deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-24180
Published: 2023-03-14
Description: Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmap_loader.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted elf file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/aclements/libelfin/issues/75; https://github.com/aclements/libelfin/issues/75
CVE: CVE-2023-1296
Published: 2023-03-14
Description: HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1.
CVSS Score: 2.7 (LOW)
CWE: CWE-682, CWE-862
References: https://discuss.hashicorp.com/t/hcsec-2023-09-nomad-acls-can-not-deny-access-to-workloads-own-variables/51390; https://discuss.hashicorp.com/t/hcsec-2023-09-nomad-acls-can-not-deny-access-to-workloads-own-variables/51390
CVE: CVE-2023-1299
Published: 2023-03-14
Description: HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.
CVSS Score: 7.4 (HIGH)
CWE: CWE-862
References: https://discuss.hashicorp.com/t/hcsec-2023-08-nomad-job-submitter-privilege-escalation-using-workload-identity/51389; https://discuss.hashicorp.com/t/hcsec-2023-08-nomad-job-submitter-privilege-escalation-using-workload-identity/51389
CVE: CVE-2023-1391
Published: 2023-03-14
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/ab.php. The manipulation of the argument img leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222978 is the identifier assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://blog.csdn.net/Dwayne_Wade/article/details/129526901; https://vuldb.com/?ctiid.222978; https://vuldb.com/?id.222978
CVE: CVE-2023-1392
Published: 2023-03-14
Description: A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function save_menu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222979.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/Fchen-xcu/Vulnerability-Set/blob/main/The%20online%20pizza%20ordering%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf; https://vuldb.com/?ctiid.222979; https://vuldb.com/?id.222979
CVE: CVE-2023-1394
Published: 2023-03-14
Description: A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This affects the function mysqli_query of the file bsitemp.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222981 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://blog.csdn.net/Dwayne_Wade/article/details/129522869; https://vuldb.com/?ctiid.222981; https://vuldb.com/?id.222981
CVE: CVE-2023-1395
Published: 2023-03-14
Description: A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222982 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://blog.csdn.net/Dwayne_Wade/article/details/129496689; https://vuldb.com/?ctiid.222982; https://vuldb.com/?id.222982
CVE: CVE-2023-1396
Published: 2023-03-14
Description: A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin/traveller_details.php. The manipulation of the argument address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222983.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://blog.csdn.net/Dwayne_Wade/article/details/129524104; https://vuldb.com/?ctiid.222983; https://vuldb.com/?id.222983
CVE: CVE-2023-1397
Published: 2023-03-14
Description: A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222984.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20student%20management%20system%20pdf/Online%20student%20management%20system%20xss%20vlun%203.pdf; https://vuldb.com/?ctiid.222984; https://vuldb.com/?id.222984
CVE: CVE-2023-1398
Published: 2023-03-14
Description: A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222985 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-24, CWE-22
References: https://gitee.com/xiaobingby/TeaCMS/issues/I6IIYV; https://vuldb.com/?ctiid.222985; https://vuldb.com/?id.222985
CVE: CVE-2023-27073
Published: 2023-03-14
Description: A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27073.txt; https://projectworlds.in/free-projects/php-projects/food-ordering-system-project-in-php/; https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27073.txt
CVE: CVE-2023-27074
Published: 2023-03-14
Description: BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27074.txt; https://phpgurukul.com/bp-monitoring-management-system-using-php-and-mysql/; https://github.com/bhaveshkush007/CVEs/blob/main/CVE-2023-27074.txt
CVE: CVE-2022-39214
Published: 2023-03-14
Description: Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-863
References: https://github.com/Combodo/iTop/commit/4c1df9927d1dc6b0181ee20721f93346def026fd; https://github.com/Combodo/iTop/commit/bdebea62b642622ed71410b26c81e8537e6e58fa; https://github.com/Combodo/iTop/security/advisories/GHSA-vj96-j84g-jhx4
CVE: CVE-2022-39216
Published: 2023-03-14
Description: Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without any randomness parameter. This may lead to account takeover. The issue is fixed in versions 2.7.8 and 3.0.2-1.
