Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-38158 State: PUBLISHED Published: 2023-08-21T19:04:16.901Z Last Updated: 2025-02-28T19:35:05.556Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Information Disclosure Description: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38158
CVE ID: CVE-2023-38159 State: PUBLISHED Published: 2023-10-10T17:08:08.854Z Last Updated: 2025-04-14T22:46:42.122Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-591 Description: Windows Graphics Component Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program
91 Description: Windows Graphics Component Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38159
CVE ID: CVE-2023-38160 State: PUBLISHED Published: 2023-09-12T16:58:37.082Z Last Updated: 2025-10-30T18:18:06.070Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2,
2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-416 Description: Windows TCP/IP Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38160
CVE ID: CVE-2023-38161 State: PUBLISHED Published: 2023-09-12T16:58:18.031Z Last Updated: 2025-10-30T18:17:42.403Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Wi
08 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-416 Description: Windows GDI Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38161
CVE ID: CVE-2023-38162 State: PUBLISHED Published: 2023-09-12T16:58:17.503Z Last Updated: 2025-10-30T18:17:41.544Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-191 Description: DHCP Server Service Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refer
ervice Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38162
CVE ID: CVE-2023-38163 State: PUBLISHED Published: 2023-09-12T16:58:36.543Z Last Updated: 2025-10-30T18:18:18.401Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Defender Security Intelligence Updates Problem Types: Security Feature Bypass Description: Windows Defender Attack Surface Reduction Security Feature Bypass Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38163
CVE ID: CVE-2023-38164 State: PUBLISHED Published: 2023-09-12T16:58:36.007Z Last Updated: 2025-10-30T18:18:05.497Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1, Microsoft Dynamics 365 (on-premises) version 9.0 Problem Types: CWE-79 Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38164
CVE ID: CVE-2023-38166 State: PUBLISHED Published: 2023-10-10T17:08:08.351Z Last Updated: 2025-04-14T22:46:41.646Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Wi
08 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-416 Description: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38166
CVE ID: CVE-2023-38167 State: PUBLISHED Published: 2023-08-08T17:08:45.147Z Last Updated: 2025-02-27T21:07:18.969Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Problem Types: CWE-284 Description: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38167
CVE ID: CVE-2023-38169 State: PUBLISHED Published: 2023-08-08T17:08:44.529Z Last Updated: 2025-02-27T21:07:23.872Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C) Vendors: Microsoft Products: Microsoft OLE DB Driver 19 for SQL Server, Microsoft OLE DB Driver 18 for SQL Server, Microsoft ODBC Driver 18 for SQL Server on Linux, Microsoft ODBC Driver 17 for SQL Server on MacOS, Microsoft SQL Server 2022 (CU 5), Microsoft ODBC Driver 17 for SQL Server on Linux, Microsoft ODBC Driver 18 for SQL Server on MacOS, Microsoft SQL Server 2019 (CU 21), Microsoft ODBC Driver 17 for SQL Server on Windows, Microsoft ODBC Driver 18 for SQL Server on Windows Problem Types
1), Microsoft ODBC Driver 17 for SQL Server on Windows, Microsoft ODBC Driver 18 for SQL Server on Windows Problem Types: CWE-416 Description: Microsoft SQL OLE DB Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38169
CVE ID: CVE-2023-38170 State: PUBLISHED Published: 2023-08-08T17:08:43.944Z Last Updated: 2025-01-01T01:59:01.369Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extension, HEVC Video Extensions Problem Types: CWE-122 Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38170
CVE ID: CVE-2023-38171 State: PUBLISHED Published: 2023-10-10T17:07:23.843Z Last Updated: 2025-04-14T22:45:47.105Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.7, Windows Server 2022, Windows 11 version 21H2, Windows 11 version 22H2, .NET 7.0, PowerShell 7.3 Problem Types: CWE-476 Description: Microsoft QUIC Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/upd
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38171
CVE ID: CVE-2023-38172 State: PUBLISHED Published: 2023-08-08T17:08:43.361Z Last Updated: 2025-02-27T21:07:29.471Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Wi
08 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-126 Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38172
CVE ID: CVE-2023-38173 State: PUBLISHED Published: 2023-07-21T17:51:28.763Z Last Updated: 2025-02-28T19:38:00.621Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge for Android Problem Types: Spoofing Description: Microsoft Edge for Android Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38173
CVE ID: CVE-2023-38174 State: PUBLISHED Published: 2023-12-07T20:45:52.230Z Last Updated: 2025-01-01T02:18:31.311Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Information Disclosure Description: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38174
