deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-29367
Published: 2023-06-14
Description: iSCSI Target WMI Provider Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29367; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29367
CVE: CVE-2023-29368
Published: 2023-06-14
Description: Windows Filtering Platform Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29368; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29368
CVE: CVE-2023-29369
Published: 2023-06-14
Description: Remote Procedure Call Runtime Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29369; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29369
CVE: CVE-2023-29370
Published: 2023-06-14
Description: Windows Media Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29370; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29370
CVE: CVE-2023-29371
Published: 2023-06-14
Description: Windows GDI Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29371; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29371
CVE: CVE-2023-29372
Published: 2023-06-14
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29372; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29372
CVE: CVE-2023-29373
Published: 2023-06-14
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29373; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29373
CVE: CVE-2023-32008
Published: 2023-06-14
Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32008; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32008
CVE: CVE-2023-32009
Published: 2023-06-14
Description: Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32009; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32009
CVE: CVE-2023-32010
Published: 2023-06-14
Description: Windows Bus Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32010; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32010
CVE: CVE-2023-32011
Published: 2023-06-14
Description: Windows iSCSI Discovery Service Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32011; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32011
CVE: CVE-2023-32012
Published: 2023-06-14
Description: Windows Container Manager Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32012; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32012
CVE: CVE-2023-32013
Published: 2023-06-14
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32013; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32013
CVE: CVE-2023-32014
Published: 2023-06-14
Description: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32014; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32014
CVE: CVE-2023-32015
Published: 2023-06-14
Description: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32015; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32015
CVE: CVE-2023-32016
Published: 2023-06-14
Description: Windows Installer Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32016; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32016
CVE: CVE-2023-32017
Published: 2023-06-14
Description: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32017; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32017
CVE: CVE-2023-32018
Published: 2023-06-14
Description: Windows Hello Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32018; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32018
CVE: CVE-2023-32019
Published: 2023-06-14
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32019; http://packetstormsecurity.com/files/173310/Windows-Kernel-KTM-Registry-Transactions-Non-Atomic-Outcomes.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32019
CVE: CVE-2023-32020
Published: 2023-06-14
Description: Windows DNS Spoofing Vulnerability
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-350
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32020; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32020
CVE: CVE-2023-32021
Published: 2023-06-14
Description: Windows SMB Witness Service Security Feature Bypass Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32021; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32021
CVE: CVE-2023-32022
Published: 2023-06-14
Description: Windows Server Service Security Feature Bypass Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32022; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32022
CVE: CVE-2023-32029
Published: 2023-06-14
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32029; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32029; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1730
CVE: CVE-2023-32032
Published: 2023-06-14
Description: .NET and Visual Studio Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32032; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32032
CVE: CVE-2023-33126
Published: 2023-06-14
Description: .NET and Visual Studio Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126
CVE: CVE-2023-33128
Published: 2023-06-14
Description: .NET and Visual Studio Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33128; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33128
CVE: CVE-2023-33129
Published: 2023-06-14
Description: Microsoft SharePoint Server Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33129; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33129
CVE: CVE-2023-33130
Published: 2023-06-14
