deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-35773
Published: 2023-07-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin <= 3.1.2 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/quick-edit-template-link/wordpress-template-debugger-plugin-3-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/quick-edit-template-link/wordpress-template-debugger-plugin-3-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-36522
Published: 2023-07-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in WePupil Quiz Expert plugin <= 1.5.0 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/quiz-expert/wordpress-quiz-expert-easy-quiz-maker-exam-and-test-manager-plugin-1-5-0-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/quiz-expert/wordpress-quiz-expert-easy-quiz-maker-exam-and-test-manager-plugin-1-5-0-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-36690
Published: 2023-07-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in VibeThemes WPLMS theme <= 4.900 versions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wplms/wordpress-wplms-theme-4-600-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wplms/wordpress-wplms-theme-4-600-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2020-20118
Published: 2023-07-11
Description: Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys driver.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: http://avast.com; https://gitlab.com/yongchuank/avast-aswsnx-ioctl-82ac0060-oob-write; http://avast.com
CVE: CVE-2023-2072
Published: 2023-07-11
Description: The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product.  The vulnerable pages do not require privileges to access and can be injected with code by an attacker which could be used to leverage an attack on an authenticated user resulting in remote code execution and potentially the complete loss of confidentiality, integrity, and availability of the product.



CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-79
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139761; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139761
CVE: CVE-2023-2746
Published: 2023-07-11
Description: The Rockwell Automation Enhanced HIM software contains 

an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS) settings and, as a result, is vulnerable to a Cross Site Request Forgery (CSRF) attack. To exploit this vulnerability, a malicious user would have to convince a user to click on an untrusted link through a social engineering attack or successfully perform a Cross Site Scripting Attack (XSS). Exploitation of a CSRF could potentially lead to sensitive information disclosure and full remote access to the affected products.





CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352, CWE-352
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139760; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139760
CVE: CVE-2023-36163
Published: 2023-07-11
Description: Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc parameter of the URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/173366/BuildaGate5-Cross-Site-Scripting.html; http://www.levi-coins.co.il/BuildaGate5/general2/company_search_tree.php?SiteName=levicoins; http://www.misdar-jabo.org/BuildaGate5/general2/company_search_tree.php?NewNameMade=0&SiteName=misdar&lan=en&EnterDefault=&Referral=tree&BuyerID=104732450&Clubtmp1=&SearchTop=
CVE: CVE-2023-36164
Published: 2023-07-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-36167
Published: 2023-07-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-37656
Published: 2023-07-11
Description: WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/mizhexiaoxiao/WebsiteGuide/issues/12; https://github.com/mizhexiaoxiao/WebsiteGuide/issues/12
CVE: CVE-2023-31818
Published: 2023-07-11
Description: An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: http://marukyu.com; https://github.com/syz913/CVE-reports/blob/main/CVE-2023-31818.md; http://marukyu.com
CVE: CVE-2023-36293
Published: 2023-07-11
Description: SQL injection vulnerability in wmanager v.1.0.7 and before allows a remote attacker to obtain sensitive information via a crafted script to the company.php component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://wmanager.org/; https://github.com/wmanager/base; http://wmanager.org/
CVE: CVE-2023-37657
Published: 2023-07-11
Description: TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/tznb1/TwoNav/issues/3; https://github.com/tznb1/TwoNav/issues/3
CVE: CVE-2023-37658
Published: 2023-07-11
