Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-43416 State: PUBLISHED Published: 2024-11-18T16:27:06.243Z Last Updated: 2024-11-18T18:34:01.203Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-200 Description: GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an application endpoint to check if an email address corresponds to a valid GLPI user. Version 10.0.17 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-j8gc-xpgr-2ww7 - https://github.com/glpi-project/g
nces: - https://github.com/glpi-project/glpi/security/advisories/GHSA-j8gc-xpgr-2ww7 - https://github.com/glpi-project/glpi/commit/9be1466053f829680db318f7e7e5880d2d789c6d
CVE ID: CVE-2024-43417 State: PUBLISHED Published: 2024-11-15T18:22:03.977Z Last Updated: 2024-11-15T18:41:33.591Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Software form. Upgrade to 10.0.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-p633-wfj5-8x44
CVE ID: CVE-2024-43418 State: PUBLISHED Published: 2024-11-15T18:23:32.376Z Last Updated: 2024-11-15T18:41:14.709Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-x8jv-fcwx-3x6m
CVE ID: CVE-2024-43420 State: PUBLISHED Published: 2025-05-13T21:03:09.384Z Last Updated: 2025-11-03T19:30:40.396Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel Atom(R) processors Problem Types: Information Disclosure, CWE-1423 Description: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/i
ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html
CVE ID: CVE-2024-43422 State: REJECTED Published: N/A Last Updated: 2025-06-17T02:15:03.197Z Description: No description available.
CVE ID: CVE-2024-43423 State: PUBLISHED Published: 2024-09-24T23:47:27.964Z Last Updated: 2024-09-25T16:58:34.484Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dover Fueling Solutions (DFS) Products: ProGauge MAGLINK LX CONSOLE, ProGauge MAGLINK LX4 CONSOLE Problem Types: CWE-259 Description: The web application for ProGauge MAGLINK LX4 CONSOLE contains an administrative-level user account with a password that cannot be changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-04
CVE ID: CVE-2024-43424 State: PUBLISHED Published: 2024-10-25T06:18:10.875Z Last Updated: 2024-10-25T17:16:12.736Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Sharp Corporation, Toshiba Tec Corporation Products: Sharp Digital Full-color MFPs and Monochrome MFPs, e-STUDIO 908, e-STUDIO 1058, e-STUDIO 1208 Problem Types: CWE-125 Description: Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. Crafted HTTP requests may cause affected products crashed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU95063136/ - https://global.sharp/products/copier/info/
- CISA ADP Vulnrichment: References: - https://jvn.jp/en/vu/JVNVU95063136/ - https://global.sharp/products/copier/info/info_security_2024-10.html - https://www.toshibatec.com/information/20241025_01.html
CVE ID: CVE-2024-43425 State: PUBLISHED Published: 2024-11-07T13:21:59.014Z Last Updated: 2024-11-07T14:45:17.071Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Description: A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304253 - https://moodle.org/mod/forum/discuss.php?d=461193
CVE ID: CVE-2024-43426 State: PUBLISHED Published: 2024-11-07T13:22:42.839Z Last Updated: 2025-02-10T22:27:06.037Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Description: A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304254 - https://moodle.org/mod/forum/discuss.php?d=461194
CVE ID: CVE-2024-43427 State: PUBLISHED Published: 2024-11-11T12:14:22.984Z Last Updated: 2024-11-12T15:03:14.383Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Description: A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304255 - https://moodle.org/mod/forum/discuss.php?d=461195
CVE ID: CVE-2024-43428 State: PUBLISHED Published: 2024-11-07T13:24:11.512Z Last Updated: 2025-02-10T22:26:35.081Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Description: To address a cache poisoning risk in Moodle, additional validation for local storage was required. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304256 - https://moodle.org/mod/forum/discuss.php?d=461196
CVE ID: CVE-2024-43429 State: PUBLISHED Published: 2024-11-11T12:15:00.784Z Last Updated: 2024-11-12T15:16:37.165Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Description: A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304257 - https://moodle.org/mod/forum/discuss.php?d=461197
