627.json b/CVE-2023/CVE-2023-456xx/CVE-2023-45627.json new file mode 100644 index 00000000000..5f523f40111 --- /dev/null +++ b/CVE-2023/CVE-2023-456xx/CVE-2023-45627.json @@ -0,0 +1,43 @@ +{ + "id": "CVE-2023-45627", + "sourceIdentifier": "security-alert@hpe.com", + "published": "2023-11-14T23:15:11.573", + "lastModified": "2023-11-14T23:15:11.573", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulnerability results in the ability to interrupt the normal\n\noperation of the affected access point.\n\n" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-alert@hpe.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW", + "baseScore": 4.3, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "references": [ + { + "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt", + "source": "security-alert@hpe.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-461xx/CVE-2023-46121.json b/CVE-2023/CVE-2023-461xx/CVE-2023-46121.json new file mode 100644 index 00000000000..88289294724 --- /dev/null +++ b/CVE-2023/CVE-2023-461xx/CVE-2023-46121.json @@ -0,0 +1,63 @@ +{ + "id": "CVE-2023-46121", + "sourceIdentifier": "security-advisories@github.com", + "published": "2023-11-15T00:15:09.470", + "lastModified": "2023-11-15T00:15:09.470", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to cookie exfiltration in some cases. Version 2023.11.14 removed the ability to smuggle `http_headers` to the Generic extractor, as well as other extractors that use the same pattern. Users are advised to upgrade. Users unable to upgrade should disable the Ggneric extractor (or only pass trusted sites with trusted content) and ake caution when using `--no-check-certificate`." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseScore": 5.0, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 1.6, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-444" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/yt-dlp/yt-dlp/commit/f04b5bedad7b281bee9814686bba1762bae092eb", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/yt-dlp/yt-dlp/releases/tag/2023.11.14", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-3ch3-jhc6-5r8x", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-475xx/CVE-2023-47517.json b/CVE-2023/CVE-2023-475xx/CVE-2023-47517.json new file mode 100644 index 00000000000..d0cd75f73f0 --- /dev/null +++ b/CVE-2023/CVE-2023-475xx/CVE-2023-47517.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-47517", + "sourceIdentifier": "audit@patchstack.com", + "published": "2023-11-14T23:15:11.737", + "lastModified": "2023-11-14T23:15:11.737", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <=\u00a01.23.11.6 versions." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseScore": 7.1, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/vulnerability/sendpress/wordpress-sendpress-newsletters-plugin-1-22-3-31-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-475xx/CVE-2023-47518.json b/CVE-2023/CVE-2023-475xx/CVE-2023-47518.json new file mode 100644 index 00000000000..e6e4dd7c56e --- /dev/null +++ b/CVE-2023/CVE-2023-475xx/CVE-2023-47518.json @@ -0,0 +1,55 @@ +{ + "id": "CVE-2023-47518", + "sourceIdentifier": "audit@patchstack.com", + "published": "2023-11-14T23:15:11.923", + "lastModified": "2023-11-14T23:15:11.923", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Matthew Muro Restrict Categories plugin <=\u00a02.6.4 versions." