deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-33487
Published: 2023-05-31
Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/4; https://github.com/Kazamayc/vuln/tree/main/TOTOLINK/X5000R/4
CVE: CVE-2023-33507
Published: 2023-05-31
Description: KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.
CVSS Score: 7.5 (HIGH)
References: https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/; https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/
CVE: CVE-2023-33508
Published: 2023-05-31
Description: KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/; https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/
CVE: CVE-2023-33509
Published: 2023-05-31
Description: KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/; https://zxsecurity.co.nz/research/advisories/kramer-via-go-2-rce-and-other-vulns/
CVE: CVE-2023-33736
Published: 2023-05-31
Description: A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/jqhph/dcat-admin/issues/2027; https://github.com/jqhph/dcat-admin/issues/2027
CVE: CVE-2023-3009
Published: 2023-05-31
Description: Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/nilsteampassnet/teampass/commit/6ba8cf1f4b89d62a08d122d533ccf4cb4e26a4ee; https://huntr.dev/bounties/2929faca-5822-4636-8f04-ca5e0001361f; https://github.com/nilsteampassnet/teampass/commit/6ba8cf1f4b89d62a08d122d533ccf4cb4e26a4ee
CVE: CVE-2023-26842
Published: 2023-05-31
Description: A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the OptionManager.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26842; https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-26842
CVE: CVE-2023-31548
Published: 2023-05-31
Description: A stored Cross-site scripting (XSS) vulnerability in the FundRaiserEditor.php component of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-31548; https://github.com/10splayaSec/CVE-Disclosures/tree/main/ChurchCRM/CVE-2023-31548
CVE: CVE-2023-34218
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34219
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34220
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34221
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34222
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34223
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34224
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-601
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34225
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34226
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34227
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-749
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34228
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-308
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-34229
Published: 2023-05-31
Description: In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/; https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2023-3012
Published: 2023-05-31
Description: NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/gpac/gpac/commit/53387aa86c1af1228d0fa57c67f9c7330716d5a7; https://huntr.dev/bounties/916b787a-c603-409d-afc6-25bb02070e69; https://www.debian.org/security/2023/dsa-5452
CVE: CVE-2023-3013
Published: 2023-05-31
Description: Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-252
References: https://github.com/gpac/gpac/commit/78e539b43293829a14a32e821f5267e3b7417594; https://huntr.dev/bounties/52f95edc-cc03-4a9f-9bf8-74f641260073; https://github.com/gpac/gpac/commit/78e539b43293829a14a32e821f5267e3b7417594
CVE: CVE-2023-3014
Published: 2023-05-31
Description: A vulnerability, which was classified as problematic, was found in BeipyVideoResolution up to 2.6. Affected is an unknown function of the file admin/admincore.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230358 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/BeipyVideoResolution/xss.md; https://vuldb.com/?ctiid.230358; https://vuldb.com/?id.230358
CVE: CVE-2023-3015
Published: 2023-05-31
Description: A vulnerability has been found in yiwent Vip Video Analysis 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file data/title.php. The manipulation of the argument titurl leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230359.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/VIP-video-analysis/SSRF.md; https://vuldb.com/?ctiid.230359; https://vuldb.com/?id.230359
CVE: CVE-2023-3016
Published: 2023-05-31
Description: A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-230360.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/VIP-video-analysis/XSS.md; https://vuldb.com/?ctiid.230360; https://vuldb.com/?id.230360
CVE: CVE-2023-2758
Published: 2023-05-31
Description: A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time.
CVSS Score: 3.7 (LOW)
CWE: CWE-799
References: https://jvn.jp/en/vu/JVNVU93372935/index.html; https://www.tenable.com/security/research/tra-2023-21; https://jvn.jp/en/vu/JVNVU93372935/index.html
CVE: CVE-2023-3017
Published: 2023-05-31
Description: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/?page=user/manage_user of the component Manage User Page. The manipulation of the argument First Name/Middle Name/Last Name leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230361 was assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-80
References: https://medium.com/@akashpandey380/lost-and-found-information-system-v1-0-html-injection-3596f2b856c0; https://vuldb.com/?ctiid.230361; https://vuldb.com/?id.230361
CVE: CVE-2023-3018
Published: 2023-05-31
Description: A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/?page=user/list. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230362 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://medium.com/@akashpandey380/lost-and-found-information-system-v1-0-idor-cve-2023-977966c4450d; https://vuldb.com/?ctiid.230362; https://vuldb.com/?id.230362
CVE: CVE-2023-29747
Published: 2023-05-31
Description: Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Depending on how the data is used, this can result in various attack consequences, such as ad display exceptions.