CVE ID: CVE-2024-43430 State: PUBLISHED Published: 2024-11-11T12:15:36.451Z Last Updated: 2024-11-12T15:01:22.872Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Description: A flaw was found in moodle. External API access to Quiz can override contained insufficient access control. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304258 - https://moodle.org/mod/forum/discuss.php?d=461198
CVE ID: CVE-2024-43431 State: PUBLISHED Published: 2024-11-07T13:27:07.968Z Last Updated: 2024-11-07T15:55:57.730Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Description: A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304259 - https://moodle.org/mod/forum/discuss.php?d=461199
CVE ID: CVE-2024-43432 State: PUBLISHED Published: 2024-11-11T12:16:04.901Z Last Updated: 2024-11-12T15:14:27.618Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Description: A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304260 - https://moodle.org/mod/forum/discuss.php?d=461200
CVE ID: CVE-2024-43433 State: PUBLISHED Published: 2024-11-11T12:16:46.270Z Last Updated: 2024-11-12T15:06:09.890Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Description: A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304261 - https://moodle.org/mod/forum/discuss.php?d=461202
CVE ID: CVE-2024-43434 State: PUBLISHED Published: 2024-11-07T13:28:27.671Z Last Updated: 2024-11-07T15:56:27.455Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Description: The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304262 - https://moodle.org/mod/forum/discuss.php?d=461203
CVE ID: CVE-2024-43435 State: PUBLISHED Published: 2024-11-11T12:17:26.812Z Last Updated: 2024-11-12T15:01:08.757Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Description: A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304263 - https://moodle.org/mod/forum/discuss.php?d=461205
CVE ID: CVE-2024-43436 State: PUBLISHED Published: 2024-11-07T13:29:57.912Z Last Updated: 2024-11-07T15:57:00.698Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Description: A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304264 - https://moodle.org/mod/forum/discuss.php?d=461206
CVE ID: CVE-2024-43437 State: PUBLISHED Published: 2024-11-11T12:19:25.715Z Last Updated: 2025-03-13T14:04:35.671Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Description: A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304266 - https://moodle.org/mod/forum/discuss.php?d=461207
CVE ID: CVE-2024-43438 State: PUBLISHED Published: 2024-11-07T13:31:20.238Z Last Updated: 2024-11-07T16:48:06.773Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Description: A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304267 - https://moodle.org/mod/forum/discuss.php?d=461208
CVE ID: CVE-2024-43439 State: PUBLISHED Published: 2024-11-11T16:00:39.212Z Last Updated: 2024-11-12T14:55:08.278Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Description: A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304268 - https://moodle.org/mod/forum/discuss.php?d=461209
CVE ID: CVE-2024-43440 State: PUBLISHED Published: 2024-11-07T13:32:16.113Z Last Updated: 2024-11-07T14:38:59.743Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Description: A flaw was found in moodle. A local file may include risks when restoring block backups. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2304269 - https://moodle.org/mod/forum/discuss.php?d=461210
CVE ID: CVE-2024-43441 State: PUBLISHED Published: 2024-12-24T11:59:59.219Z Last Updated: 2024-12-31T18:47:44.461Z Vendors: Apache Software Foundation Products: Apache HugeGraph-Server Problem Types: CWE-302 Description: Authentication Bypass by Assumed-Immutable Data vulnerability in Apache HugeGraph-Server. This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.5.0. Users are recommended to upgrade to version 1.5.0, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/h2607yv32wgcrywov960jpxhvsmmlf12
CVE ID: CVE-2024-43442 State: PUBLISHED Published: 2024-08-26T08:42:39.842Z Last Updated: 2024-08-26T15:27:15.700Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: OTRS AG Products: OTRS, ((OTRS)) Community Edition Problem Types: CWE-790 Description: Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in OTRS (System Configuration modules) and ((OTRS)) Community Edition allows Cross-Site Scripting (XSS) within the System Configuration targeting other admins. This issue affects: * OTRS from 7.0.X through 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Prod
X through 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://otrs.com/release-notes/otrs-security-advisory-2024-10/
