deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-1986
Published: 2023-04-11
Description: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function delete_order of the file /classes/master.php?f=delete_order. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225534 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/3-SQL%20injection%20exists%20at%20order%20deletion%20point.pdf; https://vuldb.com/?ctiid.225534; https://vuldb.com/?id.225534
CVE: CVE-2023-1987
Published: 2023-04-11
Description: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is the function update_order_status of the file /classes/Master.php?f=update_order_status. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225535.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/4-SQL%20injection%20present%20at%20order%20status%20update.pdf; https://vuldb.com/?ctiid.225535; https://vuldb.com/?id.225535
CVE: CVE-2023-1988
Published: 2023-04-11
Description: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation of the argument Brand Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225536.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/5-%20There%20is%20a%20storage%20type%20cross%20site%20scripting%20attack%20at%20the%20brand%20name.pdf; https://vuldb.com/?ctiid.225536; https://vuldb.com/?id.225536
CVE: CVE-2020-9009
Published: 2023-04-11
Description: The ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert arbitrary information into the database (via action=shipnotify) because access to this endpoint is completely unchecked. The attacker must guess an order number.
CVSS Score: 3.7 (LOW)
CWE: CWE-862, CWE-862
References: https://help.shipstation.com/hc/en-us/articles/[PII_REDACTED]52-CS-Cart; https://www.jerdiggity.com/node/870; https://help.shipstation.com/hc/en-us/articles/[PII_REDACTED]52-CS-Cart
CVE: CVE-2022-46396
Published: 2023-04-11
Description: An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-119
References: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE: CVE-2023-1989
Published: 2023-04-11
Description: A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=f132c2d13088; https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html; https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
CVE: CVE-2023-21554
Published: 2023-04-11
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21554; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21554
CVE: CVE-2023-21727
Published: 2023-04-11
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21727; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21727
CVE: CVE-2023-21729
Published: 2023-04-11
Description: Remote Procedure Call Runtime Information Disclosure Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21729; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21729
CVE: CVE-2023-21769
Published: 2023-04-11
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21769; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21769
CVE: CVE-2023-22612
Published: 2023-04-11
Description: An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2023019
CVE: CVE-2023-22614
Published: 2023-04-11
Description: An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2023020
CVE: CVE-2023-22615
Published: 2023-04-11
Description: An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an address in the RCX save state register that overlaps SMRAM, thereby coercing an IHISI subfunction handler to overwrite private SMRAM.
CVSS Score: 8.4 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2023021; https://www.insyde.com/security-pledge
CVE: CVE-2023-22808
Published: 2023-04-11
Description: An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE: CVE-2023-23375
Published: 2023-04-11
Description: Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23375; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23375
CVE: CVE-2023-23384
Published: 2023-04-11
Description: Microsoft SQL Server Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23384; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23384
CVE: CVE-2023-24860
Published: 2023-04-11
Description: Microsoft Defender Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24860; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24860
CVE: CVE-2023-24883
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24883; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24883
CVE: CVE-2023-24884
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-681
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24884; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24884
CVE: CVE-2023-24885
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24885; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24885
CVE: CVE-2023-24886
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24886; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24886
CVE: CVE-2023-24887
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24887; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24887
CVE: CVE-2023-24893
Published: 2023-04-11
Description: Visual Studio Code Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24893; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24893
CVE: CVE-2023-24912
Published: 2023-04-11
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24912; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24912
CVE: CVE-2023-24914
Published: 2023-04-11
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24914; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24914
CVE: CVE-2023-24924
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24924; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24924
CVE: CVE-2023-24925
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24925; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24925
CVE: CVE-2023-24926
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24926; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24926
CVE: CVE-2023-24927
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24927; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24927
CVE: CVE-2023-24928
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24928; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24928
CVE: CVE-2023-24929
Published: 2023-04-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24929; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24929
CVE: CVE-2023-24931
Published: 2023-04-11
Description: Windows Secure Channel Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24931; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24931
CVE: CVE-2023-24935
Published: 2023-04-11
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-290
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24935; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24935
CVE: CVE-2023-25407
Published: 2023-04-11
Description: Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have read access to administrator credentials.
