Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-31946 State: PUBLISHED Published: 2023-08-17T00:00:00 Last Updated: 2024-10-08T15:09:11.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DiliLearngent/BugReport/blob/main/php/Online-Travel-Agency-System/bug8-File%20upload2.md
CVE ID: CVE-2023-31972 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T18:35:12.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm v1.3.0 was discovered to contain a use after free via the function pp_getline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/209
CVE ID: CVE-2023-31973 State: PUBLISHED Published: 2023-05-09T00:00:00 Last Updated: 2024-08-02T15:03:28.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/207
CVE ID: CVE-2023-31974 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-28T19:15:09.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/208
CVE ID: CVE-2023-31975 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T18:28:03.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/yasm/yasm/issues/210 - http://www.openwall.com/lists/oss-security/2023/06/20/6 - http://www.openwall.com/lists/oss-security/2023/06/21/2 - http://www.openwall.com/lists/oss-security/2023/06/21/7
0/6 - http://www.openwall.com/lists/oss-security/2023/06/21/2 - http://www.openwall.com/lists/oss-security/2023/06/21/7 - http://www.openwall.com/lists/oss-security/2023/06/21/10 - http://www.openwall.com/lists/oss-security/2023/06/21/5 - http://www.openwall.com/lists/oss-security/2023/06/21/8 - http://www.openwall.com/lists/oss-security/2023/06/21/9 - http://www.openwall.com/lists/oss-security/2023/06/21/13 - http://www.openwall.com/lists/oss-security/2023/06/22/1 - http://www.openwall.com/lists/oss-security/2023/06/22/3 - http://www.openwall.com/lists/oss-security/2023/06/22/6 - http://www.openwall.com/lists/oss-security/2023/06/23/2 - http://www.openwall.com/lists/oss-security/2023/06/23/
/22/6 - http://www.openwall.com/lists/oss-security/2023/06/23/2 - http://www.openwall.com/lists/oss-security/2023/06/23/1 - http://www.openwall.com/lists/oss-security/2023/06/23/4 - http://www.openwall.com/lists/oss-security/2023/06/23/8 - http://www.openwall.com/lists/oss-security/2023/06/23/9 - http://www.openwall.com/lists/oss-security/2023/06/24/1
CVE ID: CVE-2023-31976 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T18:17:53.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/265
CVE ID: CVE-2023-31979 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T16:32:40.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/petewarden/catdoc/issues/9
CVE ID: CVE-2023-31981 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T16:12:35.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/irontec/sngrep/issues/430
CVE ID: CVE-2023-31982 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-28T16:19:55.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_packet_reasm_ip at /src/capture.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/irontec/sngrep/issues/431
CVE ID: CVE-2023-31983 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:19:28.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/2/Readme.md
CVE ID: CVE-2023-31985 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T16:08:34.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the formAccept function in /bin/webs without any limitations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/3/Readme.md
CVE ID: CVE-2023-31986 State: PUBLISHED Published: 2023-05-15T00:00:00.000Z Last Updated: 2025-01-23T19:52:11.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/4/Readme.md
CVE ID: CVE-2023-31994 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T16:42:07.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service (DoS) via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.01 and IP Camera XNV-9082R 2.10.02. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf - https://hanwhav
References: - https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf - https://hanwhavisionamerica.com/download/50042/
CVE ID: CVE-2023-31995 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T16:38:42.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf - https://hanwhavisionamerica.com/download/50042/
CVE ID: CVE-2023-31996 State: PUBLISHED Published: 2023-05-23T00:00:00 Last Updated: 2025-01-17T16:33:53.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hanwhavision.com/wp-content/uploads/2023/04/Camera-Vulnerability-Report.pdf - https://hanwhavisionamerica.com/download/50042/
CVE ID: CVE-2023-31997 State: PUBLISHED Published: 2023-06-30T23:39:29.425Z Last Updated: 2024-11-26T19:07:26.989Z Vendors: Ubiquiti Inc. Products: UniFi OS Description: UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that are both (1) running UniFi OS 3.1 and (2) hosting the UniFi Network application. "Applicable Cloud Keys" include the following: Cloud Key Gen2 and Cloud Key Gen2 Plus. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-032-032/e57301f4-4f5e-4d9f-90bc-71f1923ed7a4
CVE ID: CVE-2023-31998 State: PUBLISHED Published: 2023-07-18T01:40:05.440Z Last Updated: 2024-10-29T15:44:09.148Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Ubiquiti Products: EdgeRouter, Aircube Description: A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-033-033/17f7c7c0-830b-4625-a2ee-e90e514e7b0f
CVE ID: CVE-2023-31999 State: PUBLISHED Published: 2023-07-04T16:29:20.281Z Last Updated: 2024-11-26T18:47:25.202Z Vendors: npm Products: @fastify/oauth2 Description: All versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all requests for all users. The purpose of the Oauth2 state parameter is to prevent Cross-Site-Request-Forgery attacks. As such, it should be unique per user and should be connected to the user's session in some way that will allow the server to validate it. v7.2.0 changes the default behavior to store the state in a cookie with the http-only and same-site=lax attributes set. The state is now by default generated for
ore the state in a cookie with the http-only and same-site=lax attributes set. The state is now by default generated for every user. Note that this contains a breaking change in the checkStateFunction function, which now accepts the full Request object. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2020418 - https://auth0.com/docs/secure/attack-protection/state-parameters - https://github.com/fastify/fastify-oauth2/releases/tag/v7.2.0
CVE ID: CVE-2023-32000 State: PUBLISHED Published: 2023-07-07T23:07:53.212Z Last Updated: 2024-10-21T21:11:02.916Z Vendors: Ubiquiti Products: UniFi Network Application Description: A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-034-034/53cfcb84-b42b-4f8f-afbf-07c0ca7cabe2
CVE ID: CVE-2023-32001 State: REJECTED Published: 2023-07-26T20:09:57.905Z Last Updated: 2023-08-27T00:02:01.990Z Description: No description available.