CVE ID: CVE-2024-43443 State: PUBLISHED Published: 2024-08-26T08:42:55.095Z Last Updated: 2024-08-26T14:55:57.618Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: OTRS AG Products: OTRS, ((OTRS)) Community Edition Problem Types: CWE-790 Description: Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in Process Management modules of OTRS and ((OTRS)) Community Edition allows Cross-Site Scripting (XSS) within the Process Management targeting other admins. This issue affects: * OTRS from 7.0.X through 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Product
hrough 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://otrs.com/release-notes/otrs-security-advisory-2024-11/
CVE ID: CVE-2024-43444 State: PUBLISHED Published: 2024-08-26T08:42:58.796Z Last Updated: 2024-08-29T07:36:13.555Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: OTRS AG Products: OTRS, ((OTRS)) Community Edition Problem Types: CWE-532 Description: Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match and debugging for the authentication backend has been enabled. This issue affects: * OTRS from 7.0.X through 7.0.50 * OTRS 8.0.X * OTRS 2023.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Ed
23.X * OTRS from 2024.X through 2024.5.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://otrs.com/release-notes/otrs-security-advisory-2024-12/
CVE ID: CVE-2024-43445 State: PUBLISHED Published: 2025-01-27T05:58:11.722Z Last Updated: 2025-02-12T20:41:31.932Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: OTRS AG Products: OTRS, ((OTRS)) Community Edition Problem Types: CWE-20 Description: A vulnerability exists in OTRS and ((OTRS Community Edition)) that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerability by uploading or inserting content that would be treated as a different MIME type than intended. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTR
s: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://otrs.com/release-notes/otrs-security-advisory-2025-01/
CVE ID: CVE-2024-43446 State: PUBLISHED Published: 2025-01-27T05:58:29.271Z Last Updated: 2025-02-12T20:41:31.804Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: OTRS AG Products: OTRS, ((OTRS)) Community Edition Problem Types: CWE-269 Description: An improper privilege management vulnerability in OTRS Generic Interface module allows change of the Ticket status even if the user only has ro permissions. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X * OTRS 2024.X * ((OTRS)) Community Edition: 6.0.x Products based on the ((OTRS)) Community Edition also very likely to be affected Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
ommunity Edition also very likely to be affected Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://otrs.com/release-notes/otrs-security-advisory-2025-02/
CVE ID: CVE-2024-43447 State: PUBLISHED Published: 2024-11-12T17:53:47.242Z Last Updated: 2025-07-08T15:41:13.858Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2022 Problem Types: CWE-415 Description: Windows SMBv3 Server Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43447
CVE ID: CVE-2024-43449 State: PUBLISHED Published: 2024-11-12T17:53:47.899Z Last Updated: 2025-07-08T15:41:14.382Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
r Core installation), Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-125 Description: Windows USB Video Class System Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43449
CVE ID: CVE-2024-43450 State: PUBLISHED Published: 2024-11-12T17:53:48.450Z Last Updated: 2025-07-08T15:41:15.121Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), W
ows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) Problem Types: CWE-924 Description: Windows DNS Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43450
CVE ID: CVE-2024-43451 State: PUBLISHED Published: 2024-11-12T17:53:48.946Z Last Updated: 2025-10-21T22:55:37.170Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Wi
r Core installation), Windows 11 Version 24H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-73 Description: NTLM Hash Disclosure Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43451
CVE ID: CVE-2024-43452 State: PUBLISHED Published: 2024-11-12T17:53:49.522Z Last Updated: 2025-07-08T15:41:16.301Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 11 Version 24H2, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2025, Windows Server 2025 (Ser
ice Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation) Problem Types: CWE-367 Description: Windows Registry Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43452