Description: fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img, but without strictly check file suffix at /server/fast.py -> ApiUploadHandler.post causes stored XSS
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/psoho/fast-poster/issues/13; https://github.com/psoho/fast-poster/issues/13
CVE: CVE-2023-37659
Published: 2023-07-11
Description: xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/refraction-ray/xalpha/issues/175; https://github.com/refraction-ray/xalpha/issues/175
CVE: CVE-2023-3617
Published: 2023-07-11
Description: A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin_class.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233565 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/movonow/demo/blob/main/kruxton.md; https://vuldb.com/?ctiid.233565; https://vuldb.com/?id.233565
CVE: CVE-2023-3620
Published: 2023-07-11
Description: Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/amauric/tarteaucitron.js/commit/c4c2fcf2b2212ce968bdcae145bb74283c441e5f; https://huntr.dev/bounties/a0fd0671-f051-4d41-8928-9b19819084c9; https://github.com/amauric/tarteaucitron.js/commit/c4c2fcf2b2212ce968bdcae145bb74283c441e5f
CVE: CVE-2023-3108
Published: 2023-07-11
Description: A flaw was found in the subsequent get_user_pages_fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/algif_skcipher.c function. This flaw allows a local user to crash the system.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-362, CWE-362, CWE-400
References: https://access.redhat.com/security/cve/CVE-2023-3108; https://bugzilla.redhat.com/show_bug.cgi?id=2221472; https://github.com/torvalds/linux/commit/9399f0c51489ae8c16d6559b82a452fdc1895e91
CVE: CVE-2023-3619
Published: 2023-07-11
Description: A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file Master.php?f=save_service of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The identifier VDB-233573 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?ctiid.233573; https://vuldb.com/?id.233573; https://vuldb.com/?ctiid.233573
CVE: CVE-2023-3621
Published: 2023-07-11
Description: A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is the function createDeleteCommand of the file ?r=article/default/delete of the component Delete Packet. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-233574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/jack-521/cve/blob/main/ibos%20oa.md; https://vuldb.com/?ctiid.233574; https://vuldb.com/?id.233574
CVE: CVE-2022-23447
Published: 2023-07-11
Description: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interface  7.0.0 through 7.0.3, 4.2.0 through 4.2.4, 4.1.1 through 4.1.8, 4.0.0 through 4.0.2, 3.3.0 through 3.3.2, 3.2.1 through 3.2.3, 5.3 all versions may allow an unauthenticated and remote attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://fortiguard.com/psirt/FG-IR-22-039; https://fortiguard.com/psirt/FG-IR-22-039
CVE: CVE-2023-24881
Published: 2023-07-11
Description: Microsoft Teams Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24881; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24881
CVE: CVE-2023-25606
Published: 2023-07-11
Description: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4  all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://fortiguard.com/psirt/FG-IR-22-471; https://fortiguard.com/psirt/FG-IR-22-471
CVE: CVE-2023-26861
Published: 2023-07-11
Description: SQL injection vulnerability found in PrestaShop vivawallet v.1.7.10 and before allows a remote attacker to gain privileges via the vivawallet() module.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://addons.prestashop.com/fr/paiement/89363-viva-wallet-smart-checkout.html; https://github.com/VivaPayments/API/commit/c[PII_REDACTED]c6e144d3e102ebdb257612e4cd84a; https://security.friendsofpresta.org/modules/2023/07/11/vivawallet.html
CVE: CVE-2023-28001
Published: 2023-07-11
Description: An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via reusing the session of a deleted user in the REST API.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://fortiguard.com/psirt/FG-IR-23-028; https://fortiguard.com/psirt/FG-IR-23-028
CVE: CVE-2023-34116
Published: 2023-07-11
Description: Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-78
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-34117
Published: 2023-07-11
Description: Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-23, CWE-22
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-36824
Published: 2023-07-11
Description: Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.