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW", + "baseScore": 7.1, + "baseSeverity": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/vulnerability/restrict-categories/wordpress-restrict-categories-plugin-2-6-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-51xx/CVE-2023-5189.json b/CVE-2023/CVE-2023-51xx/CVE-2023-5189.json new file mode 100644 index 00000000000..6a1b25089bc --- /dev/null +++ b/CVE-2023/CVE-2023-51xx/CVE-2023-5189.json @@ -0,0 +1,47 @@ +{ + "id": "CVE-2023-5189", + "sourceIdentifier": "secalert@redhat.com", + "published": "2023-11-14T23:15:12.290", + "lastModified": "2023-11-14T23:15:12.290", + "vulnStatus": "Received", + "descriptions": [ + { + "lang": "en", + "value": "A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secalert@redhat.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE", + "baseScore": 6.3, + "baseSeverity": "MEDIUM" + }, + "exploitabilityScore": 2.1, + "impactScore": 4.2 + } + ] + }, + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2023-5189", + "source": "secalert@redhat.com" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2234387", + "source": "secalert@redhat.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 046fe446bef..b4f240ebf57 100644 --- a/README.md +++ b/README.md @@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2023-11-14T23:00:17.937233+00:00 +2023-11-15T00:55:18.092806+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2023-11-14T22:38:26.263000+00:00 +2023-11-15T00:15:09.470000+00:00 ``` ### Last Data Feed Release @@ -29,69 +29,45 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -230781 +230818 ``` ### CVEs added in the last Commit -Recently added CVEs: `38` +Recently added CVEs: `37` -* [CVE-2023-47627](CVE-2023/CVE-2023-476xx/CVE-2023-47627.json) (`2023-11-14T21:15:12.820`) -* [CVE-2023-47630](CVE-2023/CVE-2023-476xx/CVE-2023-47630.json) (`2023-11-14T21:15:13.037`) -* [CVE-2023-47631](CVE-2023/CVE-2023-476xx/CVE-2023-47631.json) (`2023-11-14T21:15:13.230`) -* [CVE-2023-47640](CVE-2023/CVE-2023-476xx/CVE-2023-47640.json) (`2023-11-14T21:15:13.517`) -* [CVE-2023-47641](CVE-2023/CVE-2023-476xx/CVE-2023-47641.json) (`2023-11-14T21:15:13.713`) -* [CVE-2023-5528](CVE-2023/CVE-2023-55xx/CVE-2023-5528.json) (`2023-11-14T21:15:14.123`) -* [CVE-2023-36038](CVE-2023/CVE-2023-360xx/CVE-2023-36038.json) (`2023-11-14T22:15:28.733`) -* [CVE-2023-36558](CVE-2023/CVE-2023-365xx/CVE-2023-36558.json) (`2023-11-14T22:15:29.323`) -* [CVE-2023-39535](CVE-2023/CVE-2023-395xx/CVE-2023-39535.json) (`2023-11-14T22:15:29.557`) -* [CVE-2023-39536](CVE-2023/CVE-2023-395xx/CVE-2023-39536.json) (`2023-11-14T22:15:29.743`) -* [CVE-2023-39537](CVE-2023/CVE-2023-395xx/CVE-2023-39537.json) (`2023-11-14T22:15:29.923`) -* [CVE-