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33130; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33130
CVE: CVE-2023-33131
Published: 2023-06-14
Description: Microsoft Outlook Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33131; http://packetstormsecurity.com/files/173361/Microsoft-365-MSO-2306-Build-16.0.16529.20100-Remote-Code-Execution.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33131
CVE: CVE-2023-33132
Published: 2023-06-14
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33132; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33132
CVE: CVE-2023-33133
Published: 2023-06-14
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33133; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33133; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1734
CVE: CVE-2023-33135
Published: 2023-06-14
Description: .NET and Visual Studio Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33135; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33135
CVE: CVE-2023-33137
Published: 2023-06-14
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33137; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33137
CVE: CVE-2023-33139
Published: 2023-06-14
Description: Visual Studio Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139
CVE: CVE-2023-33140
Published: 2023-06-14
Description: Microsoft OneNote Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33140; https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2023-33140/Microsoft%20OneNote%20(Version%202305%20Build%2016.0.16501.20074)%2064-bit%20-%20Spoofing%20Vulnerability.txt; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33140
CVE: CVE-2023-33142
Published: 2023-06-14
Description: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33142; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33142
CVE: CVE-2023-33144
Published: 2023-06-14
Description: Visual Studio Code Spoofing Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-23
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33144; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33144
CVE: CVE-2023-33145
Published: 2023-06-14
Description: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33145; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33145; https://security.gentoo.org/glsa/202402-05
CVE: CVE-2023-33146
Published: 2023-06-14
Description: Microsoft Office Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33146; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33146
CVE: CVE-2023-3198
Published: 2023-06-14
Description: The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_message function. This makes it possible for unauthenticated attackers to update status order message via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/mstore-api/trunk/mstore-api.php#L264; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2925048%40mstore-api&new=2925048%40mstore-api&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/c5f30190-4576-4c2b-b[PII_REDACTED]8733b?source=cve
CVE: CVE-2023-3200
Published: 2023-06-14
Description: The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_message function. This makes it possible for unauthenticated attackers to update new order message via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/mstore-api/trunk/mstore-api.php#L248; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2925048%40mstore-api&new=2925048%40mstore-api&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/78f3c503-e255-44d2-8432-48dc2c5f553d?source=cve
CVE: CVE-2023-3201
Published: 2023-06-14
Description: The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_title function. This makes it possible for unauthenticated attackers to update new order title via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/mstore-api/trunk/mstore-api.php#L240; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2925048%40mstore-api&new=2925048%40mstore-api&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/cb5cb1a5-30d2-434f-90f9-d37aecfbe158?source=cve
CVE: CVE-2023-3203
Published: 2023-06-14
Description: The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_product function. This makes it possible for unauthenticated attackers to update limit the number of product per category to use cache data in home screen via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/mstore-api/trunk/mstore-api.php#L222; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2925048%40mstore-api&new=2925048%40mstore-api&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/1aed51a2-9fd4-43bb-b72d-ae8e51ee6e87?source=cve
CVE: CVE-2023-24937
Published: 2023-06-14
Description: Windows CryptoAPI  Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24937; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24937
CVE: CVE-2023-3189
Published: 2023-06-14
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /paysystem/branch.php of the component POST Parameter Handler. The manipulation of the argument branch leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231501 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/M9KJ-TEAM/CVEReport/blob/main/XSS.md; https://vuldb.com/?ctiid.231501; https://vuldb.com/?id.231501
CVE: CVE-2023-3227
Published: 2023-06-14
Description: Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-1220