CVSS Score: 9.8 (CRITICAL)
References: https://apksos.com/app/story.saver.downloader.photo.video.repost.byrk; https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29747/CVE%20detail.md; https://www.instagram.com/nihans_macrame/
CVE: CVE-2023-3020
Published: 2023-05-31
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mkucej/i-librarian-free/commit/3f2c64768a70fc0d529bc29d47bc706ecf26314e; https://huntr.dev/bounties/92cbe37c-33fa-43bf-8d5b-69aebf51d32c; https://github.com/mkucej/i-librarian-free/commit/3f2c64768a70fc0d529bc29d47bc706ecf26314e
CVE: CVE-2023-3021
Published: 2023-05-31
Description: Cross-site Scripting (XSS) - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/mkucej/i-librarian-free/commit/187e5ff4f413047fb522a9ab24c3c42555d7cfe7; https://huntr.dev/bounties/9d289d3a-2931-4e94-b61c-449581736eff; https://github.com/mkucej/i-librarian-free/commit/187e5ff4f413047fb522a9ab24c3c42555d7cfe7
CVE: CVE-2023-33964
Published: 2023-05-31
Description: mx-chain-go is an implementation of the MultiversX blockchain protocol written in the Go language. Metachain cannot process a cross-shard miniblock. Prior to version 1.4.16, an invalid transaction with the wrong username on metachain is not treated correctly on the metachain transaction processor. This is strictly a processing issue that could have happened on MultiversX chain. If an error like this had occurred, the metachain would have stopped notarizing blocks from the shard chains. The resuming of notarization is possible only after applying a patched binary version. A patch in version 1.4.16 introduces `processIfTxErrorCrossShard` for the metachain transaction processor. There are no known workarounds for this issue.

CVSS Score: 8.6 (HIGH)
CWE: CWE-20
References: https://github.com/multiversx/mx-chain-go/commit/[PII_REDACTED]5f4b5f79e51b32f8b7111f8d921606; https://github.com/multiversx/mx-chain-go/security/advisories/GHSA-7xpv-4pm9-xch2; https://github.com/multiversx/mx-chain-go/commit/[PII_REDACTED]5f4b5f79e51b32f8b7111f8d921606
CVE: CVE-2023-33966
Published: 2023-05-31
Description: Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and deno_runtime 0.114.0, outbound HTTP requests made using the built-in `node:http` or `node:https` modules are incorrectly not checked against the network permission allow list (`--allow-net`). Dependencies relying on these built-in modules are subject to the vulnerability too. Users of Deno versions prior to 1.34.0 are unaffected. Deno Deploy users are unaffected. This problem has been patched in Deno v1.34.1 and deno_runtime 0.114.1 and all users are recommended to update to this version. No workaround is available for this issue.

CVSS Score: 8.6 (HIGH)
CWE: CWE-269, CWE-276
References: https://github.com/denoland/deno/releases/tag/v1.34.1; https://github.com/denoland/deno/security/advisories/GHSA-vc52-gwm3-8v2f; https://github.com/denoland/deno/releases/tag/v1.34.1
CVE: CVE-2023-33967
Published: 2023-05-31
Description: EaseProbe is a tool that can do health/status checking. An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0.