CVSS Score: 7.4 (HIGH)
CWE: CWE-122, CWE-131, CWE-787
References: https://github.com/redis/redis/releases/tag/7.0.12; https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/
CVE: CVE-2023-37596
Published: 2023-07-11
Description: Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the deleteuser function.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/sahiloj/CVE-2023-37596/blob/main/README.md; https://reference1.example.com/index.php?menu=userlist; https://github.com/sahiloj/CVE-2023-37596/blob/main/README.md
CVE: CVE-2023-37597
Published: 2023-07-11
Description: Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist function.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://github.com/sahiloj/CVE-2023-37597/blob/main/README.md; https://reference2.example.com/index.php?menu=grouplist; https://github.com/sahiloj/CVE-2023-37597/blob/main/README.md
CVE: CVE-2023-3354
Published: 2023-07-11
Description: A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/security/cve/CVE-2023-3354; https://bugzilla.redhat.com/show_bug.cgi?id=2216478; https://lists.debian.org/debian-lts-announce/2024/03/msg00012.html
CVE: CVE-2023-3623
Published: 2023-07-11
Description: A vulnerability was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230704. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Duty/AjaxHandle/UploadHandler.ashx of the component Duty Module. The manipulation of the argument Filedata leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-233576. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/luoshaokai/cve/blob/main/one.md; https://vuldb.com/?ctiid.233576; https://vuldb.com/?id.233576
CVE: CVE-2023-3624
Published: 2023-07-11
Description: A vulnerability classified as critical has been found in Nesote Inout Blockchain FiatExchanger 3.0. This affects an unknown part of the file /index.php/coins/update_marketboxslider of the component POST Parameter Handler. The manipulation of the argument marketcurrency leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-233577 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?ctiid.233577; https://vuldb.com/?id.233577; https://vuldb.com/?ctiid.233577
CVE: CVE-2023-3627
Published: 2023-07-11
Description: Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/salesagility/suitecrm-core/commit/78285702d76317f081b1fbc59cb2754e93b9a4c3; https://huntr.dev/bounties/558b3dce-db03-47ba-b60b-c6eb578e04f1; https://github.com/salesagility/suitecrm-core/commit/78285702d76317f081b1fbc59cb2754e93b9a4c3
CVE: CVE-2023-21526
Published: 2023-07-11
Description: Windows Netlogon Information Disclosure Vulnerability
CVSS Score: 7.4 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21526; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21526
CVE: CVE-2023-21756
Published: 2023-07-11
Description: Windows Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21756; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21756
CVE: CVE-2023-29347
Published: 2023-07-11
Description: Windows Admin Center Spoofing Vulnerability
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29347; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29347
CVE: CVE-2023-32033
Published: 2023-07-11
Description: Microsoft Failover Cluster Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32033; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32033
CVE: CVE-2023-32034
Published: 2023-07-11
Description: Remote Procedure Call Runtime Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32034; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32034
CVE: CVE-2023-32035
Published: 2023-07-11
Description: Remote Procedure Call Runtime Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32035; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32035
CVE: CVE-2023-32037
Published: 2023-07-11
Description: Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32037; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32037
CVE: CVE-2023-32038
Published: 2023-07-11
Description: Microsoft ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32038; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32038
CVE: CVE-2023-32039
Published: 2023-07-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32039; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32039
CVE: CVE-2023-32040
Published: 2023-07-11
Description: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32040; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32040
CVE: CVE-2023-32041
Published: 2023-07-11
Description: Windows Update Orchestrator Service Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32041; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32041
CVE: CVE-2023-32042
Published: 2023-07-11
Description: OLE Automation Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32042; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32042
CVE: CVE-2023-32043
Published: 2023-07-11
Description: Windows Remote Desktop Security Feature Bypass Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-327
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32043; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32043
CVE: CVE-2023-32044
Published: 2023-07-11
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32044; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32044
CVE: CVE-2023-32045
Published: 2023-07-11
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32045; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32045
CVE: CVE-2023-32046
Published: 2023-07-11
Description: Windows MSHTML Platform Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32046; http://seclists.org/fulldisclosure/2023/Jul/43; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32046
CVE: CVE-2023-32047
Published: 2023-07-11
Description: Paint 3D Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32047; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32047
CVE: CVE-2023-32049
Published: 2023-07-11
Description: Windows SmartScreen Security Feature Bypass Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32049; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32049; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32049
CVE: CVE-2023-32050
Published: 2023-07-11
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32050; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32050
CVE: CVE-2023-32051
Published: 2023-07-11
Description: Raw Image Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32051; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32051
CVE: CVE-2023-32052
Published: 2023-07-11
Description: Microsoft Power Apps (online) Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32052; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32052
CVE: CVE-2023-32053
Published: 2023-07-11
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32053; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32053
CVE: CVE-2023-32054
Published: 2023-07-11
Description: Volume Shadow Copy Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-36
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32054; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32054