deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-2049
Published: 2024-03-12
Description: Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://support.citrix.com/article/CTX617071/citrix-sdwan-security-bulletin-for-cve20242049; https://support.citrix.com/external/article?articleUrl=CTX617071-citrix-sdwan-security-bulletin-for-cve20242049&language=en_US; https://support.citrix.com/article/CTX617071/citrix-sdwan-security-bulletin-for-cve20242049
CVE: CVE-2024-2393
Published: 2024-03-12
Description: A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file add_user.php. The manipulation of the argument city leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256453 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/CveSecLook/cve/blob/main/CRUD%20(Create%2C%20Read%2C%20Update%2C%20Delete)%20Without%20Page%20Reload%3ARefresh%20Using%20PHP%20and%20MySQL%20with%20Source%20Code%202/sql-1.md; https://vuldb.com/?ctiid.256453; https://vuldb.com/?id.256453
CVE: CVE-2023-36554
Published: 2024-03-12
Description: A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, version 6.4.0 through 6.4.13, 6.2 all versions allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://fortiguard.com/psirt/FG-IR-23-103; https://fortiguard.com/psirt/FG-IR-23-103
CVE: CVE-2023-41842
Published: 2024-03-12
Description: A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet  allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-134
References: https://fortiguard.com/psirt/FG-IR-23-304; https://fortiguard.com/psirt/FG-IR-23-304
CVE: CVE-2023-42789
Published: 2024-03-12
Description: A out-of-bounds write in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://fortiguard.com/psirt/FG-IR-23-328; https://fortiguard.com/psirt/FG-IR-23-328
CVE: CVE-2023-42790
Published: 2024-03-12
Description: A stack-based buffer overflow in Fortinet FortiOS 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.12, 2.0.0 through 2.0.13 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
CVSS Score: 8.1 (HIGH)
CWE: CWE-121
References: https://fortiguard.com/psirt/FG-IR-23-328; https://fortiguard.com/psirt/FG-IR-23-328
CVE: CVE-2023-46717
Published: 2024-03-12
Description: An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://fortiguard.com/psirt/FG-IR-23-424; https://fortiguard.com/psirt/FG-IR-23-424
CVE: CVE-2023-47534
Published: 2024-03-12
Description: A improper neutralization of formula elements in a csv file in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.10, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-1236, CWE-1236
References: https://fortiguard.com/psirt/FG-IR-23-390; https://fortiguard.com/psirt/FG-IR-23-390
CVE: CVE-2023-48788
Published: 2024-03-12
Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://fortiguard.com/psirt/FG-IR-24-007; https://fortiguard.com/psirt/FG-IR-24-007; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-48788
CVE: CVE-2023-4780
Published: 2024-03-12
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-0590. Reason: This candidate is a duplicate of CVE-2024-0590. Notes: All CVE users should reference CVE-2024-0590 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-1226
Published: 2024-03-12
Description: The software does not neutralize or incorrectly neutralizes certain characters before the data is included in outgoing HTTP headers. The inclusion of invalidated data in an HTTP header allows an attacker to specify the full HTTP response represented by the browser. An attacker could control the response and craft attacks such as cross-site scripting and cache poisoning attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-93
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server
CVE: CVE-2024-1227
Published: 2024-03-12
Description: An open redirect vulnerability, the exploitation of which could allow an attacker to create a custom URL and redirect a legitimate page to a malicious site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-601
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-rejettos-http-file-server
CVE: CVE-2024-1618
Published: 2024-03-12
Description: A search path or unquoted item vulnerability in Faronics Deep Freeze Server Standard, which affects versions 8.30.020.4627 and earlier. This vulnerability affects the DFServ.exe file. An attacker with local user privileges could exploit this vulnerability to replace the legitimate DFServ.exe service executable with a malicious file of the same name and located in a directory that has a higher priority than the legitimate directory. Thus, when the service starts, it will run the malicious file instead of the legitimate executable, allowing the attacker to execute arbitrary code, gain unauthorized access to the compromised system or stop the service from running.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://www.incibe.es/en/incibe-cert/notices/aviso/unquoted-item-or-search-path-vulnerability-faronics-deep-freeze-server; https://www.incibe.es/en/incibe-cert/notices/aviso/unquoted-item-or-search-path-vulnerability-faronics-deep-freeze-server
CVE: CVE-2024-21761
Published: 2024-03-12
Description: An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://fortiguard.com/psirt/FG-IR-24-016; https://fortiguard.com/psirt/FG-IR-24-016
CVE: CVE-2024-23112
Published: 2024-03-12
Description: An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.1 through 7.0.13, 6.4.7 through 6.4.14, and FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 SSL-VPN may allow an authenticated attacker to gain access to another user’s bookmark via URL manipulation.
CVSS Score: 8.0 (HIGH)
CWE: CWE-639
References: https://fortiguard.com/psirt/FG-IR-24-013; https://fortiguard.com/psirt/FG-IR-24-013
CVE: CVE-2024-2394
Published: 2024-03-12
Description: A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Admin/add-admin.php. The manipulation of the argument avatar leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-256454 is the identifier assigned to this vulnerability.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-434
References: https://github.com/LiAoRJ/CVE_Hunter/blob/main/RCE-1.md; https://vuldb.com/?ctiid.256454; https://vuldb.com/?id.256454
CVE: CVE-2024-1301
Published: 2024-03-12
Description: SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the j_username parameter and retrieve the information stored in the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool
CVE: CVE-2024-1302
Published: 2024-03-12
Description: Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the application's file parameter to a log file obtaining all sensitive information such as database credentials.
