deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-32106
Published: 2023-08-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fahad Mahmood WP Docs plugin <= 1.9.9 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-docs/wordpress-wp-docs-plugin-1-9-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-docs/wordpress-wp-docs-plugin-1-9-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32107
Published: 2023-08-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.1.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gallery-plugin-5-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gallery-plugin-5-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-4410
Published: 2023-08-18
Description: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237513 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://gist.github.com/dmknght/02a29e1c5ae18b45eacc2085d22068e8; https://vuldb.com/?ctiid.237513; https://vuldb.com/?id.237513
CVE: CVE-2023-4411
Published: 2023-08-18
Description: A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-237514 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://gist.github.com/dmknght/02a29e1c5ae18b45eacc2085d22068e8; https://vuldb.com/?ctiid.237514; https://vuldb.com/?id.237514
CVE: CVE-2023-27576
Published: 2023-08-18
Description: An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of the system's super admin, allowing one to perform an account takeover of the user with super-admin permission. Specifically, for a request with updatepassword=1, a modified request (manipulating both the ID parameter and the associated username) can bypass the intended email confirmation requirement. For example, the attacker can start from an updatepassword=1 request with their own ID number, and change the ID number to 1 (representing the super admin account) and change the username to admin2. In the first step, the attacker changes the super admin's email address to one under the attacker's control. In the second step, the attacker performs a password reset for the super admin account. The new password allows login as the super admin, i.e., a successful account takeover.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-639
References: https://cupc4k3.lol/cve-2023-27576-hacking-phplist-how-i-gained-super-admin-access-44c7c90d82da; https://github.com/phpList/phplist3/pull/986; https://www.phplist.org/newslist/phplist-3-6-14-release-notes/
CVE: CVE-2023-29387
Published: 2023-08-18
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Julien Crego Manager for Icomoon plugin <= 2.0 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/manager-for-icomoon/wordpress-manager-for-icommon-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/manager-for-icomoon/wordpress-manager-for-icommon-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-30499
Published: 2023-08-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.32.7212 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-32-7212-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-32-7212-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32108
Published: 2023-08-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32109
Published: 2023-08-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ignazio Scimone Albo Pretorio On line plugin <= 4.6.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-3-reflected-cross-site-scripting-xss-vulnerability-2?_s_id=cve; https://patchstack.com/database/vulnerability/albo-pretorio-on-line/wordpress-albo-pretorio-on-line-plugin-4-6-3-reflected-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE: CVE-2023-4412
Published: 2023-08-18
Description: A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-237515. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://gist.github.com/dmknght/02a29e1c5ae18b45eacc2085d22068e8; https://vuldb.com/?ctiid.237515; https://vuldb.com/?id.237515
CVE: CVE-2023-4413
Published: 2023-08-18
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Permission to access the file is limited to administrative users only by default.
CVE: CVE-2023-32122
Published: 2023-08-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32130
Published: 2023-08-18
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/multi-rating/wordpress-multi-rating-plugin-5-0-6-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/multi-rating/wordpress-multi-rating-plugin-5-0-6-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-4414
Published: 2023-08-18
Description: A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-237517 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-77
References: https://github.com/RCEraser/cve/blob/main/S85F.md; https://vuldb.com/?ctiid.237517; https://vuldb.com/?id.237517
CVE: CVE-2023-4415
Published: 2023-08-18
Description: A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-237518 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://github.com/blakespire/repoforcve/tree/main/RG-EW1200G-logic; https://vuldb.com/?ctiid.237518; https://vuldb.com/?id.237518
CVE: CVE-2023-27471
Published: 2023-08-18
Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information contained in the 'MeSetup' UEFI variable. On some systems, this variable can be overwritten using operating system APIs. Exploitation of this vulnerability could potentially lead to denial of service for the platform.
