deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-2723
Published: 2022-08-09
Description: A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /process/eprocess.php. The manipulation of the argument mailuid/pwd leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205836.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20eprocess.php%20SQL%20Injection/; https://vuldb.com/?id.205836; https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20eprocess.php%20SQL%20Injection/
CVE: CVE-2022-2724
Published: 2022-08-09
Description: A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205837 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20aprocess.php%20SQL%20Injection/; https://vuldb.com/?id.205837; https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20aprocess.php%20SQL%20Injection/
CVE: CVE-2022-2725
Published: 2022-08-09
Description: A vulnerability was found in SourceCodester Company Website CMS. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add-blog.php. The manipulation leads to cross site scripting. The attack may be launched remotely. VDB-205838 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?id.205838; https://vuldb.com/?id.205838
CVE: CVE-2022-2726
Published: 2022-08-09
Description: A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205839.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/G0mini/semcms/blob/main/README.md; https://vuldb.com/?id.205839; https://github.com/G0mini/semcms/blob/main/README.md
CVE: CVE-2022-35724
Published: 2022-08-09
Description: It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-770, CWE-835
References: https://lists.apache.org/thread/771z1nwrpkn1ovmyfb2fm65mchdxgy7p; https://lists.apache.org/thread/771z1nwrpkn1ovmyfb2fm65mchdxgy7p
CVE: CVE-2022-36124
Published: 2022-08-09
Description: It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://lists.apache.org/thread/kj429rzo1xxjgz058qqqg0y7c0p512zo; https://lists.apache.org/thread/kj429rzo1xxjgz058qqqg0y7c0p512zo
CVE: CVE-2022-36125
Published: 2022-08-09
Description: It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-190, CWE-190
References: https://lists.apache.org/thread/t1r5xz0pvhm4tosqopjpj6dz8zlsht07; https://lists.apache.org/thread/t1r5xz0pvhm4tosqopjpj6dz8zlsht07
CVE: CVE-2022-2727
Published: 2022-08-09
Description: A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument admin_email/admin_pass leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205855.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Blythe-LU/Record2/blob/main/Gym%20Management%20System%20Project%20-%20SQL%20injection.md; https://vuldb.com/?id.205855; https://github.com/Blythe-LU/Record2/blob/main/Gym%20Management%20System%20Project%20-%20SQL%20injection.md
CVE: CVE-2022-2728
Published: 2022-08-09
Description: A vulnerability was found in SourceCodester Gym Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /mygym/admin/index.php. The manipulation of the argument edit_tran leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205856.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/Blythe-LU/Record2/blob/main/Gym%20Management%20System%20Project%20-%20SQL%20injection.md; https://vuldb.com/?id.205856; https://github.com/Blythe-LU/Record2/blob/main/Gym%20Management%20System%20Project%20-%20SQL%20injection.md
CVE: CVE-2022-2729
Published: 2022-08-09
Description: Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/commit/74d21039aec641b2c406e3baf238ae4602a968b6; https://huntr.dev/bounties/13b58e74-2dd0-4eec-9f3a[PII_REDACTED]40; https://github.com/openemr/openemr/commit/74d21039aec641b2c406e3baf238ae4602a968b6
CVE: CVE-2022-2730
Published: 2022-08-09
Description: Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://github.com/openemr/openemr/commit/2973592bc7b1f4996738a6fd27d1e277e33676b6; https://huntr.dev/bounties/a81f39ab-092b-4941-b9ca-c4c8f2191504; https://github.com/openemr/openemr/commit/2973592bc7b1f4996738a6fd27d1e277e33676b6
CVE: CVE-2022-2731
Published: 2022-08-09
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/openemr/openemr/commit/285fb234bd27ea4c46a29f2797edda7f38f1d8db; https://huntr.dev/bounties/20b8d5c5-0764-4f0b-8ab3-b9f6b857175e; https://github.com/openemr/openemr/commit/285fb234bd27ea4c46a29f2797edda7f38f1d8db
CVE: CVE-2022-2732
Published: 2022-08-09
Description: Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1.
CVSS Score: 8.3 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/openemr/openemr/commit/2973592bc7b1f4996738a6fd27d1e277e33676b6; https://huntr.dev/bounties/8773e0d1-5f1a-4e87-8998-f5ec45f6d533; https://github.com/openemr/openemr/commit/2973592bc7b1f4996738a6fd27d1e277e33676b6
CVE: CVE-2022-2733
Published: 2022-08-09
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/commit/59458bc15ab0cb556c521de9d5187167d6f88945; https://huntr.dev/bounties/25b91301-dfb0-4353-a732-e051bbe8420c; https://github.com/openemr/openemr/commit/59458bc15ab0cb556c521de9d5187167d6f88945
CVE: CVE-2022-2734
Published: 2022-08-09
Description: Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1021
References: https://github.com/openemr/openemr/commit/[PII_REDACTED]75e85b8b479c778e44ae1aac8bad55; https://huntr.dev/bounties/d8e4c70c-788b-47e9-8141-a08db751d4e6; https://github.com/openemr/openemr/commit/[PII_REDACTED]75e85b8b479c778e44ae1aac8bad55
CVE: CVE-2022-30573
Published: 2022-08-09
Description: The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a privilege escalation on the affected ftlserver. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO FTL - Enterprise Edition: version 6.8.0.