2023-46022](CVE-2023/CVE-2023-460xx/CVE-2023-46022.json) (`2023-11-14T22:15:30.100`) -* [CVE-2023-46023](CVE-2023/CVE-2023-460xx/CVE-2023-46023.json) (`2023-11-14T22:15:30.150`) -* [CVE-2023-46024](CVE-2023/CVE-2023-460xx/CVE-2023-46024.json) (`2023-11-14T22:15:30.193`) -* [CVE-2023-46025](CVE-2023/CVE-2023-460xx/CVE-2023-46025.json) (`2023-11-14T22:15:30.240`) -* [CVE-2023-46026](CVE-2023/CVE-2023-460xx/CVE-2023-46026.json) (`2023-11-14T22:15:30.280`) -* [CVE-2023-46580](CVE-2023/CVE-2023-465xx/CVE-2023-46580.json) (`2023-11-14T22:15:30.330`) -* [CVE-2023-46581](CVE-2023/CVE-2023-465xx/CVE-2023-46581.json) (`2023-11-14T22:15:30.380`) -* [CVE-2023-46582](CVE-2023/CVE-2023-465xx/CVE-2023-46582.json) (`2023-11-14T22:15:30.423`) -* [CVE-2023-47520](CVE-2023/CVE-2023-475xx/CVE-2023-47520.json) (`2023-11-14T22:15:30.570`) -* [CVE-2023-47522](CVE-2023/CVE-2023-475xx/CVE-2023-47522.json) (`2023-11-14T22:15:30.770`) -* [CVE-2023-47524](CVE-2023/CVE-2023-475xx/CVE-2023-47524.json) (`2023-11-14T22:15:30.973`) -* [CVE-2023-47528](CVE-2023/CVE-2023-475xx/CVE-2023-47528.json) (`2023-11-14T22:15:31.170`) -* [CVE-2023-47532](CVE-2023/CVE-2023-475xx/CVE-2023-47532.json) (`2023-11-14T22:15:31.363`) -* [CVE-2023-48217](CVE-2023/CVE-2023-482xx/CVE-2023-48217.json) (`2023-11-14T22:15:31.577`) +* [CVE-2023-45619](CVE-2023/CVE-2023-456xx/CVE-2023-45619.json) (`2023-11-14T23:15:10.167`) +* [CVE-2023-45620](CVE-2023/CVE-2023-456xx/CVE-2023-45620.json) (`2023-11-14T23:15:10.333`) +* [CVE-2023-45621](CVE-2023/CVE-2023-456xx/CVE-2023-45621.json) (`2023-11-14T23:15:10.497`) +* [CVE-2023-45622](CVE-2023/CVE-2023-456xx/CVE-2023-45622.json) (`2023-11-14T23:15:10.660`) +* [CVE-2023-45623](CVE-2023/CVE-2023-456xx/CVE-2023-45623.json) (`2023-11-14T23:15:10.883`) +* [CVE-2023-45624](CVE-2023/CVE-2023-456xx/CVE-2023-45624.json) (`2023-11-14T23:15:11.077`) +* [CVE-2023-45625](CVE-2023/CVE-2023-456xx/CVE-2023-45625.json) (`2023-11-14T23:15:11.243`) +* [CVE-2023-45626](CVE-2023/CVE-2023-456xx/CVE-2023-45626.json) (`2023-11-14T23:15:11.410`) +* [CVE-2023-45627](CVE-2023/CVE-2023-456xx/CVE-2023-45627.json) (`2023-11-14T23:15:11.573`) +* [CVE-2023-47517](CVE-2023/CVE-2023-475xx/CVE-2023-47517.json) (`2023-11-14T23:15:11.737`) +* [CVE-2023-47518](CVE-2023/CVE-2023-475xx/CVE-2023-47518.json) (`2023-11-14T23:15:11.923`) +* [CVE-2023-5189](CVE-2023/CVE-2023-51xx/CVE-2023-5189.json) (`2023-11-14T23:15:12.290`) +* [CVE-2023-31100](CVE-2023/CVE-2023-311xx/CVE-2023-31100.json) (`2023-11-15T00:15:07.573`) +* [CVE-2023-35080](CVE-2023/CVE-2023-350xx/CVE-2023-35080.json) (`2023-11-15T00:15:07.787`) +* [CVE-2023-38043](CVE-2023/CVE-2023-380xx/CVE-2023-38043.json) (`2023-11-15T00:15:07.940`) +* [CVE-2023-38543](CVE-2023/CVE-2023-385xx/CVE-2023-38543.json) (`2023-11-15T00:15:08.090`) +* [CVE-2023-38544](CVE-2023/CVE-2023-385xx/CVE-2023-38544.json) (`2023-11-15T00:15:08.237`) +* [CVE-2023-39335](CVE-2023/CVE-2023-393xx/CVE-2023-39335.json) (`2023-11-15T00:15:08.390`) +* [CVE-2023-39337](CVE-2023/CVE-2023-393xx/CVE-2023-39337.json) (`2023-11-15T00:15:08.437`) +* [