generated content from 2023-09-03

mapping.csv

@@ -211604,3 +211604,13 @@ vulnerability,CVE-2022-46527,vulnerability--5104591f-da91-4468-ad01-932c230d05d6
 vulnerability,CVE-2022-22305,vulnerability--830b5706-2265-439b-b9e2-91ca0cf8c30f
 vulnerability,CVE-2022-44349,vulnerability--0af5d330-3222-4c31-aaeb-2ff5e78a0d23
 vulnerability,CVE-2022-4343,vulnerability--1f10d38c-0dec-405c-a4db-605fc4470235
+vulnerability,CVE-2023-39983,vulnerability--dc4bbe57-6e0d-4618-b962-28fa7259cf47
+vulnerability,CVE-2023-39979,vulnerability--5052f138-4486-481e-aacc-1cd5f27b4511
+vulnerability,CVE-2023-39981,vulnerability--6d91b1df-9139-44ae-a4b3-959f5980c63c
+vulnerability,CVE-2023-39980,vulnerability--774fdc4d-8b4d-48b5-9657-036fa810866f
+vulnerability,CVE-2023-39982,vulnerability--3ee1b5ad-cf6a-4e42-b9da-bdcc68203bbb
+vulnerability,CVE-2023-4736,vulnerability--e0c28672-7cba-4ef3-b259-560ec050f5f2
+vulnerability,CVE-2023-4734,vulnerability--da947ba5-9797-4eda-9f2c-3bf059dc9a64
+vulnerability,CVE-2023-4718,vulnerability--bfa48547-33dd-492d-ad49-3fa099708863
+vulnerability,CVE-2023-4738,vulnerability--bf42107a-69f1-436e-b936-666b0a27091f
+vulnerability,CVE-2023-4735,vulnerability--fa61ea71-8d91-4ca1-bbb2-3e7ea8d5216c

objects/vulnerability/vulnerability--3ee1b5ad-cf6a-4e42-b9da-bdcc68203bbb.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--183dc871-3059-48b8-a330-c375a409a288",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--3ee1b5ad-cf6a-4e42-b9da-bdcc68203bbb",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:49.000637Z",
+            "modified": "2023-09-03T00:05:49.000637Z",
+            "name": "CVE-2023-39982",
+            "description": "A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which might facilitate man-in-the-middle attacks and enable the decryption of SSH traffic.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-39982"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--5052f138-4486-481e-aacc-1cd5f27b4511.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--0851aaa0-220b-4e30-bb97-d46f0e494b00",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--5052f138-4486-481e-aacc-1cd5f27b4511",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:48.97048Z",
+            "modified": "2023-09-03T00:05:48.97048Z",
+            "name": "CVE-2023-39979",
+            "description": "There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.  \n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-39979"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--6d91b1df-9139-44ae-a4b3-959f5980c63c.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6b2b3833-e5ff-417c-b9b7-42624033b13d",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--6d91b1df-9139-44ae-a4b3-959f5980c63c",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:48.978486Z",
+            "modified": "2023-09-03T00:05:48.978486Z",
+            "name": "CVE-2023-39981",
+            "description": "A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-39981"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--774fdc4d-8b4d-48b5-9657-036fa810866f.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--3441adaf-a837-4364-aa63-83189813cb66",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--774fdc4d-8b4d-48b5-9657-036fa810866f",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:48.990641Z",
+            "modified": "2023-09-03T00:05:48.990641Z",
+            "name": "CVE-2023-39980",
+            "description": "A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter SQL commands.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-39980"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--bf42107a-69f1-436e-b936-666b0a27091f.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--d158de2e-c4e1-4821-899b-bbc84d5ef6c5",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--bf42107a-69f1-436e-b936-666b0a27091f",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:50.704787Z",
+            "modified": "2023-09-03T00:05:50.704787Z",
+            "name": "CVE-2023-4738",
+            "description": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-4738"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--bfa48547-33dd-492d-ad49-3fa099708863.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--62512098-219d-457f-8187-ba8a4510529f",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--bfa48547-33dd-492d-ad49-3fa099708863",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:50.698071Z",
+            "modified": "2023-09-03T00:05:50.698071Z",
+            "name": "CVE-2023-4718",
+            "description": "The Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-4718"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--da947ba5-9797-4eda-9f2c-3bf059dc9a64.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--ab061bf0-49a6-4f66-b14c-6651aa502bf6",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--da947ba5-9797-4eda-9f2c-3bf059dc9a64",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:50.680845Z",
+            "modified": "2023-09-03T00:05:50.680845Z",
+            "name": "CVE-2023-4734",
+            "description": "Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-4734"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--dc4bbe57-6e0d-4618-b962-28fa7259cf47.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6bce195f-79a2-4a62-a52f-366ad9a0f873",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--dc4bbe57-6e0d-4618-b962-28fa7259cf47",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:48.934Z",
+            "modified": "2023-09-03T00:05:48.934Z",
+            "name": "CVE-2023-39983",
+            "description": "A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application.\n\n",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-39983"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--e0c28672-7cba-4ef3-b259-560ec050f5f2.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--b7a6deb3-5d4d-4cde-a8e2-cf61f96891c5",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--e0c28672-7cba-4ef3-b259-560ec050f5f2",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:50.658482Z",
+            "modified": "2023-09-03T00:05:50.658482Z",
+            "name": "CVE-2023-4736",
+            "description": "Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-4736"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--fa61ea71-8d91-4ca1-bbb2-3e7ea8d5216c.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--4a29f096-2918-4039-9963-6f73c0a4147b",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--fa61ea71-8d91-4ca1-bbb2-3e7ea8d5216c",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2023-09-03T00:05:50.708571Z",
+            "modified": "2023-09-03T00:05:50.708571Z",
+            "name": "CVE-2023-4735",
+            "description": "Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2023-4735"
+                }
+            ]
+        }
+    ]
+}