cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2023-22862,https://securityvulnerability.io/vulnerability/CVE-2023-22862,IBM Aspera information disclosure,"IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.",IBM,"Aspera Connect,Aspera Cargo",5.9,MEDIUM,0.0015200000489130616,false,,false,false,false,,,false,false,,2023-06-05T00:15:00.000Z,0
CVE-2023-27285,https://securityvulnerability.io/vulnerability/CVE-2023-27285,IBM Aspera buffer overflow,"IBM Aspera Connect and Aspera Cargo versions 4.2.5 are affected by a buffer overflow vulnerability due to improper bounds checking. This weakness allows an attacker to overflow a buffer, potentially enabling the execution of arbitrary code on the affected system. Timely patching and adherence to security best practices are essential for mitigating the risks associated with this vulnerability.",IBM,"Aspera Connect,Aspera Cargo",7.8,HIGH,0.0004400000034365803,false,,false,false,false,,,false,false,,2023-06-05T00:15:00.000Z,0