CVSS Score: 8.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/megaease/easeprobe/commit/caaf5860df2aaa76acd29bc40ec9a578d0b1d6e1; https://github.com/megaease/easeprobe/pull/330; https://github.com/megaease/easeprobe/releases/tag/v2.1.0
CVE: CVE-2023-33971
Published: 2023-05-31
Description: Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled. A probable stored cross-site scripting vulnerability is present in Formcreator 2.13.5 and prior via the use of the use of `##FULLFORM##` for rendering. This could result in arbitrary javascript code execution in an admin/tech context. A patch is unavailable as of time of publication. As a workaround, one may use a regular expression to remove `< > "` in all fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/pluginsGLPI/formcreator/security/advisories/GHSA-777g-3848-8r3g; https://github.com/pluginsGLPI/formcreator/security/advisories/GHSA-777g-3848-8r3g
CVE: CVE-2015-10108
Published: 2023-05-31
Description: A vulnerability was found in meitar Inline Google Spreadsheet Viewer Plugin up to 0.9.6 on WordPress and classified as problematic. Affected by this issue is the function displayShortcode of the file inline-gdocs-viewer.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 0.9.6.1 is able to address this issue. The patch is identified as 2a8057df8ca30adc859cecbe5cad21ac28c5b747. It is recommended to upgrade the affected component. VDB-230234 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/wp-plugins/inline-google-spreadsheet-viewer/commit/2a8057df8ca30adc859cecbe5cad21ac28c5b747; https://github.com/wp-plugins/inline-google-spreadsheet-viewer/releases/tag/0.9.6.1; https://vuldb.com/?ctiid.230234
CVE: CVE-2022-35743
Published: 2023-05-31
Description: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35743; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35743
CVE: CVE-2022-35744
Published: 2023-05-31
Description: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35744; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35744
CVE: CVE-2022-35745
Published: 2023-05-31
Description: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35745; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35745
CVE: CVE-2022-35746
Published: 2023-05-31
Description: Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35746; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35746
CVE: CVE-2022-35747
Published: 2023-05-31
Description: Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
CVSS Score: 5.9 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35747; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35747
CVE: CVE-2022-35748
Published: 2023-05-31
Description: HTTP.sys Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35748; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35748
CVE: CVE-2022-35749
Published: 2023-05-31
Description: Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35749; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35749
CVE: CVE-2022-35750
Published: 2023-05-31
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35750; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35750
CVE: CVE-2022-35751
Published: 2023-05-31
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35751; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35751
CVE: CVE-2022-35752
Published: 2023-05-31
Description: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35752; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35752
CVE: CVE-2022-35753
Published: 2023-05-31
Description: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35753; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35753
CVE: CVE-2022-35754
Published: 2023-05-31
Description: Unified Write Filter Elevation of Privilege Vulnerability
CVSS Score: 6.7 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35754; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35754
CVE: CVE-2022-35755
Published: 2023-05-31
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35755; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35755
CVE: CVE-2022-35756
Published: 2023-05-31
Description: Windows Kerberos Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35756; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35756
CVE: CVE-2022-35757
Published: 2023-05-31
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35757; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35757
CVE: CVE-2022-35758
Published: 2023-05-31
Description: Windows Kernel Memory Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35758; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35758
CVE: CVE-2022-35759
Published: 2023-05-31
Description: Windows Local Security Authority (LSA) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35759; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35759
CVE: CVE-2023-26277
Published: 2023-05-31
Description: IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to execution with unnecessary privileges.  IBM X-Force ID:  248156.
CVSS Score: 7.8 (HIGH)
References: https://https://exchange.xforce.ibmcloud.com/vulnerabilities/248156; https://www.ibm.com/support/pages/node/6999343; https://https://exchange.xforce.ibmcloud.com/vulnerabilities/248156
CVE: CVE-2023-33718
Published: 2023-05-31
Description: mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp
CVSS Score: 8.8 (HIGH)
CWE: CWE-401, CWE-401
References: https://github.com/enzo1982/mp4v2/issues/37; https://github.com/enzo1982/mp4v2/issues/37
CVE: CVE-2023-33722
Published: 2023-05-31
Description: EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://docs.google.com/document/d/1KNuU0nVd4oHMZiKgfs45wK2yA4N6K7q4/edit?usp=sharing&ouid=[PII_REDACTED][PII_REDACTED]&rtpof=true&sd=true; https://shimo.im/docs/pmkxQ1GQ4DTowANr; https://docs.google.com/document/d/1KNuU0nVd4oHMZiKgfs45wK2yA4N6K7q4/edit?usp=sharing&ouid=[PII_REDACTED][PII_REDACTED]&rtpof=true&sd=true