CVSS Score: 7.3 (HIGH)
CWE: CWE-200
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool
CVE: CVE-2024-1303
Published: 2024-03-12
Description: Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows an authenticated attacker to retrieve any file from the device using the download-file functionality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool
CVE: CVE-2024-1304
Published: 2024-03-12
Description: Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows a remote attacker to send a specially crafted javascript payload to an authenticated user and partially hijack their browser session.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool
CVE: CVE-2024-1527
Published: 2024-03-12
Description: Unrestricted file upload vulnerability in CMS Made Simple, affecting version 2.2.14. This vulnerability allows an authenticated user to bypass the security measures of the upload functionality and potentially create a remote execution of commands via webshell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple
CVE: CVE-2024-1528
Published: 2024-03-12
Description: CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/moduleinterface.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple
CVE: CVE-2024-1529
Published: 2024-03-12
Description: Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/adduser.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to an authenticated user and partially take over their browser session.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple
CVE: CVE-2024-27758
Published: 2024-03-12
Description: In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netref (e.g., np.array(client_netref)), a remote attacker can craft a class that results in remote code execution.
CVSS Score: 8.4 (HIGH)
CWE: CWE-306
References: https://gist.github.com/renbou/957f70d[PII_REDACTED]4f12a1d70153d09; https://github.com/tomerfiliba-org/rpyc/security/advisories/GHSA-h5cg-53g7-gqjw; https://gist.github.com/renbou/957f70d[PII_REDACTED]4f12a1d70153d09
CVE: CVE-2024-20671
Published: 2024-03-12
Description: Microsoft Defender Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20671; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20671
CVE: CVE-2024-21330
Published: 2024-03-12
Description: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21330
CVE: CVE-2024-21334
Published: 2024-03-12
Description: Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21334; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21334
CVE: CVE-2024-21390
Published: 2024-03-12
Description: Microsoft Authenticator Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21390; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21390
CVE: CVE-2024-21392
Published: 2024-03-12
Description: .NET and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392
CVE: CVE-2024-21400
Published: 2024-03-12
Description: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-22
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21400; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21400
CVE: CVE-2024-21407
Published: 2024-03-12
Description: Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21407; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21407
CVE: CVE-2024-21408
Published: 2024-03-12
Description: Windows Hyper-V Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21408; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21408
CVE: CVE-2024-21411
Published: 2024-03-12
Description: Skype for Consumer Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-453
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21411; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21411
CVE: CVE-2024-21418
Published: 2024-03-12
Description: Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21418; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21418
CVE: CVE-2024-21419
Published: 2024-03-12
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21419; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21419
CVE: CVE-2024-21421
Published: 2024-03-12
Description: Azure SDK Spoofing Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21421; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21421
CVE: CVE-2024-21426
Published: 2024-03-12
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21426; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21426
CVE: CVE-2024-21427
Published: 2024-03-12
Description: Windows Kerberos Security Feature Bypass Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21427; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21427
CVE: CVE-2024-21429
Published: 2024-03-12
Description: Windows USB Hub Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21429; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21429
CVE: CVE-2024-21430
Published: 2024-03-12
Description: Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21430; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21430
CVE: CVE-2024-21431
Published: 2024-03-12
Description: Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21431; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21431
CVE: CVE-2024-21432
Published: 2024-03-12
Description: Windows Update Stack Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21432; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21432
CVE: CVE-2024-21433
Published: 2024-03-12
Description: Windows Print Spooler Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21433; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21433
CVE: CVE-2024-21434
Published: 2024-03-12
Description: Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21434; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21434
CVE: CVE-2024-21435
Published: 2024-03-12
Description: Windows OLE Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21435; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21435
CVE: CVE-2024-21436
Published: 2024-03-12
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21436; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21436
CVE: CVE-2024-21437
Published: 2024-03-12
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21437; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21437
CVE: CVE-2024-21438
Published: 2024-03-12
Description: Microsoft AllJoyn API Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21438; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21438
CVE: CVE-2024-21439
Published: 2024-03-12
Description: Windows Telephony Server Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21439; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21439
CVE: CVE-2024-21440
Published: 2024-03-12
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21440; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21440
CVE: CVE-2024-21441
Published: 2024-03-12
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21441; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21441
CVE: CVE-2024-21442
Published: 2024-03-12
Description: Windows USB Print Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-170
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21442; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21442
CVE: CVE-2024-21443
Published: 2024-03-12
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21443; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21443
CVE: CVE-2024-21444
Published: 2024-03-12
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21444; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21444
CVE: CVE-2024-21445
Published: 2024-03-12
Description: Windows USB Print Driver Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-415, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21445; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21445
CVE: CVE-2024-21446
Published: 2024-03-12
Description: NTFS Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21446; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21446
CVE: CVE-2024-21448
Published: 2024-03-12
Description: Microsoft Teams for Android Information Disclosure Vulnerability
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21448; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21448
CVE: CVE-2024-21450
Published: 2024-03-12
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21450; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21450
CVE: CVE-2024-21451
Published: 2024-03-12
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21451; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21451