CVSS Score: 5.5 (MEDIUM)
References: https://www.insyde.com/security-pledge/SA-2023036; https://www.insyde.com/security-pledge/SA-2023036
CVE: CVE-2023-38890
Published: 2023-08-18
Description: Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/akshadjoshi/CVE-2023-38890; https://tagmachan.com/online-shopping-portal-3-1-sql-injection-to-remote-code-execution-unauthenticated.tagox; https://www.exploit-db.com/exploits/50029
CVE: CVE-2023-38910
Published: 2023-08-18
Description: CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered in the 'Carousel Wiget' section and choosing our carousel widget created above, in 'Photo URL' and 'YouTube URL' plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/desencrypt/CVE/blob/main/CVE-2023-38910/Readme.md; https://github.com/desencrypt/CVE/blob/main/CVE-2023-38910/Readme.md
CVE: CVE-2023-38911
Published: 2023-08-18
Description: A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted payload to the Gallery parameter in the YouTube URL fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/desencrypt/CVE/blob/main/CVE-2023-38911/Readme.md; https://github.com/desencrypt/CVE/blob/main/CVE-2023-38911/Readme.md
CVE: CVE-2023-4422
Published: 2023-08-18
Description: Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/cockpit-hq/cockpit/commit/b8dad5e070608bb5e4ec58fabbee101b5af737cf; https://huntr.dev/bounties/2e12b773-b6a2-48da-a4bb-55d5d1307d2e; https://github.com/cockpit-hq/cockpit/commit/b8dad5e070608bb5e4ec58fabbee101b5af737cf
CVE: CVE-2023-20212
Published: 2023-08-18
Description: A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. 
 This vulnerability is due to a logic error in the memory management of an affected device. An attacker could exploit this vulnerability by submitting a crafted AutoIt file to be scanned by ClamAV on the affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to restart unexpectedly, resulting in a DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-825
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-FTkhqMWZ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-dos-FTkhqMWZ
CVE: CVE-2023-38839
Published: 2023-08-18
Description: SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via theID parameter in the fulldelete.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/kiduswb/minimati/issues/2; https://github.com/kiduswb/minimati/issues/2
CVE: CVE-2023-40037
Published: 2023-08-18
Description: Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass connection URL validation using custom input formatting. The resolution enhances connection URL validation and introduces validation for additional related properties. Upgrading to Apache NiFi 1.23.1 is the recommended mitigation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-184, CWE-697
References: http://www.openwall.com/lists/oss-security/2023/08/18/2; https://lists.apache.org/thread/bqbjlrs2p5ghh8sbk5nsxb8xpf9l687q; https://nifi.apache.org/security.html#CVE-2023-40037
CVE: CVE-2023-40172
Published: 2023-08-18
Description: Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. A Cross-site request forgery (CSRF) attack is a type of malicious attack whereby an attacker tricks a victim into performing an action on a website that they do not intend to do. This can be done by sending the victim a malicious link or by exploiting a vulnerability in the website. Prior to version 1.0.5 Social media skeleton did not properly restrict CSRF attacks. This has been addressed in version 1.0.5 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/fobybus/social-media-skeleton/commit/344d798e82d6cc39844962c6d3cb2560f5907848; https://github.com/fobybus/social-media-skeleton/security/advisories/GHSA-873h-pqjx-3pwg; https://github.com/fobybus/social-media-skeleton/commit/344d798e82d6cc39844962c6d3cb2560f5907848
CVE: CVE-2023-40173
Published: 2023-08-18
Description: Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://github.com/fobybus/social-media-skeleton/commit/344d798e82d6cc39844962c6d3cb2560f5907848; https://github.com/fobybus/social-media-skeleton/commit/df31da44ffed3ea065cbbadc3c8052d0d489a2ef; https://github.com/fobybus/social-media-skeleton/security/advisories/GHSA-rfmv-7m7g-v628
CVE: CVE-2023-40174
Published: 2023-08-18
Description: Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability.