CVE-2023-41718](CVE-2023/CVE-2023-417xx/CVE-2023-41718.json) (`2023-11-15T00:15:08.527`) +* [CVE-2023-43582](CVE-2023/CVE-2023-435xx/CVE-2023-43582.json) (`2023-11-15T00:15:08.673`) +* [CVE-2023-43588](CVE-2023/CVE-2023-435xx/CVE-2023-43588.json) (`2023-11-15T00:15:08.860`) +* [CVE-2023-43590](CVE-2023/CVE-2023-435xx/CVE-2023-43590.json) (`2023-11-15T00:15:09.050`) +* [CVE-2023-43591](CVE-2023/CVE-2023-435xx/CVE-2023-43591.json) (`2023-11-15T00:15:09.237`) +* [CVE-2023-46121](CVE-2023/CVE-2023-461xx/CVE-2023-46121.json) (`2023-11-15T00:15:09.470`) ### CVEs modified in the last Commit -Recently modified CVEs: `78` +Recently modified CVEs: `1` -* [CVE-2023-37683](CVE-2023/CVE-2023-376xx/CVE-2023-37683.json) (`2023-11-14T21:38:48.543`) -* [CVE-2023-37684](CVE-2023/CVE-2023-376xx/CVE-2023-37684.json) (`2023-11-14T21:38:48.543`) -* [CVE-2023-37685](CVE-2023/CVE-2023-376xx/CVE-2023-37685.json) (`2023-11-14T21:38:48.543`) -* [CVE-2023-37686](CVE-2023/CVE-2023-376xx/CVE-2023-37686.json) (`2023-11-14T21:38:48.543`) -* [CVE-2023-37687](CVE-2023/CVE-2023-376xx/CVE-2023-37687.json) (`2023-11-14T21:38:48.543`) -* [CVE-2023-46626](CVE-2023/CVE-2023-466xx/CVE-2023-46626.json) (`2023-11-14T21:39:37.103`) -* [CVE-2023-27074](CVE-2023/CVE-2023-270xx/CVE-2023-27074.json) (`2023-11-14T21:58:08.407`) -* [CVE-2023-1909](CVE-2023/CVE-2023-19xx/CVE-2023-1909.json) (`2023-11-14T21:58:08.407`) -* [CVE-2023-1948](CVE-2023/CVE-2023-19xx/CVE-2023-1948.json) (`2023-11-14T21:58:08.407`) -* [CVE-2023-1949](CVE-2023/CVE-2023-19xx/CVE-2023-1949.json) (`2023-11-14T21:58:08.407`) -* [CVE-2023-1950](CVE-2023/CVE-2023-19xx/CVE-2023-1950.json) (`2023-11-14T21:58:08.407`) -* [CVE-2023-37744](CVE-2023/CVE-2023-377xx/CVE-2023-37744.json) (`2023-11-14T22:04:44.023`) -* [CVE-2023-37745](CVE-2023/CVE-2023-377xx/CVE-2023-37745.json) (`2023-11-14T22:04:44.023`) -* [CVE-2023-37746](CVE-2023/CVE-2023-377xx/CVE-2023-37746.json) (`2023-11-14T22:04:44.023`) -* [CVE-2023-37688](CVE-2023/CVE-2023-376xx/CVE-2023-37688.json) (`2023-11-14T22:04:44.023`) -* [CVE-2023-37689](CVE-2023/CVE-2023-376xx/CVE-2023-37689.json) (`2023-11-14T22:04:44.023`) -* [CVE-2023-37690](CVE-2023/CVE-2023-376xx/CVE-2023-37690.json) (`2023-11-14T22:04:44.023`) -* [CVE-2023-33580](CVE-2023/CVE-2023-335xx/CVE-2023-33580.json) (`2023-11-14T22:07:14.687`) -* [CVE-2023-46595](CVE-2023/CVE-2023-465xx/CVE-2023-46595.json) (`2023-11-14T22:15:30.480`) -* [CVE-2023-36936](CVE-2023/CVE-2023-369xx/CVE-2023-36936.json) (`2023-11-14T22:21:38.423`) -* [CVE-2023-39551](CVE-2023/CVE-2023-395xx/CVE-2023-39551.json) (`2023-11-14T22:21:38.423`) -* [CVE-2023-0562](CVE-2023/CVE-2023-05xx/CVE-2023-0562.json) (`2023-11-14T22:28:17.220`) -* [CVE-2023-0563](CVE-2023/CVE-2023-05xx/CVE-2023-0563.json) (`2023-11-14T22:28:17.220`) -* [CVE-2023-1963](CVE-2023/CVE-2023-19xx/CVE-2023-1963.json) (`2023-11-14T22:28:17.220`) -* [CVE-2023-1964](CVE-2023/CVE-2023-19xx/CVE-2023-1964.json) (`2023-11-14T22:28:17.220`) +* [CVE-2023-4295](CVE-2023/CVE-2023-42xx/CVE-2023-4295.json) (`2023-11-14T23:15:12.123`) ## Download and Usage