References: https://github.com/fossbilling/fossbilling/commit/b65a75fcf70feaf547d414672f78d7cbe8a98e7e; https://huntr.dev/bounties/97ecf4b8-7eeb-4e39-917c-2660262ff9ba; https://github.com/fossbilling/fossbilling/commit/b65a75fcf70feaf547d414672f78d7cbe8a98e7e
CVE: CVE-2023-3228
Published: 2023-06-14
Description: Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-840
References: https://github.com/fossbilling/fossbilling/commit/b65a75fcf70feaf547d414672f78d7cbe8a98e7e; https://huntr.dev/bounties/0a7ee1fb-e693-4259-abf8-a2c3218c1647; https://github.com/fossbilling/fossbilling/commit/b65a75fcf70feaf547d414672f78d7cbe8a98e7e
CVE: CVE-2023-3229
Published: 2023-06-14
Description: Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-840
References: https://github.com/fossbilling/fossbilling/commit/56a64fefddf6a0b06304bdd443fdb0bb55423533; https://huntr.dev/bounties/31f48ca1-e5e8-436f-b779-cad597759170; https://github.com/fossbilling/fossbilling/commit/56a64fefddf6a0b06304bdd443fdb0bb55423533
CVE: CVE-2023-3230
Published: 2023-06-14
Description: Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/fossbilling/fossbilling/commit/b95f92554e5cb38bd0710c0f4b413c5adda6f617; https://huntr.dev/bounties/390643f0-106b-4424-835d-52610aefa4c7; https://github.com/fossbilling/fossbilling/commit/b95f92554e5cb38bd0710c0f4b413c5adda6f617
CVE: CVE-2023-3231
Published: 2023-06-14
Description: A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown code of the component ZIP Package Handler. The manipulation of the argument dir leads to information disclosure. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.0 is able to address this issue. It is recommended to upgrade the affected component. VDB-231502 is the identifier assigned to this vulnerability.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: https://github.com/ujcms/ujcms/issues/6; https://vuldb.com/?ctiid.231502; https://vuldb.com/?id.231502
CVE: CVE-2023-3232
Published: 2023-06-14
Description: A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical. This issue affects some unknown processing of the file /api/wechat/app_auth of the component Image Upload. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231503. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-502
References: https://github.com/HuBenLab/HuBenVulList/blob/main/CRMEB%20is%20vulnerable%20to%20Broken%20Access%20Control.md; https://vuldb.com/?ctiid.231503; https://vuldb.com/?id.231503
CVE: CVE-2023-3233
Published: 2023-06-14
Description: A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been classified as critical. Affected is the function get_image_base64 of the file api/controller/v1/PublicController.php. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231504. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/HuBenLab/HuBenVulList/blob/main/CRMEB%20is%20vulnerable%20to%20Server-side%20request%20forgery%20(SSRF).md; https://vuldb.com/?ctiid.231504; https://vuldb.com/?id.231504
CVE: CVE-2023-3234
Published: 2023-06-14
Description: A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been declared as problematic. Affected by this vulnerability is the function put_image of the file api/controller/v1/PublicController.php. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231505 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-502
References: https://github.com/HuBenLab/HuBenVulList/blob/main/CRMEB%20is%20vulnerable%20to%20deserialization.md; https://vuldb.com/?ctiid.231505; https://vuldb.com/?id.231505
CVE: CVE-2023-3235
Published: 2023-06-14
Description: A vulnerability was found in mccms up to 2.6.5. It has been rated as critical. Affected by this issue is the function pic_api of the file sys/apps/controllers/admin/Comic.php. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-231506 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/HuBenLab/HuBenVulList/blob/main/MCCMS%20is%20vulnerable%20to%20Server-side%20request%20forgery%20(SSRF)%201.md; https://vuldb.com/?ctiid.231506; https://vuldb.com/?id.231506
CVE: CVE-2023-3236
Published: 2023-06-14
Description: A vulnerability classified as critical has been found in mccms up to 2.6.5. This affects the function pic_save of the file sys/apps/controllers/admin/Comic.php. The manipulation of the argument pic leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231507.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/HuBenLab/HuBenVulList/blob/main/MCCMS%20is%20vulnerable%20to%20Server-side%20request%20forgery%20(SSRF)%202.md; https://vuldb.com/?ctiid.231507; https://vuldb.com/?id.231507
CVE: CVE-2022-47184
Published: 2023-06-14
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: 8.0.0 to 9.2.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://lists.apache.org/thread/tns2b4khyyncgs5v5p9y35pobg9z2bvs; https://lists.debian.org/debian-lts-announce/2023/06/msg00037.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6GDCBNFDDW6ULW7CACJCPENI7BVDHM5O/
CVE: CVE-2023-0837
Published: 2023-06-14
Description: An improper  authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged user to change basic local device settings even though the options were locked. This can result in unwanted changes to the configuration.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-285
References: https://www.teamviewer.com/en/trust-center/security-bulletins/tv-2023-1001/; https://www.teamviewer.com/en/trust-center/security-bulletins/tv-2023-1001/