CVE ID: CVE-2023-32002 State: PUBLISHED Published: 2023-08-21T16:52:42.147Z Last Updated: 2025-07-02T14:48:45.647Z Vendors: NodeJS Products: Node Description: The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/1960870 - https://security.netapp.com/advisory/ntap-202
SA ADP Vulnrichment: References: - https://hackerone.com/reports/1960870 - https://security.netapp.com/advisory/ntap-20230915-0009/
CVE ID: CVE-2023-32003 State: PUBLISHED Published: 2023-08-15T15:10:29.363Z Last Updated: 2025-07-03T14:09:41.840Z Vendors: NodeJS Products: Node Description: `fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp() API and the impact is a malicious actor could create an arbitrary directory. This vulnerability affects all users using the experimental permission model in Node.js 20. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2037887 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/ - https://security.netapp.com/advisory/ntap-20230915-0009/
CVE ID: CVE-2023-32004 State: PUBLISHED Published: 2023-08-15T15:10:19.152Z Last Updated: 2025-05-08T16:05:43.836Z Vendors: NodeJS Products: Node Description: A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using the experimental permission model in Node.js 20. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2038134 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/ - https://security.netapp.com/advisory/ntap-20230915-0009/
CVE ID: CVE-2023-32005 State: PUBLISHED Published: 2023-09-12T01:36:55.851Z Last Updated: 2025-05-05T13:56:50.265Z Vendors: NodeJS Products: Node Description: A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non-* argument. This flaw arises from an inadequate permission model that fails to restrict file stats through the `fs.statfs` API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to. This vulnerability affects all users using the experimental permission model in Node.js 20. Please note that at the time this CVE was issued, the
s all users using the experimental permission model in Node.js 20. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2051224 - https://security.netapp.com/advisory/ntap-20231103-0004/
CVE ID: CVE-2023-32006 State: PUBLISHED Published: 2023-08-15T15:10:09.447Z Last Updated: 2025-05-08T16:07:02.197Z Vendors: NodeJS Products: Node Description: The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2043807 - https://lists.fedoraproj
ogram Container: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/2043807 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PBOZE2QZIBLFFTYWYN23FGKN6HULZ6HX/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JQPELKG2LVTADSB7ME73AV4DXQK47PWK/ - https://security.netapp.com/advisory/ntap-20230915-0009/
CVE ID: CVE-2023-32007 State: PUBLISHED Published: 2023-05-02T08:37:22.118Z Last Updated: 2025-02-13T16:50:19.521Z Vendors: Apache Software Foundation Products: Apache Spark Problem Types: CWE-77 Description: ** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a
itrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This issue was disclosed earlier as CVE-2022-33891, but incorrectly claimed version 3.1.3 (which has since gone EOL) would not be affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Users are recommended to upgrade to a supported version of Apache Spark, such as version 3.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
, such as version 3.4.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cve.org/CVERecord?id=CVE-2022-33891 - https://spark.apache.org/security.html - https://lists.apache.org/thread/poxgnxhhnzz735kr1wos366l5vdbb0nv - http://www.openwall.com/lists/oss-security/2023/05/02/1
CVE ID: CVE-2023-32008 State: PUBLISHED Published: 2023-06-13T23:26:12.670Z Last Updated: 2025-01-01T01:44:02.406Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-476 Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Additional Analyst Notes: - C
-476 Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32008
CVE ID: CVE-2023-32009 State: PUBLISHED Published: 2023-06-13T23:26:13.333Z Last Updated: 2025-01-01T01:44:03.130Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-284 Description: Windows Collaborative Translation Framework Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichm
Collaborative Translation Framework Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32009
CVE ID: CVE-2023-32010 State: PUBLISHED Published: 2023-06-13T23:26:13.939Z Last Updated: 2025-01-01T01:44:03.597Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 22H2 Problem Types: CWE-591 Description: Windows Bus Filter Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32010
CVE ID: CVE-2023-32011 State: PUBLISHED Published: 2023-06-13T23:26:14.502Z Last Updated: 2025-01-01T01:44:04.138Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Wi
08 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-125 Description: Windows iSCSI Discovery Service Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32011
CVE ID: CVE-2023-32012 State: PUBLISHED Published: 2023-06-13T23:26:15.095Z Last Updated: 2025-01-01T01:44:04.603Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2 Problem Types: CWE-59 Description: Windows Container Manager Service Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32012
CVE ID: CVE-2023-32013 State: PUBLISHED Published: 2023-06-13T23:26:15.656Z Last Updated: 2025-01-01T01:44:05.210Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2 Problem Types: CWE-400 Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32013