CVE-2023-46035

The CVE-2023-46035 issue affects the Ruby gem svg_optimizer (Fnando) v0.2.6, where an external XML entity (XXE) vulnerability is possible when optimizing untrusted SVG content due to default XXE handling in the code (svg_optimizer.rb). This can allow a remote attacker to escalate privileges by ex...

PT-2023-26054 · Undefined · Undefined

‼ CVE-2023-37637 ‼ REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-38817. Reason: This record is a reservation duplicate of CVE-2023-38817. Notes: All CVE users should reference CVE-2023-38817 instead of this record. All references and descriptions in this record have been removed to...

CVE-2023-35903

The IBM Security Verify Governance – Identity Manager (Virtual Appliance) is affected by CVE-2023-35903 due to improper file validation, enabling arbitrary file upload and related privilege escalation/sensitive information exposure. Affected systems are the Identity Manager virtual appliance comp...

CVE-2023-45291

reserved but not needed...

CVE-2023-5312

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-43226. Reason: This candidate is a reservation duplicate of CVE-2023-43226. Notes: All CVE users should reference CVE-2023-43226 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2023-5312

CVE-2023-5312 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-45023

The CVE-2023-45023 entry corresponds to a Broken Access Control in the TYPO3 extension femanager. Multiple connected sources (GHSA-93J4-V838-8767, OSV, Veracode, and FriendsOfPHP advisory) describe that femanager fails to check access permissions for the invitation component, allowing remote atta...

CVE-2023-21386

CVE-2023-21386 is listed in Android 14 security release notes under the System category with Type “ID” and Moderate severity. The provided connected documents confirm the CVE entry exists, but do not provide the root cause, affected components beyond that category, or remediation details. No expl...

CVE-2023-24287

CVE-2023-24287 is a published buffer overrun issue reported across Ubuntu and Debian trackers related to the Undead puzzle. A crafted save file can cause a buffer overrun; the connected documents describe Ubuntu/Debian entries but do not provide explicit patch versions or remediation steps. Explo...

CVE-2023-24286

CVE-2023-24286 is documented across several feeds as a buffer overrun/overflow in the Mosaic puzzle component when processing a crafted save file. The exact affected package names/versions are not consistently enumerated in the provided sources; Ubuntu/Debian mentions Mosaic puzzle with a crafted...

CVE-2023-24288

CVE-2023-24288 affects Simon Tatham’s Portable Puzzle Collection. Multiple connected sources identify a vulnerability where a crafted save file can cause a buffer overrun/overflow in the puzzle collection software. Ubuntu/Debian advisories explicitly tie this CVE to the Portable Puzzle Collection...

CVE-2023-24284

CVE-2023-24284 is a reserved entry with public details not initially provided, but connected documents reveal a concrete vulnerability: a crafted save file can cause a buffer overrun in the Guess puzzle across Linux/Ubuntu environments (notably Ubuntu packages). Multiple sources (Ubuntu CVE entry...

PT-2023-27910 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.14.2 Cilium versions prior to 1.13.7 Cilium versions prior to 1.12.14 Description: An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace can affect traffic on an enti...

CVE-2023-4638

CVE-2023-4638 affects GitLab CE/EE (versions 13.3–16.1.4, 16.2.0–16.2.4, 16.3.0) where an unauthenticated/unauthorized user can fork a project outside of the current group due to improper permission validation. Impact includes potential privilege escalation or access to project data via misrouted...

CVE-2023-33858

CVE-2023-33858 is an cross-site scripting (XSS) vulnerability in IBM Business Automation Workflow. The IBM security bulletins detail that an attacker could embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected products include I...

CVE-2022-43739

IBM Security Verify Access OpenID Connect Provider container is affected by CVE-2022-43739, which could disclose information to a local user via log files, potentially aiding further attacks. Affected product: IBM Security Verify Access OIDC Provider container (all versions). Root cause: informat...

CVE-2023-40270

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-38831. Reason: This candidate is a reservation duplicate of CVE-2023-38831. Notes: All CVE users should reference CVE-2023-38831 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2023-32803

CVE-2023-32803 is referenced in multiple Amazon Linux advisories (ALAS/AL2) related to the ca-certificates package. The root cause is that an initial fix for CVE-2022-23491 did not properly remove root certificates from TrustCor, leaving the store vulnerable. Affected environments include Amazon ...

CVE-2023-39977

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3268. Reason: This candidate is a reservation duplicate of CVE-2023-3268. Notes: All CVE users should reference CVE-2023-3268 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2023-39552

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0527. Reason: This candidate is a reservation duplicate of CVE-2023-0527. Notes: All CVE users should reference CVE-2023-0527 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...