CVSS Score: 7.2 (HIGH)
CWE: CWE-522, CWE-522
References: https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/; https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/
CVE: CVE-2023-25409
Published: 2023-04-11
Description: Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have access to other users outlets.
CVSS Score: 8.1 (HIGH)
CWE: CWE-668, CWE-668
References: https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit; https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit
CVE: CVE-2023-25411
Published: 2023-04-11
Description: Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/; https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/
CVE: CVE-2023-25413
Published: 2023-04-11
Description: Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-522
References: https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/; https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/
CVE: CVE-2023-25414
Published: 2023-04-11
Description: Aten PE8108 2.4.232 is vulnerable to denial of service (DOS).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/; https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/
CVE: CVE-2023-25415
Published: 2023-04-11
Description: Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Event Notification configuration.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/; https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/
CVE: CVE-2023-26260
Published: 2023-04-11
Description: OXID eShop 6.2.x before 6.4.4 and 6.5.x before 6.5.2 allows session hijacking, leading to partial access of a customer's account by an attacker, due to an improper check of the user agent.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-384
References: https://docs.oxid-esales.com/de/security/security-bulletins.html#security-bulletin-2023-001; https://docs.oxid-esales.com/de/security/security-bulletins.html#security-bulletin-2023-001
CVE: CVE-2023-26551
Published: 2023-04-11
Description: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26551; https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment[PII_REDACTED]; https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26551
CVE: CVE-2023-26552
Published: 2023-04-11
Description: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26552; https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment[PII_REDACTED]; https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26552
CVE: CVE-2023-26553
Published: 2023-04-11
Description: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26553; https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment[PII_REDACTED]; https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26553
CVE: CVE-2023-26554
Published: 2023-04-11
Description: mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntpd.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26554; https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment[PII_REDACTED]; https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26554
CVE: CVE-2023-26555
Published: 2023-04-11
Description: praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/spwpun/ntp-4.2.8p15-cves/blob/main/CVE-2023-26555; https://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment[PII_REDACTED]; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY2SVYH4MKPAXEYHCCXD3Z6VGINLSVHK/
CVE: CVE-2023-28216
Published: 2023-04-11
Description: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28216; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28216
CVE: CVE-2023-28217
Published: 2023-04-11
Description: Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28217; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28217
CVE: CVE-2023-28218
Published: 2023-04-11
Description: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28218; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28218
CVE: CVE-2023-28219
Published: 2023-04-11
Description: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28219; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28219
CVE: CVE-2023-28220
Published: 2023-04-11
Description: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28220; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28220
CVE: CVE-2023-28221
Published: 2023-04-11
Description: Windows Error Reporting Service Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28221; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28221
CVE: CVE-2023-28222
Published: 2023-04-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28222; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28222
CVE: CVE-2023-28223
Published: 2023-04-11
Description: Windows  Domain Name Service Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28223; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28223
CVE: CVE-2023-28224
Published: 2023-04-11
Description: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28224; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28224
CVE: CVE-2023-28225
Published: 2023-04-11
Description: Windows NTLM Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28225; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28225
CVE: CVE-2023-28226
Published: 2023-04-11
Description: Windows Enroll Engine Security Feature Bypass Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28226; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28226
CVE: CVE-2023-28227
Published: 2023-04-11
Description: Windows Bluetooth Driver Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28227; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28227
CVE: CVE-2023-28228
Published: 2023-04-11
Description: Windows Spoofing Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-347
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28228; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28228
CVE: CVE-2023-28229
Published: 2023-04-11
Description: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28229
CVE: CVE-2023-28231
Published: 2023-04-11
Description: DHCP Server Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28231; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28231
CVE: CVE-2023-28232
Published: 2023-04-11
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28232; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28232
CVE: CVE-2023-28233
Published: 2023-04-11
Description: Windows Secure Channel Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28233; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28233
CVE: CVE-2023-28234
Published: 2023-04-11
Description: Windows Secure Channel Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28234; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28234