CVSS Score: 6.7 (MEDIUM)
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2022/08/tibco-security-advisory-august-9-2022-tibco-ftl-cve-2022-30573; https://www.tibco.com/services/support/advisories
CVE: CVE-2022-30574
Published: 2022-08-09
Description: The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition, and TIBCO eFTL - Enterprise Edition contains a difficult to exploit vulnerability that allows a low privileged attacker with local access to obtain user credentials to the affected system. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO FTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO FTL - Enterprise Edition: versions 6.0.0 through 6.7.3, TIBCO FTL - Enterprise Edition: version 6.8.0, TIBCO eFTL - Community Edition: versions 6.0.0 through 6.8.0, TIBCO eFTL - Developer Edition: versions 6.0.1 through 6.8.0, TIBCO eFTL - Enterprise Edition: versions 6.0.0 through 6.7.3, and TIBCO eFTL - Enterprise Edition: version 6.8.0.
CVSS Score: 4.6 (MEDIUM)
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2022/08/tibco-security-advisory-august-9-2022-tibco-ftl-cve-2022-30574; https://www.tibco.com/services/support/advisories
CVE: CVE-2022-21979
Published: 2022-08-09
Description: Microsoft Exchange Server Information Disclosure Vulnerability
CVSS Score: 4.8 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21979; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21979
CVE: CVE-2022-21980
Published: 2022-08-09
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21980; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21980
CVE: CVE-2022-24477
Published: 2022-08-09
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24477; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24477
CVE: CVE-2022-24516
Published: 2022-08-09
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24516; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24516
CVE: CVE-2022-30133
Published: 2022-08-09
Description: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30133; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30133
CVE: CVE-2022-30134
Published: 2022-08-09
Description: Microsoft Exchange Server Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30134; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30134
CVE: CVE-2022-30144
Published: 2022-08-09
Description: Windows Bluetooth Service Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30144; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30144
CVE: CVE-2022-30175
Published: 2022-08-09
Description: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30175; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30175
CVE: CVE-2022-30176
Published: 2022-08-09
Description: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30176; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30176
CVE: CVE-2022-30194
Published: 2022-08-09
Description: Windows WebBrowser Control Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30194; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30194
CVE: CVE-2022-30197
Published: 2022-08-09
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30197; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30197
CVE: CVE-2022-33631
Published: 2022-08-09
Description: Microsoft Excel Security Feature Bypass Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33631; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33631
CVE: CVE-2022-33636
Published: 2022-08-09
Description: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVSS Score: 8.3 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33636; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33636
CVE: CVE-2022-33640
Published: 2022-08-09
Description: System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33640; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33640
CVE: CVE-2022-33646
Published: 2022-08-09
Description: Azure Batch Node Agent Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33646; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33646
CVE: CVE-2022-33648
Published: 2022-08-09
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33648; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33648
CVE: CVE-2022-33649
Published: 2022-08-09
Description: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVSS Score: 9.6 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33649; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33649
CVE: CVE-2022-33670
Published: 2022-08-09
Description: Windows Partition Management Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33670; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33670
CVE: CVE-2022-34685
Published: 2022-08-09
Description: Azure RTOS GUIX Studio Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34685; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34685
CVE: CVE-2022-34686
Published: 2022-08-09
Description: Azure RTOS GUIX Studio Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34686; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34686
CVE: CVE-2022-34687
Published: 2022-08-09
Description: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34687; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34687
CVE: CVE-2022-34690
Published: 2022-08-09
Description: Windows Fax Service Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34690; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34690
CVE: CVE-2022-34691
Published: 2022-08-09
Description: Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34691; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34691
CVE: CVE-2022-34692
Published: 2022-08-09
Description: Microsoft Exchange Server Information Disclosure Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34692; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34692
CVE: CVE-2022-34696
Published: 2022-08-09
Description: Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34696; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34696
CVE: CVE-2022-34699
Published: 2022-08-09
Description: Windows Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34699; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34699
CVE: CVE-2022-34701
Published: 2022-08-09
Description: Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34701; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34701
CVE: CVE-2022-34702
Published: 2022-08-09
Description: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-362, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34702; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34702
CVE: CVE-2022-34703
Published: 2022-08-09
Description: Windows Partition Management Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34703; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34703
CVE: CVE-2022-34704
Published: 2022-08-09
Description: Windows Defender Credential Guard Information Disclosure Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-203, CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34704; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34704
CVE: CVE-2022-34705
Published: 2022-08-09
Description: Windows Defender Credential Guard Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34705; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34705
CVE: CVE-2022-34706
Published: 2022-08-09
Description: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34706; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34706
CVE: CVE-2022-34707
Published: 2022-08-09
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34707; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34707
CVE: CVE-2022-34708
Published: 2022-08-09
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34708; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34708
CVE: CVE-2022-34709
Published: 2022-08-09
Description: Windows Defender Credential Guard Security Feature Bypass Vulnerability
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34709; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34709
CVE: CVE-2022-34710
Published: 2022-08-09
Description: Windows Defender Credential Guard Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34710; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34710
CVE: CVE-2022-34712
Published: 2022-08-09
Description: Windows Defender Credential Guard Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34712; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34712
CVE: CVE-2022-34713
Published: 2022-08-09
Description: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-34713
CVE: CVE-2022-34714
Published: 2022-08-09
Description: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34714; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34714
CVE: CVE-2022-34715
Published: 2022-08-09
Description: Windows Network File System Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34715; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34715
CVE: CVE-2022-34717
Published: 2022-08-09
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34717; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34717
CVE: CVE-2022-35760
Published: 2022-08-09
Description: Microsoft ATA Port Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35760; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35760
CVE: CVE-2022-35761
Published: 2022-08-09
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35761; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35761
CVE: CVE-2022-35762
Published: 2022-08-09
Description: Storage Spaces Direct Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35762; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35762