deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30905
Published: 2023-06-16
Description: The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04473en_us; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04473en_us
CVE: CVE-2023-33438
Published: 2023-06-16
Description: A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://wolters.com; https://github.com/justas-dee/CVEs/blob/main/CVE-2023-33438/README.md; http://wolters.com
CVE: CVE-2023-35788
Published: 2023-06-16
Description: An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html; http://www.openwall.com/lists/oss-security/2023/06/17/1; https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.7
CVE: CVE-2023-35789
Published: 2023-06-16
Description: An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://github.com/alanxz/rabbitmq-c/issues/575; https://github.com/alanxz/rabbitmq-c/pull/781; https://github.com/alanxz/rabbitmq-c/issues/575
CVE: CVE-2023-35790
Published: 2023-06-16
Description: An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://github.com/libjxl/libjxl/pull/2551; https://github.com/libjxl/libjxl/releases/tag/v0.8.2; https://github.com/libjxl/libjxl/pull/2551
CVE: CVE-2023-34459
Published: 2023-06-16
Description: OpenZeppelin Contracts is a library for smart contract development. Starting in version 4.7.0 and prior to version 4.9.2, when the `verifyMultiProof`, `verifyMultiProofCalldata`, `procesprocessMultiProof`, or `processMultiProofCalldat` functions are in use, it is possible to construct merkle trees that allow forging a valid multiproof for an arbitrary set of leaves.

A contract may be vulnerable if it uses multiproofs for verification and the merkle tree that is processed includes a node with value 0 at depth 1 (just under the root). This could happen inadvertedly for balanced trees with 3 leaves or less, if the leaves are not hashed. This could happen deliberately if a malicious tree builder includes such a node in the tree.

A contract is not vulnerable if it uses single-leaf proving (`verify`, `verifyCalldata`, `processProof`, or `processProofCalldata`), or if it uses multiproofs with a known tree that has hashed leaves. Standard merkle trees produced or validated with the @openzeppelin/merkle-tree library are safe.

The problem has been patched in version 4.9.2.

Some workarounds are available. For those using multiproofs: When constructing merkle trees hash the leaves and do not insert empty nodes in your trees. Using the @openzeppelin/merkle-tree package eliminates this issue. Do not accept user-provided merkle roots without reconstructing at least the first level of the tree. Verify the merkle tree structure by reconstructing it from the leaves.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-354
References: https://github.com/OpenZeppelin/openzeppelin-contracts/commit/4d2383e17186be3e8ccf5a442e9686ecc7de1c55; https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.9.2; https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-wprv-93r4-jj2p
CVE: CVE-2023-28287
Published: 2023-06-17
Description: Microsoft Publisher Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28287; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28287
CVE: CVE-2023-28295
Published: 2023-06-17
Description: Microsoft Publisher Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28295; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28295
CVE: CVE-2023-3295
Published: 2023-06-17
Description: The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the file manager functionality in versions up to, and including, 1.5.66 . This makes it possible for authenticated attackers, with contributor-level permissions and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The issue was partially patched in version 1.5.66 and fully patched in 1.5.67. CVE-2023-31231 appears to be a duplicate of this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/unitecreator_assets.class.php#L1005; https://www.wordfence.com/threat-intel/vulnerabilities/id/ce1ac711-6026-49ef-b66b-2cc199697942?source=cve; https://plugins.trac.wordpress.org/browser/unlimited-elements-for-elementor/trunk/inc_php/unitecreator_assets.class.php#L1005
CVE: CVE-2014-125106
Published: 2023-06-17
Description: Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/nanopb/nanopb/blob/master/CHANGELOG.txt; https://github.com/nanopb/nanopb/commit/d2099cc8f1adb33d427a44a5e32ed27b647c7168; https://github.com/nanopb/nanopb/compare/nanopb-0.3.0...nanopb-0.3.1
CVE: CVE-2023-35808
Published: 2023-06-17
Description: An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been identified in the Notes module. By using crafted requests, custom PHP code can be injected and executed through the Notes module because of missing input validation. Regular user privileges can be used to exploit this vulnerability. Editions other than Enterprise are also affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: http://packetstormsecurity.com/files/174300/SugarCRM-12.2.0-Shell-Upload.html; http://seclists.org/fulldisclosure/2023/Aug/26; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-006/
CVE: CVE-2023-35809
Published: 2023-06-17
Description: An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified in the REST API. By using a crafted request, custom PHP code can be injected through the REST API because of missing input validation. Regular user privileges can be used to exploit this vulnerability. Editions other than Enterprise are also affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/174301/SugarCRM-12.2.0-Bean-Manipulation.html; http://seclists.org/fulldisclosure/2023/Aug/27; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-007/
CVE: CVE-2023-35810
Published: 2023-06-17
Description: An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has been identified in the DocuSign module. By using crafted requests, custom PHP code can be injected and executed through the DocuSign module because of missing input validation. Admin user privileges are required to exploit this vulnerability. Editions other than Enterprise are also affected.