CVSS Score: 7.4 (HIGH)
CWE: CWE-330
References: https://github.com/Combodo/iTop/commit/35a8b501c9e4e767ec4b36c2586f34d4ab66d229; https://github.com/Combodo/iTop/commit/f10e9c2d64d[PII_REDACTED]a4f70f1e80850ea864b; https://github.com/Combodo/iTop/security/advisories/GHSA-hggq-48p2-cmhm
CVE: CVE-2023-27069
Published: 2023-03-14
Description: A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/totaljs/openplatform/issues/52; https://www.edoardoottavianelli.it/CVE-2023-27069/; https://www.youtube.com/watch?v=Ryuz1gymiw8
CVE: CVE-2023-27070
Published: 2023-03-14
Description: A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/totaljs/openplatform/issues/53; https://www.edoardoottavianelli.it/CVE-2023-27070/; https://www.youtube.com/watch?v=4WJqcseH5qk
CVE: CVE-2023-21708
Published: 2023-03-14
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21708; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21708
CVE: CVE-2023-23383
Published: 2023-03-14
Description: Service Fabric Explorer Spoofing Vulnerability
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23383; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23383
CVE: CVE-2023-23385
Published: 2023-03-14
Description: Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23385; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23385
CVE: CVE-2023-23388
Published: 2023-03-14
Description: Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-681
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23388; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23388
CVE: CVE-2023-23389
Published: 2023-03-14
Description: Microsoft Defender Elevation of Privilege Vulnerability
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23389; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23389
CVE: CVE-2023-23391
Published: 2023-03-14
Description: Office for Android Spoofing Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-23
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23391; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23391
CVE: CVE-2023-23392
Published: 2023-03-14
Description: HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23392; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23392
CVE: CVE-2023-23393
Published: 2023-03-14
Description: Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23393; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23393
CVE: CVE-2023-23394
Published: 2023-03-14
Description: Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-822, CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23394; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23394
CVE: CVE-2023-23395
Published: 2023-03-14
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 3.1 (LOW)
CWE: CWE-601
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23395; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23395
CVE: CVE-2023-23396
Published: 2023-03-14
Description: Microsoft Excel Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23396; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23396
CVE: CVE-2023-23397
Published: 2023-03-14
Description: Microsoft Outlook Elevation of Privilege Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-294
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397
CVE: CVE-2023-23398
Published: 2023-03-14
Description: Microsoft Excel Spoofing Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-290
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23398; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23398
CVE: CVE-2023-23399
Published: 2023-03-14
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23399; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23399
CVE: CVE-2023-23400
Published: 2023-03-14
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23400; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23400
CVE: CVE-2023-23401
Published: 2023-03-14
Description: Windows Media Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-681
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23401; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23401
CVE: CVE-2023-23402
Published: 2023-03-14
Description: Windows Media Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23402; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23402
CVE: CVE-2023-23403
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23403; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23403
CVE: CVE-2023-23404
Published: 2023-03-14
Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23404; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23404
CVE: CVE-2023-23405
Published: 2023-03-14
Description: Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23405; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23405
CVE: CVE-2023-23406
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23406; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23406
CVE: CVE-2023-23407
Published: 2023-03-14
Description: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23407; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23407
CVE: CVE-2023-23408
Published: 2023-03-14
Description: Azure Apache Ambari Spoofing Vulnerability
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23408; http://packetstormsecurity.com/files/173134/Azure-Apache-Ambari[PII_REDACTED]-Spoofing.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23408
CVE: CVE-2023-23409
Published: 2023-03-14
Description: Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23409; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23409
CVE: CVE-2023-23410
Published: 2023-03-14
Description: Windows HTTP.sys Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410
CVE: CVE-2023-23411
Published: 2023-03-14
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23411; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23411
CVE: CVE-2023-23412
Published: 2023-03-14
Description: Windows Accounts Picture Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23412; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23412
CVE: CVE-2023-23413
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23413; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23413
CVE: CVE-2023-23414
Published: 2023-03-14
Description: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23414; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23414
CVE: CVE-2023-23415
Published: 2023-03-14
Description: Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23415; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23415
CVE: CVE-2023-23416
Published: 2023-03-14
Description: Windows Cryptographic Services Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23416; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23416
CVE: CVE-2023-23417
Published: 2023-03-14
Description: Windows Partition Management Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23417; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23417
CVE: CVE-2023-23418
Published: 2023-03-14
Description: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23418; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23418
CVE: CVE-2023-23419
Published: 2023-03-14
Description: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23419; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23419
CVE: CVE-2023-23420
Published: 2023-03-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23420; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23420
CVE: CVE-2023-23421
Published: 2023-03-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23421; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23421
CVE: CVE-2023-23422
Published: 2023-03-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23422; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23422
CVE: CVE-2023-23423
Published: 2023-03-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23423; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23423
CVE: CVE-2023-24856
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24856; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24856
CVE: CVE-2023-24857
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24857; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24857
CVE: CVE-2023-24858
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24858; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24858
CVE: CVE-2023-24859
Published: 2023-03-14
Description: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24859; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24859
CVE: CVE-2023-24861
Published: 2023-03-14
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24861; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24861
CVE: CVE-2023-24862
Published: 2023-03-14
Description: Windows Secure Channel Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24862; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24862
CVE: CVE-2023-24863
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24863; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24863
CVE: CVE-2023-24864
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24864; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24864
CVE: CVE-2023-24865
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24865; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24865
CVE: CVE-2023-24866
Published: 2023-03-14
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24866; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24866