deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-35331
Published: 2023-07-11
Description: Windows Local Security Authority (LSA) Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35331; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35331
CVE: CVE-2023-35332
Published: 2023-07-11
Description: Windows Remote Desktop Protocol Security Feature Bypass
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-326
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35332; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35332
CVE: CVE-2023-35333
Published: 2023-07-11
Description: MediaWiki PandocUpload Extension Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35333; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35333
CVE: CVE-2023-35335
Published: 2023-07-11
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35335; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35335
CVE: CVE-2023-35336
Published: 2023-07-11
Description: Windows MSHTML Platform Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35336; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35336
CVE: CVE-2023-35337
Published: 2023-07-11
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35337; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35337
CVE: CVE-2023-35338
Published: 2023-07-11
Description: Windows Peer Name Resolution Protocol Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35338; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35338
CVE: CVE-2023-35339
Published: 2023-07-11
Description: Windows CryptoAPI  Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35339; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35339
CVE: CVE-2023-35340
Published: 2023-07-11
Description: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35340; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35340
CVE: CVE-2023-35341
Published: 2023-07-11
Description: Microsoft DirectMusic Information Disclosure Vulnerability
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35341; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35341
CVE: CVE-2023-35342
Published: 2023-07-11
Description: Windows Image Acquisition Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35342; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35342
CVE: CVE-2023-35343
Published: 2023-07-11
Description: Windows Geolocation Service Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35343; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35343
CVE: CVE-2023-35344
Published: 2023-07-11
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35344; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35344
CVE: CVE-2023-35345
Published: 2023-07-11
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35345; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35345
CVE: CVE-2023-35346
Published: 2023-07-11
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35346; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35346
CVE: CVE-2023-35347
Published: 2023-07-11
Description: Microsoft Install Service Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35347; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35347
CVE: CVE-2023-35348
Published: 2023-07-11
Description: Active Directory Federation Service Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35348; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35348
CVE: CVE-2023-35350
Published: 2023-07-11
Description: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35350; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35350
CVE: CVE-2023-35351
Published: 2023-07-11
Description: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35351; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35351
CVE: CVE-2023-35352
Published: 2023-07-11
Description: Windows Remote Desktop Security Feature Bypass Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35352; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35352
CVE: CVE-2023-35353
Published: 2023-07-11
Description: Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35353; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35353
CVE: CVE-2023-35356
Published: 2023-07-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35356; http://packetstormsecurity.com/files/174115/Microsoft-Windows-Kernel-Arbitrary-Read.html; http://packetstormsecurity.com/files/174118/Microsoft-Windows-Kernel-Security-Descriptor-Use-After-Free.html
CVE: CVE-2023-35357
Published: 2023-07-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35357; http://packetstormsecurity.com/files/174116/Microsoft-Windows-Kernel-Unsafe-Reference.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35357
CVE: CVE-2023-35358
Published: 2023-07-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35358; http://packetstormsecurity.com/files/174117/Microsoft-Windows-Kernel-Unsafe-Reference.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35358
CVE: CVE-2023-35360
Published: 2023-07-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35360; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35360
CVE: CVE-2023-35361
Published: 2023-07-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35361; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35361
CVE: CVE-2023-35362
Published: 2023-07-11
Description: Windows Clip Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35362; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35362
CVE: CVE-2023-35363
Published: 2023-07-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35363; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35363
CVE: CVE-2023-35364
Published: 2023-07-11
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35364; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35364
CVE: CVE-2023-35365
Published: 2023-07-11
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35365; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35365
CVE: CVE-2023-35366
Published: 2023-07-11
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35366; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35366
CVE: CVE-2023-35367
Published: 2023-07-11
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35367; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35367
CVE: CVE-2023-35373
Published: 2023-07-11
Description: Mono Authenticode Validation Spoofing Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35373; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35373
CVE: CVE-2023-35374
Published: 2023-07-11
Description: Paint 3D Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35374; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35374
CVE: CVE-2023-36536
Published: 2023-07-11
Description:  Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