CVSS Score: 7.2 (HIGH)
CWE: CWE-74
References: http://packetstormsecurity.com/files/174302/SugarCRM-12.2.0-PHP-Object-Injection.html; http://seclists.org/fulldisclosure/2023/Aug/28; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-009/
CVE: CVE-2023-35811
Published: 2023-06-17
Description: An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the REST API. By using crafted requests, custom SQL code can be injected through the REST API because of missing input validation. Regular user privileges can use used for exploitation. Editions other than Enterprise are also affected.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/174303/SugarCRM-12.2.0-SQL-Injection.html; http://seclists.org/fulldisclosure/2023/Aug/29; https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-008/
CVE: CVE-2023-35813
Published: 2023-06-17
Description: Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1002979; https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1002979
CVE: CVE-2023-3305
Published: 2023-06-18
Description: A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://github.com/sleepyvv/vul_report/blob/main/C-data/BrokenAccessControl.md; https://vuldb.com/?ctiid.231801; https://vuldb.com/?id.231801
CVE: CVE-2023-3306
Published: 2023-06-18
Description: A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-231802 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://github.com/RCEraser/cve/blob/main/RG-EW1200G.md; https://vuldb.com/?ctiid.231802; https://vuldb.com/?id.231802
CVE: CVE-2023-3307
Published: 2023-06-18
Description: A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/show_bookings/. The manipulation of the argument search_query leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231803. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/ctflearner/Vulnerability/blob/main/MINICAL/minical.md; https://vuldb.com/?ctiid.231803; https://vuldb.com/?id.231803
CVE: CVE-2023-3308
Published: 2023-06-18
Description: A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231804.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-502
References: https://github.com/NanKeXXX/selfVuln_poc/blob/main/whaleal%3Aicefrog/icefrog_1.1.8_RCE.md; https://vuldb.com/?ctiid.231804; https://vuldb.com/?id.231804
CVE: CVE-2023-3309
Published: 2023-06-18
Description: A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting. The attack can be launched remotely. The identifier VDB-231805 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3309; https://vuldb.com/?ctiid.231805; https://vuldb.com/?id.231805
CVE: CVE-2023-3310
Published: 2023-06-18
Description: A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue is some unknown functionality of the file loaddata.php. The manipulation of the argument subject/course leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-231806 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/humaowei/CVEHub/blob/main/Agro-School%20Management%20System%20loaddata.php%20has%20Sqlinjection.pdf; https://vuldb.com/?ctiid.231806; https://vuldb.com/?id.231806
CVE: CVE-2023-3311
Published: 2023-06-18
Description: A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231807.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://kr1shna4garwal.github.io/posts/cve-poc-2023/#cve-2023-3311; https://vuldb.com/?ctiid.231807; https://vuldb.com/?id.231807
CVE: CVE-2023-35823
Published: 2023-06-18
Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416, CWE-362
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=30cf57da176cca80f11df0d9b7f71581fe601389; https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
CVE: CVE-2023-35824
Published: 2023-06-18
Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416, CWE-362
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5abda7a16698d4d1f47af1168d8fa2c640116b4a; https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
CVE: CVE-2023-35825
Published: 2023-06-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2023-35826
Published: 2023-06-18
Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50d0a7aea4809cef87979d[PII_REDACTED]aa23b71f; https://lore.kernel.org/all/a4dafa22-3ee3-dbe1-fd50-fee07883ce1a%40xs4all.nl/
CVE: CVE-2023-35827
Published: 2023-06-18
Description: An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html; https://lore.kernel.org/lkml/cca0b40b-d6f8-54c7-1e46-83cb62d0a2f1%40huawei.com/T/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-35828
Published: 2023-06-18
Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416, CWE-362, CWE-416