CVE ID: CVE-2023-38175 State: PUBLISHED Published: 2023-08-08T17:08:42.860Z Last Updated: 2025-02-27T21:07:35.302Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Defender Antimalware Platform Problem Types: CWE-59 Description: Microsoft Windows Defender Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38175
CVE ID: CVE-2023-38176 State: PUBLISHED Published: 2023-08-08T17:08:57.594Z Last Updated: 2025-01-01T01:59:16.368Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Arc-Enabled Servers Problem Types: CWE-22 Description: Azure Arc-Enabled Servers Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38176
CVE ID: CVE-2023-38177 State: PUBLISHED Published: 2023-11-14T17:57:16.219Z Last Updated: 2025-10-08T23:59:29.222Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-502 Description: Microsoft SharePoint Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38177
CVE ID: CVE-2023-38178 State: PUBLISHED Published: 2023-08-08T17:08:57.014Z Last Updated: 2025-01-01T01:59:15.830Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: .NET 6.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4 Problem Types: CWE-400 Description: .NET Core and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38178
CVE ID: CVE-2023-38180 State: PUBLISHED Published: 2023-08-08T18:52:31.790Z Last Updated: 2025-10-21T23:05:41.434Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: ASP.NET Core 2.1, .NET 6.0, .NET 7.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6 Problem Types: Denial of Service Description: .NET and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180
CVE ID: CVE-2023-38181 State: PUBLISHED Published: 2023-08-08T17:08:55.897Z Last Updated: 2025-02-27T21:06:09.342Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 13 Problem Types: CWE-502 Description: Microsoft Exchange Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38181
CVE ID: CVE-2023-38182 State: PUBLISHED Published: 2023-08-08T17:08:55.358Z Last Updated: 2025-02-27T21:06:14.694Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 13, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 12 Problem Types: CWE-502 Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38182
CVE ID: CVE-2023-38184 State: PUBLISHED Published: 2023-08-08T17:08:42.283Z Last Updated: 2025-01-01T01:58:59.597Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Wi
08 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-416 Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38184
CVE ID: CVE-2023-38185 State: PUBLISHED Published: 2023-08-08T17:08:41.686Z Last Updated: 2025-02-27T21:07:43.934Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 13, Microsoft Exchange Server 2019 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 23 Problem Types: CWE-23 Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38185
CVE ID: CVE-2023-38186 State: PUBLISHED Published: 2023-08-08T17:08:41.118Z Last Updated: 2025-01-01T01:58:58.607Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2 Problem Types: CWE-306 Description: Windows Mobile Device Management Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38186
CVE ID: CVE-2023-38187 State: PUBLISHED Published: 2023-07-21T17:51:58.498Z Last Updated: 2025-02-28T19:36:40.369Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38187
CVE ID: CVE-2023-38188 State: PUBLISHED Published: 2023-08-08T17:08:40.569Z Last Updated: 2025-01-01T01:58:58.107Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure HDInsight Problem Types: CWE-79 Description: Azure Apache Hadoop Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38188
CVE ID: CVE-2023-38190 State: PUBLISHED Published: 2023-10-21T00:00:00 Last Updated: 2024-09-11T20:39:20.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2023-0014/
CVE ID: CVE-2023-38191 State: PUBLISHED Published: 2023-10-20T00:00:00 Last Updated: 2024-09-12T18:04:03.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2023-0012/
CVE ID: CVE-2023-38192 State: PUBLISHED Published: 2023-10-21T00:00:00 Last Updated: 2024-09-16T13:21:06.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwords. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2023-0011/
CVE ID: CVE-2023-38193 State: PUBLISHED Published: 2023-10-21T00:00:00 Last Updated: 2024-09-16T13:15:06.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command line. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/en/security-advisories/usd-2023-0015/
CVE ID: CVE-2023-38194 State: PUBLISHED Published: 2023-10-21T00:00:00 Last Updated: 2024-09-16T13:14:18.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows keepalive.php XSS via a GET parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/ - https://herolab.usd.de/security-advisories/usd-2023-0013/
CVE ID: CVE-2023-38195 State: PUBLISHED Published: 2023-07-22T00:00:00 Last Updated: 2024-10-24T15:53:37.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external (SQL Server or PostgreSQL) metadata storage is used. Exploitation can only occur from a high-privileged user account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/datalust/seq-tickets/issues/1886
CVE ID: CVE-2023-38197 State: PUBLISHED Published: 2023-07-13T00:00:00 Last Updated: 2024-08-02T17:30:14.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://codereview.qt-project.org/c/qt/qtbase/+/488960 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEGQ6DFTL2BEJMHCD5FJGI6XLWQI7UEA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/mes