CVSS Score: 8.2 (HIGH)
CWE: CWE-426, CWE-426
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-36537
Published: 2023-07-11
Description: Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-354
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-36538
Published: 2023-07-11
Description: Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-426
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-36825
Published: 2023-07-11
Description: Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the `_state` query parameter, which can result in remote code execution. The issue has been addressed in version 14.5.0. Users are advised to upgrade their software to this version or any subsequent versions that include the patch. There are no known workarounds.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-502
References: https://github.com/orchidsoftware/platform/releases/tag/14.5.0; https://github.com/orchidsoftware/platform/security/advisories/GHSA-ph6g-p72v-pc3p; https://github.com/orchidsoftware/platform/releases/tag/14.5.0
CVE: CVE-2023-36867
Published: 2023-07-11
Description: Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36867; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36867
CVE: CVE-2023-36868
Published: 2023-07-11
Description: Azure Service Fabric on Windows Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36868; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36868
CVE: CVE-2023-36871
Published: 2023-07-11
Description: Azure Active Directory Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36871; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36871
CVE: CVE-2023-36872
Published: 2023-07-11
Description: VP9 Video Extensions Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36872; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36872
CVE: CVE-2023-36874
Published: 2023-07-11
Description: Windows Error Reporting Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874; http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874
CVE: CVE-2023-37271
Published: 2023-07-11
Description: RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generator expressions, which are allowed inside RestrictedPython. Prior to versions 6.1 and 5.3, an attacker with access to a RestrictedPython environment can write code that gets the current stack frame in a generator and then walk the stack all the way beyond the RestrictedPython invocation boundary, thus breaking out of the restricted sandbox and potentially allowing arbitrary code execution in the Python interpreter. All RestrictedPython deployments that allow untrusted users to write Python code in the RestrictedPython environment are at risk. In terms of Zope and Plone, this would mean deployments where the administrator allows untrusted users to create and/or edit objects of type `Script (Python)`, `DTML Method`, `DTML Document` or `Zope Page Template`. This is a non-default configuration and likely to be extremely rare. The problem has been fixed in versions 6.1 and 5.3.
CVSS Score: 8.4 (HIGH)
CWE: CWE-913
References: https://github.com/zopefoundation/RestrictedPython/commit/c8eca66ae49081f0016d2e1f094c3d72095ef531; https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-wqc8-x2pr-7jqh; https://github.com/zopefoundation/RestrictedPython/commit/c8eca66ae49081f0016d2e1f094c3d72095ef531
CVE: CVE-2023-3625
Published: 2023-07-11
Description: A vulnerability classified as critical was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This vulnerability affects unknown code of the file /Duty/AjaxHandle/Write/UploadFile.ashx of the component Duty Write-UploadFile. The manipulation of the argument Filedata leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-233578 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/MoeMion233/cve/blob/main/1.md; https://vuldb.com/?ctiid.233578; https://vuldb.com/?id.233578
CVE: CVE-2023-3626
Published: 2023-07-11
Description: A vulnerability, which was classified as critical, has been found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This issue affects some unknown processing of the file /Duty/AjaxHandle/UpLoadFloodPlanFile.ashx of the component UpLoadFloodPlanFile. The manipulation of the argument Filedata leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233579. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/MoeMion233/cve/blob/main/2.md; https://vuldb.com/?ctiid.233579; https://vuldb.com/?id.233579
CVE: CVE-2023-20575
Published: 2023-07-11
Description: 
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.










CVSS Score: 6.5 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3004; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3004
CVE: CVE-2023-36884
Published: 2023-07-11
Description: Windows Search Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-362, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884; http://seclists.org/fulldisclosure/2023/Jul/43; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884
CVE: CVE-2023-37280
Published: 2023-07-11
Description: Pimcore Admin Classic Bundle provides a Backend UI for Pimcore based on the ExtJS framework. An admin who has not setup two factor authentication before is vulnerable for this attack, without need for any form of privilege, causing the application to execute arbitrary scripts/HTML content. This vulnerability has been patched in version 1.0.3.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/admin-ui-classic-bundle/commit/5fcd19bdc89a3fe4cb8ad8c356590e1e4740c743; https://github.com/pimcore/admin-ui-classic-bundle/pull/147; https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-hqv9-6jqw-9g8m
CVE: CVE-2022-48521
Published: 2023-07-11
Description: An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/trusteddomainproject/OpenDKIM/issues/148; https://lists.debian.org/debian-lts-announce/2023/12/msg00002.html; https://github.com/trusteddomainproject/OpenDKIM/issues/148
CVE: CVE-2023-23756
Published: 2023-07-11
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://extensions.joomla.org/vulnerable-extensions/vulnerable/one-vote-1-7-xss-cross-site-scripting/; https://extensions.joomla.org/vulnerable-extensions/vulnerable/one-vote-1-7-xss-cross-site-scripting/
CVE: CVE-2023-29406
Published: 2023-07-11
Description: The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-436
References: https://go.dev/cl/506996; https://go.dev/issue/60374; https://groups.google.com/g/golang-announce/c/2q13H6LEEx0
CVE: CVE-2023-29984
Published: 2023-07-11
Description: Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://jvn.jp/en/vu/JVNVU93767756/index.html; https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100793_000; https://support.brother.com/g/s/security/en/
CVE: CVE-2023-24491
Published: 2023-07-11
Description: 
A vulnerability has been discovered in the Citrix Secure Access client for Windows



which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM.

CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491; https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491
CVE: CVE-2023-24492
Published: 2023-07-11
Description: 
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts.

CVSS Score: 9.6 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://support.citrix.com/article/CTX564169/citrix-secure-access-client-for-ubuntu-security-bulletin-for-cve202324492; https://support.citrix.com/article/CTX564169/citrix-secure-access-client-for-ubuntu-security-bulletin-for-cve202324492
CVE: CVE-2023-3127
Published: 2023-07-11
Description: An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-192-02; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/news-events/ics-advisories/icsa-23-192-02
CVE: CVE-2023-37174
Published: 2023-07-11
Description: GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/2505; https://github.com/gpac/gpac/issues/2505
CVE: CVE-2023-37765
Published: 2023-07-11
Description: GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/2515; https://github.com/gpac/gpac/issues/2515
CVE: CVE-2023-37766
Published: 2023-07-11
Description: GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/2516; https://github.com/gpac/gpac/issues/2516