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2b947f8769be8b8181dc795fd292d3e7120f5204; https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
CVE: CVE-2023-35829
Published: 2023-06-18
Description: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.2; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3228cec23b8b29215e18090c6ba[PII_REDACTED]93d; https://lore.kernel.org/all/a4dafa22-3ee3-dbe1-fd50-fee07883ce1a%40xs4all.nl/
CVE: CVE-2023-35839
Published: 2023-06-19
Description: A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/noear/solon/compare/v2.3.2...v2.3.3; https://github.com/noear/solon/issues/145; https://github.com/noear/solon/compare/v2.3.2...v2.3.3
CVE: CVE-2023-35840
Published: 2023-06-19
Description: _joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/Studio-42/elFinder/commit/bb9aaa7b096a1b83f2f85657c43f12131ece2891; https://github.com/Studio-42/elFinder/security/advisories/GHSA-wm5g-p99q-66g4; https://github.com/afine-com/CVE-2023-35840
CVE: CVE-2023-35844
Published: 2023-06-19
Description: packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://advisory.dw1.io/59; https://github.com/lightdash/lightdash/commit/fcc808c84c2cc3afb343063e32a49440d32a553c; https://github.com/lightdash/lightdash/compare/0.510.2...0.510.3
CVE: CVE-2023-35846
Published: 2023-06-19
Description: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.
CVSS Score: 7.5 (HIGH)
References: https://github.com/virtualsquare/picotcp/commit/d561990a[PII_REDACTED]15e156871cc054a1c55ffe; https://github.com/virtualsquare/picotcp/commit/d561990a[PII_REDACTED]15e156871cc054a1c55ffe
CVE: CVE-2023-35847
Published: 2023-06-19
Description: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://github.com/virtualsquare/picotcp/commit/eaf166009e44641e6570c576ba071217f100fd99; https://github.com/virtualsquare/picotcp/commit/eaf166009e44641e6570c576ba071217f100fd99
CVE: CVE-2023-35848
Published: 2023-06-19
Description: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.
CVSS Score: 7.5 (HIGH)
CWE: CWE-682
References: https://github.com/virtualsquare/picotcp/pull/15/files; https://github.com/virtualsquare/picotcp/pull/15/files
CVE: CVE-2023-35849
Published: 2023-06-19
Description: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401; https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401
CVE: CVE-2023-34657
Published: 2023-06-19
Description: A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the web_recordnum parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/weng-xianhu/eyoucms/issues/43; https://github.com/weng-xianhu/eyoucms/issues/43
CVE: CVE-2023-35852
Published: 2023-06-19
Description: In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolute or relative directory traversal, and lead to write access to a local filesystem. This is addressed in 6.0.13 by requiring allow-absolute-filenames and allow-write (in the datasets rules configuration section) if an installation requires traversal/writing in this situation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/OISF/suricata/commit/735f5aa9ca3b28cfacc7a443f93a44387fbacf17; https://github.com/OISF/suricata/commit/aee1523b4591430ebed1ded0bb95508e6717a335; https://github.com/OISF/suricata/compare/suricata-6.0.12...suricata-6.0.13
CVE: CVE-2023-35853
Published: 2023-06-19
Description: In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/OISF/suricata/commit/b95bbcc66db526ffcc880eb439dbe8abc87a81da; https://github.com/OISF/suricata/compare/suricata-6.0.12...suricata-6.0.13; https://www.stamus-networks.com/stamus-labs
CVE: CVE-2023-35855
Published: 2023-06-19
Description: A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/MikeIsAStar/Counter-Strike-Remote-Code-Execution; https://github.com/MikeIsAStar/Counter-Strike-Remote-Code-Execution
CVE: CVE-2023-35856
Published: 2023-06-19
Description: A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machine via a crafted packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/MikeIsAStar/Mario-Kart-Wii-Remote-Code-Execution; https://github.com/MikeIsAStar/Mario-Kart-Wii-Remote-Code-Execution
CVE: CVE-2023-35857
Published: 2023-06-19
Description: In Siren Investigate before 13.2.2, session keys remain active even after logging out.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://community.siren.io/c/announcements; https://docs.support.siren.io/siren-platform-user-guide/13.2/release-notes.html; https://community.siren.io/c/announcements