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-613
References: https://github.com/fobybus/social-media-skeleton/commit/99738b2cc5efb6a5739161c931daa43f99431e5a; https://github.com/fobybus/social-media-skeleton/security/advisories/GHSA-cr5c-ggwq-g4hq; https://github.com/fobybus/social-media-skeleton/commit/99738b2cc5efb6a5739161c931daa43f99431e5a
CVE: CVE-2023-40175
Published: 2023-08-18
Description: Puma is a Ruby/Rack web server built for parallelism. Prior to versions 6.3.1 and 5.6.7, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies and zero-length Content-Length headers in a way that allowed HTTP request smuggling. Severity of this issue is highly dependent on the nature of the web site using puma is. This could be caused by either incorrect parsing of trailing fields in chunked transfer encoding bodies or by parsing of blank/zero-length Content-Length headers. Both issues have been addressed and this vulnerability has been fixed in versions 6.3.1 and 5.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-444
References: https://github.com/puma/puma/commit/690155e7d644b80eeef0a6094f9826ee41f1080a; https://github.com/puma/puma/security/advisories/GHSA-68xg-gqqm-vgj8; https://github.com/puma/puma/commit/690155e7d644b80eeef0a6094f9826ee41f1080a
CVE: CVE-2023-4432
Published: 2023-08-19
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/cockpit-hq/cockpit/commit/2a93d391fbd2dd9e730f65d43b29beb65903d195; https://huntr.dev/bounties/69[PII_REDACTED]-41ff-aa05-afbdb8f5268f; https://github.com/cockpit-hq/cockpit/commit/2a93d391fbd2dd9e730f65d43b29beb65903d195
CVE: CVE-2023-4433
Published: 2023-08-19
Description: Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/cockpit-hq/cockpit/commit/36d1d4d256cbbab028342ba10cc493e5c119172c; https://huntr.dev/bounties/64f3253d-6852-4b9f-b870-85e896007b1a; https://github.com/cockpit-hq/cockpit/commit/36d1d4d256cbbab028342ba10cc493e5c119172c
CVE: CVE-2023-2110
Published: 2023-08-19
Description: Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/<absolute-path>". This vulnerability can be exploited if a user opens a malicious markdown file in Obsidian, or copies text from a malicious webpage and paste it into Obsidian.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://obsidian.md/changelog/2023-05-03-desktop-v1.2.8/; https://starlabs.sg/advisories/23/23-2110/; https://obsidian.md/changelog/2023-05-03-desktop-v1.2.8/
CVE: CVE-2023-2316
Published: 2023-08-19
Description: Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/<absolute-path>". 

This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.






CVSS Score: 7.4 (HIGH)
CWE: CWE-22, CWE-22
References: https://starlabs.sg/advisories/23/23-2316/; https://support.typora.io/What's-New-1.6/; https://starlabs.sg/advisories/23/23-2316/
CVE: CVE-2023-2317
Published: 2023-08-19
Description: DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in <embed> tag. This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.
CVSS Score: 8.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://starlabs.sg/advisories/23/23-2317/; https://support.typora.io/What's-New-1.6/; https://starlabs.sg/advisories/23/23-2317/
CVE: CVE-2023-2318
Published: 2023-08-19
Description: DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into MarkText.
CVSS Score: 8.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/marktext/marktext/issues/3618; https://starlabs.sg/advisories/23/23-2318/; https://github.com/marktext/marktext/issues/3618
CVE: CVE-2023-2971
Published: 2023-08-19
Description: Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://starlabs.sg/advisories/23/23-2971/; https://starlabs.sg/advisories/23/23-2971/
CVE: CVE-2023-40711
Published: 2023-08-20
Description: Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which allows remote attackers to cause a denial of service (out-of-memory abort) via crafted packet data, as exploited in the wild in August 2023.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://gitlab.com/veilid/veilid/-/blob/main/CHANGELOG.md; https://gitlab.com/veilid/veilid/-/blob/main/CHANGELOG.md
CVE: CVE-2023-4434
Published: 2023-08-20
Description: Missing Authorization in GitHub repository hamza417/inure prior to build88.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-862
References: https://github.com/hamza417/inure/commit/2176af74ca3a81fd001e6cc8eea5a8306f484fbb; https://huntr.dev/bounties/19e68377-e071-4a8e-aa4c-cd84a426602e; https://github.com/hamza417/inure/commit/2176af74ca3a81fd001e6cc8eea5a8306f484fbb
CVE: CVE-2023-4435
Published: 2023-08-20
Description: Improper Input Validation in GitHub repository hamza417/inure prior to build88.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/hamza417/inure/commit/e74062e439f860fd144da4bfc3f35e96c19c3abd; https://huntr.dev/bounties/1875ee85-4b92-4aa4-861e-094137a29276; https://github.com/hamza417/inure/commit/e74062e439f860fd144da4bfc3f35e96c19c3abd
CVE: CVE-2023-37369
Published: 2023-08-20
Description: In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length.
CVSS Score: 7.5 (HIGH)
References: https://bugreports.qt.io/browse/QTBUG-114829; https://codereview.qt-project.org/c/qt/qtbase/+/455027; https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
CVE: CVE-2023-37250
Published: 2023-08-20
Description: Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This affects Parsec Loader versions through 8. Parsec Loader 9 is a fixed version.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://support.parsec.app/hc/en-us/articles/[PII_REDACTED]237-CVE-2023-37250; https://unity3d.com; https://www.kb.cert.org/vuls/id/287122